Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [hardening]

the process of tightening security on a system.

2
votes
1answer
151 views

CIS hardening of alpine based docker container

I've got a service running inside a docker container. I've built my own image based on nginx:stable-alpine docker image. I am trying to ascertain whether the concept of CIS hardening applies to the ...
1
vote
1answer
83 views

How to mitigate the risks of using new, third party imported electronic accessories?

As someone who is naturally good at recognizing risk and who are striving to maintain a wholistic view on security, I’m wondering how to evaluate and reduce the risks of hardware accessories (I.e. ...
0
votes
1answer
88 views

Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?

I want to use my laptop to connect to a public WiFi in a library but... I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols ...
5
votes
0answers
150 views

Using instruction set architecture (ISA) to stop stack overflows

I have been learning about using stack overflows to get arbitrary code execution, one of the tricks used is overwriting the return address to make control flow go the way you want it. Assuming our ...
4
votes
0answers
78 views

What measures beyond those for general software, if any, should be taken when preparing a work PC for lunchtime or after-hour gaming?

In some companies (not the one I work for), there are certain groups of employees that have permission of management to play certain games on their office network after the work day has ended. This ...
2
votes
0answers
279 views

Harden / Lock down SMB share

We have to use an embedded SMB server to transfer medical records to and from patients' phones. The medical records are AES-encrypted on the phones, in transit and on the embedded device. But then... ...
2
votes
0answers
63 views

Mobile processors with hardware support for efficient bounds checking

Are there any mobile or embedded processors that provide hardware support for efficient bounds checking? Intel's newest x86 processors provide MPX, which enables compilers to add automatic bounds ...
1
vote
0answers
29 views

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (...
1
vote
0answers
42 views

Hardening evaluation of shared objects files

In order to evaluate if security mechanisms are applied on binary files during compilation I usually use the checksec tool. My question is: if I want to check an .so file, which checksec's fields ...
1
vote
0answers
128 views

Secured Web Browsing

What can be done to make a setup for super secured web browsing? I've been looking at something like this: Windows host > Sandboxie > Virtualbox > Linux Guest > Web Browser (Chrome with uBlock ...
1
vote
0answers
116 views

DLL preloading attack - are IAT libraries affected too?

I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
0
votes
0answers
17 views

Hyper-V keep enhanced session while blocking redirected drives

I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced ...
0
votes
0answers
38 views

Electron app generating one-time access codes vs server generated codes

I'm designing a kiosk to use one-time SMS codes as a method of authentication. The method I'm using to generate codes happens inside of an Electron application running on a locked down kiosk, hardened ...
0
votes
0answers
72 views

Is it possible to lock guest VMs (or processes) to sticks of physical RAM to prevent row hammer attacks?

I was wondering if it is possible through some means to isolate processes (or preferably guest VMs) to physical sticks of RAM. This would be to prevent row hammer like attacks from using physical ...