Abstract
Analisi del traffico di rete e cryptographic bill of materials
La diffusa presenza di asset crittografici vulnerabili nelle infrastrutture moderne rende urgente la transizione verso algoritmi post-quantum. Questo talk tecnico-pratico mostra come è stato costruito un framework operativo per affrontare il problema. Verranno illustrate le estensioni apportate alla libreria open source nDPI per identificare nel traffico di rete cipher suite e handshake non post-quantum safe. Sarà presentato un agent multipiattaforma (Windows, macOS, Linux) per la costruzione automatica di un Cryptographic Bill of Materials (CBOM) in formato CycloneDX, raccogliendo dati da stack SSH, certificati X.509 e volumi cifrati. Infine, verrà mostrato come trasformare questi dati in milestone, policy e roadmap concrete di migrazione.
Presentazioni
- DOCUMENTO
Video
Bio
Master’s degree student in ICT Solution Architecture, currently working as a full stack developer at ntop on network monitoring solutions. Passionate about technology and its evolution, he develops AI agents for network monitoring, with a focus on root cause analysis and data interpretation, while also exploring RAG-based systems and general-purpose agents. He also contributes to a post-quantum security project, within which he has developed a cross-platform agent for the analysis of X.509 certificates, SSH keys, and disk encryption systems, as well as a network probe for traffic detection and categorisation, aimed at generating reports on the level of post-quantum readiness of infrastructures.
Abstract
Network traffic analysis and cryptographic bill of materials
The widespread presence of vulnerable cryptographic assets in modern infrastructures makes the transition to post-quantum algorithms urgent. This technical and practical talk demonstrates how an operational framework has been built to address this issue. Extensions to the open-source nDPI library will be illustrated to identify non-post-quantum safe cipher suites and handshakes in network traffic. A cross-platform agent (Windows, macOS, Linux) will be presented for automatically building a Cryptographic Bill of Materials (CBOM) in CycloneDX format, collecting data from SSH stacks, X.509 certificates, and encrypted volumes. Finally, we will demonstrate how to transform this data into concrete milestones, policies, and migration roadmaps.
Attribution 4.0 International