6 ms·
I did a ton of work with bro in graduate school, including extensive collaboration with Robin Somer, one of the project's architects. Bro is a great product, wr
by eldavido 12y ago
I did a ton of work with bro in graduate school, including extensive collaboration with Robin Somer, one of the project's architects. Bro is a great product, written primarily in C++, which parses protocols and passes events about those protocols up to a set of user-definable handlers. It's been used to study protocol parsing, intrusion detection, and a lot of other topics in network security.
Funny, I was just telling my girlfriend this morning how the US doesn't have many free-standing "research institutes" a la Germany's Max Planck institute, but bro, having been produced by ICSI, came out of one of the best academic CS labs in the US, if not the world -- the International Computer Science Institute.
- eldavido 12y agoIncidentally, a big part of my thesis was studying DNS parsers and how network vulnerabilities can be expressed and tracked. It turns out to be an interesting language design problem. One of our papers, "VESPA", the "vulnerability signatures parser", proposed a DSL-like design for describing vulnerabilities using a minimal C++ syntax. This is a very rich area of research and one I'd like to apply some of my recent high-scale stuff I've done at work on. bro was doing event-based processing in pure C++ long before node.js existed (some 10 years ago) -- these guys are really, really smart.
- rdl 12y agoIAS? The large number of "think tanks" which are often funded through a diverse set of grants (RAND, MITRE) ISI? (the one at USC which invented a lot of the Internet, not the one funding Al Qaeda) Cheap access to grad students and assistant professors, as well as access to USG funding (and easy visas), probably pushes a lot of this into university affiliated or university departments.