Tightening security on a system.
0
votes
2answers
63 views
Debian missing security features?
Debian (stable) is a well respected server Linux distro. I was surprised to see that in their hardening walkthrough (https://wiki.debian.org/HardeningWalkthrough) they do not support position ...
0
votes
0answers
32 views
Disable HNAP on D-Link router
I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
0
votes
1answer
23 views
How to avoid log4j output external modification
I had a request to find a solution for making a log file secure from editing from the user (not root user) running the JBoss instance of an application (Linux environment)
First idea I had is to use ...
0
votes
1answer
216 views
Virtual Box security [duplicate]
I am using virtual box to run a secure machine. I am not fully confident in the hosts security. My assumptions are that of course the host can read the VM when the VM is running and that if the ...
1
vote
1answer
82 views
Bounds checking using Intel's MPX
Intel has recently added new instructions to their instruction set to support bounds checking. Intel calls them the Memory Protection Extensions (MPX), and they are described in Chapter 9 of this ...
-5
votes
1answer
76 views
Strategy for Web Application [closed]
I need to develop an application security strategy for a web application product. Do you have any recommendations as far as procedures and policies are concerned? Any inputs / guidelines or relevant ...
0
votes
0answers
36 views
DLL preloading attack - are IAT libraries affected too?
I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
9
votes
3answers
312 views
Finding out what headers are visible
I would like to find an easy way to find out what headers are visible on my websites. For example PHP version, server etc.
I've looked around and can't seem to find a good explanation on the subject ...
3
votes
1answer
175 views
How Secure Rooted or Jailbroken Devices are?
I am just wondering, but how can I harden the security of jailbroken or rooted devices? I understand that SD Card can be still accessible, but how could potential adversaries compromise for example ...
1
vote
0answers
68 views
Securing MS Exchange [closed]
I have read quite a bit on the subject of securing MS Exchange - most notably the Client Access role. With the retirement of Microsoft's Threat Management Gateway many people seem to be looking for an ...
1
vote
1answer
75 views
Hardening Services, Ports on OSX
People boast about OSX Security, yet I find it very hard to find a comprehensive manual in regards to any equivalent Services and the ports they use. I am aware of lanchd and launchctl and Lingon is ...
0
votes
2answers
118 views
How secure is a Windows PC that is routed through a Linux PC?
I have a Dual PC setup. Two PC's are networked together via crossover cable. The Windows PC is running Windows 7 SP1 64-bit and the Linux PC is running Slackware 14 64-bit with iptables.
My firewall ...
2
votes
1answer
409 views
TCP syn attack prevention
I am new to implementing information security. However i am trying to harden a windows server.I am using regedit to create parameters like SynAttackProtect,TcpMaxHalfOpen and TcpMaxHalfOpenRetried and ...
4
votes
1answer
117 views
How safe are CD's for Air Gapped computers?
It is often suggested, for air-gapped PC's, to use CD/DVD's as a transfer medium between machines instead of USB sticks or portable hard-drives as it is difficult to write data to a CD/DVD without the ...
5
votes
1answer
124 views
What can be done to bridge the Air Gap, except autorun?
What can be done to bridge the Air Gap, except autorun?
Is there any hardware butterflies that can attack physically isolated Unix/Linux machine in common usb drives, like VSC (Vendor Specific ...
8
votes
1answer
270 views
Why are some DLLs not randomized? What makes it hard to deploy full ASLR for all DLLs?
One of the challenges with deploying ASLR for everything is that, at least on Windows, some DLLs (libraries) are not compiled in a way that's compatible with ASLR. (They're not compiled as ...
14
votes
3answers
475 views
Why doesn't Linux randomize the address of the executable code segment?
I've recently been learning about how ASLR (address space randomization) works on Linux. At least on Fedora and Red Hat Enterprise Linux, there are two kinds of executable programs:
Position ...
8
votes
1answer
1k views
How to audit web servers for resistance/vulnerability to BREACH
BREACH, a new attack on SSL that targets HTTP compression, has recently been publicly announced.
I manage a few web servers. How can I audit them to check which of them are potentially vulnerable to ...
24
votes
6answers
2k views
Most secure way to partition linux?
I recently acquired a netbook to play with, and I want to install Kali Linux so I can start learning about network security and exploit development. I want to use this to learn as much about security ...
7
votes
4answers
232 views
Alternatives to the “open PC” security model
Today, PCs (laptops, desktops, etc.) generally work under what I'll call the "open PC" security model. Users have full, system administrator/developer-level access to their own machine. Users can ...
-2
votes
2answers
77 views
Block all kind of querys from ip [closed]
I want to check my network intrusion detection system (physical intrusion like unauthorized gadgets or devices in wifi/ethernet). Until now everything is ok, but I was wondering if I block every query ...
4
votes
2answers
191 views
Configuring election website to prevent MITM attacks
Consider an election web site that will be used for voting over the Internet.
What steps should the administrator of such a web site take to provide adequate security against man-in-the-middle attacks ...
6
votes
1answer
331 views
How does ASCII-Armoring help to prevent buffer-overflow attacks?
I was reading about return-to-libc attacks at Wikipedia.
According to what I read and understood from the article, ASCII armoring means that binary data is converted into ASCII values by grouping ...
79
votes
7answers
6k views
How can I protect my internet-connected devices from discovery by Shodan?
There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices.
Shodan runs 24/7 and collects ...
3
votes
3answers
271 views
An OS that does not trust its RAM?
I wonder if it is possible to write a kernel that would keep all of its RAM encrypted, storing the key in the CPU cache, so that the machine would be resistant to cold-boot attacks?
4
votes
4answers
798 views
Database hardening techniques
So as I understand it database hardening is a process in which you remove the vulnerabilities that result from lax con-figuration options. This can sometimes compensate for exploitable vendor bugs.
...
1
vote
1answer
213 views
What are the basic implementations that make a network secure from the inside\outside?
Would you consider the following to be "basic hardening items" for network equipment and servers?
VLANs
Access Control (such as NTFS permissions)
Patch Management System
Host Firewall
Anti-Virus
...
2
votes
1answer
93 views
Quick Security Mitigations to Impending attacks
Suppose you are the sysadmin, and you know of an impending attack that just started or about to start soon. You can either wait it out, or try a few tricks and quick mitigation to fend off attackers ...
4
votes
3answers
137 views
Defense in depth vs low complexity - Balancing point?
I've asked a few questions relating to schemes for various security-related functions, and posited schemes to accomplish those goals. In the responses, I see a conflict between two fundamental ...
4
votes
3answers
783 views
Setting up a security CTF server
I'm looking for resources and information from people who have experience running hacking capture-the-flag challenges.
To sum it all up in a simple one-sentence question: How do you set up a server ...
0
votes
1answer
305 views
Hardening Web Browsers - Detailed Guidance
Is there any specific and complete guidance on what is needed to harden a web browser given the number of attack vectors possible, particularly given that browsers allow so many varied plugins?
All I ...
2
votes
2answers
230 views
2
votes
1answer
103 views
Forefront Identity Management Server Hardening
Is there a good document for hardening FIM? I've tried CIS and NIST, but I couldn't find anything. If there is no such document, what would I have to look out for in the configuration?
8
votes
3answers
1k views
Securing a laptop against attacks (article)
I came across this article when looking for ways of hardening my laptop, and this guide seemed extremely thorough. It is perhaps overly paranoid, but it will be good to have a guide I can trust should ...
28
votes
9answers
14k views
Why block outgoing network traffic with a firewall?
In terms of a home network, is there any reason to set up a router firewall so that all outgoing ports are blocked, and then open specific ports for things such as HTTP, HTTPS, etc. Given that every ...
2
votes
2answers
477 views
How to correctly secure a ssh session against MITM attack?
How do you improve the security of your ssh session against a man-in-the-middle attack?
8
votes
2answers
470 views
Can a webcam be turned on when disabled in Windows' device manager?
In addition to whether a webcam can be turned on without the indicator light, I was wondering if disabling the device in Windows' device manager is a good option.
Of course when your system is ...
7
votes
5answers
744 views
Securing Debian Apache PHP Server
I have Debian Apache PHP server. I want to secure him after the classic installation process.
My usual steps are :
List item
update all packages
remove all unnecessary services like named, portmap, ...
4
votes
2answers
652 views
How helpful is rkhunter?
I have a software firewall implemented on my server, and I have closed all unnecessary ports. I have strong passwords, and I validate user input on my website.
With these things already in place, do ...
5
votes
2answers
1k views
How to harden my Buffalo LinkStation Pro?
The Buffalo LinkStation Pro Duo that we use can be pretty easily hacked into. The good thing about this is that this NAS runs Linux and can therby be improved in features, e.g. running an NFS or LDAP ...
6
votes
3answers
1k views
What can a hacker do when he has physical access to a system?
I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system.
It's obvious that I will not ...
6
votes
1answer
2k views
Is server hardening with GRSecurity really necessary on the CentOS 6.3 environment?
I consider myself to be reasonably good with IT, however I am relatively fresh at server and system administration. I am a web developer for my company and I have been charged with setting up and ...
3
votes
3answers
249 views
Why should every file have a user and a group?
I've been reading in most hardening guides for linux, that you should check for files and directories without valid user or valid group. What I can't find, is how this could be used for an attack, or ...
1
vote
3answers
3k views
Building a secure server with CentOs [duplicate]
Possible Duplicate:
Hardening Linux Server
I recently started to manage my own server with a cloud-based server. Recently I got hacked somehow and the server was used for phising. On the ...
3
votes
2answers
190 views
Protect sensitive data from sysadmin prying eyes
I'm thinking about this problem. What if I have to manage sensitive data (i.e. health data), and I use a managed server?
I'd use encryption of course, but if they have root access they can see conf ...
5
votes
3answers
532 views
How to effectively (and reasonably) secure Windows in corporate environment.
A member on my staff recently had their work computer compromised while on their home network. The following is the information regarding their computer
Windows XP SP3 - fully patched at the time of ...
1
vote
3answers
389 views
Is this approach of securing cookie secure?
I could not find writeups about secure cookies so I have done some thinking. (I already have a "secure" password database with bcrypt and salt)
Steps:
User logs in
Save user IP + randomstring in ...
4
votes
3answers
365 views
How would one make a network resistant to the unknown?
I play in a game which includes normal risks, but also a wide range of supernatural powers which could affect the security of a network. These may be as prosaic as a retrieving data directly from a ...
2
votes
1answer
512 views
Hardening a perimeter router
What are some of the steps that could be taken to harden a perimeter (internet facing) router from attacks by potentially malicious users?
6
votes
1answer
329 views
What are some good ways to secure personal computers
I see that many topics here are related to securing data, equipment at an enterprise level. Good advice includes stuff like blocking all unused ports, allowing only whitelisted traffic and installing ...
