SEARCH RESULTS
 
Showing 1-10 of 15 records
 
Expand article

Hardened stateless session cookies

2008-05-16 12:40:30 by Steven J. Murdoch in Light Blue Touchpaper
 
...stateless session cookie proposal These choices would be a substantial improvement on the previous custom design (had they been implemented correctly ), but I still was not quite satisfied. The Fu et al. scheme has the property that an attacker who can read the cryptographic key stored in the database can create spoofed cookies. Given the...
 
Tags: scheme, cookie generation scheme, cookie, cookie authentication schemes, cookies, stateless session cookies, fake cookie, cookie authentication key, authentication database
 
 
 
 
Expand article

Monthly Blog Round-Up - November 2007

2007-11-30 17:18:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today So, here is my next monthly "Security Warrior" blog round-up , top posts and comments by topic Oh, wow! I am proud to announce that one of my favorite pieces is indeed the most popular this month: "Protecting Logs from Admins: A...
 
Tags: blog round-up, monthly blog round-up, monthly, top, top posts, top list, preserve computer logs, logs, anti-virus efficiency
 
 
 
 
Expand article

Monthly Blog Round-Up - December 2007

2008-01-03 15:54:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts and topics Same as during the last few months, the "fallout" from being featured on a high-profile programming site continues to drive loads of...
 
Tags: blog round-up, monthly blog round-up, monthly, posts, database, database log management, popular posts, top, anti-virus efficiency
 
 
 
 
Expand article

Monthly Blog Round-Up - January 2008

2008-02-01 15:46:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts and topics Darn it, but same as during the last many, many months, the "fallout" from being featured on a high-profile programming site continues...
 
Tags: blog round-up, monthly blog round-up, monthly, posts, popular posts, top, anti-virus efficiency, database, database log management
 
 
 
 
Expand article

Monthly Blog Round-Up - February 2008

2008-03-03 11:50:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts and topics Finally, one post I wrote this month bumped the "anti-virus saga" from the #1 popular spot: Welcome to the Platform Club! :-) post...
 
Tags: blog round-up, monthly blog round-up, monthly, logs, logs popular, popular, posts, popular posts, anti-virus saga
 
 
 
 
Expand article

Monthly Blog Round-Up - March 2008

2008-04-02 14:36:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts and topics This month my logging polls are super-hot: specifically Logging Poll #6 "Which Logs Do You LOOK At?" Analysis leads the Top5. Do...
 
Tags: blog round-up, monthly blog round-up, monthly, preserve computer logs, logs, top, posts, list, pci
 
 
 
 
Expand article

High Availability Security In Your Virtual Environment

The Article has images
2008-03-12 21:41:15 by John Peterson in Security In The Virtual World
...Stateless, and everything you've asked of your physical vendors My guess is that if you ask and they don't have it, they will start developing it and marketing its ability. Its a battle that cant be won completely. Customers will always want high availability be it virtual or physical Until the next post JP
 
Tags: virtual, physical, physical relay, physical network, virtual security products, security products, network, virtual network, virtual environment
 
 
 
 
Expand article

Monthly Blog Round-Up - April 2008

2008-05-01 22:17:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...stateless" and a lot of good content gets lost since many people, sadly, only pay attention to what they see today So, here is my next monthly "Security Warrior" blog round-up of top 5 popular posts and topics In a bizarre twist of fate, the #1 post this month is this little blurb on what will motivate the improvement of security in the...
 
Tags: monthly blog round-up, blog, blog round-up, monthly, top5, top5 posts, posts, popular posts, source siem
 
 
 
 
Expand article

Vengeance

2008-05-29 13:07:04 by schneier in Schneier on Security
 
...stateless societies, as happened in New Guinea. But the first state in world history, at least, must have arisen de novo, and we now know that states arose independently in many parts of the world. How did it happen anthropologists, historians, and archeologists tell us that state governments have arisen independently under one of two sets...
 
Tags: vengeance, cherokee government, government, exact personal vengeance, world map, world, societies, stateless societies, individual