Using nDPI for Monitoring and Security
summary
nDPI is an open-source deep packet inspection toolkit that detects application protocols in both plaintext and encrypted traffic, extracts metadata and metrics, and identifies cybersecurity-relevant indicators. The talk covers using nDPI in real-world monitoring setups to report key traffic metrics, classify encrypted flows, and detect unusual or malicious communications across modern environments including mobile and IoT.
AI-written summary · about
related talks
26mNetwork monitoring with FOSS
31mAttack Hunting with Threat Intelligence
37mSecurityPI: IronClad your Raspberry PI
21mHigh-Performance Cloud Native Traffic Authentication Solutions
40mUncovering Covert Channels in Your IoT Networks
43mBuilding a network security practice in your organization | Pannel Discussion
39mI Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' Tradecraft
18mIntelligence Driven Security