Eyesight to the Blind – SSL Decryption for Network Monitoring
Here’s another post I wrote for the InfoSec Institute. This time, the article shows how to add SSL decryption to your NSM infrastructure, restoring the eyesight of sensors blinded by the use of SSL.
You can read the article here; comments welcome, as always!
Alec Waters is responsible for all things security at Dataline Software, and can be emailed at alec.waters@dataline.co.uk
30 September, 2011 at 14:23
[...] I have made some improvements to the viewssld package, which allows inline SSL decryption on your Snort/Sguil/etc boxes. You can read all about it here. [...]
28 October, 2011 at 14:22
[...] written some parsers for Snort, net-entropy and viewssld. A screenshot of them all in action is shown below (click for full size [...]