<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.9.2" -->
<rss version="0.92">
<channel>
	<title>Out Of The Box</title>
	<link>http://buffer.antifork.org/blog</link>
	<description></description>
	<lastBuildDate>Sun, 28 Feb 2010 09:01:13 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>Honeynet Project Forensic Challenge 2010/2 &#8211; &#8220;Browsers Under Attack&#8221;</title>
		<description><![CDATA[Challenge 2 of the Honeynet Project Forensic Challenge has just been posted. The challenge has been provided by Nicolas Collery from the Singapore Chapter and Guillaume Arcas from the French Chapter and is titled browsers under attack.
Submission deadline is March 1st and results will be released on Monday, March 15th 2010. Small prizes will be [...]]]></description>
		<link>http://buffer.antifork.org/blog/2010/02/17/forensic-challenge-20102-browsers-under-attack-is-now-online/</link>
			</item>
	<item>
		<title>PhoneyC: A Virtual Client Honeypot</title>
		<description><![CDATA[About two months ago I started contributing PhoneyC, a pure Python honeyclient implementation originally developed by Jose Nazario. The perception is that our development efforts are moving on the right track. The code can be downloaded here. If you&#8217;re interested take a look at the different development branches and give us your feedback. Moreover if [...]]]></description>
		<link>http://buffer.antifork.org/blog/2010/01/29/phoneyc-a-virtual-client-honeypot/</link>
			</item>
	<item>
		<title>Honeynet Project Forensic Challenge 2010</title>
		<description><![CDATA[After several years without any Honeynet Project Challenges, there will finally be new Forensic Challenges starting next Monday (January 18th, 2010). Here is the official announcement.
I am very happy to announce the Honeynet Project Forensic Challenge 2010. The purpose of the Forensic Challenges is to take learning one step farther. Instead of having the Honeynet [...]]]></description>
		<link>http://buffer.antifork.org/blog/2010/01/13/honeynet-project-forensic-challenge-2010/</link>
			</item>
	<item>
		<title>Know Your Tools: Use Picviz to Find Attacks</title>
		<description><![CDATA[A new series of papers is available from the Honeynet Project: &#8220;Know Your Tools&#8221; deals with specific types of honeypots and explains how to use them. The first paper in this series deals with Picviz, a tool to visualize data based on parallel coordinates plots. Picviz is a parallel coordinates plotter which enables easy scripting [...]]]></description>
		<link>http://buffer.antifork.org/blog/2009/12/05/know-your-tools-use-picviz-to-find-attacks/</link>
			</item>
	<item>
		<title>Being for the benefit of Mr. Kite!</title>
		<description><![CDATA[It&#8217;s long time since I don&#8217;t write about TIP and its evolution. A lot of things have changed during these last months in order to make TIP more efficient and scalable. So maybe it&#8217;s worth to talk about it! First of all, TIP really exploits the Twisted Plugin System as best as it can. As [...]]]></description>
		<link>http://buffer.antifork.org/blog/2009/09/29/being-for-the-benefit-of-mr-kite/</link>
			</item>
	<item>
		<title>Enhancing TIP Spamtrap Data Collection</title>
		<description><![CDATA[A new spamtrap submodule is currently under development. Its targets are spamtraps located on mailservers which I administer. Few of these mailservers generate huge amounts of spam mails and this leads to great performance troubles if you try to download them by POP3/IMAP and then parse. A different approach was thought for situations like these. [...]]]></description>
		<link>http://buffer.antifork.org/blog/2009/07/03/enhancing-tip-spamtrap-data-collection/</link>
			</item>
	<item>
		<title>TIP Fast-Flux Tracking module new design</title>
		<description><![CDATA[Few days ago I started thinking about the scalability limits of the TIP Fast-Flux Tracking module and realized its design was really awful. The approach was based on the idea of assigning a monitoring thread to each fluxy domain. This approach is well suited if the number of threads is quite small but not for [...]]]></description>
		<link>http://buffer.antifork.org/blog/2009/07/01/tip-fast-flux-tracking-module-new-design/</link>
			</item>
	<item>
		<title>The Honeynet Project</title>
		<description><![CDATA[Few days ago I started a new really exciting experience by joining the Honeynet Project. This really short post is just for saying thank you to Lance Spitzner for the umpteenth time for the opportunity he offered me. With the hope to be able to contribute as best as I can!
]]></description>
		<link>http://buffer.antifork.org/blog/2009/05/25/the-honeynet-project/</link>
			</item>
	<item>
		<title>News from the TIP World</title>
		<description><![CDATA[In the last days, the inner workings of TIP changed too much. In fact, as soon as I plugged in the new Spamtrap module, I realized that the core engine was far from perfect. In particular, it was designed when I had no precise idea of the work load it had to face and this [...]]]></description>
		<link>http://buffer.antifork.org/blog/2009/04/24/news-from-the-tip-world/</link>
			</item>
	<item>
		<title>The Times They Are A-Changin&#8217;</title>
		<description><![CDATA[I spent my last days working on a subtle bug in TIP which didn&#8217;t allow a correct engine rescheduling and thus a correct information sources updating. The bug has gone now but I&#8217;m realizing how hard is working always close to the limits of the operating system and the database management system. But it&#8217;s a [...]]]></description>
		<link>http://buffer.antifork.org/blog/2009/03/10/the-times-they-are-a-changin/</link>
			</item>
</channel>
</rss>
