Norse Attack Map • Hacker News Board

Re: Norse Attack Map

#11

Post by twakefield » Wed, Jul 08, 2015, 10:16 PM UTC

wnevets wrote: post #2

what is norse, and why does it hate st. louis?

LOL, I had the same initial reaction. Apparently Norse monitors global cyber attacks[1]. So the real question is not why they hate St. Louis but why does China hate St. Louis?

I found the link while reading conspiracy theories about the NYSE shut down this morning[2]. I have no idea about the quality of the data. I just thought the visualization was cool.

[1] http://norsecorp.com/. [2] http://www.zerohedge.com/news/2015-07-08/what-first-world-cy...

Re: Norse Attack Map

#12

Post by daveloyall » Wed, Jul 08, 2015, 10:18 PM UTC

If Norse wanted to make this data useful, they'd present it as a CSV, too. How else could I determine if one entity owns all the St. Louis targets??? :)

Re: Norse Attack Map

#13

Post by clwg » Wed, Jul 08, 2015, 10:19 PM UTC

tcas wrote: post #3

Are there any open source map platforms like this for integrating into real time data feeds (i.e. if we want to track sales by region etc...) onto a map? I know about http://cesiumjs.org/ but it was extremely resource intensive heavy last time I tried to use it. EDIT: it looks like they use http://leafletjs.com/ -- looks interesting

There's this https://github.com/hrbrmstr/pewpew it's as much a criticism of these sorts of security visualizations as it is a means to create them.

Re: Norse Attack Map

#14

Post by jackdawjack » Wed, Jul 08, 2015, 10:26 PM UTC

This is more of a sales pitching device (and it's a nice one) than a useful tool

Re: Norse Attack Map

#15

Post by ganeumann » Wed, Jul 08, 2015, 10:28 PM UTC

daveloyall wrote: post #9

libraryatnight wrote: post #7

Earlier quoted context omitted.

Seems like China hates St Louis?

I've never posted a link to a Fox News affiliate before... Here goes! http://fox2now.com/2015/07/08/is-st-louis-under-a-cyber-atta... Ok, so.. Norse Corp, the ones that make the map, has offices in St. Louis.

"We are not under attack. We are not going to die. You have to come to work tomorrow."

Awesome.

Re: Norse Attack Map

#16

Post by kyrra » Wed, Jul 08, 2015, 10:28 PM UTC

I've seen maps like this discussed[0] on /r/netsec/ and other similar forums and from my understanding, they are mostly useless. It's aggregates some data to make a very pretty site, but doesn't really give you anything actionable. Normally you need to run it through real monitoring tools with various thresholds configured so you can alert the proper teams to act when something odd is going on.

[0] http://www.reddit.com/r/netsec/comments/2xuai9/pewpew_your_v...

Re: Norse Attack Map

#17

Post by d1str0 » Wed, Jul 08, 2015, 10:29 PM UTC

wnevets wrote: post #2

what is norse, and why does it hate st. louis?

Norse Corp. is a threat intelligence company. I believe one of their HQ is located in St. Louis and is where they currently host many of their honeypots. That is why you see St. Louis being attacked a lot.

Re: Norse Attack Map

#18

Post by conpermiso » Wed, Jul 08, 2015, 10:29 PM UTC

twakefield wrote: post #11

wnevets wrote: post #2

what is norse, and why does it hate st. louis?

LOL, I had the same initial reaction. Apparently Norse monitors global cyber attacks[1]. So the real question is not why they hate St. Louis but why does China hate St. Louis? I found the link while reading conspiracy theories about the NYSE shut down this morning[2]. I have no idea about the quality of the data. I just thought the visualization was cool. [1] http://norsecorp.com/ . [2] http://www.zerohedge.com/news/…

There are 16 colo centers in St. Louis according to http://www.datacentermap.com/usa/missouri/st-louis/, I wonder if anyone interesting has rack space there.

Re: Norse Attack Map

#19

Post by d1str0 » Wed, Jul 08, 2015, 10:30 PM UTC

twakefield wrote: post #11

wnevets wrote: post #2

what is norse, and why does it hate st. louis?

LOL, I had the same initial reaction. Apparently Norse monitors global cyber attacks[1]. So the real question is not why they hate St. Louis but why does China hate St. Louis? I found the link while reading conspiracy theories about the NYSE shut down this morning[2]. I have no idea about the quality of the data. I just thought the visualization was cool. [1] http://norsecorp.com/ . [2] http://www.zerohedge.com/news/…

Norse has offices in St. Louis and I'm sure that's where they host the majority of their honeypots. Thus, you see a lot of attacks hitting St. Louis.

Re: Norse Attack Map

#20

Post by d1str0 » Wed, Jul 08, 2015, 10:30 PM UTC

yeukhon wrote: post #8

How do they collect this data?

Honeypots