Defense is the use of security countermeasures to protect the integrity of the information assets in an IT system and/or infrastructure.

learn more… | top users | synonyms (2)

2
votes
2answers
265 views

What is the current best practice to secure an executive's laptop?

What is the current best practice to secure an executive's laptop? The exec will be processing highly sensitive documents (high-value bids, merger & acquisition info, technical specs). As such ...
2
votes
1answer
45 views

Method/program for editing secure files

I'm not entirely sure if this is on-topic for Security.SE, but it doesn't seem entirely off-topic either, so I'll try. :) I keep a couple of (GPG-)encrypted files with more-or-less sensitive ...
2
votes
1answer
76 views

How to deal with misbehaving clients on an authoritative server?

My coworker and I are developing an authoritative server for an MMO. We can't agree on how to handle "misbehaving" clients. Misbehaving, in this case, means clients who send "odd" requests that might ...
2
votes
2answers
115 views

Which hard disk encryptions schemes are tied to the original hardware?

When using a laptop, an encrypted HD/SSD can be an important security measure. However, laptops are prone to accidents (fluid spills, dropping on the floor, etc) that may mandate some or all of the ...
2
votes
1answer
65 views

Similar products to MS EMET [closed]

Following the weekend announcement from Microsoft regarding the vulnerability in IE I have been looking at additional security defences for our endpoints. I've read some technical documentation and ...
1
vote
5answers
307 views

Is there something similar to DNSBL's for protecting against forceful browsing?

I want to protect a couple of Apache webservers against forceful browsing. Lately there have been multiple scans querying for non-existent applications on them like phpMyAdmin, notably known for their ...
1
vote
2answers
463 views

Application of Bayesian network for Web Application Security

How can a Bayesian network be used to perform attack analysis of web traffic? I read an interesting article on its application. "Web Application Defense with Bayesian Attack Analysis" but I was not ...
1
vote
1answer
174 views

What does Bluffdale mean for privacy?

I posted a question related to tracing webserver attacks over here and the responses got me google-ing. My understanding has always been that privacy is dead and that essentially there's always ...
1
vote
4answers
122 views

Is there any defense against Brute-Force done on a local encrypted file?

Let me start off by saying I don't know very much about encryption, hashing, cracking, etc. I'm just a typical computer enthusiasts, programmer and researcher with many questions. So, I've discovered ...
1
vote
1answer
123 views

Clarification about the post: Russian hackers use ‘zero-day’ to hack NATO, Ukraine in cyber-spy campaign

I have encountered the following article on Washington post: Russian hackers use ‘zero-day’ to hack NATO, Ukraine in cyber-spy campaign. As always in such kind of articles the publication sounds ...
1
vote
2answers
179 views

How to know what personal information companies know about myself

I've been learning about Cyber Security and how to protect myself online after reading some books on the subject and I want to know how much Information i've handed out to companies.
1
vote
2answers
58 views

Firewall Security vs Anti-Virus

Overview of my question I want to create a secure Window's system without the use of an Anti-Virus program. Whilst I know there are many on-demand and live-scanning anti-virus programs readily ...
1
vote
1answer
579 views

Nowadays, what is the difference between Cyber Security and IT Security? [closed]

Lately (and not so lately), you can hear a lot about cyber security. It is really hard to find an official description about this matter so, let's take the ISO 27032 description: "Cybersecurity” ...
1
vote
1answer
82 views

Ideal cryptocurrency digital signature

What are the characteristics of the ideal digital signature for cryptocurrency transaction verification? The reason I ask is because this answer about bitcoin signatures describes a potential ...
1
vote
1answer
143 views

How to post comments on websites without being traced back

Just trying to get some general sense about the security on internet now-a-days. There are so many websites I go and comment on different things. If some comments are political and they don't like, I ...
1
vote
1answer
111 views

How ATM Surveillance Camera works? [closed]

I would like to know how the ATM pin hole camera works.Whether the pin hole camera works only once the card is inserted in ATM or during the cash withdrawal or it works always?
1
vote
1answer
241 views

List of social engineering hacks and defenses [closed]

Sorry if this question is absolutely stupid or irrelevant, but I can't help but ask. I am just curious about different approaches hackers take in social engineering attacks, and clever examples of ...
1
vote
1answer
438 views

Are there any security issues with importing mail via POP/IMAP?

I'd want to design import mail functionality for an email provider. The process is: user enters email and password for another service at my site and then site accesses another email provider and ...
1
vote
2answers
22 views

Should a 2FA recovery key be stored along with a password?

Many websites give you a recovery key or a list of recovery codes that can be used in place of 2FA tokens if you lose your phone or can't access your token generator. What are the recommended ...
1
vote
0answers
40 views

About Windows Interactive services Security

I know most services run under non interactive windows station or desktop also called session 0 while as some services (interactive) running under local system account create a window on interactive ...
1
vote
0answers
71 views

Using SSH Private keys in Production environment

I have a need to scp a bunch of files from a production box to my development environment. I am a developer and have limited read access to the production machines. Instead of entering password for ...
1
vote
2answers
53 views

secure flash update

The default method for updating flash is through Adobe's unsecured http portal, which seems to be a serious security concern, given the access that flash has on a user's machine. Can anyone recommend ...
1
vote
0answers
100 views

Industry average for security as a percentage of product budget?

Lets assume the product is pure software or a blend of software and cheap commodity hardware. Is there any work showing what the average industry spending is on just the security aspects as a ...
0
votes
1answer
88 views

What should you do when you notice weird traffic?

I'm not at this point yet, thankfully, but being prepared means knowing the answer before the issue arises, so here goes... You're looking through your firewall / website logs... And you notice a ...
0
votes
1answer
45 views

What is the difference between XSS and Cross Site Flashing? [duplicate]

I want to know the basic differences between XSS and XSF
0
votes
1answer
91 views

Keyboard “eavesdropping” just got way easier, thanks to electromagnetic emanations

Just found this article which basically suggests that electromagnetic emanations can be used to eavesdrop on what you're typing. ...
0
votes
2answers
103 views

Advice - When just starting your career, what are the best certifications to eyeball? [closed]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
0
votes
2answers
148 views

future of graphical password authentication [closed]

I'm a student currently pursuing my Engineering in Computers. I'm planning to put all my knowledge in and try to actually implement something related to security. To be more specific I'm more ...
0
votes
2answers
133 views

Programming languages for security? [duplicate]

I am a computer science student interested in the field of security and just had a few questions. What are the pros and cons for using C# for security purposes, I had assumed applications programmed ...
0
votes
1answer
59 views

Do software systems become more secure every year? [closed]

It seems to me that computer software is becoming more secure every year - there are fewer zero-day exploits to be found, many hacker-proof concepts are becoming widespread (such as virtualization and ...
0
votes
1answer
93 views

Which is considered the first Cyber Security incident? [closed]

No matter we are talking about Information Security, or cyber security or IT security... I always hear first about "the moth" being the first security threat. But I don't believe it is when talking ...
0
votes
1answer
87 views

A demonstration of the most basic form of a data breach or similar attack

I am currently working on my bachelor thesis regarding cloud security and found this neat article describing the "Notorious nine" written by the CSA: The notoruios nine I am looking to try out some ...
0
votes
1answer
1k views

Why Qualys SSL Server Test is giving me 80 and not 100 in Key Exchange?

My openssl ciphers -v 'CIPHER' output is the following: ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA ...
0
votes
2answers
239 views

Trying to get rid of hackers who have access to all my devices

What is the best way to go about getting rid of hackers that have gained access to all my personal computers, (both old and recently purchased) phones, and even random computers I use to simply get ...
0
votes
1answer
115 views

Preparation for Blue Team Competitions [closed]

I am a CS student, and am considering competing in the National Collegiate Cyber Defense Competition. Although I have a fair amount of experience in programming competitions (e.g. ACM at High School ...
0
votes
1answer
40 views

Is a government entity capable of establishing a secure virtual currency system? [closed]

After reading about BitCoins, I can't help but contemplate the idea of the a government withdrawing paper money and bringing all currency transactions digital, via a bitcoin-like method where every ...
0
votes
0answers
27 views

Source code for Defense Techniques [on hold]

I just want to ask if anyone know how to get the source code of these techniques: Libverify & Libsafe: https://www.usenix.org/legacy/events/usenix2000/general/full_papers/baratloo/baratloo.pdf ...
0
votes
2answers
121 views

How do security agencies share their data with each other? [closed]

I am trying to develop an application for some hypothetical security agencies for sharing their data with each other for a college project.I have three questions, 1.How do security agencies share ...
0
votes
0answers
79 views

Fuzz JSON with Peach framework [closed]

I have made a small REST based webservice in Flask by reading http://blog.miguelgrinberg.com/post/designing-a-restful-api-with-python-and-flask and now I wanted to fuzz the JSON using Peach framework. ...
0
votes
0answers
15 views

Transaction without 3DS in some online websites is Fraud prone? [duplicate]

I use my credit card for online transactions MasterCard which uses SecureCode for preventing online frauds even though hackers knows our credit card details. I have come across many sites which is ...
0
votes
0answers
70 views

Asking for more information about AlienVault.com using Spiceworks, viability of “suspicious IP” alert

Website here: alienvault.com I've been trying out Spiceworks for about a week, seeing what use I get out of it. Today I log in and see an alert: "(my computer) has established a connection to ...
-1
votes
2answers
332 views

Practical ways to protect against Cyber Pearl Harbor? [closed]

What practical methods should citizens be using to protect themselves against, and reduce the impact of an attack against critical national infrastructure A lot of recent news about critical network ...
-1
votes
1answer
45 views

Measures that must be taken to protect online banking website [closed]

I building an online banking service in ASP.NET and my objective is to implement all possible security measures. Currently at database level I am using RES 2048 bit encryption to encrypt database ...
-1
votes
1answer
89 views

Forensic Question Invisible User [closed]

I was able to create an invisible user in windows 7 and 8.1. The user is not visible at the login Screen, I added it to the SYSTEM account group and Remote desktop Users Group, The Administrator can ...
-2
votes
2answers
171 views

Life in cybersecurity: How do I get there? [closed]

I am 17 years old and my ultimate job goal is a cyber security professional. I have been extensively studying TCP/IP, along with all other subjects in the CompTIA Network+ certification which I hope ...
-2
votes
1answer
421 views

A clear definition for procedural security controls? [closed]

Can you please provide a clear definition for procedural security controls? Are operational and procedural security controls synonyms? Thanks
-3
votes
2answers
121 views

Time it takes to crack a password on site like yahoo [closed]

I have a question. If you were using a password brute force/dictionary attack utility on a site like yahoo or another site, how long would it take to crack a password like Jah13Wootiang if Wootiang is ...
-3
votes
0answers
22 views

Scrambling Data and Keywords sent over the internet [closed]

is it possible to Scramble data which we send over the internet? or make keywords look like mouse clicks or a software like on-screen keyword to be put between physical keywords and data being sent? ...
-4
votes
2answers
119 views

How to respond to Cyber Bullying? [closed]

I am trying to learn about Cyber Bullying and I was thinking that if in future I get bullied, then what I can do? I have learned how to use Maltego, but if someone damages your reputation, then is ...
-4
votes
2answers
334 views

Defend against HTTP fingerprinting [closed]

I'm looking for ways to defend against common fingerprinting techniques used by hackers to identify what kind of setup my website is running on. I understand this is a complicated topic, and every ...