Tag Info

Hot answers tagged

18

This is a bit old (2006), but may be helpful towards your goal. http://usabilitynews.org/password-security-what-users-know-and-what-they-actually-do/ It is based on a study of 328 undergraduate and graduate level college students from Wichita State University volunteered to participate in the survey, and these students were also regular users of the ...


4

You at least need : documents to describe processes involved in certificates life cycles : *request for a new certificate *certificate revocation *certificate renewal both for administrators and users (probably two different documents for each process) a general architecture document, describing CA levels and their purpose That's in my opinion ...


3

I happen to collect these type of statistics when I find them mentioned in a study or paper. Here are some recent figures: - 54% 1 to 5 - 28% 6 to 10 - 7% 11 to 15 - 5% 16 to 20 - 6% 20+ Source: CSID Consumer Survey: Password Habits, Sept 2012 Total average minimum number of private passwords = 17 Total average minimum number of work ...


2

It all depends on the type of content your are posting. In most cases you will need more than one #Tag for your tweet to make the right sense and ranking. #InfoSec (preferred abbreviation) #InformationSecurity (if you have some characters left in your tweet) #Risk (Topics also relating to risk management) #Privacy #Malware #Virus #Spam #BYOD #DataTheft / ...


2

Any bug tracking software is the standard for this tool. Vulnerabilities you find are simply 'bugs'. Assign severity, track the vendor's response and follow-up, and detail the issues all within the tool. Github, bugzilla, Jira, etc. Choose the tool that matches your needs and workflow.


2

PKI-administrator is not really a well defined role, so the scope of his documentation is vague here. As a Chief Information Security Officer I would ensure that the following documents exist: System Administration doc, for a technical audience - sysadmin who need to set up servers and clients (configuration, architecture, ...). Some interesting point ...


2

Josten i looked for the malware and found it here is the link but you have to go on the forum and download it http://malwaretips.com/threads/2014-12-11-destover-malware-7-samples.38799/ Go to the Link to malicious sample/URL and you will see the zip file and the password for it.


1

I find that the social groups are the best bet for breaking sec news - such as Twitter, Facebook and Reddit. Check out the 2600 group on facebook, /r/netsec on reddit and start poking around the security news sources on twitter. Honestly there are a ton of different outlets for infosec available these days. For the more 'established' news sources I use ...


1

In answer to your questions about bots, this depends on the bot itself, I mean it is up to its designer to design how the bot itself receives commands. The 'traditional' method is ofcourse to connect to a IRC channel and wait for instruction, P2P is often more difficult to implement (due to NAT/Port Forwarding) and easier to detect (because holes in ...


1

There are likely legal and ethical implications in utilizing a botnet's infrastructure to uninstall it remotely on all affected hosts. It may not be legal for even the authorities in a country to access personal or corporate resources. In addition, if the uninstall is not successful or poorly planned it could have further negative consequences. There is also ...


1

What you're asking to do is possible but quite difficult. First of all you need to understand a few ideas so here we go. Firstly, signature schemes. You've no doubt looked at digital signature schemes on the web and you might rightly ask - so why don't you just sign the whole file? Well, the answer to that is that in at least the case of RSA, you open ...


1

Sorry to post a page of links, but you will find a ton of research at this link: http://www.cyberwarzone.com/understanding-and-mitigating-ddos-attacks-tools



Only top voted, non community-wiki answers of a minimum length are eligible