Tag Info

Hot answers tagged

7

I can think of a few options. You can try submitting it as a talk at a security conference or two. This is probably one of the best ways to get your research out there if it is semi interesting. Even if the topic isn't accepted for one of the main talks, many conferences have lightning talk sections where any attendees can go up and speak for a few ...


4

Paraphrasing someone who does this for a living: “Exploiting vulnerabilities is a craft. Researching vulnerabilities is a black art.” A common way of looking for vulnerabilities in software (or hardware or a combination) is fuzzing. Look at some interface and throw all kinds of garbage at it. If it keeps operating correctly (“access denied”, “syntax error”, ...


4

So the underlying question that I see here is: "How do you protect against insider threats?" As I see it, there are two parts to the answer. One is that you protect against insider threats the same way that you protect against external threats, and the other part is that to some degree, you can't. Remember, security is about risk mitigation and ...


4

Security + Distributed Systems narrows down the attack pattern significantly. I can only think of one condition in which these two domain come into play... money. What if finical transactions where backed with an eventually consistent database? Maybe it would net thieves around $1 million USD. Non-relational databases are all the rage, but what if you ...


3

These are the valid range for standard encoding of track 2, which is the ABA standard: 0x30 to 0x3f in the ASCII character set 0 1 2 3 4 5 6 7 8 9 : ; < = > ? Sources: http://blog.tehinterweb.com/?p=60 With enough control over the reader/writer, you can encode bits in anyway you choose though, could make up any system you like.


3

Some great approaches already suggested, here's my addition: Given the average security researcher will often have a less typical academic background than researchers in other fields, it's sometimes necessary to use different approaches to getting stuff published, distributed, or otherwise just 'known' of. I haven't published any security research myself, ...


3

Terry Chia had indeed given a good number of options. Just to add something more - if you think what you have researched is indeed something novel, you can try approaching some journal for publishing the data. IEEE Computer Society's Technical Committee on Security and Privacy, ACM Transactions on Information and System Security can be a good some of the ...


2

I use a lot of the basic UNIX tools. grep, awk, cut, head, tail, cat and vim. This is when the source code is there. If not, I hit IDA =) Basically what I do is either search for functions that get implemented wrong often (memcpy, malloc, open those kinds of functions). And scroll back till I get the origin of the variables used as arguments. When these are ...


1

A magstripe holds bits. Tracks one and three are typically recorded at 210 bits per inch (8.27 bits per mm), while track two typically has a recording density of 75 bits per inch (2.95 bits per mm). Just like a USB stick or any other storage device, you can do whatever you wish with these bits, and use any encoding you desire. You can use full Unicode ...


1

Many vulnerabilities occur as a result of smaller non-exploitable bugs which cause different parts of the software make false assumptions about each other. Returning user-input in a web applications response obviously suggests the possibility of cross-site scripting (XSS) attacks. These can be eliminated by proper input/output filtering/encoding. Applying ...



Only top voted, non community-wiki answers of a minimum length are eligible