AWS Public Sector Blog
Author: Seth Grover
Seth is a cybersecurity researcher in cyber operations and incident response at Idaho National Laboratory. A software engineer by trade, he has over two decades of experience in network traffic analysis and security monitoring, and he has led the development of Malcolm at INL since its inception in 2018.
Building a network traffic analysis system: Deploying Malcolm on Amazon EC2
In this post, we provide step-by-step guidance for deploying Malcolm—an open source network traffic analysis suite—natively on Amazon Elastic Compute Cloud (Amazon EC2), using the on-demand compute, elasticity, and scalability of AWS to eliminate traditional infrastructure overhead. This approach is particularly beneficial for cost-conscious public sector (federal, state, and local), utility, and industrial customers who require network and security monitoring to deliver on their missions.