aa-scan3 is a tool to help generate AppArmor profiles by inspecting the executables to protect with AppArmor. As a build-time tool, aa-scan3 does not attempt to run the executable. It inspects it to extract the data needed to construct a suitable AppArmor profile. Go to aa-scan3 on GitHub to learn more. The code has been […]
Orange presents Oauth 2 Token Manager for Node.js. This project aims to show how to manage Oauth 2 token lifecycle. You could freely reuse the token and retry module in your project. It uses Got library to handle HTTP requests process. Go to oauth2-token-manager-for-nodeJS on GitHub for more information and access the code published under […]
The Remote Key Server is a solution to manage TLS private keys and certificates in a distributed system. Distribution of sensitive material, especially private keys, requires to take care of the access, the storage, and the duration of the storage of this secrets on server nodes. In the context of a Content Delivery Network, HTTPS […]
Orange presents a KeePass plugin to synchronize passwords with HashiCorp Vault. The KeePass Vault Sync plugin allows a user to get, in a local KeePass file, the secrets he has access to in an HashiCorp Vault. This plugin allows (for now) readonly access. KeePass Vault Sync was developped at Orange Applications for Business under LGPL-2.1. […]
Autonomic Network Security Management Framework is the first component developed within the scope of the SUPERCLOUD European Project, in which Orange plays the role of a Technical Leader. The SUPERCLOUD H2020 project aims to design and implement a security and dependability management infrastructure for distributed clouds that is both user-centric and self-managed. A new security […]
Orange has developed and open sourced a Diameter fuzzer, based on specifications of Diameter applications following rfc 3588 / 6733. Fuzzing is a security oriented activity performed on protocol stacks. Diafuzzer is composed of several different tools: simple and accurate Diameter callflows, based on pcap traces script language to perform additional functions such as logging, […]
The Moon Project, a user-friendly security management system designed to protect OpenStack cloud services, has been accepted as a new collaboration and development project by the Technical Steering Committee of the open-source community OPNFV (i.e. Open Platform for Network Functions Virtualization).