SEARCH RESULTS
 
Showing 1-10 of 45 records
 
Expand article

The Trouble with Threat Modeling

2007-09-26 19:11:00 by sdl in The Security Development Lifecycle
 
...possibilities. Some of those turn out to be uninteresting, and we learn something. Others (as we've discussed in email) were pretty clearly uninteresting It can be important to walk through those possibilities so we know theyre uninteresting. Of course, wed like to reduce the time it takes to look at each uninteresting issue Other Problems ...
 
Tags: threat, threat models, threat model, reasons threat, service threat, term threat, threat effectively, playsound threat model, development process
 
 
 
 
Expand article

Summarizing August's Threatscape

The Article has images
2008-09-10 06:57:32 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...possibilities for backdooring copycat web malware exploitation kits in order to take advantage of the momentum while introducing a non-existent kit has always been there at the disposal of malicious attackers. One thing's for sure - there's no such thing as a free web malware exploitation kit, just like there isn't such thing as a free...
 
Tags: malware, facebook malware campaigns, usefulness pinch malware, banker malware kits, malware campaigns, botnet, diy botnet kit, distribute malware, banker malware
 
 
 
 
Expand article

The Random JS Malware Exploitation Kit

The Article has images
2008-01-15 20:49:56 by HASH0x8be7244 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...possibilities for assessing the impact of a malware embedded attack the way it was done so far, we can only speculate on what's to come by the end of the first quarter of 2008. From my perspective however, the smartest thing in this type of attack technique is that they limit the leads they leave behind to the minimum, thus, forwarding the...
 
Tags: random, malware, random attack approach, cgi, local malware locations, cgi-bincert, cgi-binss, cgi-binoptions, cgi-binpstore
 
 
 
 
Expand article

Stratfor "Inaugurates" President McCain

2008-02-08 10:27:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...possibilities, and they increasingly will be forced to consider the possible implications of a President McCain About me: http://www.chuvakin.org
 
Tags: president mccain, eminently exploitable flaws, presidential possibilities, obama campaigns, stratfor subscription, simpler matrix, perfectly blunt, months ahead, fun quotes
 
 
 
 
Expand article

Logging Poll #6 "Which Logs Do You LOOK At?" Analysis

The Article has images
2008-03-06 15:01:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...possibilities here a. People only collect the logs they plan to look at, OR b. People look at logs they collect (duh Strangely, I find a) unlikely; I think most people collect more than they can review and that the incident/issue response and compliance needs drive collection more than review or analysis Another observation is that all of the...
 
Tags: logs, logs poll, windows server logs, nidsnips logs, firewall logs, poll, people collect, web server logs, people
 
 
 
 
Expand article

Say When - Trusting Log Timestamps

2008-03-23 04:05:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...possibilities. If you have no idea, you should not trust the timestamp Third, are you in drift ? Is your system clock? Those pesky drift seconds turn into minutes which then work to undermine the accuracy of timing the records (and thus your certainly and trust in evidence quality Fourth, syslog forwarder mysteries are plenty: some of the...
 
Tags: logs, windows event logs, syslog files, syslog, define logs, syslog-ng, system logs, syslog daemon, time
 
 
 
 
Expand article

Who do you trust?

The Article has images
2008-02-08 22:04:45 by John Peterson in Security In The Virtual World
...possibilities and imagine being able to run any application not just a small file attachment. An application buried in a directory somewhere on the Virtual Disk Image Did I just bum you out and paint another picture of doom and gloom Well, its not all doom and gloom. Knowledge is power as they say and now with this knowledge you should think...
 
Tags: virtual disk image, image, virtual disk images, trust, images, internet, anti-virus software inside, server, linux server
 
 
 
 
Expand article

VMSafe = A Safer More Secure VMWare Environment

The Article has images
2008-02-28 03:35:26 by John Peterson in Security In The Virtual World
...possibilities of the program I'm excited to see the space finally get its due attention and am confident that the program will give birth to many new ideas and products that help solve the many security challenges introduced by virtualization There are so many vendors in this newly announced program. I hope to see quality from the program...
 
Tags: vmware, security companies, individual security companies, security, security products, solutions, interoperable security solutions, physical security appliance, vmware vmsafe
 
 
 
 
Expand article

Friday Squid Blogging: Squid Beaks for Artificial Limbs?

2008-04-04 16:38:29 by schneier in Schneier on Security
 
...possibilities for joining materials," Zok said in a statement. "For example, if you graded an adhesive to make its properties match one material on one side and the other material on the other side, you could potentially form a much more robust bond The researchers are learning lessons that can be applied to medical materials in the future,...
 
Tags: squid, squid beaks, biomedical materials, biomedical, materials, medical materials, hard materials occur, beak, squid beak