Intrusion the act of wrongfully entering upon, seizing, or taking possession of property owned and/or operated by others.

learn more… | top users | synonyms

1
vote
1answer
158 views

how to protect from Network scanner on android?

How can I block and detect network scanners on android platforms to stop scanning vlan of my hot spot. My question is: which scanners they use? how can i detect such scanners? Can i protect ...
1
vote
2answers
931 views

Where can I find worm traffic sample?

I have a program that has to detect scanning activity of worms. I need some samples of worms' traffic (pcap files) to try the program, and notes about the procedures which must be taken when running ...
3
votes
2answers
11k views

How to detect/list rogue computers connected to a WIFI network without access to the Wifi Router interface?

This is what I believe to be an interesting challenge :) A relative (that lives a bit too far to go there in person) is complaining that their WIFI/Internet network performance has gone down ...
-1
votes
1answer
467 views

When I open my gmail account,this shows,does this mean my account is hacked? [closed]

When I open my gmail acccount I see a dialogue box that reads like shown in the image?Does it mean my account is hacked?
-1
votes
3answers
205 views

Activity's history to suspect an intrusion

I was hacked one month ago - a person who borrowed my device installed a key logger. Now, I have a new issue, sometimes when I open my computer in the morning, it is totally low battery, though it ...
-1
votes
3answers
530 views

How information in an access log could be used to identify the true identity of an impostor?

Is it possible to use information in an access log to identify the true identity of an impostor who has acquired unauthorized access to a computing system (Perhaps by combining several different ...
0
votes
2answers
284 views

Easy way to analyse my netstats for intrusions?

I want to analyse my network traffic against intrusions or hackers. I looked at Snort but it seems difficult to install on Windows and overly complex anyway. When I issue a netstat -a, I see various ...
-4
votes
1answer
192 views

Secure Traffic model for Web application Protection

Web Application Firewalls relies on negative and positive security traffic rules to protect web application from being exploit. My question is that is their any other web traffic modelling technique ...
-2
votes
1answer
151 views

What do I need to worry about when moving from a compromised system to a clean one?

As a result of a targeted attack, my computer was compromised? What should I be worried about when trying to move to a new system and prevent reinfection? I purchased a new clean computer and am ...
9
votes
1answer
690 views

Cracking PCI terminal using a trojan based on the card

I have come across an article which states the following: According to MWR InfoSecurity, cybercriminals can use fake cards containing a software code to gain access not only to a customer's PIN ...
2
votes
2answers
897 views

How are signatures for IPS determined

For example , how do Snort's VRT team or some one who gives us the signatures, determine them at all ? I would be more interested to know , how are the traffic patterns analyzed against some known ...
2
votes
2answers
215 views

Domain and IP scoring

What kind of things would you check in a domain and IP scoring system? Which things are the most important? If I have a web site or web service, I would like to figure out a score for my visitor. If ...
2
votes
2answers
373 views

Why superuser or administrator account should never locked?

Why should administrator or superuser account never locked regardless how many incorrect login attempts are made? What should be done instead to alert the staff to the attempted instrusion?
-1
votes
2answers
3k views

How could the hacker tamper with the 'configuration.php' file in my Joomla web server?

I have a web server hosting Joomla 1.5. I discovered that the Joomla configuration file configuration.php was modified by a hacker. How could he do so? Note that the file has 777 permission. Also, ...
1
vote
1answer
371 views

What are the most sophisticated techniques used by intruders you have found in the wild?

I am beginning to get involved in incidents, some of them are APT (Advanced Persistent Threat). Despite the complexity available in the 'bibliography' and in the conferences or security e-zine, the ...
0
votes
1answer
448 views

Rules for log analysis in an IDS

I am working on an IDS which has brought into the view of log analysis basically. I have to detect an intruder if there are any user behaviour anomalies present in the logs. I am having problems ...
1
vote
1answer
638 views

types of intrusions on host [closed]

I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur.I am just doing a literature survey over the atacks possible so I want to know that ...
2
votes
3answers
424 views

Implementation of an IDS

I am starting my final year project and I have decided to make an Intrusion Detection System, but I am a little confused where to start. I have read some papers and those have been pointing out the ...
4
votes
2answers
313 views

Site listed as hacked by a hacking group

I was Googling one of my domains (hosted on shared hosting) and found a webpage where it was list as Hacked Site, the list belonging to a certain national hacking group (the country they claim to ...
6
votes
3answers
521 views

Firewall says that a program that I'm developing is trying to connect to the Internet

I'm seriously confused about this, since the program is entirely developed by myself and has no means/functionality to connect to any network/the internet whatsoever. I'm a software engineer but not ...
4
votes
5answers
387 views

What would you define as an “advanced” hacker attempt?

This subject might just barely be a programming topic. Though, in my point of view, it is of great concern to programmers because of our responsibility to develop secure code. Recently, there has ...
4
votes
3answers
6k views

Books to study for GCIA (GIAC Certified Intrusion Analyst) [closed]

What set of books would you recommend to study for the GCIA certification without buying official study material? Also, please tell whether your suggestions are based on having completed GCIA ...
8
votes
2answers
242 views

Can you tell if an attack is successful by looking at IPS logs?

In my organization, we have an IPS behind a firewall. Each time a security event is triggered, I am left to wonder if the attack is really successful. For events that are set to drop in inline, we can ...
3
votes
4answers
1k views

What are the chances of a database being hacked?

How often do websites (and their databases) get hacked? Hacked as in user accounts stolen, tables flushed, and all in all, damage done to the database. I'm talking about e-commerce websites, and ...
5
votes
2answers
4k views

When is it posible to sniff VPN traffic?

I have created a VPN service using Routing And Remote Services on Windows Server 2008 and I haven't configured any Server Network Policy yet. There is only one user for connecting to VPN and all of ...
4
votes
3answers
412 views

Information gathering before deploying a Network IPS

I understand that most NIPS these days have either rules or signatures built in to them and perhaps gathering information prior to deployment may help in fine-tuning the rules / signature once the IPS ...
13
votes
4answers
625 views

what to do after suspected intrusion on hobby webserver

I maintain a server to host my files and a number of websites for hobbies and friends. I just noticed that the site summary being returned in google for one of my domains were all porn related ...
12
votes
7answers
504 views

UNIX Servers: Possible intrusions or attacks that do not use any of the open listen sockets

What type of attacks are there that do not use open TCP or open UDP ports? Is it safe to assume that no open ports means no remote access? (Excluding the possibility that there is a badware already ...
11
votes
4answers
344 views

What free tools or techniques exist to discover anomalies in network flows?

I have been using FlowMatrix. What do others do on the cheap?