Tag Info

New answers tagged

0

If you really need to distinguish between real security incidents and false positives, you can build a solution implementing Bayes classifier algorithms and properly train it. Such classifier should parse as much input data as possible, and "score" certain events, behaviors etc. to positive and negative points. Eg.: first password authentication error in ...


0

You are correct in that it is an intractable problem very similar to the why DRM can never be provably secure. You can make it very difficult for a user to forge the log but ultimately the application will need to have the key needed to digitally sign log messages. If the key exists on the client computer it can be removed from the client computer. The ...


0

I would use an externally provided service (Splunk on Cloud, Papertrail - there are others but i have used these ones) to ensure reasonable integrity. Or use your own, separated from the service (based on a commercial solution or, for instance, ELK) The confidentiality part is more tricky. For the Splunk case, if you have a pre-defined list of users, you ...


0

An ISP is literally an "internet provider". As such they provide you the wires and equipment to access the global scaled network. Since they are in between you and the rest of the world, you have to assume that anything not encrypted is potentially logged by your ISP. Even if you use Google DNS, the DNS request will be send from your computer, to your ...


2

Short answer: they are only able to log the hosts you visit (e.g. security.stackexchange.com, google.com, etc) and not the full address (e.g. https://stackexchange.com/login). If you access unencrypted webpages (http instead of https), they are able to see everything. ISP are not known to log unencrypted webpages en masse, but I wouldn't not be surprised if ...


1

Remember that VPNs just encrypt your communications between point A and B. In other words, your connection is confidential but not necessarily private. Assuming that you are using a VPN that has no known vulnerabilities (i.e. logjam) even if you chained VPNs - which would be much effort for little gain - there are a few scenarios where privacy might be ...



Top 50 recent answers are included