3
votes
2answers
1k views

How to use attack trees and attack graphs

I am trying to understand how attack trees\graphs can be used in the security process. I read a lot of papers presenting the topic and how this reppresentation can be useful, but I really don't ...
0
votes
3answers
2k views

Demo of web site that is vulnerable to command injection

I'm looking for a demonstration web site that shows an example of a web site that is vulnerable to command injection: where I can inject something and get the web site to run a shell command. (This ...
4
votes
3answers
195 views

Most informative DEF CON talk?

I didn't make it to DEF CON this last year... I'd like to know what you thought was the most interesting/informative presentation and possibly a link to more information on the topic. [mod - ...
10
votes
2answers
590 views

What is a “pre-play” attack?

I understand what a replay attack is, but I keep reading about a pre-play attack. What is it? Is it when someone intercepts an unused message and blocks the sender so they can't finish using it, and ...
57
votes
18answers
3k views

What security resources should a white-hat *developer* follow these days?

What sites, twitter accounts, FOSS software should a white-hat code 'hacker' follow these days? Do Include: Late breaking information on new security issues (RSS, Twitter, etc) A website that ...