Ett eldinferno utbröt efter att ett godståg spårat ur och exploderat i staden Lac-Mégantic i Kanada i dag.

Ett trafikflygplan med cirka 300 personer ombord kraschade under landning på San Franciscos internationella flygplats på lördagen.

Portugals premiärminister Pedro Passos Coelho har meddelade på lördagen att utrikesminister Paulo Portas, som i veckan avgick, blir vice premiärminister med ansvar för att koordinera den ekonomiska politiken.

Asiana Flight 214 from Seoul crashed while landing at San Francisco Airport today. Early reports suggest the plane was unstable as it touched down, which led to the tail of the plane breaking off. There are no official casualty reports yet, but passengers were seen walking off the plane, and unofficial communications at the airport say all of them are alive and accounted for. (Others are reporting two dead and perhaps a dozen injured.) Eyewitness report: "You heard a pop and you immediately saw a large, brief fireball that came out from underneath the aircraft," Anthony Castorani said on CNN. "At that moment, you could see that that aircraft was again starting to lift and it began to cartwheel. The wing broke off on the left hand side. You could see the tail immediately fly off of the aircraft. As the aircraft cartwheeled, it then landed down and the other wing had broken." The media has estimated about 290 people were on board the plane. The top of the cabin was aflame at one point, but it's not known yet whether that affected the passengers. "Federal sources told NBC News that there was no indication of terrorism." Some images from the news make it look like the plane may have tried to touch down too early, hitting the seawall just before the runway.

Read more of this story at Slashdot.

Security forces fire tear gas and water cannons on about 3,000 protesters trying to enter iconic Gezi Park in Istanbul.

hypnosec writes "Huawei, in collaboration with China Mobile, has successfully deployed 4G services on Mount Everest, about 5,200 meters above sea level. Announcing the development, Huawei revealed that work was completed last month and users can now access 4G services like streaming live HD videos from the base camp on the mountain."

Read more of this story at Slashdot.

Today's security tools used to analyze or detect suspicious activity, collect metadata which is usually refers to data about data to describe the how, when, where and who was involved. Metadata is a way of organizing, gluing together and discovering information that otherwise would be very difficult to manage, analyze and produce insightful reports.

It involves using a tool or a series of tools against other data to extract key components. It can be something as simple as the information stored in a picture (i.e. size, color content, resolution) or as complex as the information that can be parse out of TCP/IP traffic (i.e. source/destination addresses and ports, email address, website name, etc.). Computer forensics is another example of very complex metadata collection since it involves taking a device (USB stick, hard drive, etc.) and parsing every bit of content to be able to search and report on its content.

How much metadata is enough in security? There are a lot of tools out there either commercial or freeware that can be used to collect metadata to analyze network attack or system compromised. What is interesting is the fact there are many standards established for various disciplines but none of which seem to apply to network security. They can be viewed here.

All the tools used today to protect a network generate some form of metadata, whether it is a NIDS/NIPS, firewall, proxy, DNS server, etc., all produce data that can be aggregated into a Security Information and Event Management (SIEM). The metadata stored in a SIEM is used to yield insights into patterns of suspicious activity, produce trends and hopefully prevent or limit the damage early.

In the end, we all collect some form of metadata but is it useful or enough?

[1] http://en.wikipedia.org/wiki/Metadata_standards
[2] https://isc.sans.edu/diary/Collecting+Logs+from+Security+Devices+at+Home/14614

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Template for Nephia

Mini WAF

Find a development path somewhere in an upper hierarchy.

A plugin to make authentication a bit easier

We are CPAN authors

Simple set-and-forget using of a '/share' directory in your projects root

The DuckDuckGo DuckPAN client