Abstract
Analisi del traffico di rete e cryptographic bill of materials
La diffusa presenza di asset crittografici vulnerabili nelle infrastrutture moderne rende urgente la transizione verso algoritmi post-quantum. Questo talk tecnico-pratico mostra come è stato costruito un framework operativo per affrontare il problema. Verranno illustrate le estensioni apportate alla libreria open source nDPI per identificare nel traffico di rete cipher suite e handshake non post-quantum safe. Sarà presentato un agent multipiattaforma (Windows, macOS, Linux) per la costruzione automatica di un Cryptographic Bill of Materials (CBOM) in formato CycloneDX, raccogliendo dati da stack SSH, certificati X.509 e volumi cifrati. Infine, verrà mostrato come trasformare questi dati in milestone, policy e roadmap concrete di migrazione.
Presentazioni
- DOCUMENTO
Video
Bio
Luca Deri is the project manager of the ntop project (www.ntop.org), which aims to develop an open-source monitoring platform for high-speed traffic analysis and cybersecurity. He worked at University College London and IBM Research before earning his PhD from the University of Bern with a thesis on software components for traffic monitoring applications. A prominent figure in the open-source and Linux community, he currently divides his time between the ntop project and the Computer Science Department at the University of Pisa, where he teaches network traffic analysis and cybersecurity.
Abstract
Network traffic analysis and cryptographic bill of materials
The widespread presence of vulnerable cryptographic assets in modern infrastructures makes the transition to post-quantum algorithms urgent. This technical and practical talk demonstrates how an operational framework has been built to address this issue. Extensions to the open-source nDPI library will be illustrated to identify non-post-quantum safe cipher suites and handshakes in network traffic. A cross-platform agent (Windows, macOS, Linux) will be presented for automatically building a Cryptographic Bill of Materials (CBOM) in CycloneDX format, collecting data from SSH stacks, X.509 certificates, and encrypted volumes. Finally, we will demonstrate how to transform this data into concrete milestones, policies, and migration roadmaps.
Attribution 4.0 International