prevention of an attack vector (e.g. XSS, HPP, CSRF)
-1
votes
1answer
153 views
Impact of attack occured in Radius, DHCP and HTTP servers on VOIP?
Assume we can crash the RADIUS server in a VOIP system. What would be the impact on the confidentiality, integrity, and availability of VOIP service. What would be the impact if the same question if ...
3
votes
3answers
5k views
How to prevent my website from getting malware injection attacks?
I found that my website is banned as malware website by Google. When I checked the code, I found some code injected to many files on my server. I cleaned everything manually editing all files in my ...
0
votes
0answers
35 views
more justification for the impact scores used by the national vulnerability database [duplicate]
Possible Duplicate:
why CVSS give a score of 0.66 for a full impact on CIA?
Good day ;
the CVSS attributes the following impact values for confidentiality, integrity and availability:
...
2
votes
2answers
369 views
External IP same as Internal IP security
Where I live my ISP does not give IP addresses out. My external IP address is the same as my external if I plug directly into the wall with no router. My ISP does give everybody a "router", that is ...
15
votes
8answers
827 views
Ways to secure yourself from Firesheep kiddies and other sniffing
Just a few days ago I had my first encounter with Firesheep. Luckily I was the one using it. Well, it scared me into looking for ways to secure myself. So I have two questions:
In exactly what ...
12
votes
9answers
567 views
What do you see as the emerging threats for 2011
As we move in to the new year, what do you see as the emerging threats for organisational security?
I see more chat around;
Advanced Persistent Threat (APT) from foreign states.
More fines from the ...
13
votes
3answers
673 views
Rails - protection against code injection and XSS
I've started using Ruby on Rails, and I was wondering if there were any security gotchas to watch out for with Rails, particularly regarding code injection and XSS?
I know Rails tries to prevent ...
-3
votes
2answers
112 views
how to protect a personal computer? [closed]
I am Linux user with no knowledge on security , up to now i dont know that is my system was in attack or not . I havent felt anything wrong with my system . but every Computer user must have some ...
5
votes
4answers
1k views
How effective are reverse proxies as a web application security measure?
How effective are reverse proxies as a web application security device? Which types of threats do they mitigate against and which don't they?
For example are they more effective in preventing ...
3
votes
1answer
162 views
eBay account compromised/Credit Card used/Hosts files changed
To preface this, I'd just like to let you know that I'd consider myself an intermediate security guy(Definitely not a novice, not yet an expert) I do have a story to tell, and would like to know if ...
4
votes
1answer
1k views
What is packet drop, packet loss and how Packet drop attack works?
I confused with the three terms:
Packet drop.
Packet loss.
Packet drop attack.
I understand Packet drop as the prameter the application (e.g. Skype) allows to drop packets and still keeping ...
0
votes
3answers
354 views
Are Facebook, Yahoo, Google, etc. hackable?
Just to be clear, I am not asking how to hack in these services, I am just curious. Let me try to explain.
Since I know a little bit about computers, people automatically assume I know how to have, ...
7
votes
2answers
583 views
Interpolique: transparently preventing SQL Injection and XSS with base64 encoding, what happened?
For the keynote at The Next HOPE a couple of years ago, Dan Kaminsky unveiled Interpolique (the talk is really fun btw). The problem he raised was how to defend against injection attacks, including ...
2
votes
3answers
223 views
Securing dropdown boxes
I have been creating selection boxes for years, yet I never knew you could modified it with firebug and submit them with nonpermitted values, of course this wouldn't happened if the code was secured.
...
5
votes
2answers
397 views
How does OWASP ESAPI protect against direct object reference vulnerabilities?
What other good solutions are there?
From the Area51 proposal
4
votes
4answers
611 views
Most secure data storage?
What is most secure data storage currently available and suggested by specialists, to store digital data in digital medium (without making hard copy of data onto paper or other type of medium, than ...
1
vote
5answers
193 views
How to replace a constant identifier, for a resource on a network, with a variable one?
I guess the example can make it easier.
Assume each Client on a network has an identifier(some alphanumeric sequence) which identifies it uniquely on the network. Each time the Client corresponds ...
9
votes
2answers
179 views
Should I prevent user from operating with site during some first seconds?
Imagine the following scenario: User is at attacker.com and plays a game there. Just before he clicks at some point he is rerouted to victim.com using browser's history. User thought that he clicked ...
7
votes
7answers
501 views
IP address black list
My website has a black list of IP addresses. The web application, in some way, detects all invalid, suspicious influences to it and remembers IP address and denies any requests from that IP address. ...
8
votes
3answers
402 views
How does an attacker approach a website?
What is a typical mindset and method of approach? What are they likely to try first? At what point does a novice give up versus an expert? How would an automated attack differ from a manual one?
2
votes
3answers
119 views
I want to implement a new type of security feature over several platforms
I want to make a security feature that will go farther in discouraging people from looking through a secure system or server than what I have seen being implemented.
Specifically, is there a way (or ...
2
votes
1answer
373 views
Token Based Authentication & Pass-the-hash Attacks
Do token-based authentication solutions (such as RSA SecurID) mitigate tools like incognito and/or pass-the-hash tools?
0
votes
2answers
184 views
Any Books/Sites/Writeups on IRC bot Security?
I've written a scriptable IRC Bot and I want to harden it against exploits. To that end I've already written it so that it ignores its own messages (so that, for example, even if it echoes back valid ...
7
votes
4answers
560 views
Gmail account hack prevention and recovery
I am doing a research on how to prevent my gmail account from being hacked and what are the options of claiming it back.
The associated phone number and recovery email can be changed, in fact I ...
4
votes
1answer
145 views
Can I safely post the output of lspci, lsusb, lshw?
I'm having trouble with my SD card, and have been asked to inspect the output of tail -f /var/log/syslog, sudo lspci -v -nn, sudo lsusb, and sudo lshw. tail shows nothing when I insert the card, so ...
2
votes
2answers
135 views
How to demo a new 0-day security product?
We are a development team working on a new 0-day protection security product.
We aim to protect against new unknown 0-days attacks against servers.
We have a very strong solution ready to demo.
The ...
4
votes
1answer
268 views
Can format string exploit bypass the PaX protection?
I'm trying to find info regarding how format string exploit can bypass the PaX protection mechanism. As I understood PaX just features ASLR and NX protection. So I wonder if an attacker should use ...
7
votes
2answers
2k views
Preventing man in the middle attack
I recently did a man in the middle attack on my college LAN (for purely educational purposes:)). I simply wrote a raw socket application that pumped ARP reply packets advertising my MAC address with ...
5
votes
4answers
717 views
Is this type of ARP poisoning attack possible?
I am wondering if it is possible to paralyze a network by sending out a bunch of fake ARP response packets.
Some basis: I recently read a moderately detailed description of how ARP and ARP poisoning ...
10
votes
2answers
374 views
Detecting website attack attempts
I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to attacker, when he tries to break into my website. Is there any resource ...
5
votes
3answers
283 views
How do I defend against known php hacks
I have IPs attempting to probe our web server trying to find open URLs. The two known methods are attempting to find specific nodes on our drupal site, or attempting the ../../../../ trick to try and ...
1
vote
2answers
512 views
how an iframe can cause xsrf?
I know how a form tag is prone to CSRF which does not use any token (or any other challenge-response mechanism) but I was wondering how an iFrame can be used to cause XSRF attack and what would be the ...
8
votes
2answers
768 views
How to defend against SSL-Exhaustion attacks?
The problem of SSL-Exhaustion attacks is well known for years, but nobody really cared until THC released their exploit-tool recently. THC talks about counter measurements in their release:
No real ...
43
votes
2answers
5k views
What are rainbow tables and how are they used?
Where can I find one? Is there a pot of gold at the end?
How do I protect against them?
From the Area51 proposal
This question was IT Security Question of the Week.
Read the Sep 09, 2011 blog ...
2
votes
7answers
791 views
Which forensic techniques should I use to identify intrusion or monitoring of my computer or cellphone
If I suspect my computer or cellphone is being monitored by an unknown attacker, what tools or techniques could I use to detect or identify such monitoring?
Currently I'm unable to detect the ...
1
vote
2answers
198 views
Is the OData Protocol susceptible to Insecure Direct Object References?
The Open Data Protocol or OData is a great protocol created on top of Web Technologies.It uses the URI convention for the data exchange using Atom, JSON and XML. You can use the URI convention ...
8
votes
4answers
232 views
Staying safe, but still connected, at security conferences
If one is to spend some time away from home and work in a hotel environment where neighboring users can at least be presumed to be mischievous (if not actually malicious), what are some measures that ...
10
votes
6answers
305 views
Should we configure all devices to never request SSL 2.0, and reject it if offered?
In an effort to reduce man in the middle attacks, when will it be (or was it) an industry accepted practice to reject SSL 2.0 connections on the client and server side?
Is configuring this on a proxy ...
0
votes
0answers
514 views
Topics for undergrad thesis, suggestions please [closed]
I'm a CS university undergraduate student, currently in my last year of studies for my BSc (not MSc). Every student needs to submit a thesis in order to get the degree. I have the option to suggest a ...
8
votes
3answers
428 views
What is sandboxing?
In security discussions, the topic of sandboxing often comes up. What is application sandboxing? How does it work, and what security vulnerabilities does it prevent?
3
votes
1answer
133 views
What useful security reports can be extracted from a Windows-based machine and its' related logs?
What logs and event IDs should I be paying attention to when looking at a Windows-based machine (workstation, server, Domain Controller)?
Assuming I can aggregate them into a report what ...
12
votes
3answers
727 views
Bypassing Address Space Layout Randomization
How effective is ASLR in preventing arbitrary code execution in a buffer overflow type exploit? How hard is it for an attacker to bypass this without simply guessing where the addresses are?
8
votes
7answers
915 views
Whitelisting DOM elements to defeat XSS
As we know, developers are responsible for correctly escaping/validating data provided by the user before rendering or storing them. However, we must agree that it's relatively easy to forget a single ...
7
votes
4answers
205 views
Security papers or material focusing on the industrial control systems (SCADA)
Anyone know a good site or a list of resource to start to know issue related to the security of SCADA system ?
5
votes
3answers
346 views
How to respond to attack made from my dedicated server?
There was a sudden unusual peak of outbound traffic from my hosted dedicated server (OS - Windows Server 2008 R2). The hoster threatened to block the server if the problem is not solved.
There are an ...
7
votes
2answers
200 views
What to add to a repeating security checklist?
I work in a smallish company (100-200 computers and a handful of servers) and I am trying to come up with a checklist of things to check at a regular basis, such as weekly, monthly, etc. We use ...
9
votes
2answers
2k views
How to address XSS security issues in FCKeditor / CKeditor?
A security report we conducted through an outside company reported XSS vulnerabilities in FCKeditor which we're using in our PHP application.
They pointed out that accessing URLs such as:
...
19
votes
6answers
308 views
User input data, is filtering enough or should it be parsed?
In a webapplication there could be two approaches to migate XSS attacks. All the input data could be filtered (removing all 'bad' data), or the input could be parsed, tokenized and output with only ...
4
votes
1answer
999 views
What are the security implications of enabling WINRM on all domain members?
As Powershell becomes more and more popular, it appears that using WINRM may end up being a better option than using PSEXEC from SysInternals for remote management. Given that WINRM is disabled by ...
0
votes
1answer
258 views
Wordpress online pharmacy hack? [duplicate]
Possible Duplicate:
Protecting WordPress installations
anybody knows how to protect your WordPress website from online pharmacy spam, even after deleting all spam files and deleting spam ...
