prevention of an attack vector (e.g. XSS, HPP, CSRF)

learn more… | top users | synonyms

3
votes
3answers
321 views

Why is it necessary to validate data in a servlet obtained by calling HttpSession.getAttribute()?

I am new to WebApp programming and am trying to understand the security implications of not validating data obtained by calling the javax.servlet.http.HttpSession.getAttribute() interface method. I ...
6
votes
2answers
332 views

Design proposals for enhanced security for parts of Internet, e.g. for banking?

There is some recent discussion of some sort of "multilevel" internet, with e.g. a level defined for banking in which access is only granted after special authentication with "true names", special ...
0
votes
1answer
1k views

How to escape user input in a value of javascript object?

How to properly escape user-controlled input when it's inserted as a value in JSON object? <script> $(document).ready(function() { new MyObject({ key1: "user_input", key2: ...
3
votes
3answers
1k views

What are methods for preventing browser hooking / drive-by downloads?

This question may be a bit too broad and open ended, however I'm hoping to get some good advice on this. With the advent of BeEF and more and more of the computers in networks being infected just by ...
6
votes
4answers
3k views

How to harden an iPhone/Android app so its tough to reverse-engineer it?

These are the following objectives I have in mind: Make the app hard to crack, as the binary will hold some secret tokens. If it still can be cracked, is there any way the app can tell someone or ...
3
votes
1answer
83 views

Is it possible to verify identity of site that sent request to you?

I'm developing a JS widget that can be embedded by 3rd party websites. When widget is shown, it sends request to my site. When this request is received, I know that it was shown to the user and pay ...
4
votes
4answers
4k views

Using SYN cookies to perform a DOS attack

In my software security class, we had this question: You are the system administrator for a provider that owns a large network (e.g., at least 64,000 IP addresses). Show how you can use SYN ...
3
votes
1answer
2k views

Detect a server supporting SPDY?

With my current interest in the CRIME attack, I am currently trying to check if there actually exits a way to "fingerprint" a server that supports SPDY? My research lead me to believe only that the ...
17
votes
2answers
12k views

Should I disable SSL compression because of CRIME?

I've read CRIME - How to beat the BEAST successor? and a few articles on the subject (linked below) and found no recommendations for system administrators. As a web host, should I disable SSL ...
2
votes
2answers
824 views

Is Drupal's filter_xss enough for filtering HTML?

Drupal has filter_xss function. Is it safe to use for filtering arbitrary user HTML input? If not, what should be used instead when using Drupal 7? This questuion is a duplicate of Drupal's built-in ...
0
votes
2answers
370 views

How to verify correct, secure and test setuid?

I've been looking into setuid vulnerabilities. Particularly, I am looking on OS X (10.5+) but other modern *nix distos apply as well. For example, I found a world writable suid file installed by a ...
24
votes
2answers
3k views

How can a Software application defend against DoS or DDoS?

Most of the solutions for DoS attacks are not at the application level. In case I am using a proxy server, what are the possible countermeasures for DoS at the application level?
-2
votes
1answer
148 views

What do I need to worry about when moving from a compromised system to a clean one?

As a result of a targeted attack, my computer was compromised? What should I be worried about when trying to move to a new system and prevent reinfection? I purchased a new clean computer and am ...
5
votes
4answers
372 views

Automating Social Engineering Prevention

Being an advocate for DIO (defensive information operations), I have always been concerned about social engineering and its relation to server security. Giving administrative access to staff members ...
9
votes
5answers
5k views

Can I block based on Mac Address?

Incase of dynamic IP's the hacker can work around by taking a new IP or use a Proxy, is it possible to make a ban based on Mac Address ? I want to block at the Webserver level so that unwanted users ...
11
votes
3answers
3k views

How can I prevent someone from accessing a Windows XP system via boot disk?

Apparently a computer system protected by a a login password, e.g. Windows XP, can be easily hacked by someone with physical access to it using methods like this one: ...
3
votes
3answers
500 views

How can I determine whether a website somehow protects against brute force attacks on my password? (assume I can't create an anonymous account)

After the hack of Mat Honan I studied my own laundry list of accounts I have at the numerous web sites I use. There is one fact that stands out: Many of the websites severely restrict the size and ...
1
vote
1answer
58 views

Dangers of a vulnerability in a local installer?

I sent a message to my dev manager about a buffer overflow in our (widely distributed) installer, and received a response that it didn't matter as it wasn't server code. Other than the fact that if ...
-3
votes
3answers
162 views

I use an online email provider - how can I test my password strength?

I want to test my password strength, is there a program out there that can crack my password relatively quickly? I am familiar with BackTrack 5, but I usually use it to test WEP password strength. I ...
-1
votes
1answer
404 views

MITM Attacks over SSL [duplicate]

Possible Duplicate: How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption? If I have a server (call it server 1) set up to receive ...
6
votes
7answers
1k views

Should I prevent sending of GET requests for urls that are normally operated with POST request?

There is an url that is normally operated using POST requests (i.e. POST request is sent when user submits form). But attacker can form GET request with parameters that are sent in POST request. This ...
2
votes
1answer
3k views

How to Prevent This `Intrusion.Win.MSSQL.worm.Helkern`?

Sometimes my kaspersky Internet Security blocks this attack. What is this and how can I prevent/solve it for ever?
6
votes
6answers
885 views

Implications of securing data in RAM

Someone told me that his company is storing all application data (at least the sensitive data I guess) in RAM for security. Their application runs for long periods of time, so data stays in memory for ...
-1
votes
1answer
219 views

Impact of attack occured in Radius, DHCP and HTTP servers on VOIP?

Assume we can crash the RADIUS server in a VOIP system. What would be the impact on the confidentiality, integrity, and availability of VOIP service. What would be the impact if the same question if ...
0
votes
0answers
35 views

more justification for the impact scores used by the national vulnerability database [duplicate]

Possible Duplicate: why CVSS give a score of 0.66 for a full impact on CIA? Good day ; the CVSS attributes the following impact values ​​for confidentiality, integrity and availability: ...
2
votes
2answers
687 views

External IP same as Internal IP security

Where I live my ISP does not give IP addresses out. My external IP address is the same as my external if I plug directly into the wall with no router. My ISP does give everybody a "router", that is ...
18
votes
8answers
1k views

Ways to secure yourself from Firesheep kiddies and other sniffing

Just a few days ago I had my first encounter with Firesheep. Luckily I was the one using it. Well, it scared me into looking for ways to secure myself. So I have two questions: In exactly what ...
13
votes
9answers
612 views

What do you see as the emerging threats for 2011

As we move in to the new year, what do you see as the emerging threats for organisational security? I see more chat around; Advanced Persistent Threat (APT) from foreign states. More fines from the ...
18
votes
3answers
1k views

Rails - protection against code injection and XSS

I've started using Ruby on Rails, and I was wondering if there were any security gotchas to watch out for with Rails, particularly regarding code injection and XSS? I know Rails tries to prevent ...
-4
votes
2answers
152 views

how to protect a personal computer? [closed]

I am Linux user with no knowledge on security , up to now i dont know that is my system was in attack or not . I havent felt anything wrong with my system . but every Computer user must have some ...
8
votes
4answers
3k views

How effective are reverse proxies as a web application security measure?

How effective are reverse proxies as a web application security device? Which types of threats do they mitigate against and which don't they? For example are they more effective in preventing ...
3
votes
1answer
213 views

eBay account compromised/Credit Card used/Hosts files changed

To preface this, I'd just like to let you know that I'd consider myself an intermediate security guy(Definitely not a novice, not yet an expert) I do have a story to tell, and would like to know if ...
11
votes
2answers
986 views

Interpolique: transparently preventing SQL Injection and XSS with base64 encoding, what happened?

For the keynote at The Next HOPE a couple of years ago, Dan Kaminsky unveiled Interpolique (the talk is really fun btw). The problem he raised was how to defend against injection attacks, including ...
2
votes
3answers
294 views

Securing dropdown boxes

I have been creating selection boxes for years, yet I never knew you could modified it with firebug and submit them with nonpermitted values, of course this wouldn't happened if the code was secured. ...
5
votes
2answers
870 views
5
votes
4answers
2k views

Most secure data storage?

What is most secure data storage currently available and suggested by specialists, to store digital data in digital medium (without making hard copy of data onto paper or other type of medium, than ...
1
vote
5answers
200 views

How to replace a constant identifier, for a resource on a network, with a variable one?

I guess the example can make it easier. Assume each Client on a network has an identifier(some alphanumeric sequence) which identifies it uniquely on the network. Each time the Client corresponds ...
9
votes
2answers
189 views

Should I prevent user from operating with site during some first seconds?

Imagine the following scenario: User is at attacker.com and plays a game there. Just before he clicks at some point he is rerouted to victim.com using browser's history. User thought that he clicked ...
10
votes
7answers
692 views

IP address black list

My website has a black list of IP addresses. The web application, in some way, detects all invalid, suspicious influences to it and remembers IP address and denies any requests from that IP address. ...
8
votes
3answers
602 views

How does an attacker approach a website?

What is a typical mindset and method of approach? What are they likely to try first? At what point does a novice give up versus an expert? How would an automated attack differ from a manual one?
2
votes
3answers
132 views

I want to implement a new type of security feature over several platforms

I want to make a security feature that will go farther in discouraging people from looking through a secure system or server than what I have seen being implemented. Specifically, is there a way (or ...
2
votes
1answer
608 views

Token Based Authentication & Pass-the-hash Attacks

Do token-based authentication solutions (such as RSA SecurID) mitigate tools like incognito and/or pass-the-hash tools?
0
votes
2answers
269 views

Any Books/Sites/Writeups on IRC bot Security?

I've written a scriptable IRC Bot and I want to harden it against exploits. To that end I've already written it so that it ignores its own messages (so that, for example, even if it echoes back valid ...
7
votes
4answers
905 views

Gmail account hack prevention and recovery

I am doing a research on how to prevent my gmail account from being hacked and what are the options of claiming it back. The associated phone number and recovery email can be changed, in fact I ...
4
votes
1answer
202 views

Can I safely post the output of lspci, lsusb, lshw?

I'm having trouble with my SD card, and have been asked to inspect the output of tail -f /var/log/syslog, sudo lspci -v -nn, sudo lsusb, and sudo lshw. tail shows nothing when I insert the card, so ...
3
votes
2answers
170 views

How to demo a new 0-day security product?

We are a development team working on a new 0-day protection security product. We aim to protect against new unknown 0-days attacks against servers. We have a very strong solution ready to demo. The ...
3
votes
1answer
435 views

Can format string exploit bypass the PaX protection?

I'm trying to find info regarding how format string exploit can bypass the PaX protection mechanism. As I understood PaX just features ASLR and NX protection. So I wonder if an attacker should use ...
9
votes
2answers
3k views

Preventing man in the middle attack

I recently did a man in the middle attack on my college LAN (for purely educational purposes:)). I simply wrote a raw socket application that pumped ARP reply packets advertising my MAC address with ...
6
votes
4answers
2k views

Is this type of ARP poisoning attack possible?

I am wondering if it is possible to paralyze a network by sending out a bunch of fake ARP response packets. Some basis: I recently read a moderately detailed description of how ARP and ARP poisoning ...
13
votes
2answers
462 views

Detecting website attack attempts

I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to attacker, when he tries to break into my website. Is there any resource ...