SEARCH RESULTS
 
Showing 1-10 of 16 records
 
Expand article

Getting into the Flow With Threat Modeling

The Article has images
2007-10-11 23:25:00 by sdl in The Security Development Lifecycle
...bored. (In fact, theres pretty explicit acknowledgement of this in the Wired article on Halo So looking at the chart of skills versus challenge, theres a channel in the middleits the flow channel. Wed like to guide people there, by giving them challenges that are in line with their skills. Once people are there, we want to prod them from...
 
Tags: threat, people develop skills, people, challenge people, flow, sdl threat, entire threat model, threat model, guide people
 
 
 
 
Expand article

Out of the Box

2007-07-19 00:00:00 by Uriel Maimon in Speaking of Security, the RSA Blog and Podcast
 
...bored look in her glazed ice-blue eyes, through her drooping eye-lids. Now I'm as socially astute as anyone who has ever written network device drivers
 
Tags: network device drivers, set-up, desperately bored, set, tapas bar, ice-blue eyes, tresses frame, blonde beauty, gorgeous
 
 
 
 
Expand article

A cryptographic hash function reading guide

2007-11-23 16:01:18 by George Danezis in Light Blue Touchpaper
 
...bored since the last NIST AES competition and depressed by the prospect of not having to design another significant block cipher for the next few years The rest of us should expect the next four years to be filled with news, first about advances in the design, then advances in the attacks against Hash functions, as teams with candidate hash...
 
Tags: function, hash functions, cryptographic hash functions, functions, functions secure, design, hash function design, compression functions, secure hash function
 
 
 
 
Expand article

FaceBooks is Tiring Fast and Heres Why

2008-02-23 01:46:38 by mcurphey in Mark Curphey - SecurityBuddha.com
 
So I dont get accused of jumping on the bandwagon in months to come, I have today drawn some new conclusions about platforms and next.0 Internet apps, as we all watch onto see if FaceBook topples back into the blue ocean or becomes a Google, however the first conclusion is I am currently bored of
 
Tags: internet apps, facebook topples, blue ocean, google, platforms, conclusion, bandwagon, bored, conclusions
 
 
 
 
Expand article

Got Sopranos? Yet another thing I did not know as much about

2007-11-26 20:55:00 by Manu Namboodiri in Data Protection, Management and Leakage
 
...bored of playing video games and looking for some real kicks. Well, there are some of those no doubt, but it seems that hacking has become the new organized crime. It may not be as widely known as drug cartels or the arms dealers, but information is becoming the new dust Credit card numbers, card swipe data, etc., are selling for a princes...
 
Tags: cardholder data, crime business, crime, card swipe data, recent trip, visa gold, breaches, nefarious goals, arms dealers
 
 
 
 
Expand article

Product Vendor's sloppiness vs. Hacker's intelligence

2007-01-08 07:01:06 by RaviC in Musings on Information Security
 
...bored of repetitions Consider this scenario: Hacker finds a vulnerability with a product from a vendor Vendor has access to all the source codes. Vendor has the knowledge about the functional design, architecture, bugs, future roadmap Et. Al. Moreover, a vendor has the money and other valuable resources Hacker does not have access to the...
 
Tags: vendor, hacker, product, product vendors, resources, functional design, information asymmetry, valuable resources, product offerings
 
 
 
 
Expand article

Top 11 Reasons to Hate Logs

2008-04-01 10:29:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...bored in 5 minutes - or survived for the whopping 10? Congrats, you score a point! But logs are still boooooooooooooooooooooooooooooring One log, two logs, 10 logs.... 1,000,000,000 logs: rabbits and hamsters cannot match the speed with which logs multiply . Don't you just hate that You keep hearing people refer to "log data." Then you run...
 
Tags: logs, logs multiply, bad logs, log, log source, log obscurity, log data, lie, people lie
 
 
 
 
Expand article

Phishing reloaded

2008-04-04 21:18:18 by Editor in Security x.0
 
...bored with how simple it is to do a "normal" phish, or attempting to improve signal-to-noise ratio, they are building the tools that allow them to easily bypass the strong authentication that has not even been rolled out everywhere Recent reports indicate an increase in phishing-based trojans and traffic redirectors Along with phishing-based...
 
Tags: fraudulent, fraudulent server replies, paper describes mechanisms, paper, dns lookups, specific dns lookups, fraudulent dns server, traffic redirectors, user authentication method
 
 
 
 
Expand article

America's Dilemma: Close Security Holes, or Exploit Them Ourselves

2008-05-01 04:00:00 by Bruce Schneier in Wired Security
 
...bored kids with an axe to grind Separating cyberwar, cyberterrorism and cybercrime isn't easy; these days you need a scorecard to tell the difference . It's not just that its hard to trace people in cyberspace, it's that military and civilian attacks -- and defenses -- look the same The traditional term for technology the military shares with...
 
Tags: security, bad guys insecure, guys, non-security, security improves, technologies, dual-use technologies, security improvements, agency
 
 
 
 
Expand article

Dual-Use Technologies and the Equities Issue

2008-05-06 05:17:24 by schneier in Schneier on Security