12,265 reputation
11654
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 8 months
seen 1 hour ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


1h
comment Building a DoS and DDoS Mitigation System from scratch
re: "distributed system" you missed my point. If the last-mile ISPs receive data from the DDoS target routers, which identifies the characteristics of the attack, then the last-mile nodes can handle the 'bad' traffic before it chokes the backbone. This is the basic premise that my development team was working on. If the attack changes sources, the network is already on alert for the attack signature and can respond faster if new sources come online. Small code-base. Small CPU-overhead. Low cost. This is one way of tackling the problem.
1h
comment Building a DoS and DDoS Mitigation System from scratch
I worked on a development team that was creating anti-DDoS systems. My point is that, yes, it is a big topic, and yes, you have limited space to address the OP's question, but you didn't use your space to talk about the relevant points. Your answer is more of a dismissal and talking about purchasing, not designing a system.
22h
reviewed Leave Open Application security training for developers
22h
reviewed Close Free second-level domain SSL certificate
22h
reviewed Close How to tell computer of origin sending email messages?
22h
reviewed Close i am using college lan. What can i do to ensure maximum lan security?
22h
reviewed No Action Needed What exactly determines what version of SSL/TLS is used when accessing a site?
22h
comment Building a DoS and DDoS Mitigation System from scratch
I'm not sure that this is a helpful answer at all, in any respect. The OP asks how to design from scratch, and you assume he is buying off the rack. You also have a ton of assumptions and have applied random costs. What about a distributed system across all ISPs? You need only identify a single stream of offending traffic and coordinate the info across the nodes. You cut the attack off at the source, instead of the destination. Low cost, low bandwidth, and responsive to changes in the attack.
Aug
14
comment BYOD - Confirming that Devices are Approved
Product recommendations go stale, but since you asked: Netclarity.
Aug
14
reviewed Leave Open Are newly-generated recovery passwords sent to me via email hashed?
Aug
14
revised Information Security and Financial Risks
spelling, link
Aug
14
comment Is it a bad idea for an information holder to e-mail a user their password?
If a user has 'forgotten' about the site, then offer a password reset option. Doing so means that you do not have to store the user's password in a way that breaks standard password protocols.
Aug
14
comment What are some considerations before moving personal data to Google Drive?
It is an answer, and a viable one, it is just very, very short.
Aug
14
comment How secure is KolibriOS?
"How secure is x" is not really answerable. What do you want it to be secure from?
Aug
14
reviewed Close What is the difference between a virus and a worm ?
Aug
14
reviewed No Action Needed Choosing right way to secure access to server access via socket
Aug
14
answered BYOD - Confirming that Devices are Approved
Aug
13
comment Confidentiality of file hashes
You say that hashes are not reversible, but wondering if hashes are reversible? You seem to have the answer you are looking for.
Aug
13
comment Would it be illegal if one downloaded the entire internet?
Legal questions are off-topic here, and there is nothing in this question about IT Security. This is a philosophical thought exercise.
Aug
13
comment BYOD - Confirming that Devices are Approved
Why do you want to approve the device along with the user? What problem does that control address? If the user can walk out with the device, (because BYOD), then what is mitigated by limiting what is used?