prevention of an attack vector (e.g. XSS, HPP, CSRF)
0
votes
1answer
28 views
Man-in-the-middle attack over an encrypted channel
I learned recently about man-in-the-middle attacks and came up with this question.
Let's say we have two computers who try to communicate over the network. Each computer has an encryptor and a ...
0
votes
1answer
263 views
Wordpress online pharmacy hack? [duplicate]
Possible Duplicate:
Protecting WordPress installations
anybody knows how to protect your WordPress website from online pharmacy spam, even after deleting all spam files and deleting spam ...
0
votes
2answers
717 views
How do we protect our server from anonymous hacker? [duplicate]
Possible Duplicates:
Hardening Linux Server
How to best defend against Targeted Attacks?
I read this news: Anonymous hacker group hits Apple, publishes data
My question: How do we ...
0
votes
2answers
138 views
How can I encrypt something user provided without risk of the key being exposed?
So, let's say I have a theoretical service. User has some text they want to encrypt. They pass it to me, and I encrypt it. Then, only I should be able to decrypt it afterwards. Another kicker, it must ...
0
votes
1answer
40 views
How to specify a Snort rule connection duration?
Is it even possible to specify into a snort rule the duration of a connection?
For example: in this format Hour, Minute, Second
H, M, S = 0, 2, 1
If a connection that has the duration of 2 minutes ...
0
votes
1answer
265 views
Sanitizing JavaScript to prevent XSS
I'm going through a vulnerability remediation exercise for a client and am trying to figure out how to best mitigate this particular hole. There's a script on our site that calls up content into a new ...
0
votes
1answer
397 views
How to escape user input in a value of javascript object?
How to properly escape user-controlled input when it's inserted as a value in JSON object?
<script>
$(document).ready(function() {
new MyObject({
key1: "user_input",
key2: ...
0
votes
2answers
186 views
Any Books/Sites/Writeups on IRC bot Security?
I've written a scriptable IRC Bot and I want to harden it against exploits. To that end I've already written it so that it ignores its own messages (so that, for example, even if it echoes back valid ...
0
votes
0answers
110 views
KDD CUP'99 flag feature's trouble with prevension [closed]
In KDD CUP'99 dataset, "flag" feature refers to "normal or error status of the connection",
which should changes as the TCP connection state changes. However in the training dataset it refers to the ...
0
votes
0answers
35 views
more justification for the impact scores used by the national vulnerability database [duplicate]
Possible Duplicate:
why CVSS give a score of 0.66 for a full impact on CIA?
Good day ;
the CVSS attributes the following impact values for confidentiality, integrity and availability:
...
0
votes
0answers
536 views
Topics for undergrad thesis, suggestions please [closed]
I'm a CS university undergraduate student, currently in my last year of studies for my BSc (not MSc). Every student needs to submit a thesis in order to get the degree. I have the option to suggest a ...
-1
votes
1answer
157 views
Impact of attack occured in Radius, DHCP and HTTP servers on VOIP?
Assume we can crash the RADIUS server in a VOIP system. What would be the impact on the confidentiality, integrity, and availability of VOIP service. What would be the impact if the same question if ...
-1
votes
0answers
25 views
How to make sure my NIDS can detect recent exploits/vulnerabilities?
Is there any way other than installing the vulnerable OS and application, then running the exploit (published in exploit-db.com) to check whether my configured IDS could detect it or not? I mean, ...
-1
votes
1answer
89 views
Solutions to TCP FIN Host Sweep (Signature 3032)
The Intrusion Prevention System is giving me an attack with signature 3032, TCP FIN Host Sweep on one of the ip addresses. I need a solution or recommendation on how to avoid the TCP FIN Host Sweep.
-1
votes
1answer
297 views
MITM Attacks over SSL [duplicate]
Possible Duplicate:
How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption?
If I have a server (call it server 1) set up to receive ...
-1
votes
2answers
359 views
What can one define as quality criteria for an XML Schema?
One of the usage of Input validation, is to be protect against XSS. In case one would need to define best practice for the functions validating the input, then some (which I am calling quality ...
-2
votes
1answer
138 views
What do I need to worry about when moving from a compromised system to a clean one?
As a result of a targeted attack, my computer was compromised? What should I be worried about when trying to move to a new system and prevent reinfection?
I purchased a new clean computer and am ...
-3
votes
2answers
114 views
how to protect a personal computer? [closed]
I am Linux user with no knowledge on security , up to now i dont know that is my system was in attack or not . I havent felt anything wrong with my system . but every Computer user must have some ...
-3
votes
3answers
127 views
I use an online email provider - how can I test my password strength?
I want to test my password strength, is there a program out there that can crack my password relatively quickly? I am familiar with BackTrack 5, but I usually use it to test WEP password strength. I ...
-4
votes
0answers
59 views
10 Most Common Windows PC Attacks [closed]
I’m trying to make a list of the ten most common attacks a windows computer faces when attacked by an intentional hacker. What I mean by intentional hacker is someone who has set his sights on ...
-5
votes
1answer
42 views
History of Buffer Overflow attacks and it's countermeasures? [closed]
I want to know the chronology of BoF attacks and it's countermeasures.
We know it's started about 1972, here's a hypothetical of it:
Buffer Overflow Simple (attack)
ASLR (Contermeasure)
ret2reg ...
-5
votes
1answer
176 views
How to find bugs/ vulnerabilities in web apps/sites? [closed]
What knowledge is needed?
What software is to be used?
How are the reports written? PS: Websites like facebook.com
