An activity meant to understand the way a mechanism or system works. The study or examination of a security problem or class of security problems.

learn more… | top users | synonyms

6
votes
3answers
95 views

Ethics & releasing research with no viable solution [duplicate]

I've been doing some pretty interesting research that involves abusing a particular technology to carry out malicious behavior. Normally, upon completion of my research, I'd hand over all of my work ...
0
votes
0answers
35 views

How to find a good subject for a dissertation / thesis / etc.? [migrated]

I see on a regular basis IT security students coming here and asking advice on which subject they could choose to study. There are hundreds of books, websites, blogs and tools around, so I understand ...
5
votes
1answer
135 views

Restricting access to “hacking” sites and tools

I tried following a link from a post on this site and discovered that insecure.org is blocked by our internet proxy. What are the potential benefits and risks of allowing access to such sites to ...
1
vote
1answer
65 views

Didn't understood what the purpose of the newly discovered TCP Faking attack

Source: http://lgms.nl/blog-2 Hey guys, I've been reading through the research paper but didn't understand the purpose of the attack. What the attacker will want to exploit here ?
0
votes
1answer
97 views

How do you go about researching and discovering zero days? [closed]

How do you go about researching and discovering zero days? Breakdown the process. What positions can I expect to see that offers a more offensive and research oriented approach to security? i see How ...
1
vote
3answers
127 views

How can I create a research botnet within VMware?

For educational purposes I am attempting to create a botnet within VMware making use of 3 or 4 machines (So I can attack a 5th virtual machine using this botnet), but the issue I'm facing is I can't ...
5
votes
1answer
43 views

Quantitative Security Analysis of Open Source Repos like CRAN and NPM

Is anyone aware of any quantitative analysis or research on the security of CRAN or NPM? e.g. How much malware is hosted, rate of compromise, speed to close, number of attack vectors, CERT reports ...
6
votes
1answer
133 views

Attacks Against Password Managers

What threat models and currently known attacks against online and/or offline Password Managers exist, that do not base on CSRF, XSS or autofill behaviour? I have found two publications from ...
12
votes
1answer
185 views

Where is the best place to get descriptions of malware?

I'm looking for a source of descriptions of 1990s to early 2000s malware; I have searched for a very long time yet found very little. I require information such as payload activation dates, files ...
0
votes
1answer
66 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
5
votes
1answer
260 views

Do home video surveillance cameras work as deterrents?

After an alarming uptick in automotive and household burglaries, Our neighborhood is chatting about installing video cameras on their houses. I'm looking for research that shows whether or not they ...
2
votes
0answers
30 views

Verification of implementations of security protocols

I'm interested in how an implementation of a security protocol can be verified correct and complete. The AVISPA project (http://www.avispa-project.org/) can be used to verify the protocol. I guess ...
1
vote
0answers
81 views

Hashcat Turkish character problem [closed]

I'm using cudahashcat, it haven't special chars like "öçşĞÜ" in standart charsets. I defined charsets with windows-1254 and other encoding types(and -1 öÖçÇğĞşŞüÜıİ?a parameter), i tried but they ...
5
votes
1answer
631 views

Lighteater - BIOS/UEFI vulnerable

I am currently a bit confused, I have read today an article about the BIOS-rootkit Lighteater made by John Loucaides and Andrew Furtaki. In their presentation 'How many million BIOSes would you like ...
3
votes
2answers
118 views

Why do researcher need to control all C&C servers of a botnet?

Why do researcher need to control all C&C servers of a botnet? Wouldn't it be easier to spread a deinstall command to all reachable PCs to cripple the botnet? This could be done over and over ...
2
votes
1answer
444 views

how to extract a valid digital certificate and put it on other program

I am working on this matter as a graduate, but I need some help. how can extract a valid digital certificate to put it on other program? can I put a digital certificate on other executables and be ...
5
votes
2answers
152 views

How should I document my Public Key Infrastructure?

I'm preparing to document a 3 tier PKI (with multiple second level policy CAs) and want to create a document that is useful, technical, and not too overwhelming to the non-PKI expert. I suppose the ...
1
vote
0answers
854 views

Codeigniter RESTful web api creation for mobile and web applications general guidelines

I'm having application with running good in codeigniter, mysql and jquery. Currently we are planning to evaluate our web application with mobile application. So we planned to develop web application, ...
0
votes
1answer
220 views

Where can I download the Sony hack malware (for analysis)? [closed]

I want to analyze the Sony hack Malware as there have been a lot of stories on who is responsible; from the US government implicating North Korea to news articles stating it's an inside job. The fact ...
3
votes
0answers
53 views

Who defined the term “fully homomorphic encryption”?

Rivest et al. proposed the concept of privacy homomorphisms, but did not distinguish between partial versus fully homomorphic encryption. Gentry seems to take for granted the idea that fully ...
1
vote
2answers
163 views

Search engine forensics?

I read an article that th3j35t3r (hacker alias) had written awhile ago and could not find it again to reference so I will do my best to explain correctly. An anonymous individual tried to dox ...
2
votes
1answer
72 views

I want to filter Snort rules by date written [closed]

I would like the ability to look at Snort rules that were written in specific date ranges only given a collection of .rules files from either Sourcefire or Emerging Threats. Is this possible?
10
votes
1answer
271 views

E-voting: receipt-free, verifiable, and anonymous

Background In response to a system design concept, a question was posed: How do you achieve electronic voting, anonymity, and verifiability at the same time? I was informed that most experts in ...
-2
votes
1answer
97 views

Best and most current sites for security breaches [duplicate]

I'm taking my masters in cyber-security and as a student I come across a lot of garbage when doing research. What are sites with the latest security breaches? Thanks for the help in advanced. My ...
3
votes
1answer
317 views

Tools to make a security researchers life easier - tracking vulnerability research [closed]

I've been a developer for quite some time, and as part of my on-going learning process I've learnt how to spot and remedy broken (and insecure) code written by others. Recently, I've found myself ...
14
votes
2answers
3k views

How many passwords does the average user know?

Looking for research on the count and complexity of passwords that an average user is actively using. Note: Also, just to be clear, by research, this is not a request for you to respond with an ...
1
vote
1answer
110 views

Botnet fingerprinting

Does anyone know of any research of papers on fingerprinting botnets? If a given target is being brute forced or DDoSed do methods exist to determine if a brute force or DDoS on another target are ...
3
votes
2answers
406 views

Valid Characters For Magnetic stripe

We bought some Magnetic stripe cards and I'm writing a program that will get talked to by a mag card reader. What I need help with is that I can't, for the life of me, find out what characters are ...
1
vote
3answers
206 views

Where to publish security research?

I'm considering doing some research in to an attack vector which I think doesn't get enough attention. It's not an earth-shaking vector but I think I can demonstrate an attack where none have been in ...
1
vote
0answers
49 views

DUKPT - more specific materials

I'm working on a simple project that implements DUKPT. I've tried searching the web for more specific information than on wikipedia and it seems that the algorithms are only covered in ANSI X9.24 part ...
3
votes
1answer
147 views

Site Executing control characters in title tag

I am currently pentesting a site for a client of mine and I found a very strange 'bug'. They have a search box on the home page which if I enter te\tst and hit search, it redirects to the search ...
-1
votes
1answer
1k views

Security-themed Masters Thesis Topics [closed]

I am currently in progress in a MS in Computer Engineering program. I am looking around for thesis topics related to security (my specialization is in distributed computing). I've been given some ...
-1
votes
2answers
237 views

How do you search for new vulnerabilities? [closed]

I've been asked this question, and I really don't know how would I do it. My answer was to take known vulnerabilities and try to exploit them on a different way, but this is not really a new ...
-6
votes
1answer
137 views

Breaking into your own systems [closed]

So as security professionals, most are overly paranoid about external hackers, leaks, etc. I'm looking for ideas on how one would go about testing their own systems, without signs that they were ...
2
votes
1answer
752 views

Maltego transform samples

I'm playing around with Maltego for target recon and investigation, and have started writing my own transforms in Python. Unfortunately, the current developer documentation is a little light on ...
11
votes
5answers
1k views

Where can I find statistics on security breaches?

I am putting together a security presentation, and I would like statistics on the occurrence of and damages from security breaches. Does anyone know of a reliable, recently-updated source?
3
votes
1answer
4k views

Tutorials, Exercises and Environemnts for Penetration Testing Mobile Environments

I'm looking for a list of exercises or distributions to practice penetration testing on mobile environments. There are plenty of existing things like the environments found at pentesterlab.com and ...
1
vote
2answers
114 views

Opinons: To report or not to report? CFAA vs the White Hat [closed]

As I'm sure most people here are aware, there has been quite a lot of attention brought to the USA's Computer Fraud and Abuse Act (CFAA) recently. Brief back story: A security researcher discovered ...
-1
votes
1answer
854 views

where to get the latest trends about penetration testing systems? [closed]

I am an undergraduate student, who want to do a project in penetration testing automation, and i want a conference or some official source to obtain some latest researches from inorder to see what to ...
7
votes
4answers
1k views

applications of linear algebra to “security”?

I am taking a course in linear algebra which was to be credited towards a program in applied math. My interests have moved towards matters of "security" (information, network, cryptographic, etc.). ...
19
votes
2answers
611 views

How secure is Stack Exchange's reputation?

I recently read an article about researchers being able to penetrate the Facebook network and making lots of friends with about 100 "Social" bots. What would prevent somebody to do the same on Stack ...
6
votes
2answers
669 views

What security measures to have before openly allowing security researchers to hack your site

As some kind of a follow-up from my previous question - which was asked from the security researcher/penetration tester point of view: (Thanks to Rory McCune for pointing this out) There seem to be a ...
2
votes
3answers
264 views

How to protect data on your hard disk if it is in an unfriendly environment?

The essence of the problem as follows: There is a server located on the side of our company. There is a hardware client module, which is in a public place, which communicates with the server via a ...
11
votes
3answers
2k views

What Twitter #hashtags apply to IT Security

I'm trying to search twitter for evidence of near-realtime alerts or updates regarding security issues. What hashtags are common or popular in the IT Security world?
7
votes
1answer
1k views

Open Problems in Security?

I know it might seem a bit too much theoretical, but I was wondering if there was some list of known open problems in security? In a similar way that there are open problems in Theoretical Computer ...
1
vote
2answers
284 views

References to issues of putting backdors into opensource (like OpenBSD) by FBI or CIA [closed]

There are articles on the Internet (e.g. this) that claim that the FBI/CIA injected security backdoors into OpenBSD. I'd like to know if there are any other references to this issue. This would help ...
3
votes
2answers
930 views

Difference between vulnerabilities on windows/linux/mac for same program

If someone finds a vulnerability like buffer overflow in a program such as Google Chrome or Mozilla Firefox running on a linux machine, are there any chances that this vulnerability will persist on ...
3
votes
5answers
249 views

What's the Security equivalent to SICP? [closed]

For those of you who don't know any developers and/or didn't go to MIT, The Structure and Interpretation of Computer Programs is the Canonical reference on it's title subject. It is often used as the ...
4
votes
4answers
282 views

what is the use of stolen personal details?

What can hackers do with personal information that includes this: First name, last name, snail mail address, mobile phone number and email address?
9
votes
2answers
185 views

Encouraging security researchers to disclose vulnerabilities

What are approaches to forming solid relationships with security researchers? For example, is publishing a public PGP key on the "contact us" page of a company's website for high levels of risk ...