An activity meant to understand the way a mechanism or system works. The study or examination of a security problem or class of security problems.
25
votes
2answers
3k views
Amount of simple operations that is safely out of reach for all humanity?
Cryptographic primitives usually assert some security level given as number of operations to mount an attack. Hash functions, for example, give different security levels for collision attacks, ...
28
votes
20answers
3k views
What are the biggest unsolved problems in IT Security?
Just recently I thought about all the solved problems in IT security, like XSS (which one can mitigate with input validation), SQL Injection (mitigated with prepared statements), etc.
Now I'm ...
10
votes
4answers
300 views
Resources for data on security incidents
What resources exist to research data on actual security incidents?
I would prefer an online resource but offline resources are acceptable. The cost of access should be less than $100 (US) for ...
13
votes
4answers
1k views
Malwares source repositories. Where?
As the best way to learn is to read the code, do you know where I can find malware/virus/whatever source code to read?
16
votes
7answers
422 views
which site do you use to view details of vulnerabilities?
Which site/sites do you guys use to view details of security vulnerabilities?
10
votes
6answers
690 views
Applications of probability/statistics in IT security?
What are some areas of computer security that utilizes statistical modeling? I ask b/c I'm a studying statistics at school and have become interested after reading a few papers.. some of the areas ...
13
votes
5answers
481 views
How to get into RFID auditing?
I would like to get more knowledge around RFID-systems auditing.
Does anyone have a basic guide step-by-step which I can use to set up a lab with proper RFID "sniffing" equipment?
I would like to ...
7
votes
4answers
320 views
applications of linear algebra to “security”?
I am taking a course in linear algebra which was to be credited towards a program in applied math. My interests have moved towards matters of "security" (information, network, cryptographic, etc.).
...
9
votes
2answers
107 views
Encouraging security researchers to disclose vulnerabilities
What are approaches to forming solid relationships with security researchers?
For example, is publishing a public PGP key on the "contact us" page of a company's website for high levels of risk ...
5
votes
2answers
329 views
What security measures to have before openly allowing security researchers to hack your site
As some kind of a follow-up from my previous question - which was asked from the security researcher/penetration tester point of view:
(Thanks to Rory McCune for pointing this out) There seem to be a ...
10
votes
4answers
400 views
Are there state-of-the-art techniques or theory specifically for attacking passphrases over passwords?
With passphrases becoming more and more common based on length being more important than complexity, I'm assuming there must be some work going on involving techniques aimed specifically at cracking / ...
