More Open Source Security episodes
Published 19 Jan 2026
Duration: 32:11
Suricata is an open-source, multi-mode network intrusion detection and prevention system that analyzes traffic, detects malicious activity, and generates detailed metadata for further analysis.
Josh discusses Suricata with Victor Julien, the founder and lead developer of the project. Victor explains the history of the project, its impact on c...
Suricata is an open-source network Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) that analyzes network traffic to detect malicious activity using signature-based rules. It generates detailed metadata, such as in JSON format, for further analysis and can operate in IDS, IPS, or Firewall modes, with the Firewall mode implementing a default drop policy for traffic control. Enterprises use Suricata for tasks such as network monitoring, threat detection, and log analysis, often integrating it with visualization and forensic tools like the ELK stack.
The project has been maintained by the Open Source Automation Foundation (OASF) for over 15 years and continues to evolve with improvements in usability, protocol support, and performance. It supports deep packet inspection and app-layer parsing for protocols like HTTP, DNS, and SMB, though encrypted traffic remains a challenge. Suricata also incorporates languages like Rust to enhance safety and performance, and it relies on community contributions for rule sets, feature enhancements, and ongoing development. The goal is to improve accessibility while maintaining strong security and performance capabilities.
21 Sept 2026 The curl summer of Bliss with Daniel and Stefan
"Explored open-source security challenges, highlighting curl's 'Summer of Bliss' initiative to reduce maintainer burnout, the impact of AI-generated vulnerability reports, and the need for human expertise in security management, while advocating for sustainable practices in open-source development."
14 Sept 2026 CRA vulnerability reporting with Daniel Thompson
"Cyber Resilience Act imposes strict vulnerability reporting rules on manufacturers, raising concerns over inefficiency, ethical disclosures, and industry compliance challenges."
31 Aug 2026 Sovereign Tech Agency with Erik Moller
"Explores the Sovereign Tech Agency's efforts to sustain open-source software as critical infrastructure, emphasizing public investment, digital sovereignty, and strategic funding for projects like *curl* and AI security."
17 Aug 2026 Maintaining EOL Open Source with Commonhaus and HeroDevs
"Explores open-source maintenance challenges, solutions for solo maintainers, and the role of organizations like Common House and HeroDevs in sustaining projects through financial, legal, and administrative support, emphasizing governance, dependency management, and enterprise-community collaboration to ensure long-term sustainability."
10 Aug 2026 Cleanup, Speedup, Levelup open source at e18e
"E18e enhances JavaScript by reducing dependencies, optimizing tools, and improving security, as seen in its work with Storybook, while promoting cleaner code and community collaboration."