SuriCon 2024: Celebrating a Decade of Open Source Excellence
This year, we were thrilled to welcome our incredible Suricata community to Spain for SuriCon2024, marking the 10th of this unparalleled open-source security conference. For those unable to join us in person, we once again provided a virtual attendance option, featuring live-streamed sessions and robust discussions via our SuriCon Discord channels. Whether onsite or online, the energy and camaraderie of the Suricata community shone bright.
![]()
SuriCon 2024 Highlights
Comprehensive Pre-Conference Suricata Training Sessions: Three expertly designed training sessions equipped participants with the latest tools and techniques for leveraging Suricata. Led by renowned trainers Peter Manev, Eric Leblond, Philippe Antoine, and Lukas Sismis, alongside guest trainers from Google and Uber—Josh Stroschein, David Wharton, and Pancho Perdomo—these sessions ensured attendees stayed at the forefront of open-source security innovation.
- Engaging Talks and Presentations: Insightful sessions delivered by a mix of new and veteran speakers covered a wide range of topics, including deep technical dives, real-world implementations, and forward-looking strategies for the Suricata ecosystem.
- Collaborative Community Events: The Suricata Development Roadmap brainstorm provided a dedicated space for community members to propose new features, discuss enhancement ideas, and refine processes, shaping the future of Suricata together.
- Inspiring Venue and Networking Opportunities: A stunning conference venue offered a perfect backdrop for immersive discussions, knowledge sharing, and connecting with peers, all while enjoying the rich local culture and hospitality.
- Giving Back to Local Communities: In the spirit of supporting the communities where we host SuriCon, we partnered with the Theodora Foundation, a nonprofit dedicated to brightening the lives of hospitalized children through laughter and joy. SuriCon speakers were given the option to forgo a traditional thank-you gift in favor of donating to this incredible cause, furthering our shared mission of making a positive impact.
As one attendee perfectly put it:
“SuriCon is a real open-source conference: No vendor pitches, focused on the technical details but not only, and within a really great, modern and open-minded community.”
A Special Thanks
We are deeply grateful to all who made SuriCon2024 a success—our speakers, sponsors, trainers, and attendees. The Suricata community’s passion and dedication continue to drive its growth as a world-class open-source project. Here’s to another year of collaboration, innovation, and impact!
We can’t wait to see you at SuriCon2025!
Presentation Materials
DAY 1:
State of Suricata — Victor Julien
PDFVIDEO
The Dataset that Shouts in Whispers to Analysts — Éric Leblond
PDFVIDEO
Deploying Suricata in a Large Corporate Network, Be Surprised! — John Graat
PDFVIDEO
Suricata Rule Types and How the Engine Interprets and Reacts to Them — Juliana Fajardini
PDFVIDEO
Suricata Testing 101: Building Robust Security Tools — Haleema Khan & Modupe Falodun
VIDEO
Lightning Talk: How to Catch a Phish — Genina Po
PDFVIDEO
AI-Powered Threat Detection with Suricata — Vagisha Gupta
PDFVIDEO
Building Open Source Firewalls in AWS with Suricata — Cristobal Lopez Callejon & Francisco Abel Tresgallo Freire
PDFVIDEO
Tales of Suricata Hardware Acceleration — Lukas Sismis
PDFVIDEO
DAY 2:
Jumping Over Geo-Fences — Konstantin Klinger & Matthew Bing
PDFVIDEO
Take Control of Suricata Rules with Aristotle v2: Mastering Metadata to Form The Ruleset You Want and Need — David Wharton
PDFVIDEO
Catching Moonbeams — Lua in Suricata 8.0 — Chris Wakelin
PDFVIDEO
A Rule Grouping Performance Bump Tale — Shivani Bhardwaj
PDFVIDEO
Greenfield Network Threat Detection: Practical Strategies for Operationalizing Suricata — Adam Donadeo
PDFVIDEO
Adding LDAP to Suricata! — Pierre Chifflier
PDFVIDEO
Suricata Extreme Performance Tuning — SepTun Mark III — Andreas Herz & Peter Manev
PDFVIDEO
Ridiculously Rich SMB Data Provided by Suricata — Markus Kont
PDFVIDEO
App-Layer Plugins — Philippe Antoine
PDFVIDEO
Lightning Talk: Copilot is a Game Changer for Users and Attackers — Brad Woodberg
PDFVIDEO
DAY 3:
Supercharging Security with RAG — Anthony Tellez & Leo Meyerovich
PDFVIDEO
Google Killed JA3, Should We Be Scared? — Éric Leblond
PDFVIDEO
Enhancing Suricata with Deep Packet Inspection — Luca Deri, Matteo Biscosi, & Alfredo Cardigliano
PDFVIDEO
Detecting Network CVEs Using Suricata — Tatyana Shishkova & Kirill Rassokhin
PDFVIDEO
Suricata Meets OCSF: Unified Language, Unified Defense — Dominik Lohmann, Matthias Vallentin, & Sascha Steinbiss
PDFVIDEO



























