The Open Web Application Security Project
The Open Web Application Security Project (OWASP) is an Open Source community project staffed entirely by volunteers from across the world. The project is developing software tools and knowledge based documentation that helps people secure web applications and web services.
Wednesday, August 28, 2002
Firewalk
Firewalking is a technique developed by Mike D. Schiffman and David E. Goldsmith that employs traceroute-like techniques to analyze IP packet responses to determine gateway ACL filters and map networks. Firewalk the tool employs the technique to determine the filter rules in place on a packet forwarding device. The newest version of the tool, firewalk/GTK introduces the option of using a graphical interface and a few bug fixes.
Firewalking is a technique developed by Mike D. Schiffman and David E. Goldsmith that employs traceroute-like techniques to analyze IP packet responses to determine gateway ACL filters and map networks. Firewalk the tool employs the technique to determine the filter rules in place on a packet forwarding device. The newest version of the tool, firewalk/GTK introduces the option of using a graphical interface and a few bug fixes.
The Internet Printing ProtocolThe Internet Printing Protocol (IPP) is a new development in the TCP/IP suite of protocols. It is intended to make printing over a network or a larger internetwork much easier, based on IP addresses. Companies such as Hewlett-Packard have already introduced some devices that support the proposed IPP standards, and more expected to arrive as IPP works toward a standard.
This article will explain what IPP is and how it works. Although may not have much need for IPP if you only have an printer attached to your computer, it does show how network based printing can be used.
This article will explain what IPP is and how it works. Although may not have much need for IPP if you only have an printer attached to your computer, it does show how network based printing can be used.
Network Monitoring Tools
This is a list of tools used for Network (both LAN and WAN) Monitoring tools and where to find out more about them. The audience is mainly network administrators.
This is a list of tools used for Network (both LAN and WAN) Monitoring tools and where to find out more about them. The audience is mainly network administrators.
Monday, August 26, 2002
Eavesdropping Detection and Counterespionage Consulting
Eavesdropping Detection and Counterespionage Consulting for Business & Government
Specialists in detecting…
• audio eavesdropping
• computer intercepts
• video voyeurism
• wiretaps
• technical espionage
• competitive intelligence
Eavesdropping Detection and Counterespionage Consulting for Business & Government
Specialists in detecting…
• audio eavesdropping
• computer intercepts
• video voyeurism
• wiretaps
• technical espionage
• competitive intelligence
How to prepare for and react to being hacked
You have that funny feeling that something is not right. One of your admins reported that his Unix box keeps rebooting in OpenWindows. You sit down at the box, type some commands, and wham, it reboots again. This doesn?t look like a bug, you?ve been hacked! Now what do you do?
You have that funny feeling that something is not right. One of your admins reported that his Unix box keeps rebooting in OpenWindows. You sit down at the box, type some commands, and wham, it reboots again. This doesn?t look like a bug, you?ve been hacked! Now what do you do?
Audiotel
Established in 1978 Audiotel International is the leading manufacturer of electronic countermeasures equipment and other secure communications products. Today we offer a complete range of electronic sweep equipment for all types of situation. We combine the latest advances in technology with the need to keep the equipment quick and practical to use.
Established in 1978 Audiotel International is the leading manufacturer of electronic countermeasures equipment and other secure communications products. Today we offer a complete range of electronic sweep equipment for all types of situation. We combine the latest advances in technology with the need to keep the equipment quick and practical to use.
Air Magnet
AirMagnet provides mission-critical wireless LAN (WLAN) administration and diagnostic tools to help companies deploy, administer and secure their networks.
The company's products address the unique challenges confronting network and security professionals in deploying and maintaining WLANs, by offering a new generation of integrated solutions designed for wireless network and security administration.
AirMagnet provides mission-critical wireless LAN (WLAN) administration and diagnostic tools to help companies deploy, administer and secure their networks.
The company's products address the unique challenges confronting network and security professionals in deploying and maintaining WLANs, by offering a new generation of integrated solutions designed for wireless network and security administration.
Unix logfiles
We'll discuss the unix logfiles, how the administrator of the system can secure the system enough to have log files containing trustful and reliable information. We'll also discuss the possibilities for the hacker to trick the system logfiles and delete the traces of his activities. As always, I'm trying to discuss the things from 'both sides of chessboard'. Hackers and administrators are all the same, most of good and security-minded admins did some annoyance in past by hacking. In any case, if someone wants to secure his system well, its really important to understand things from both sides.
We'll discuss the unix logfiles, how the administrator of the system can secure the system enough to have log files containing trustful and reliable information. We'll also discuss the possibilities for the hacker to trick the system logfiles and delete the traces of his activities. As always, I'm trying to discuss the things from 'both sides of chessboard'. Hackers and administrators are all the same, most of good and security-minded admins did some annoyance in past by hacking. In any case, if someone wants to secure his system well, its really important to understand things from both sides.
Tuning Red Hat for maximum performance
This tutorial details the ins and outs of transforming a stock, "out of the box" Red Hat installation into a finely tuned, stable system customized to individual needs and tastes. The material presented here is based on Red Hat 7.3, although many of the techniques and procedures discussed are equally applicable to other mainstream Linux distributions. And while the title uses the phrase "performance tuning," you'll soon discover that performance and security often go hand in hand.
This tutorial details the ins and outs of transforming a stock, "out of the box" Red Hat installation into a finely tuned, stable system customized to individual needs and tastes. The material presented here is based on Red Hat 7.3, although many of the techniques and procedures discussed are equally applicable to other mainstream Linux distributions. And while the title uses the phrase "performance tuning," you'll soon discover that performance and security often go hand in hand.
Friday, August 23, 2002
Extreme Hacking
Ernst & Young's updated and redesigned eXtreme Hacking course was created to rapidly address and educate participants on the exploits and techniques that attackers may use to breach the security of corporate networks. Ernst & Young Security Professionals will teach security profiling techniques that allow security and IT practitioners to quickly, efficiently, and methodically uncover many network and O/S vulnerabilities. Once such vulnerabilities are uncovered, participants learn cutting edge exploit tools and techniques to gain access to target systems and countermeasures to protect the organization. This course will focus on internet profiling and the Windows NT, 2000, and Unix environments. Other supplemental modules are available that include: Databases, Novell Netware, Social Engineering, Mainframes, Firewalls, Remote Access and Web Resources.
Ernst & Young's updated and redesigned eXtreme Hacking course was created to rapidly address and educate participants on the exploits and techniques that attackers may use to breach the security of corporate networks. Ernst & Young Security Professionals will teach security profiling techniques that allow security and IT practitioners to quickly, efficiently, and methodically uncover many network and O/S vulnerabilities. Once such vulnerabilities are uncovered, participants learn cutting edge exploit tools and techniques to gain access to target systems and countermeasures to protect the organization. This course will focus on internet profiling and the Windows NT, 2000, and Unix environments. Other supplemental modules are available that include: Databases, Novell Netware, Social Engineering, Mainframes, Firewalls, Remote Access and Web Resources.
Ernst & Youngs 2002 Digital Security Overview
A new Digital Security index by Ernst & Young LLP, one of the world's largest professional services firms, indicates that many Fortune 500 companies are unprepared to respond to digital security incidents that threaten their businesses.
A new Digital Security index by Ernst & Young LLP, one of the world's largest professional services firms, indicates that many Fortune 500 companies are unprepared to respond to digital security incidents that threaten their businesses.
SECTOR 5
SECTOR 5 has gathered the top minds in cyber and IT security from corporations, organizations, and government agencies that represent five critical infrastructure sector groupings:
S.1 Transportation
S.2 Energy, Utilities Water
S.3 Banking Financial Services
S.4 Telecommunications Information Services
S.5 Vital Health, Safety Emergency Services
SECTOR 5 has gathered the top minds in cyber and IT security from corporations, organizations, and government agencies that represent five critical infrastructure sector groupings:
S.1 Transportation
S.2 Energy, Utilities Water
S.3 Banking Financial Services
S.4 Telecommunications Information Services
S.5 Vital Health, Safety Emergency Services
Thursday, August 22, 2002
Wednesday, August 21, 2002
Intrusion detection: Too much information
Intrusion detection systems have been around for years, but lately companies have shown new interest in them as worm and virus attacks have risen, and as new cyber-attacks have been launched from overseas. But contrary to some enthusiastic claims, these systems aren't some new security panacea for the enterprise.
In fact, as useful as they are, intrusion detection systems (IDSs) are very limited in what they can do, and much harder to incorporate than many would suggest.
Intrusion detection systems have been around for years, but lately companies have shown new interest in them as worm and virus attacks have risen, and as new cyber-attacks have been launched from overseas. But contrary to some enthusiastic claims, these systems aren't some new security panacea for the enterprise.
In fact, as useful as they are, intrusion detection systems (IDSs) are very limited in what they can do, and much harder to incorporate than many would suggest.
Field Sobriety Test: netfilter & iptables
I was planning to write a short tutorial on the use of iptables, however, "short" is no longer in my vocabulary. iptables in itself is very simple, yet can be quite complex depending on the nature of how you plan to use it. Rather than writing one massive tutorial, I plan to take the reader on a magical tour of multiple explanations. With this method, we can work together from the ground up as to not cause any confusion or mass chaos. So put on your reading glasses, and iron that thinking cap! All levels of experience will find this to be an informative piece, or so I hope. Enjoy.. ;)
I was planning to write a short tutorial on the use of iptables, however, "short" is no longer in my vocabulary. iptables in itself is very simple, yet can be quite complex depending on the nature of how you plan to use it. Rather than writing one massive tutorial, I plan to take the reader on a magical tour of multiple explanations. With this method, we can work together from the ground up as to not cause any confusion or mass chaos. So put on your reading glasses, and iron that thinking cap! All levels of experience will find this to be an informative piece, or so I hope. Enjoy.. ;)
Introduction to Autorooters
Efficiency and automation: one can argue that they are two of the most valuable by-products of any technology. There is little doubt that the electronic tools of today allow us to get more done in less time. We use software to eliminate tedious work, reduce man-hours, and sift through mounds of data in seconds. Crackers, as we know, are smart... and lazy. It should come as no surprise then that they too, have employed technology to reduce their workload. The result? A type of malicious code known as autorooters, programs designed to automatically scan and attack target computers at blistering speeds.
A successful autorooter will give crackers what they want: complete control of a target machine with little effort, fast. Scanning networks for vulnerable machines, gaining unauthorized administrative access, installing backdoors, all the tricks of the trade, can all be achieved at the click of a button. In this article we'll explore the concepts behind autorooters and what can be done to defend against them.
Efficiency and automation: one can argue that they are two of the most valuable by-products of any technology. There is little doubt that the electronic tools of today allow us to get more done in less time. We use software to eliminate tedious work, reduce man-hours, and sift through mounds of data in seconds. Crackers, as we know, are smart... and lazy. It should come as no surprise then that they too, have employed technology to reduce their workload. The result? A type of malicious code known as autorooters, programs designed to automatically scan and attack target computers at blistering speeds.
A successful autorooter will give crackers what they want: complete control of a target machine with little effort, fast. Scanning networks for vulnerable machines, gaining unauthorized administrative access, installing backdoors, all the tricks of the trade, can all be achieved at the click of a button. In this article we'll explore the concepts behind autorooters and what can be done to defend against them.
U.S. Probes Firm In Security Breach
Federal law enforcement authorities searched the computers of a San Diego security firm that used the Internet to access government and military computers without authorization this summer, officials said yesterday.
Investigators from the FBI, the Army and NASA visited the offices of ForensicTec Solutions Inc. over the weekend and on Monday, seeking details about how the company gained access to computers at Fort Hood in Texas and at the Energy Department, NASA and other government facilities, officials said.
Federal law enforcement authorities searched the computers of a San Diego security firm that used the Internet to access government and military computers without authorization this summer, officials said yesterday.
Investigators from the FBI, the Army and NASA visited the offices of ForensicTec Solutions Inc. over the weekend and on Monday, seeking details about how the company gained access to computers at Fort Hood in Texas and at the Energy Department, NASA and other government facilities, officials said.
Subscribe to:
Posts (Atom)
