|
Call for papers SecurityFocus ( www.securityfocus.com ) is currently accepting submissions for new Infocus articles. We would like to extend an invitation to security researchers, authors and academics for submissions on topics of interest to the security community. Submissions should include a short summary along with the author's name, email address and contact information. All submissions should be in MS Word format and should be sent to: editor@securityfocus.com
Examining a Public Exploit, Part 2The purpose of this article is to analyze a public exploit in a lab environment, see the alerts generated by an intrusion detection system, and then do some packet analysis of the malicious binary in order to better understand what it does and how you may have been compromised. Part 2 of 2. 2004-09-15 http://www.securityfocus.com/infocus/1801
Metasploit Framework, Part 3This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example. 2004-09-14 http://www.securityfocus.com/infocus/1800
Deploying Network Access Quarantine Control, Part 2This article discusses Network Access Quarantine Control in Windows Server 2003, which allows administrators to quarantine mobile users and verify their security posture before giving them full access to the network. Part 2 of 2. 2004-08-30 http://www.securityfocus.com/infocus/1799
Using LibwhiskerThis article discusses the use of Libwhisker, a PERL module which allows for the creation of custom HTTP packets and can be used for penetration testing various web applications. 2004-08-24 http://www.securityfocus.com/infocus/1798
Valuing Secure Access to Personal InformationThis article seeks to answer the question: is your personal data safe? Or do you give it away during almost every transaction you make with government or commercial entities? 2004-08-19 http://www.securityfocus.com/infocus/1797
Detecting Worms and Abnormal Activities with NetFlow, Part 1This paper discusses the use of NetFlow, a traffic profile monitoring technology available on many routers, for use in the early detection of worms, spammers, and other abnormal network activity in large enterprise networks and service providers. 2004-08-16 http://www.securityfocus.com/infocus/1796
Examining a Public Exploit, Part 1The purpose of this article is to analyze a public exploit in a lab environment, see the alerts generated by an intrusion detection system, and then do some packet analysis of the malicious binary in order to better understand it. 2004-08-11 http://www.securityfocus.com/infocus/1795
Deploying Network Access Quarantine Control, Part 1This article discusses Network Access Quarantine Control with Windows Server 2003, which allows administrators to quarantine mobile users before giving them full network access, by first ensuring these machines are up-to-date according to a baseline security model. 2004-08-04 http://www.securityfocus.com/infocus/1794
Data Driven Attacks Using HTTP TunnelingIn this article we will look at a means to bypass the access control restrictions of a company's router or firewall. This information is intended to provide help for those who are legitimately testing the security of a network (whether they are in-house expertise or outside consultants). 2004-08-02 http://www.securityfocus.com/infocus/1793
Wireless Attacks and Penetration Testing (part 3 of 3)This third and final part of the wireless pen-test series looks at how to mitigate the security risks outlined in the previous articles, and then looks at some proposed solutions currently in front of the IETF. 2004-07-26 http://www.securityfocus.com/infocus/1792 |
|
|
Privacy Statement |