371 reputation
111
bio website boos.core-dumped.info
location Italy
age
visits member for 3 years, 4 months
seen Apr 11 at 15:58

Computer Science is no more about computers than astronomy is about telescopes", Edsger W. Dijkstra

Roberto "boos" Martelloni, 30y old, Milano, Italy.
In love with computer science, free climbing and with life .

Actually i am working as security, system, software engineer specialist with unix, linux technologies and FOSS solutions.

You can find more info about me (curriculum vitae) on Careers on StackOverflow !
On my website and on my linkedin profile

Do you need more info ? don't esitate to contact me :>


Feb
25
comment What is the most hardened set of options for GCC compiling C/C++?
-ftrapv options doesn't work, there is a BUG in GCC never fixed.
Feb
28
comment What lawful interception standards are used outside Europe?
What comment do you mean ?
Feb
27
comment What lawful interception standards are used outside Europe?
In Italy, our provider implement Lawful Interception following the ETSI specification, so every provider have a common way to do LI. For my employer I'm get involved in the design of a software solution, with a functional requirement of compatibility with ETSI standard. So after reading some of that specification the curiosity about non-EU get in me. :)
Feb
24
comment What are the most sophisticated techniques used by intruders you have found in the wild?
For every malware founded we made reverse engineering of it, so for the most we know what behaviour every malware have, but we haven't meet any advanced techniques in all of it!
Feb
24
comment What are the most sophisticated techniques used by intruders you have found in the wild?
I will made correction asap. Now the question is no more what I was looking for.
Feb
8
comment What lawful interception standards are used outside Europe?
In Europe we have some standard regulation which goal is to regulate and standardize how the lawful interception network need to be deployed in every state of the Europe. is there a 'regulation' like that to uniform how lawful interception system need to be deployed ?
Jan
14
comment What key attributes indicate candidate potential for future success in a security career?
(Ask what are the last security (or related) book he/she have read and ask also what are the web site reference he read to learn or stay updated on it. If He/she don't have read any sort of book on security or don't know at least some security resource he don't have any real interest on security.
Jan
14
comment Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
@Rory You have missing totally the point. do you know what is PVS and what you can do with it? I think no. I know that hypothetically you can made lot of stuff with snort, but it's not imaginable to write down about 40k rule to do what PVS do to do it in snort. Please before reply take a look here: tenable.com/products/tenable-passive-vulnerability-scanner and here: cgi.tenable.com/Features_PVS.pdf.
Jan
9
comment Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
I don't know well snort but also tweaking it to detect banner of vulnerable host it's don't have any form of management GUI to handle this kind of stuff. Also, supposing I have a Intranet web serve vulnerable, every time a client connect to it, snort will made an Alert about a vulnerable host. Also this kind of hack can't be affordable to be used in a professional way.
Jan
9
comment Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
PVS DON'T do active scanning. It's simple collect traffic from a TAP or span port and then analyze it to found vulnerability. SNORT do Network Intrusion Detection System, detect attack on a network, don't detect vulnerable version on a network analyzing passively the network.
Jul
23
comment Books about Penetration Testing
Really good list of books! Why no book on reversing engineering ? Ida guide and so on ? No windows internal ? BTW I know some author of this book and I think they are the most talented security people around since the 1990 ;) This one was the right answer of the question.
Mar
29
comment When you make a revision of rules on a firewall, how do you add credibility/customer satisfaction to your final consideration?
Say to a customer: "I have experience enough to say it", it's not my goal. My focus point is to add customer satisfaction referencing some thirty party and 'higher power' organization.
Mar
25
comment What compliance framework is appropriate for firewalls
'how can you add ..' i have lose a can. check my questions i posted another one related.
Mar
25
comment When you make a revision of rules on a firewall, how do you add credibility/customer satisfaction to your final consideration?
@lszi: added more info, is it ok now ?
Mar
25
comment What compliance framework is appropriate for firewalls
thank you. I dont know why my question sound like a stupid question and no one reply to it. i think i will ask another question, somethings like: when you evaluate rules from a firewall how you add credibility to your consideration ..
Mar
10
comment How to make a report after a ddos attack? what information do I need to write on the report?
@bethlakshmi: thanks for the good answer. Right now I found a guidelines from NIST about incident response after DDOS. An answer from myself come soon, i hope.
Mar
7
comment Why do botnets use IRC but not a web service for communication?
@all: anyone can point me some useful resource about botnet? i want to know more about this. can you suggest some book ? blog ? twitter ? papers ? and must read/follow stuff ? great thanks
Feb
24
comment What is the equivalent European organization of NIST, especially in the Security Computer Division?
As i see in the ENISA's web site i cant for example find any specific stuff about firewall, i think the ENISA is far away from the 'maturity' of NIST. thanks
Feb
24
comment What compliance framework is appropriate for firewalls
I'm asking for compliance guidelines about firewall policy.
Jan
16
comment is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
@Avid: thanks, log manager collect important data about the session, not the data itself, anyway, great thanks for the reopen. I Suppose there isn't not so much interest in this kind network forensic tool, as i say, as far i know, only Niksun develop this kind of device, i dont know how exactly is the name of this solution, take a look here niksun.com/product.php?id=4 with all the product of the series you can have a all-in-one products