Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [research]

An activity meant to understand the way a mechanism or system works. The study or examination of a security problem or class of security problems.

Filter by
Sorted by
Tagged with
0 votes
0 answers
66 views

What are the top visualization tools out there for threat investigation?

cybersecurity professionals! I'm a researcher at a large danish university, and I've been fortunate to secure funding for a project aimed at enhancing the visualization of threat investigations in ...
Lars's user avatar
  • 1
3 votes
0 answers
171 views

A paper about putting formally proven secure "fake" vulnerabilities into your software to waste malicious actors' time

I remember seeing a tweet about an infosec research paper a while ago on how one can put a lot of "fake vulnerabilities", which resemble real vulnerabilities but are actually formally proven ...
Hypatia du Bois-Marie's user avatar
0 votes
0 answers
77 views

Prevention of User Tampering the API by Serverless clients which are in sync with the real world client

As we all know, never trust the client, when they send data to your server. However what if you prevent data manipulation by completely restructuring the architecture to something like the following: ...
mrtechtroid's user avatar
1 vote
1 answer
169 views

Get in depth information about vulnerability from a CVE

I'm trying to understand how to get more information about a vulnerability given a CVE. I noticed that some CVEs, on websites like https://www.cvedetails.com, have got references to articles or to ...
Fral's user avatar
  • 13
1 vote
1 answer
79 views

Are there HTTP/2 specific attacks different from request smuggling?

I'm researching information about HTTP/2 from a cybersecurity point of view for an article, and i wanted to include a section about attacks exclusive to HTTP/2 or were this protocol have a key role. I ...
kiratross's user avatar
1 vote
1 answer
1k views

How to encode a public key in PKCS#8?

RFC5958 defines a set of enhancements to the PKCS#8 key serialization format, bumping the version field up to 1 and additionally permitting serialization of public keys for arbitrary asymmetric ...
JamesTheAwesomeDude's user avatar
13 votes
5 answers
6k views

Why are there more research papers on Android malware than iOS malware?

Based on this question. Why are there more research papers on Android malware than iOS malware?
Marcus's user avatar
  • 1,155
2 votes
0 answers
59 views

How do malware analysts know when malware is state-sponsored? [duplicate]

When reading malware-analysis posts, I see researchers talking about sophisticated state-sponsored actors. How can researchers know when something is state-sponsored from their code/C2 servers alone?
Jack walker's user avatar
14 votes
2 answers
3k views

Is a crash always exploitable for RCE?

Reading papers written by teams looking for vulnerabilities using fuzzing, I notice that many people label a crash as a DoS vulnerability. While in other papers and researches, they go deeper after ...
J. Doe's user avatar
  • 65
1 vote
2 answers
121 views

Security Controls Categorization [closed]

I'm doing research about Information Security Controls. Considering that the topic is very wide, I would like to organize in macro categories the security controls that can be adopted by an enterprise ...
Doraemon's user avatar
1 vote
0 answers
310 views

FYP ideas in Applications of Machine Learning in Cyber Security domain [closed]

I am a Computer Science Engineering undergraduate aspiring to pursue a career in the field of cyber security. I have some experience in web application security, memory and network forensics fields. I ...
Picanto's user avatar
  • 11
10 votes
3 answers
4k views

Ring -3 exploits and existence of other rings

Concept of Rings Rings were introduced in the forerunner of UNIX, Multics, and had 8 rings for reading, writing, executing and calling (I don't quite understand why it needed 8 rings to do this, if ...
LTPCGO's user avatar
  • 1,035
2 votes
0 answers
3k views

OAuth access token/API key patterns for large web sites

First off, let me preface this post by saying I'm not a security expert. I'm trying to build regular expressions to find OAuth 2.0 access tokens and API Keys for common web sites such as Google, ...
Geoff Williams's user avatar
0 votes
1 answer
3k views

What is an IT Artefact

I am going to be starting my dissertation soon in MSc Cyber Security. The supervisor keeps asking me 'What will be your IT artefact?' and to be honest I have no idea what he is actually asking me. I ...
Liqua's user avatar
  • 1
1 vote
0 answers
176 views

Android Debugging: Error accessing memory address [closed]

I'm attempting to debug different native binaries in my Android device using the adb shell and gdbserver. I receive the following error when i place a breakpoint in a program using gdb and continue ...
david 's user avatar
  • 11
3 votes
0 answers
124 views

Research on pedestrian trajectories' interaction with camera placement

I'm looking for empirical research on whether pedestrian walking trajectories are affected by areas under video surveillance. Maybe this would depend on the interval after a camera is prominently ...
user1093043's user avatar
0 votes
2 answers
246 views

Are there any real instances of threats to machine learning systems?

I recently read a paper on The security of Machine Learning. Are there any instances of attacks against machine learning systems besides spam filters?
Anukarsh Singh's user avatar
0 votes
1 answer
181 views

What are the known ways to gain complete access to hardware audio?

Are there any known ways to gain access to firmware (bios/EFI) and permanently change the audio in a way that would effect the quality (Clarity, Volume, Frequency Range, Dynamic Range). For instance ...
BillTheMagnificient's user avatar
2 votes
0 answers
253 views

Implementation of existing smart lock methods

Smart lock? Apple, Android, Google, and now Microsoft have a feature called "auto|smart|dynamic|proximity lock" which enables to unlock your computer by simply carrying a (Bluetooth) support device ...
Nils Q.'s user avatar
  • 29
2 votes
0 answers
196 views

What is the typical half-life of a virus/worm on the internet?

I am curious about the typical half-life (i.e., loosely relating to radioactive half-life here), if one has been measured/estimated, for the average virus/worm on the internet. Has anyone done a ...
honeste_vivere's user avatar
2 votes
1 answer
158 views

Are there any cryptographic techniques which combine encryption with false packet prevention? What is this called?

Assume that two devices are communicating via some sort of method that can be publicly viewed, and replicated. Attackers have the ability to replicate information sent between the two, and attackers ...
Cin316's user avatar
  • 123
6 votes
3 answers
2k views

How can I crawl the internet for malware?

For anyone who wants to study malware, there are a few websites that publish malware samples and/or URL feeds for anyone to retrieve and study. As opposed to performing such file-based analysis, I ...
user avatar
0 votes
1 answer
179 views

How do I decide my specialization in cyber security? [closed]

I have done web security and interested in learning mobile security, IOT security, malware analysis etc. Will doing all of this make me "Jack of all but master of none". I have a limited time to ...
siddhu619's user avatar
  • 117
1 vote
1 answer
107 views

Continuous learning: Identifying/ Leveraging papers on new research, best practices, etc [closed]

As we all know there are so many resources with awesome information security related content. Does any one have best practices for managing the large influx of these papers and blog posts across ...
userJoe's user avatar
  • 93
1 vote
1 answer
172 views

Who are some renowned academicians or PhD guides in Information Security? [closed]

The question might seem opinion based, but I wish to know who are some people who are academicians or PhD guides in the field of Information Security?
user5155835's user avatar
2 votes
2 answers
143 views

Latest Vulnerability Information for IT Security Research

Are there any web sites where one can visit to see the latest disclosed vulnerabilities in order to further develop IT security research skills and keep up-to-date?
HadidAli's user avatar
  • 570
3 votes
1 answer
348 views

Is it possible to do research in both Computer Architecture and Security

I just finished with my MSc in Computer Science and Engineering (Security study-line) with a thesis on cache timing attacks on virtualized environments. I also have an MEng in Electronic and ...
alex10791's user avatar
  • 151
0 votes
1 answer
176 views

How can I proceed with my research on applying machine learning in Cyber Security? [closed]

I have two years of experience as a pen tester, I want to do masters in machine learning and security and research in finding ways to tackle current security problems through machine learning. Also ...
siddhu619's user avatar
  • 117
0 votes
1 answer
184 views

How can I trust a mobile app? [closed]

Nowadays we are putting a lot of trust in mobile apps in order to survive in a globalized society. We are even under a kind of peer pressure which madly drives us to use these new applications. One ...
Jolfaei's user avatar
  • 13
-3 votes
1 answer
260 views

Need to learn information security [closed]

I want to learn about information security so I need some good sources to help me and learn that. I'm still a beginner.
ASIL's user avatar
  • 5
1 vote
1 answer
553 views

Hops encountered More for spam Mails than Legitimate Mails

Background I am working with email headers for spam detection. Each E-Mail header contains many "Received:" headers fields. Each "Received:" header is added by an intermediate Smtp/Mail server in the ...
user10012's user avatar
  • 191
6 votes
1 answer
613 views

What is the current state of RFID / NFC security?

I'm attempting to do some RFID and NFC cloning and replaying research, as I'm hoping to be able to demo physical security as an attack vector to a few of out clients and prospects. The downside (...
WorseDoughnut's user avatar
2 votes
1 answer
702 views

Deliberate Vulnerable Openstack images for penetration testing/training or research

I was just wondering if there are already deliberate vulnerable Openstack images for penetration testing/training or research. Something in line with OWASP's DVWA e.t.c....there quite a lot out there ...
SyCode's user avatar
  • 210
3 votes
1 answer
848 views

What are active research topics in SSL/TLS?

I don't know whether it is right to ask a question here for my MTech dissertation. I thought there is no good place in the world where I can find security experts like here. I am interested in doing ...
prakharjain's user avatar
5 votes
3 answers
205 views

Ethics & releasing research with no viable solution [duplicate]

I've been doing some pretty interesting research that involves abusing a particular technology to carry out malicious behavior. Normally, upon completion of my research, I'd hand over all of my work ...
haze's user avatar
  • 468
7 votes
1 answer
226 views

Restricting access to "hacking" sites and tools

I tried following a link from a post on this site and discovered that insecure.org is blocked by our internet proxy. What are the potential benefits and risks of allowing access to such sites to ...
JimmyJames's user avatar
  • 3,049
1 vote
1 answer
141 views

Didn't understood what the purpose of the newly discovered TCP Faking attack

Source: http://lgms.nl/blog-2 Hey guys, I've been reading through the research paper but didn't understand the purpose of the attack. What the attacker will want to exploit here ?
Igal's user avatar
  • 11
0 votes
1 answer
267 views

How do you go about researching and discovering zero days? [closed]

How do you go about researching and discovering zero days? Breakdown the process. What positions can I expect to see that offers a more offensive and research oriented approach to security? i see How ...
adrián's user avatar
  • 41
1 vote
3 answers
2k views

How can I create a research botnet within VMware?

For educational purposes I am attempting to create a botnet within VMware making use of 3 or 4 machines (So I can attack a 5th virtual machine using this botnet), but the issue I'm facing is I can't ...
Jean Wild's user avatar
5 votes
1 answer
204 views

Quantitative Security Analysis of Open Source Repos like CRAN and NPM

Is anyone aware of any quantitative analysis or research on the security of CRAN or NPM? e.g. How much malware is hosted, rate of compromise, speed to close, number of attack vectors, CERT reports ...
Colin's user avatar
  • 181
6 votes
1 answer
335 views

Attacks Against Password Managers

What threat models and currently known attacks against online and/or offline Password Managers exist, that do not base on CSRF, XSS or autofill behaviour? I have found two publications from usenix....
John's user avatar
  • 1,017
12 votes
1 answer
280 views

Where is the best place to get descriptions of malware?

I'm looking for a source of descriptions of 1990s to early 2000s malware; I have searched for a very long time yet found very little. I require information such as payload activation dates, files ...
Starmute's user avatar
  • 121
0 votes
1 answer
166 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing it?...
rhymsy's user avatar
  • 1,212
5 votes
1 answer
2k views

Do home video surveillance cameras work as deterrents?

After an alarming uptick in automotive and household burglaries, Our neighborhood is chatting about installing video cameras on their houses. I'm looking for research that shows whether or not they ...
JTW's user avatar
  • 61
2 votes
0 answers
89 views

Verification of implementations of security protocols

I'm interested in how an implementation of a security protocol can be verified correct and complete. The AVISPA project (http://www.avispa-project.org/) can be used to verify the protocol. I guess ...
COL Wotohice's user avatar
1 vote
0 answers
369 views

Hashcat Turkish character problem [closed]

I'm using cudahashcat, it haven't special chars like "öçşĞÜ" in standart charsets. I defined charsets with windows-1254 and other encoding types(and -1 öÖçÇğĞşŞüÜıİ?a parameter), i tried but they didn'...
deciy's user avatar
  • 11
5 votes
1 answer
2k views

Lighteater - BIOS/UEFI vulnerable

I am currently a bit confused, I have read today an article about the BIOS-rootkit Lighteater made by John Loucaides and Andrew Furtaki. In their presentation 'How many million BIOSes would you like ...
Greeneco's user avatar
  • 173
3 votes
2 answers
295 views

Why do researcher need to control all C&C servers of a botnet?

Why do researcher need to control all C&C servers of a botnet? Wouldn't it be easier to spread a deinstall command to all reachable PCs to cripple the botnet? This could be done over and over ...
botty's user avatar
  • 33
2 votes
1 answer
6k views

how to extract a valid digital certificate and put it on other program

I am working on this matter as a graduate, but I need some help. how can extract a valid digital certificate to put it on other program? can I put a digital certificate on other executables and be ...
adrián's user avatar
  • 41
5 votes
2 answers
906 views

How should I document my Public Key Infrastructure?

I'm preparing to document a 3 tier PKI (with multiple second level policy CAs) and want to create a document that is useful, technical, and not too overwhelming to the non-PKI expert. I suppose the ...
makerofthings7's user avatar