Tag Info

Hot answers tagged

4

You at least need : documents to describe processes involved in certificates life cycles : *request for a new certificate *certificate revocation *certificate renewal both for administrators and users (probably two different documents for each process) a general architecture document, describing CA levels and their purpose That's in my opinion ...


2

PKI-administrator is not really a well defined role, so the scope of his documentation is vague here. As a Chief Information Security Officer I would ensure that the following documents exist: System Administration doc, for a technical audience - sysadmin who need to set up servers and clients (configuration, architecture, ...). Some interesting point ...


2

In answer to your questions about bots, this depends on the bot itself, I mean it is up to its designer to design how the bot itself receives commands. The 'traditional' method is ofcourse to connect to a IRC channel and wait for instruction, P2P is often more difficult to implement (due to NAT/Port Forwarding) and easier to detect (because holes in ...


2

Josten i looked for the malware and found it here is the link but you have to go on the forum and download it http://malwaretips.com/threads/2014-12-11-destover-malware-7-samples.38799/ Go to the Link to malicious sample/URL and you will see the zip file and the password for it.


2

Key List of Resources (2015) Industry Forecast Data Breach Industry Forecast by Experian Industry Survey Global Industry Information Security Survey by PWC Security Personnel Survey by Kaspersky Statistics & Reports Data Breach Statistics by IBM Data Breach Investigation Reports by Verizon Data Breach Statistics and summary by ITRC Security ...


2

It all depends on the type of content your are posting. In most cases you will need more than one #Tag for your tweet to make the right sense and ranking. #InfoSec (preferred abbreviation) #InformationSecurity (if you have some characters left in your tweet) #Risk (Topics also relating to risk management) #Privacy #Malware #Virus #Spam #BYOD #DataTheft / ...


1

This sounds like Evernote simultaneous search, I'd say that it will be sending the search queries you enter to the evernote service in order to provide this feature. Whether that's a problem for you will depend on whether you're happy with Evernote seeing that information. Obviously you trust them not to be actively malicious as you've installed their ...


1

Studies show that the deterrent effect of security cameras is minimal. Moreover, the question is whether are you trying to deter crime in the whole neighborhood or just in your house. If it's the latter, it makes sense to put up a CCTV in your home if other people haven't -- this will likely shift the interest of the burglars from your home to your ...


1

Being anonymous, verifiable and reciept-free at the same time is impossible. Of course, there will be kept some records and logs for verification purposes. You have to be seen(logged) for maintaining the rights of one person one vote. If it really is completely anonymous, anyone from anywhere in the network can vote any amount of times without getting ...


1

I'll add to this as I check for relevancy. FireEye + Mandiant Advanced Threat Report (2015): key findings (press release) CrowdStrike Global Threat Intel Report (Feb-2015). Numbers are sparse but charts are estimable. Intelligence reports and data in the adversary lineup section of the site are over these adversaries and target industries. Palo Alto ...


1

First, there's a terminology issue when talking about this stuff. Strictly, 'BIOS' and 'UEFI' are different programming interfaces for the firmware present on PC motherboards. However, in a PC context, 'BIOS' is often used to refer to the firmware irrespective of its API -- that is, "UEFI BIOSes" should strictly read "UEFI firmwares". (Just to be clear: ...


1

I find that the social groups are the best bet for breaking sec news - such as Twitter, Facebook and Reddit. Check out the 2600 group on facebook, /r/netsec on reddit and start poking around the security news sources on twitter. Honestly there are a ton of different outlets for infosec available these days. For the more 'established' news sources I use ...


1

There are likely legal and ethical implications in utilizing a botnet's infrastructure to uninstall it remotely on all affected hosts. It may not be legal for even the authorities in a country to access personal or corporate resources. In addition, if the uninstall is not successful or poorly planned it could have further negative consequences. There is also ...


1

What you're asking to do is possible but quite difficult. First of all you need to understand a few ideas so here we go. Firstly, signature schemes. You've no doubt looked at digital signature schemes on the web and you might rightly ask - so why don't you just sign the whole file? Well, the answer to that is that in at least the case of RSA, you open ...



Only top voted, non community-wiki answers of a minimum length are eligible