Open Source Intelligence Based Intrusion Detection System
summary
An automated pipeline pulls, normalizes and scores 49 OSINT feeds, generates Snort-style rules and blacklists, and pushes them to an IDS and firewall in production. Evaluation on real traffic shows real-time detection of botnet C&C, remote‑access tooling, brute‑force attempts and phishing and yields a low false positive rate after threshold tuning. The implementation auto‑installs rules, tracks feed provenance, and flags feeds that produce surprising high hit counts.
AI-written summary · about
chapters (7)
- 0:00Introduction to OSINT
- 5:44Threats in networked systems
- 18:46Intrusion detection fundamentals
- 27:15Open source data analysis
- 34:07Real-world OSINT applications
- 40:00Future of OSINT in cybersecurity
- 42:24Q&A and closing
related talks
24mA Study on Intrusion Detection Systems with a Practical Experiment on Snort
34mOSINT for Proactive Defense
31mFiltering the Noise: Crafting an Actionable Threat Feed from Community-Shared Intelligence
01h 27mOpen Data (OSINT) and Threat Intelligence Sharing Platforms and Tools
20mFrom Intention to Practice: Towards Systematic Validation of NIDS Rule Enforcement
29mOSINT: A Practical Guide to Safe and Effective Threat Investigation.
33mFree SOC? — how open source tools can come to our aid
48mPutting an Intrusion Detection System to the Test