We have some strange data in cybersecurity. One of the (IMO) stranger data files is a Domain Name System (DNS) zone file. This file contains mappings between domain names and IP addresses (and other things) represented by “resource records”. Here’s an example for the dummy/example domain example.com: $... [Read more...]

We have some strange data in cybersecurity. One of the (IMO) stranger data files is a Domain Name System (DNS) zone file. This file contains mappings between domain names and IP addresses (and other things) represented by “resource records”. Here’s an example for the dummy/example domain example.com: $... [Read more...]

[Read more...]

[Read more...]

We just did a github release for an R package that provides an interface to the DomainTools API. It provides access to the core API functions that aren’t restricted (i.e. the ones we have access to): domaintools_api_key: Get or set DOMAINTOOLS_API_KEY value domaintools_username: ... [Read more...]

We just did a github release for an R package that provides an interface to the DomainTools API. It provides access to the core API functions that aren’t restricted (i.e. the ones we have access to): domaintools_api_key: Get or set DOMAINTOOLS_API_KEY value domaintools_username: ... [Read more...]

For those not involved with all things “cyber”, let me start with a description of what Shodan is (though visiting the site is probably the best introduction to what secrets it holds). Shodan is—at it’s core—a search engine. Unlike Google, Shodan indexes what I’ll call “cyber” ... [Read more...]

For those not involved with all things “cyber”, let me start with a description of what Shodan is (though visiting the site is probably the best introduction to what secrets it holds). Shodan is—at it’s core—a search engine. Unlike Google, Shodan indexes what I’ll call “cyber” ... [Read more...]

If you made it to Chapter 8 of Data-Driven Security after ~October 2014 and tried to run the BerkeleyDB R example, you were greeted with: Warning in install.packages : package ‘RBerkely’ is not available (for R version [YOUR_R_VERSION]) That’s due to the fact that it was removed from CRAN ... [Read more...]

UPDATE: RBerkeley is now on CRAN If you made it to Chapter 8 of Data-Driven Security after ~October 2014 and tried to run the BerkeleyDB R example, you were greeted with: Warning in install.packages : package ‘RBerkely’ is not available (for R version [YOUR_R_VERSION]) That’s due to the fact ... [Read more...]

The R world has come a long way since Jay & I wrote Data-Driven Security. We had to make a conscious decision to stick with R 2.14.0 (R is at version 3.2.1 now) and packages such as knitr and dplyr either didn’t exist or were in their infancy. In Chapter 4, we showed ... [Read more...]

The R world has come a long way since Jay & I wrote Data-Driven Security. We had to make a conscious decision to stick with R 2.14.0 (R is at version 3.2.1 now) and packages such as knitr and dplyr either didn’t exist or were in their infancy. In Chapter 4, we showed ... [Read more...]

We were asked a question on how to (in R) aggregate quarterly data from what I believe was a daily time series. This is a pretty common task and there are many ways to do this in R, but we’ll focus on one method using the zoo and dplyr ... [Read more...]

We were asked a question on how to (in R) aggregate quarterly data from what I believe was a daily time series. This is a pretty common task and there are many ways to do this in R, but we’ll focus on one method using the zoo and dplyr ... [Read more...]

Sometimes you just need the salient text from a web site, often as a first step towards natural language processing (NLP) or classification. There are many ways to achieve this, but XSLT (eXtensible Stylesheet Language) was purpose-built for slicing, dicing and transforming XML (and, hence, HTML) so, it can make ... [Read more...]

It seems that not a day goes by without some information security vendor releasing a report based on a survey. Thankfully, this post is not about the efficacy of survey-based reports or their findings. Today, we’re doing a makeover for Unisys, who just released their Findings from the 2015 Unisys ... [Read more...]

We are happy to announce that the iptools package is now on CRAN. Formerly only available on GitHub, iptools now compiles under Debian/Ubuntu, Fedora/CentOS/RedHat and Mac OS X (we’re still working on that other operating system). Oliver (the package co-author and on-CRAN instigator) wrote some excellent ... [Read more...]

Necessity is the mother of invention and I had the opportunity today to take an R package from development to CRAN in less than the span of 24 hours. Despite being on vacation, I answered an R question on StackOverflow pertaining to the use of decode_short_url from the twitteR ... [Read more...]

As a precursor to releasing Episode 18 of DDSec Podcast, we’re releasing a really basic R package to interface with the PassiveTotal API. We asked Brandon Dixon to be on the podcast to talk about his new visualization for users of PassiveTotal, which is a “threat research platform created for ... [Read more...]

After seeing IPython Markdown Opportunities in IPython Notebooks and Rstudio in the feeds today I wondered how easy/hard it would be to write a handler for something like go code. After taking a look at Yihui Xie‘s knitr source it seemed like it would be fairly easy to ... [Read more...]