Skip to main content

Questions tagged [theory]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
0 answers
47 views

Books about security patterns and anti-patterns? [closed]

Information security was the topic of my Ph.D. dissertation, but I was investigating a rather specific sort of issue, and I am now starting to think about the notion of (information) security in ...
Aaron B.'s user avatar
0 votes
0 answers
84 views

PGP keys as a hashing method

The context is described in another of my question, and is as follow : i've got to securely store identifiers, called TIP. We need (1) a method to derive always the same UID from a TIP, so that no ...
aluriak's user avatar
  • 133
0 votes
0 answers
140 views

What to do if i have no salt?

Here is my situation : we've got ID, named TIP, from remote and large databases. We want to store all the data, but laws prevents us to store the TIP directly, but rather anonymize them, for security ...
aluriak's user avatar
  • 133
1 vote
0 answers
289 views

Practical examples of a trusting trust attack

Ken Thompson's famous trusting trust paper describes an attack wherein a compiler is subverted, and subsequently subverts all software it compiles, including itself. I have always thought the idea of ...
Josiah's user avatar
  • 11
1 vote
0 answers
81 views

What's the term/aphorism for a security practice where access equals authorization?

I read about a concept that went something like "access equals authorization," the idea being that there is something secured, and if someone manages to get into it, then they have proven ...
Aos Sidhe's user avatar
  • 111
3 votes
1 answer
216 views

Does this theoretical salted-hash-sleep scheme mitigate timing attacks?

This question is purely theoretical, I have no intention of ever implementing this scheme in practice. I'm familiar with the shortcomings of sleeping as means of mitigating timing attacks. I'm more ...
PhilipRoman's user avatar
3 votes
3 answers
244 views

What prevents this specific type of attack from being viable?

Imagine a user has an ip of 1.2.3.4 The server the user intends to connect to has an ip of 2.3.4.5 An attacker has a machine with a promiscuous network card on the user's local network. The attacker ...
majneeds2chill's user avatar
2 votes
0 answers
158 views

The Other Side of CAPTCHA [closed]

CAPTCHA stands for "Completely Automated Public Turing Test to Tell Computers and Humans Apart", but we only consider one half of it i.e. a test to separate genuine humans from bots. Can a ...
Alan Whitteaker's user avatar
2 votes
2 answers
278 views

Is 'looking for all XSS in my code' a solved computer science problem?

I have a fundamental theory question. Is looking for cross-site scripting a solved computer science problem? Or is it an open problem? Does it approximate the halting problem, injection problem or ...
gigasai's user avatar
  • 153
1 vote
2 answers
478 views

Can a program that doesn't explicitly take user input be hacked?

I'm learning about security, and it seems that all of the security problems I have seen come from input from malicious actors. I was told that it's possible to check for the existence of bugs in a ...
NotAPro's user avatar
  • 113
51 votes
10 answers
15k views

Is an SSH key with a passphrase a 2FA?

This is a really theoretical question, but if I use an SSH key with a passphrase to login on a server, could this be considered as a two-factor authentication (2FA)? Indeed, I need the SSH (private) ...
Antonin M.'s user avatar
140 votes
17 answers
24k views

Is exploit-free software possible?

I have heard that there will always be vulnerabilities in codes, software. However, I don't understand why it is not possible to have an exploit-free software. If companies keep updating their ...
Zheer's user avatar
  • 1,175
0 votes
0 answers
221 views

HTTP Basic Authentication vs. obscure filename [duplicate]

I'm setting up a service which allows a single 3rd party to access a file over HTTPS. The only security mechanism the 3rd party supports is Basic Authentication. To reduce complexity, I was going to ...
Alastair McCormack's user avatar
0 votes
0 answers
150 views

Are there any documented cases of attackers using 'Free Trials' as an attack vector?

We live in an age where a lot of services are hosted in various cloud-based infrastructures. And a lot of these infrastructures are based around a "pay as you go model". I.e. The more servers you spin ...
Jon Wyatt's user avatar
11 votes
2 answers
6k views

Why not store password in cookie?

I've got a novice question - It is often said that you should not store plaintext passwords in a client-side cookie. (I'm imagining a web browser cookie, but I supposed this applies in general.) But ...
Mathew Alden's user avatar
2 votes
1 answer
275 views

Does the subject HAVE to dominate the object in order to access the object?

Lets say Paul, is cleared for (TOP SECRET, {A,C}) where top secret is his clearance and A & C privledges. He wants to access a Document classified (Secret,{B,C}).. Top secret trumps Secret but in ...
Ryan's user avatar
  • 35
1 vote
0 answers
772 views

Detecting web visitors controlled via RDP or compromised by RAT/RAT-in-the-Browser (RitB)

Is there a way to detect whether visitors to a website are using Remote Desktop Connection (RDP) or have been compromised via a type of Remote Access Trojan(Tool)/RAT-in-the-Browser (RitB)? So a 3rd ...
Praemon's user avatar
  • 111
0 votes
1 answer
181 views

Security implications of storing encrypted snapshots on cloud

We have to deliver a zero-knowledge SQLite based accounting/reviewing app running on Mac 10.6 and above. We are asked to upload snapshots of database to cloud (AWS S3 or GCP) at regular intervals; so ...
vvsLaxman's user avatar
4 votes
2 answers
287 views

Way of categorising and organising types of security issues and areas

I have recently done a security review and uncovered 200 or so areas to improve upon covering a very diverse range of topics; Some points are process, some are config, some are new systems to be ...
ZZ9's user avatar
  • 273
4 votes
2 answers
2k views

Examples of Federated Identity Management, Third Party Identity Services and Single Sign-On

I am studying the domain of Identity and Access Management in CISSP, and I come across the three terms Federated Identity Management (FIM), Third Party Identity Services (3PIS) and Single Sign-On (SSO)...
GreenPenguin's user avatar
8 votes
2 answers
3k views

How many known time/result combinations does it take to guess a HOTP/TOTP secret?

I thought about "recovering", "determining", "guessing", "calculating" or "reproducing" the HOTP/TOTP secrets when only the outcome (6-digit code + time) is known. In case we can view the live ...
Bob Ortiz's user avatar
  • 6,705
1 vote
1 answer
533 views

Why is the BLP access control model a mandatory one?

In my lecture on formal methods in IT security as-well as on Wikipedia it is stated that the BLP model is a mandatory access control model. It is not clear to me why this is the case. We have defined ...
Sebastian Bechtel's user avatar
2 votes
4 answers
3k views

Theoretical - Password salting with concatenation vs. salting with HMAC

I was looking through different methods of salting and tried to compare which is more secure for password storage. I know HMAC wasn't meant at first for password hashing but it is widely used for that ...
fsacer's user avatar
  • 127
3 votes
1 answer
192 views

Is there any technology that allows to run code in untrusted environment?

Imagine, your computer is controlled and your traffic is watched (MitM) . For example environment can create a snapshot of process and record a traffic. Is there any chance to run code and prevent it ...
zoonman's user avatar
  • 141
2 votes
1 answer
1k views

What is the meaning of 'Default to Zero' that must be keep in mind in Authorization?

I learned that in authorization there are some things to keep in mind, there are: Authorization Creep this happens when an employee switch roles and the previous authorization isnt removed. Default ...
Vlanzyvinz's user avatar
54 votes
4 answers
10k views

Are non-English speakers better protected from (international) phishing?

After I received dozen of spam mails over the last year with my thrashmail (used for "You must log in once to check out this product.."-Sites, etc.) I noticed they were mostly translated (if they are ...
pguetschow's user avatar
3 votes
3 answers
193 views

Theoretical - Is it possible for an attacker to leave an irreversible software artifact?

Assumimg that... the target is some server (> 2010) that could be running any OS the attacker has gained access to everything remotely, (with maybe some physical access as well) Is it possible for ...
souldzin's user avatar
  • 151
2 votes
0 answers
55 views

Bad security vs no security [duplicate]

In our company we currently have a disagreement about imperfect security. Our current main project is an embedded device with a web server running on it. One of our customers wants HTTPS for that web ...
Dakkaron's user avatar
  • 219
1 vote
0 answers
281 views

Is control theory of any use in the Infosec disciplines? [closed]

I'm currently studying Engineering in a European university (not CEng, though), and I've always been fascinated by the network security/information security field. As far as I know, crypto is the ...
A. Darwin's user avatar
  • 3,567
2 votes
2 answers
452 views

Is this password inside a file secure? A security paradox

Preamble: I have been a long time lurker but first time poster to the Information Security site, so please be gentle with me. The Situation: I ran into a situation where I needed to securely store a ...
Get-HomeByFiveOClock's user avatar
20 votes
8 answers
5k views

A destructive force can always leak information through HTTP packets. Should I bother configuring outbound rules on my firewall?

I know my way around firewalls, but I am in no way a security expert. And recently, I am wondering how to effectively configure the outbound rules of any company's firewall. For the question's sake, ...
Daniel's user avatar
  • 364
1 vote
1 answer
243 views

Why is my answer to this security exam prep question incorrect?

I'm studying for a security exam and am confused by one of the chapter review questions in the book I'm using. It reads: When scanning a network via a hardline connection to a wired-switch NIC ...
Mike B's user avatar
  • 3,468
4 votes
2 answers
390 views

Theoretically, what are the best "reverse social engineering" methods for your password, and how good would they be?

I just saw this SMBC comic: http://www.smbc-comics.com/index.php?id=3955 I realize that this is not actually "reverse social engineering" as typical usage of the term. However, I'm wondering in ...
personjerry's user avatar
  • 1,246
2 votes
2 answers
905 views

Good book about general methods of exploit [closed]

I'm learning Networking/Routing & Switching basics, ANSI C and ruby languages. Also I'm an experienced Linux user, so I have basic shell scripting skills and general understanding of Linux ...
ddnomad's user avatar
  • 190
2 votes
4 answers
163 views

Layer model for information security - scientific name?

Some days ago, I was talking with a friend about the Snowden revelations and its impact on Infosec awareness and how quite a number of (supposedly) secure alternatives to established services have ...
TheWolf's user avatar
  • 1,069
-2 votes
2 answers
384 views

Will cyber security be around forever? [closed]

As time goes on, won't computers be able to automatically test for vulnerabilities to the point where they will not be prevalent any more? What I'm essentially asking is will information security be ...
user2514631's user avatar
3 votes
1 answer
253 views

Long passwords and key derivation functions

Not being a security expert, I have a rather theoratical question that I have been thinking about for quite a while now: Let's imagine an encryption software that takes a user-provided password, ...
TheWolf's user avatar
  • 1,069
1 vote
2 answers
2k views

ISAKMP and OSI layer

I'm trying to find out on which OSI layer the ISAKMP protocol resides on? It isn't listed under the wiki's list of network protocols, and the internet says it's either on the transport, network or ...
RunoTheDog's user avatar
4 votes
1 answer
2k views

Safety in Access Control Matrix and Take-Grant Model

I'm learning about the Take-Grant Model and Access Control Matrix, and I have a couple of questions regarding leaking and the safety question. Definitions These are the definitions I am using (see ...
tim's user avatar
  • 29.7k
4 votes
2 answers
3k views

Do `sudo` and `su` belong to capability-based security?

In Linux, do sudo and su belong to Capability-based security ? For example, when editing a system file, we usually need sudo or su to temporarily switch to user root. Does this example belong to ...
Tim's user avatar
  • 657
5 votes
1 answer
894 views

Capability-based security vs protection rings: in what sense are they diametrically opposite?

From https://en.wikipedia.org/wiki/Capability-based_security Capability-based security is to be contrasted with an approach that uses hierarchical protection domains. From https://en.wikipedia.org/...
Tim's user avatar
  • 657
4 votes
1 answer
347 views

Principles of memory forensics tools

I am currently writing a thesis about digital forensics which includes a chapter about memory forensics. Besides the tools and the methods of acquiring various data with them, I am kind of desperate ...
user3127632's user avatar
3 votes
1 answer
251 views

How long do HTML password fields (sent to the server as postdata) remain in memory?

In any major server-side web framework, there is usually a mechanism to read HTML form input, e.g. in ASP, for an HTML element, <input type="text" name="the_field" />, it is Request.Form("...
jimbobmcgee's user avatar
4 votes
2 answers
4k views

Nowadays, what is the difference between Cyber Security and IT Security?

Lately (and not so lately), you can hear a lot about cyber security. It is really hard to find an official description about this matter so, let's take the ISO 27032 description: "Cybersecurity” ...
kiBytes's user avatar
  • 3,470
1 vote
1 answer
238 views

Any known protocol for establishing trust between an inherently untrustworthy source and a server without a 3rd party?

Is there any kind of protocol, scheme, or theoretical paper out there that implements or examines the problem of establishing trust between two parties (communicating, listening) where the ...
Philip Lombardi's user avatar
4 votes
3 answers
1k views

Fully encrypted social network theory

I have this idea about building a social network that stores all its data encrypted. The idea is that a member's data is stored on multiple 'base servers' (of the member's choice). Each member has 3 ...
Edwin Otten's user avatar
15 votes
1 answer
19k views

Will double encryption increase the security of cipher vs bruteforce?

Assume I have a function encrypt(mes,key) where mes is the message, and key is the key. The length of key is 64 bits. Last but not least: assume the only way to crack my cipher is a brute-force attack....
Tomáš Šíma's user avatar
2 votes
4 answers
784 views

Strategies to store/remember very long password?

If future proof encryption is - in theory - possible it will require long password. What are some of the strategies for storing or remembering very long - in this case rarely used - password? For ...
daniel.sedlacek's user avatar
10 votes
2 answers
1k views

What applicability does the Halting Problem have to infosec?

I was reading an infosec blog recently, and I was caught off guard by the following statement: Sure you can run up to date software and firewalls and that network appliance in your data center that ...
Mark E. Haase's user avatar
7 votes
1 answer
2k views

How big is the risk of hash fixed points/cycles?

It's established wisdom to hash password multiple times with a salt to increase the time it takes per brute force iteration. At the same time (unless the algorithm guarantees otherwise) there's a ...
l0b0's user avatar
  • 3,025