Category Archives: NIST

Trip Report: UW signing-party

Dear Debian Users, I met last night with a friend from many years ago and a number of students of cryptography. I was disappointed to see the prevalence of black hat, anti-government hackers at the event. I was hoping that … Continue reading

Posted in 19.34 RCW, amateur, cryptography, debian, Free Software, freenode, government, gpl, irc, LD43, linux, microsoft, military, Networking, NIST, nsa, open source, OSX, pgp, politics, PRCCDC, production, security, SELinux, Software, tls, ubuntu, washington, Washington State Ubuntu LoCo, Windows, x509 | 12 Comments

NIST::NVD CWE development – follow along

I’m in the process of getting the tests passing for the 0.03 release of NIST::NVD::Store::SQLite3 wherein our hero imports the CWE data and cross-indexes it with CVEs and CPEs. Follow along and suggest some patches. I’m developing on Debian Wheezy, … Continue reading

Posted in abuse, Databases, debian, F5 Networks, Free Software, git, Networking, NIST, perl, security, Software, SQLite, syndication, wheezy | Leave a comment

NIST::NVD::Store::SQLite3

I published an SQLite3 storage back-end to NIST::NVD on the CPAN. It’s pretty quick. About as fast as the DB_File one, but without the down side of being tied to DB_File. It shouldn’t be too difficult to re-factor this code … Continue reading

Posted in Databases, debian, F5 Networks, feds, Free Software, MariaDB, NIST, performance, perl, security, SQLite, work | 2 Comments

Perl interface to processing / querying NIST’s NVD feed

For a work project, I wrote a library in perl that can be used to query the NVD feed that NIST publishes here: http://nvd.nist.gov/download.cfm Here’s a snippit from the perldoc: use NIST::NVD::Query; # use convert_nvdcve to generate these files from … Continue reading

Posted in Berkeley DB, Databases, F5 Networks, feds, government, NIST, perl, security, work | Leave a comment