veyepar: DSD and open source software

Author(s):	Alan Leigh
Location	MCC4
Date	jan Wed 30	Days Raw Files
Start	14:15	First Raw Start	error-in-template
Duration	0:45:00	Offset	None
End	15:00	Last Raw End
Chapters
Total cuts_time	None min.

http://lca2013.linux.org.au/schedule/30281/view_talk
raw-playlist raw-mp4-playlist encoded-files-playlist mp4 svg png

assets release.pdf DSD_and_open_source_software.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Defence Signals Directorate (DSD) is the Commonwealth authority for cyber and information security. It plays a vital role in assisting federal and state authorities on matters relating to the security and integrity of information and networks. In order to achieve these goals, DSD works closely with the open source community and employs a large number of software developers that actively contribute to open source projects. We are not as secretive as some people would have you believe, and you might already be familiar with previous software that DSD has released.

This talk will first briefly touch on some of the previous open source projects DSD has released, including the "PyFlag" framework (a forensic analysis tool), "White Trash" (a Squid dynamic whitelisting module), and "Spill Guard" (a Microsoft Office data leak prevention tool).

The main focus of the talk will be on a newly open sourced prototype tool for the purpose of hard disk analysis called Pronghorn. Pronghorn is a proof of concept block analysis framework created by DSD staff as an entry to the DFRWS 2012 forensic challenge. It's not production ready, but it uses some novel concepts to automate the analysis of hard drive images.

Comment:

production notes