An activity meant to understand the way a mechanism or system works. The study or examination of a security problem or class of security problems.

learn more… | top users | synonyms

1
vote
0answers
33 views

E-voting: receipt-free, verifiable, and anonymous

Background In response to a system design concept, a question was posed: How do you achieve electronic voting, anonymity, and verifiability at the same time? I was informed that most experts in ...
3
votes
1answer
115 views

Tools to make a security researchers life easier - tracking vulnerability research [closed]

I've been a developer for quite some time, and as part of my on-going learning process I've learnt how to spot and remedy broken (and insecure) code written by others. Recently, I've found myself ...
14
votes
2answers
2k views

How many passwords does the average user know?

Looking for research on the count and complexity of passwords that an average user is actively using. Note: Also, just to be clear, by research, this is not a request for you to respond with an ...
0
votes
1answer
53 views

Botnet fingerprinting

Does anyone know of any research of papers on fingerprinting botnets? If a given target is being brute forced or DDoSed do methods exist to determine if a brute force or DDoS on another target are ...
3
votes
2answers
159 views

Valid Characters For Magnetic stripe

We bought some Magnetic stripe cards and I'm writing a program that will get talked to by a mag card reader. What I need help with is that I can't, for the life of me, find out what characters are ...
1
vote
3answers
150 views

Where to publish security research?

I'm considering doing some research in to an attack vector which I think doesn't get enough attention. It's not an earth-shaking vector but I think I can demonstrate an attack where none have been in ...
1
vote
0answers
32 views

DUKPT - more specific materials

I'm working on a simple project that implements DUKPT. I've tried searching the web for more specific information than on wikipedia and it seems that the algorithms are only covered in ANSI X9.24 part ...
3
votes
1answer
140 views

Site Executing control characters in title tag

I am currently pentesting a site for a client of mine and I found a very strange 'bug'. They have a search box on the home page which if I enter te\tst and hit search, it redirects to the search ...
-2
votes
1answer
729 views

Security-themed Masters Thesis Topics [closed]

I am currently in progress in a MS in Computer Engineering program. I am looking around for thesis topics related to security (my specialization is in distributed computing). I've been given some ...
-1
votes
2answers
187 views

How do you search for new vulnerabilities? [closed]

I've been asked this question, and I really don't know how would I do it. My answer was to take known vulnerabilities and try to exploit them on a different way, but this is not really a new ...
-4
votes
1answer
126 views

Breaking into your own systems [closed]

So as security professionals, most are overly paranoid about external hackers, leaks, etc. I'm looking for ideas on how one would go about testing their own systems, without signs that they were ...
2
votes
1answer
476 views

Maltego transform samples

I'm playing around with Maltego for target recon and investigation, and have started writing my own transforms in Python. Unfortunately, the current developer documentation is a little light on ...
4
votes
3answers
759 views

Where can I find statistics on security breaches?

I am putting together a security presentation, and I would like statistics on the occurrence of and damages from security breaches. Does anyone know of a reliable, recently-updated source?
2
votes
1answer
3k views

Tutorials, Exercises and Environemnts for Penetration Testing Mobile Environments

I'm looking for a list of exercises or distributions to practice penetration testing on mobile environments. There are plenty of existing things like the environments found at pentesterlab.com and ...
1
vote
2answers
94 views

Opinons: To report or not to report? CFAA vs the White Hat [closed]

As I'm sure most people here are aware, there has been quite a lot of attention brought to the USA's Computer Fraud and Abuse Act (CFAA) recently. Brief back story: A security researcher discovered ...
-1
votes
1answer
531 views

where to get the latest trends about penetration testing systems? [closed]

I am an undergraduate student, who want to do a project in penetration testing automation, and i want a conference or some official source to obtain some latest researches from inorder to see what to ...
7
votes
4answers
690 views

applications of linear algebra to “security”?

I am taking a course in linear algebra which was to be credited towards a program in applied math. My interests have moved towards matters of "security" (information, network, cryptographic, etc.). ...
18
votes
2answers
572 views

How secure is Stack Exchange's reputation?

I recently read an article about researchers being able to penetrate the Facebook network and making lots of friends with about 100 "Social" bots. What would prevent somebody to do the same on Stack ...
6
votes
2answers
495 views

What security measures to have before openly allowing security researchers to hack your site

As some kind of a follow-up from my previous question - which was asked from the security researcher/penetration tester point of view: (Thanks to Rory McCune for pointing this out) There seem to be a ...
2
votes
3answers
248 views

How to protect data on your hard disk if it is in an unfriendly environment?

The essence of the problem as follows: There is a server located on the side of our company. There is a hardware client module, which is in a public place, which communicates with the server via a ...
10
votes
3answers
1k views

What Twitter #hashtags apply to IT Security

I'm trying to search twitter for evidence of near-realtime alerts or updates regarding security issues. What hashtags are common or popular in the IT Security world?
6
votes
1answer
706 views

Open Problems in Security?

I know it might seem a bit too much theoretical, but I was wondering if there was some list of known open problems in security? In a similar way that there are open problems in Theoretical Computer ...
1
vote
2answers
262 views

References to issues of putting backdors into opensource (like OpenBSD) by FBI or CIA [closed]

There are articles on the Internet (e.g. this) that claim that the FBI/CIA injected security backdoors into OpenBSD. I'd like to know if there are any other references to this issue. This would help ...
3
votes
2answers
748 views

Difference between vulnerabilities on windows/linux/mac for same program

If someone finds a vulnerability like buffer overflow in a program such as Google Chrome or Mozilla Firefox running on a linux machine, are there any chances that this vulnerability will persist on ...
3
votes
5answers
230 views

What's the Security equivalent to SICP?

For those of you who don't know any developers and/or didn't go to MIT, The Structure and Interpretation of Computer Programs is the Canonical reference on it's title subject. It is often used as the ...
3
votes
4answers
234 views

what is the use of stolen personal details?

What can hackers do with personal information that includes this: First name, last name, snail mail address, mobile phone number and email address?
9
votes
2answers
127 views

Encouraging security researchers to disclose vulnerabilities

What are approaches to forming solid relationships with security researchers? For example, is publishing a public PGP key on the "contact us" page of a company's website for high levels of risk ...
8
votes
3answers
1k views

Vuln research: reverse engineering, debugging or fuzzing?

I wonder how hackers find vulnerabilities. If they use fuzzing, security engineers do it, and it's probably that security engineers (that work in a firm) have more resources than a group of hackers. ...
5
votes
1answer
313 views

How does sound signature recognition work and how to override it?

Today a lot of websites that allow the upload of media content are implementing automatic sound signature checks to prevent the illegal distribution of videos containing copyrighted content. How ...
9
votes
4answers
510 views

Are there state-of-the-art techniques or theory specifically for attacking passphrases over passwords?

With passphrases becoming more and more common based on length being more important than complexity, I'm assuming there must be some work going on involving techniques aimed specifically at cracking / ...
40
votes
2answers
8k views

Amount of simple operations that is safely out of reach for all humanity?

Cryptographic primitives usually assert some security level given as number of operations to mount an attack. Hash functions, for example, give different security levels for collision attacks, ...
8
votes
3answers
408 views

How do researchers “gain control of an attacking PC” and not themselves be considered attackers / criminals?

In reference to this Network Computing Report article titled "'Operation Shady Rat' Perpetrated Five Years Of Long-Term Attacks On Government, Enterprises" The Cliff's Notes to the article is thus: ...
7
votes
2answers
312 views

Are there any independent organizations doing (publicly available) IT security research?

When looking up security risks on the net I find that all research being cited (if any is cited) always seems to come from the Anti-Malware companies. (just e.g., this article cites F-secure, AVG and ...
6
votes
2answers
458 views

NSA crypto Suite B - historical

I'm looking for information on what NSA suggested for use in commercial systems in past times. 90's and early 2000's. I'm mainly interested in PKI and symmetric cyphers for SSL and file/disk ...
8
votes
7answers
2k views

Definition of Software Security

I'm looking for a theoretical definition of Software Security. And I need to quote some book in an article. Most of the books starts already assuming that the user knows what that is, and they're ...
10
votes
4answers
365 views

Resources for data on security incidents

What resources exist to research data on actual security incidents? I would prefer an online resource but offline resources are acceptable. The cost of access should be less than $100 (US) for ...
6
votes
2answers
332 views

Design proposals for enhanced security for parts of Internet, e.g. for banking?

There is some recent discussion of some sort of "multilevel" internet, with e.g. a level defined for banking in which access is only granted after special authentication with "true names", special ...
9
votes
6answers
1k views

Applications of probability/statistics in IT security?

What are some areas of computer security that utilizes statistical modeling? I ask b/c I'm a studying statistics at school and have become interested after reading a few papers.. some of the areas ...
7
votes
2answers
269 views

Profiling attackers via adaptive games: “Strange game, the only winning move is not to play”

Use of Game Design to Profile Attackers: Interested in any research that links concepts in game design to security systems in an effort to profile the attacker's identity, motives, skills, etc.; if ...
8
votes
3answers
740 views

Suggestion setting up a SQL injection honeypot

I just stumbled on a website vulnerable to an SQL injection attack by mistake ( http://stackoverflow.com/questions/6181248/is-this-site-vulnerable-to-an-sql-injection-attack ). That made me curious ...
15
votes
3answers
3k views

Recommendations for honeypot software

A couple of us wanted to setup a honeypot/honeynet with the goal of learning; not planned to be in a production environment. What's a good recommendation for a high interaction or low interaction ...
10
votes
5answers
378 views

Resources for physical security questions

What are good resources for the physical security questions that IT organizations face? Like best practices for locks and seals on servers and kiosks, personnel access mechanisms and policies, ...
5
votes
3answers
293 views

Some good resources on viruses/worms?

I am searching good info on sophisticated viruses/worms. One example would be STUXNET and the very good analysis made by folks from Symantec. Any ideas?
5
votes
3answers
664 views

CEH resources for exam prep

For an upcoming contract I'm required to have the CEH certification (even though there won't be much PenTesting) so I'm working through that now. I've gone through all of the reccomended EC Council ...
13
votes
4answers
423 views

Where are some Security Policies that are actually in use?

I know there are a lot of security policy samples and templates out in the web. I'm curious to know if there are security policies that are actually in use and still published publicly. I know they ...
7
votes
5answers
1k views

Master thesis topic - mod_security

I've been playing with mod_security for some time and I'd like somehow to use it in my master thesis. I don't know exactly how this work could be more interesting than describing what mod_security ...
12
votes
5answers
828 views

How to get into RFID auditing?

I would like to get more knowledge around RFID-systems auditing. Does anyone have a basic guide step-by-step which I can use to set up a lab with proper RFID "sniffing" equipment? I would like to ...
7
votes
4answers
240 views

Security papers or material focusing on the industrial control systems (SCADA)

Anyone know a good site or a list of resource to start to know issue related to the security of SCADA system ?
13
votes
9answers
609 views

What do you see as the emerging threats for 2011

As we move in to the new year, what do you see as the emerging threats for organisational security? I see more chat around; Advanced Persistent Threat (APT) from foreign states. More fines from the ...
6
votes
2answers
157 views

Video Conference Systems - Security Testing

Any one have any experience in testing ISDN based VC systems? What approach did you take, tools used? How did you approach fuzzing the protocol? What resources did you read up on prior to testing?