New answers tagged incident-response
I personally used the following http://www.amazon.com/Edimax-EW-7811Un-150Mbps-Raspberry-Supports/dp/B003MTTJOY with no issues. combining this with hostapd on top of Kali Linux gives you a very powerful wireless pentesting infrastructure
Like Neil Smithline already said: if the attackers can outsmart a usually reliable DOS protection then there is nothing much you can do to protect yourself. That means that you should not focus on fighting or blocking the attack itself (leave that to the experts), but on reducing the impact of the attack. This might include: Reduce your attack surface by ...
LinkedIn settled for $1.5M for weak password protections http://bits.blogs.nytimes.com/2015/02/23/linkedin-settles-class-action-suit-over-weak-password-security/?_r=0
Yes, and a high profile one was Sony's PSN breach which Sony settled for $15million, one report here. Though the headline figure does not appear as bad when you realise that it is not an actual pay out, it is mainly free games and memberships for those affected. From a purely UK specific perspective related to the Data Protection Act (DPA) compensation: ...
DNS request logging on your local DNS forwarder (Domain Controllers) is the easiest. Blocking TCP/UDP port 53 outbound except for your Domain Controllers lets you be assured that only they can do recursive DNS lookups. Netflow is another option, but has large data storage requirements since you are storing lifecycle and endpoint information about all UDP ...
Realize that the relevant question is not "how do we sanitize the data" (a quick boot to DBAN would do that) but "how do we remediate this failure in a way that restores trust to the system". That's why the procedures appear so damn stupid sometimes: especially depending on the data involved, trust in the system may be more valuable than the data itself. ...
Top 50 recent answers are included