Cybersecurity Can Be Made Agile Using a Zero-Shot AI Approach
Zero-shot AI can function as an almost omnipresent figure that’s constantly analyzing logs, network traffic, and user actions to scan for irregularities.IPv6 Buzz 088: Host OS IPv6 Addresses – What’s Up With That?
In this episode of IPv6 Buzz we chat about IPv6 addresses on host OSes: the different types, how they are formed, what they look like, how to tell them apart, and how they are used.
The post IPv6 Buzz 088: Host OS IPv6 Addresses – What’s Up With That? appeared first on Packet Pushers.
IPv6 Buzz 088: Host OS IPv6 Addresses – What’s Up With That?
In this episode of IPv6 Buzz we chat about IPv6 addresses on host OSes: the different types, how they are formed, what they look like, how to tell them apart, and how they are used.DDoS Attack Trends for Q3 2021
The third quarter of 2021 was a busy quarter for DDoS attackers. Cloudflare observed and mitigated record-setting HTTP DDoS attacks, terabit-strong network-layer attacks, one of the largest botnets ever deployed (Meris), and more recently, ransom DDoS attacks on voice over IP (VoIP) service providers and their network infrastructure around the world.
Here’s a summary of the trends observed in Q3 ‘21:
Application-layer (L7) DDoS attack trends:
- For the second consecutive quarter in 2021, US-based companies were the most targeted in the world.
- For the first time in 2021, attacks on UK-based and Canada-based companies skyrocketed, making them the second and third most targeted countries, respectively.
- Attacks on Computer Software, Gaming/ Gambling, IT, and Internet companies increased by an average of 573% compared to the previous quarter.
- Meris, one of the most powerful botnets in history, aided in launching DDoS campaigns across various industries and countries.
Network-layer (L3/4) DDoS attack trends:
- DDoS attacks increased by 44% worldwide compared to the previous quarter.
- The Middle East and Africa recorded the largest average attack increase of approximately 80%.
- Morocco recorded the highest DDoS activity in the third quarter globally — three out of every 100 packets were part of a DDoS Continue reading
Heavy Strategy 012: Professional Development in Infrastructure Technology
A rarely covered topic in technology is professional development. Other careers have extensive programs to ensure practitioners develop and maintain a wide range of skills but this principle is rare in IT.
The post Heavy Strategy 012: Professional Development in Infrastructure Technology appeared first on Packet Pushers.
Heavy Strategy 012: Professional Development in Infrastructure Technology
A rarely covered topic in technology is professional development. Other careers have extensive programs to ensure practitioners develop and maintain a wide range of skills but this principle is rare in IT.
Why Does Internet Keep Breaking?
James Miles sent me a long list of really good questions along the lines of “why do we see so many Internet-related outages lately and is it due to BGP and DNS creaking of old age”. He started with:
Over the last few years there are more “high profile” incidents relating to Internet connectivity. I raise the question, why?
The most obvious reason: Internet became mission-critical infrastructure and well-publicized incidents attract eyeballs.
Ignoring the click baits, the underlying root cause is in many cases the race to the bottom. Large service providers brought that onto themselves when they thought they could undersell the early ISPs and compensate their losses with voice calls (only to discover that voice-over-Internet works too well).
Why Does Internet Keep Breaking?
James Miles sent me a long list of really good questions along the lines of “why do we see so many Internet-related outages lately and is it due to BGP and DNS creaking of old age”. He started with:
Over the last few years there are more “high profile” incidents relating to Internet connectivity. I raise the question, why?
The most obvious reason: Internet became mission-critical infrastructure and well-publicized incidents attract eyeballs.
Ignoring the click baits, the underlying root cause is in many cases the race to the bottom. Large service providers brought that onto themselves when they thought they could undersell the early ISPs and compensate their losses with voice calls (only to discover that voice-over-Internet works too well).
Javascript Notes: Types
Javascript is a dynamically type language. The types of variables are evaluated at runtime based on the contents of the variable. Typescript is a superset of Javascript which adds static typing to the language (amongst other things). There are two kinds of types in Javascript;...continue reading
Triggering Network Automation From The Web
How best to return from a cliffhanger ending – in a previous post we used Django’s Model class .save() to write network state—that is CLI standard output transformed to JSON using pyATS—into a PostgreSQL database table. Django also helped us convert, or migrate, a Pythonic class-based model into this SQL table in the first place. […]
The post Triggering Network Automation From The Web appeared first on Packet Pushers.
Cloudsourcing Your Way to Network Optimization
Cloud-managed network services use cloudsourcing and AI to see what types of network configurations produce ideal network performance.Fast and simple troubleshooting with GUI-based Dynamic Packet Capture
With the Calico 3.10 release, Dynamic Packet Capture is available in Dynamic Service Graph.
This means users who require self-service, live troubleshooting for microservices and Kubernetes workloads can capture and evaluate traffic packets on endpoints without writing a single line of code or using any 3rd-party troubleshooting tools. Users don’t need to learn about or have knowledge of kubectl or YAML to troubleshoot their microservices and Kubernetes cluster. Calico helps enforce organizational security policies by only allowing users to access their assigned namespaces and endpoints for troubleshooting.
About Dynamic Packet Capture
In most situations when you need to do a packet capture, the problem doesn’t last long and usually happens randomly. But once you narrow down the issue to a particular time or activity, you will need to set the right action plan to tackle the problem. Packet capture is now much easier, simpler, and faster than before.
Dynamic Packet Capture facilitates fast troubleshooting and easy debugging of microservice connectivity issues and performance hotspots in Kubernetes clusters. It is a Kubernetes-native custom resource that runs as part of user code against specific workloads in the cluster, without the need to execute any programs inside the cluster. Dynamic Packet Capture Continue reading
10 Resources to Get Started on Container Network Security
Ready to get started? The following resources and tutorials will enhance your understanding of container network security and help you get started.
Analyst Research
Get an independent analyst’s view on the state of container security:
- GigaOm Radar Report for Evaluating Service Mesh
- Forrester Research: Best Practices for Container Security
Blogs
Many container network security experts are blogging about lessons learned and sharing their knowledge on how to secure mod- ern applications. Follow their conversations:
- Securing Modern Applications and APIs: Why and How?
- It’s Time to Rethink Security Across the Software Supply Chain
- Multi-Cloud Connectivity and Security Needs of Kubernetes Applications
- Announcing the General Availability of Container Security in VMware Carbon Black Cloud
- VMware to Help Customers Make Modern Apps More Secure with Intent to Acquire Mesh7
- Forging a Path to Continuous, Risk-based Security with VMware Tanzu Service Mesh
Courses and Certifications
Developers and platform operators alike need to learn how to secure applications and platforms. Why not take a class to enrich your understanding? There are many free and low-cost options, including the following:
Day Two Cloud 122: Two Customer Journeys To VMware Cloud (Sponsored)
Ethan Banks and Ned Bellavance hosted a panel discussion at VMworld 2021 with two VMware customers using VMware Cloud---the University of Miami and Sterling National Bank. This discussion looks at what works, where the customers ran into issues, and how their cloud journeys are progressing.
The post Day Two Cloud 122: Two Customer Journeys To VMware Cloud (Sponsored) appeared first on Packet Pushers.