SEARCH RESULTS
 
Showing 1-10 of 28 records
 
Expand article

Quest homes in on Unix password management

2008-04-28 00:00:00 by HASH0x8b58eb0 in Network World on Security
 
Overall, QPM requires moderate Unix administrative skills to both install and use. It doesn't, of course, cover Windows, but does cover Solaris and HP-UX (not tested). It's very highly configurable, and puts reasonably strong barriers in place to prevent undesired privileged access
 
 
 
 
 
Expand article

Developer fixes 33-year-old Unix bug

2008-07-10 00:00:00 by HASH0x8b3379c in Network World on Security
 
An OpenBSD developer has discovered and fixed a bug in the software that has been traced back to an AT&T version of Unix from 1975
 
 
 
 
 
Expand article

Anton Security Tip of the Day #16: Virtually There - Journey Into VMWare ESX Log Analysis

2008-08-25 12:11:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...unix)[9405]: session opened for user root by jhonny(uid=1626 This is a classic Linux root login message; you can watch for these by searching VMWare ESX logs for "session AND opened AND user AND root." Notice the user name of the user who switched to root May 30 09:20:34 esx2 sshd(pam unix)[9364]: session opened for user jhonny by (uid=0 This...
 
 
 
 
 
Expand article

Logging Poll #6 "Which Logs Do You LOOK At?" Analysis

The Article has images
2008-03-06 15:01:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...Unix/Linux server syslog Web server logs Firewall logs How does that compare with the top 3 log types that people collect (see picture showing results from my previous poll below These are Unix/Linux server syslog Firewall logs Web server logs Huh? They are the same - doesn't it just make sense? What are the possibilities here a. People only...
 
 
 
 
 
Expand article

10 Myths About Life As An IT Security Professional

The Article has images
2008-04-25 23:08:41 by Craig Balding in Security Wannabe
...UNIX, Linux, OS/400), network security (WAN/LAN/Internet/wireless/telco), vulnerability assessment, penetration testing, application security, reverse engineering, malware analysis, vulnerability analysis, exploit development, social engineering, physical security, cryptography, crisis management, disaster recovery, 3rd party security reviews...
 
 
 
 
 
Expand article

Computing in the Clouds with AWS

2008-07-25 09:34:14 by Tim Bass in The Complex Event Processing Blog
 
...UNIX Forums have been considering moving the UNIX andLinuxForums to the clouds - the Amazon Web Services (AWS) cloud. Amazon EC2 is one option to scale the forums, which is a LAMP application Amazon EC2 allowsus to rent dedicated servers (instances) on-demand to run applications, such as the forums. Then we can run and host on EC2 any Linux...
 
 
 
 
 
Expand article

Network skill level gap is growing, but growth opportunities abound!

The Article has images
2008-08-25 21:06:07 by Julia Lim in ScienceLogic
...Unix commands. On average, (after filters from reputable recruiting firms, some with 5-10 years experience) less than 10% pass muster for the first filter we use in our hiring process. This is a troubling fact, which has cost us considerable time and effort to secure the right resources with competent skills. So I can say from our market...
 
 
 
 
 
Expand article

Coral8: Event Stream Processing and Intrusion Detection

The Article has images
2008-01-03 09:08:00 by Tim Bass in The Complex Event Processing Blog
...UNIX domain socket adapter using Coral8 Java APIs. We are using this adapter to evaluate and demonstratestream processingwith intrusion detection systems (IDS) using event stream processing to reduce false alarms, detect derived situations from the raw intrusion event data, and feed a security management visualization dashboard You can click...
 
 
 
 
 
Expand article

The STRIDE per Element Chart

2007-10-29 23:06:46 by sdl in The Security Development Lifecycle
 
...Unix v7. Each of those will be vulnerable to different instantiations of threats. Your exe or a.out will be vulnerable to simple stack smashing overflows, but the .NET assembly wont be. As you make your elements more specific, you can provide more prescriptive guidance as to what threats to look for, and how to effectively mitigate them ...