Skip to main content

Home

 

Find us on

facebook youtube flickr twitter itunes u logo

Past Talks

Dr. Liz Bowman

Dr. Elizabeth Bowman
U.S. Army Research Laboratory
Artificial Intelligence, Machine Learning and Information: Army Social Computing Research
Tuesday, December 5th
Haldeman 041 Kreindler Conference Room
4:00 PM

Dr. Fabio Pierazzi

Dr. Fabio Pierazzi
Royal Holloway University of London
Network Security Analytics for Detection of Advanced Cyberattacks
Tuesday, November 28th
Sudikoff Trust Lab (L045)
12:30 PM

V.S. Subrahmanian

V.S. Subrahmanian
Dartmouth Distinguished Professor in Cybersecurity, Technology, and Society
Bots, Socks, and Vandals
Tuesday, November 14th
Carson L01
5:00 PM 

Rand Beers

Rand Beers ('64)
Big Data, the Internet, and Social Media:  The Road to the November 2016 Election
Wednesday, November 8th
Haldeman 41 (Kreindler Conference Hall)
4:30 PM 

Fright Night Imge

Wanna See Something REALLY Scary?
ISTS Looks at the Dark Web on Halloween Night
Tuesday, October 31st
S
udikoff  045 Trust Lab (dungeon)
7:30 PM - RSVP
Space is Limited 

Sal Stolfo

Salvatore J. Stolfo 
Columbia University
A Brief History of Symbiote Defense
Tuesday, October 31st
Rockefeller 003
5:00 PM

Dan Wallach

STAR-Vote: A Secure, Transparent, Auditable and Reliable Voting System

Professor Dan Wallach
Rice University
Thursday April 27, 2017
Carson L01, 5:00 PM

Ben Miller Dragos

Pandora's Power Grid - What Can State Attacks Do and What Would be the Impact?

Ben Miller
Chief Threat Officer, Dragos, Inc.
Tuesday May 2, 2017
Kemeny 007, 4:30 PM
Brendan Nyhan

 

 

 

Factual Echo Chambers? Fact-checking and Fake News in Election 2016.

Professor Brendan Nyhan
Dartmouth College
Thursday May 4, 2017
Rocky 001, 5:00 PM

Dickie George

 

Espionage and Intelligence

Professor Dickie George
Johns Hopkins University
Thursday May 11, 2017
Rocky 001, 5:00 PM

Dan Wallach

A Nation Under Attack: Advanced Cyber-Attacks in Ukraine

Ukrainian Cybersecurity Researchers
Thursday April 6, 2017
Oopik Auditorium 5:30 PM

ISTS Information Pamphlet


2012BrochureCover

 

Institute for Security, Technology, and Society
Dartmouth College
6211 Sudikoff Laboratory
Hanover, NH 03755 USA
info.ists@dartmouth.edu

Shadow Intrusion and Network Analysis

Project Summary

Forensic-grade analysis of network traffic has traditionally been limited by the logging capabilities of firewalls, routers and intrusion detection systems (IDS). In common implementations, these devices compare certain characteristics of network traffic against a list of known signatures of malicious actions. Unfortunately, only known attacks will be detected, since there can be no signature for a previously unknown attack. Shadow, an intrusion-detection system from the Naval Surface Warfare Center, shows promise in detecting previously unknown attacks. IRIA is undertaking an overhaul of the current Shadow system to improve its efficiency, detection capabilities, and installation procedures.

IDABench has met its goals of extending the SHADOW Intrusion Detection System into a pluggable framework for analysis. Featuring simplified installation & configuration, clear documentation and a simple, yet comprehensive API for plugin development, IDABench has been downloaded by hundreds of organizations including:

  • CIA-Open Source Information Service
  • United States Postal Service
  • National Institutes of Health
  • US Navy Surface & Underwater Warfare Centers
  • US Army Research Labs
  • National Public Radio

IDABench has been chosen by the ISTS as one of the key analysis tools for the Distributed Honeypot System project. Under this project, IDABench version 2.0 development will continue, in order to support not only packet data represented as database records, but also many other data types to be correlated against network events.

  • Project Leads: George Cybenko, Robert Gray, Susan McGrath