New answers tagged

3

RAP is very similar to a stack canary, except designed to prevent against ROP. EDIT: After speaking to spender from grsecurity, it turns out that what I'm describing here is a subset of the RAP functionality, specifically the return pointer protection. RAP is actually callled "Reuse Attack Protector", which is designed to protect against all forms of ...


0

I don't think there is one good answer but here are some suggestions. You could utilize a captcha with extra visual artifacts or more characters than normal on every login. Perhaps a simple riddle or a bit of javascript that forces a user to click on targets with a time limit like this. I think the most feasible, reliable option would be requiring two-factor ...


0

There are two classes provided by eLearnSecurity: Practical Web Defense and Practical Network Defense. Practical Web Defense teaches you to defend your web app from the most common attacks, and it apparently follows the OWASP methodology. Practical Network Defense is more about secure network design, covering topics such as firewalls,VPN,DMZ,... There are ...


0

Normally this would be a "fake encryption key". In the response to the report: Now you are making **** up. As it turns out, I was told what you might be hinting at here, and it’s clear you have no idea what the **** you are talking about. In other words, in this context it's just a made up thing. However, there are other situations, for ...



Top 50 recent answers are included