The elimination or reduction of the frequency, magnitude, or severity of exposure to risks, or minimization of the potential impact of a threat or warning.
15
votes
2answers
352 views
+200
What can an attacker do with Bluetooth and how should it be mitigated?
What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine?
...
8
votes
3answers
497 views
Preventing a spoofing man in the middle attack?
I was humming along with my usual routine of listening to old Defcon videos trying to understand some of the basics of what's going on in the IT Security world, when I came across one explaining man ...
4
votes
1answer
85 views
Switching to new encryption method (without losing data?)
Let's say you have a website that provides a service of some kind. Users can log in, they can store some kind of data, and there's various types of encryption in place to keep it all safe. Passwords ...
4
votes
1answer
119 views
Are latency based Proof-of-Work systems capable of preventing DDoS attacks on popular hidden tor services (.onion websites)?
I was reading an interesting article found here: http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-703.pdf
It's titled "Lazy Susan: dumb waiting as proof of work".
It suggested the following in section ...
13
votes
7answers
1k views
DDoS - Impossible to stop?
Is it possible - in theory - to stop1 a DDoS attack of any size? Many people claim it's impossible to stop DDoS attacks and tell me I just shouldn't mess with the wrong people on the internet.
But ...
2
votes
3answers
240 views
If an ATM is stolen, how easy can the personal information of the users be recovered?
ATMs get occasionally stolen. How easy would be for the thiefs to retieve the PINs and other information of the users that have previously used the ATM? Is there a periodic wipe of all ...
3
votes
3answers
232 views
How will IPv6 affect DDoS mitigation techniques?
IPv6 introduces a much larger address space than IPv4 and with it there are many new techniques in creating and mitigating DDoS attacks. What are some examples of risks and mitigations?
For example, ...
4
votes
3answers
143 views
Is there any way I can block (or conditionally approve of) iFrames on the client side?
Given that iFrames are used in many common exploits, I'd like to conditionally disable iFrames except for sites that require it such as GMail, or MasterCard SecureCode.
I also suspect the ...
1
vote
2answers
69 views
How do I sanitize and check large numbers that will be sent to an unmanaged BigNum library like GMP?
I need to process data that is sent by users in a LargeNumber format. My current choices are
BigInteger (.Net Managed Code)
IntX (Managed Code, faster for some operations)
GMP / MPIR (Unmanaged ...
6
votes
2answers
240 views
How to keep using Java 6 securely, despite its unpatch vulnerabilities
Given that Java 6 is now deprecated by Oracle and there recently has been notification of a 0day (that will exist forever now that Oracle is not patching JRE6), what can we do to prevent drive-by ...
0
votes
1answer
97 views
Can a Javascript - WebGL proof of work system prevent website spam?
Is it a good idea to come up with a Javascript-based Proof of Work system to reduce spam on forums, and other websites?
This idea would be similar to HashCash, but the computation would be based on ...
1
vote
1answer
88 views
Mitigation Strategies for Response Spliting Attack
I am not going into basics of HTTP response splitting attack as above figure completing describes the working of such a attack. Previous Post have also discussed working of such a attack ASP.NET ...
7
votes
2answers
241 views
What unique risks does MVC model binding bring to a website? What additional vigilance is needed?
From what I understand, "model binding" is where a website based on ASP.NET MVC or Ruby on Rails (there are others...) takes parameters in HTTP's GET statement and passes them as variables to code ...
0
votes
1answer
39 views
Relative costs involved in making changes to the current organisational security
I need help understanding what is required by the phrase "a comparison of the relative costs involved in making changes to the current organizational security procedures".
Am I to compare the cost ...
3
votes
1answer
234 views
Where can a virus or other malware “hide” on common PC and Mac hardware?
I'm looking for a detailed list of locations that viruses can "hide" in modern hardware even after a reboot.
Some things that come to mind include
Boot BIOS/Firmware
CPU Microcode
Connected PCI ...
1
vote
2answers
84 views
Do XBAP applications have the same vulnerabilities as Java Web Apps?
In response to the popular decision in disabling Java Web Apps, there has been very little mention of XBAP applications.
XBAP applications are similar to Silverlight but it offers more options to ...
2
votes
1answer
106 views
What damage could be done if a malicious certificate had an identical “Subject Key Identifier”?
I'm looking at the the Subject Key Identifier attribute of a CA certificate and am trying to understand the role it plays in validation and infer how validating client software could get it wrong.
...
4
votes
2answers
167 views
Any real world examples of GPS location data being used with authentication?
Are there any examples of how GPS coordinate (or any location data really) can be used to detect suspicious locations or validate well known locations?
Specifically
Highlighting new or unusual ...
6
votes
1answer
584 views
ASP.NET HTTP Response Splitting Attack
By default ASP.NET checks for HTTP Response Splitting attack when you do Response.Redirect:
...
7
votes
1answer
401 views
Have any viruses leveraging the GPU been discovered in the wild? What is the mitigation?
This news article from 2010 discusses how a GPU can be used by a virus to avoid detection by common anti-malware/anti-virus software. The idea is to obfuscate the virus payload and leverage the GPU's ...
8
votes
6answers
472 views
What is preventing the widespread common use of MAC-type systems?
Overall question
what is preventing the uptake of MAC systems such as SELinux/AppArmor in corporate and desktop computing environments?
Why don't you think it isn't already widespread?
I do not ...
6
votes
3answers
277 views
Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?
According to this accepted answer, there is no phone on the market today that is immune from "Juice Jacking"*. I think an easy way to mitigate this threat is to have a filter that blocks USB pins 2 ...
1
vote
2answers
211 views
What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?
I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple".
What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
1
vote
3answers
609 views
What devices support the permanent addition of an ARP table entry? What tools are available to manage this?
I would like to improve wireless security and certain other on-net security scenarios with a permanent ARP table entry. The idea being that someone on the same subnet or WiFi network will have a more ...
0
votes
0answers
1k views
Open Source (Software Firewall + Unified Threat Management - UTM) for an Linux Dedicated Server Hosting [closed]
I am newbie in managing Linux Dedicated server. I am looking for Best Open source Unified Threat Management solution with Firewall Support and it should need to be managing through an web GUI ...
7
votes
2answers
157 views
How to mitigate the risk of a continuous integration service security breach?
We are using a Continuous Integration service to automatically run our product test suite. Every time we push code to our central Git repository production branch, the CI services is notified and ...
3
votes
2answers
116 views
What steps can you take to make offline cracking of SRP harder?
In the aftermath of the Blizzard hack, what steps can I take to make offline cracking of SRP more difficult?
My question assumes that your database is already gone and that you implemented SRP more ...
6
votes
8answers
429 views
Should I block visitors who seem to be probing my site?
I have detected some attempts to probe the security of my site. Should I blacklist their IP address? What are the considerations or tradeoffs to use in deciding when to block their IP address and ...
1
vote
1answer
163 views
A BFE registry key's ACL is flagged by Microsoft Attack Surface Analyzer - what do I do?
Can anyone help me to understand which kind of action I should make to mitigate this issue, which emerged from Microsoft Surface Attack Analyzer? How I can tighten the ACL? Is there a standard ...
10
votes
3answers
1k views
What risks do Cookieless sessions have? What are the mitigations?
I'm debating if I should support cookieless sessions in my web app. It would look something like this:
http://www.example.com/(S(lit3py55t21z5v55vlm25s55))/orderform.aspx
Since the URL is never ...
10
votes
4answers
1k views
How can mini-computers (like Raspberry Pi) be applied to IT security?
It's no secret that thousands of $35 Raspberry Pi (Model B) computers have just shipped to people around the world. With these, and other similar types of computers becoming cheaper and more ...
3
votes
2answers
252 views
Mitigations for Windows clients that don't support OCSP Nonces
Windows 7 clients (and older) don't support NONCES, a key feature used in securing the revocation check. Without a NONCE a MITM could replay a previously signed response and alter the validation of ...
6
votes
1answer
1k views
How does adding a random serial number improve a certificates' security?
This article says:
"Finding collisions is a tricky process, since it requires you to muck
with the bits of the public key embedded in the certificate (see this
paper for more details). Also, ...
0
votes
2answers
263 views
Logging and Metrics for DEP, EMET, and Related Mitigations
Is it possible to collect metrics or generate alerts when one of EMET's suite of mitigations prevents code execution? Ideally I'd want to be able to collect and analyze data to support statements ...
2
votes
4answers
644 views
Chrome Frame is an example of how browsers “merge together”. How can I unmerge all of them?
Chrome Frame is an add in that integrates with IE and Firefox. Firefox has a similar component, and I hear that the .NET runtime finds its way into all the other browsers.
Additional integration ...
1
vote
1answer
74 views
Detecting and Responding to Email Account Compromise (regarding FINRA 12-05, ISAC/IC3 alerts)
FINRA, the ISAC and IC3 issued an alert regarding e-mail based attacks that attempt to obtain client contact information. They then use social engineering / persuasion to complete the attack.
What ...
6
votes
1answer
382 views
Inconsistencies found in OpenID Provider's HTTP Headers. Which one is the most secure that I should imitate in my STS, and Relying Party?
I'm comparing the HTTP headers of the various providers (LiveID, Google, Yahoo, etc) and notice a broad inconsistency in implementation on the sign in page, sign out page, and subsequent pages.
...
3
votes
2answers
301 views
Secure Software Development
I'm researching models on building security into the SDLC and so far have come across:
BSIMM
Microsoft SDL
Open SAMM
Are there any other documents and resources to look into? Specific tools that ...
1
vote
2answers
82 views
How can I force certain the webclient to honor or remember certain parameters from the webserver?
HTTPS is subject to several MITM attacks, that is clear. However I think it would be helpful to the ITSec crowd if there was a way to force a certain browser behaviour when accessing known-trusted ...
