Security Data Visualization
That's what I thought. Visualization helps. There's a brilliant book by Greg Conti "Security Data Visualization". It's printed in color ;), has fascinating ease and introduces elegant network mapping techniques.
I. e. a pcap player. rumint - give him a pcap and he replays it graphically in Windows.
There's radialnet, which takes nmap's xml and renders it in a 2d python environment. The host you're clicking on get logically centered - it brings up the connection to a living network plan.
The books mentions MUCH more. IDS views, spreads of rootkits visualized - auditing.
Scapy can help you too - of course... A picture is worth a thousand packets :).

Post new comment