Tag Info

New answers tagged

0

Agree with Steffen on his first few approaches. Additionally, I answered a similar question here -- http://security.stackexchange.com/a/83497/140 -- and the technique of using SniffJoke should apply. It is often better to change your network traffic than to modify your exploit stager or payload. However, every situation is different. Gather more information ...


0

Proxy, Adaptable Security Appliance, DMZ, and Automated Vulnerability Scanners are some items you'll find in the wild that are hardware. There's plenty more security related software items that will help you with research such as Splunk which takes logs and makes them searchable.


0

There are few other choices. If software is inherently insecure, all you can do is to replace it with something that isn't; or wrap it up in a condom of some sort. Host-based systems require programs to be invasively, and cooperatively, installed on every client (virus scanners, local network stack IPS). Network-based systems don't require cooperation ...


1

No single measure can effectively prevent DDoS attacks. You can, however, reroute traffic or reconfigure the network infrastructure (both logical and physical, which might cause a bit of an overhead, but still, availability is key) in attempt to still deliver your content and reduce the incoming DDoS traffic. The reason why DDoS is such a lingering threat ...


13

No, generally not, although of course they say they can. DDoS is about volume UTM is almost always at the local end of Internet access Therefore, DDoS can usually fill the Internet pipe before even reaching a UTM device. The reasoning - By definition a DDoS - being Distributed - is taking advantage of multiple attack points to generate a level of ...


1

Actually, the question is about can or cannot, not about how or how much, and therefore IDS and UTM systems claims some level of DDoS defense. Not complete defense, because in theory there is no complete defense against DDoS attack. Almost every modern firewall and intrusion protection system (IPS) claims some level of DDoS defense. Some Unified Threat ...


0

After some debugging, I've found that the issue is due to the BASE caching code. It looks (among others) for '(spp_%' instead of 'spp_%', which is the correct start of the arpspoof preprocessor signature name. So i changed the part of the query that is created from line 234 in base_cache.inc.php: /* Preprocessor events only */ # The original "(sig_name ...



Top 50 recent answers are included