Linux Network Security - Page 76

Discover Network Security News

Tokens: An additional level of secure access

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Identification and authentication are two magic words when it comes to security. Letting an authorized user in, while keeping unauthorized people out, sounds easier than it is. If I were to meet you on the street, I'd be able to see . . .

Anthony Pell
Mar 28, 2001

Ten Key Steps to Protection from Denial Of Service Attacks

DoS and DDoS (denial-of-service and distributed denial-of-service) attacks, which prevent legitimate users from accessing and using a site or particular service, have become a growing concern as more and more businesses move onto the Internet. Last year, retail giant Amazon.com, electronic . . .

Anthony Pell
Mar 28, 2001

Lion virus: How to detect and prevent

The dangerous Lion worm is stalking Linux systems. Worse than the Ramen worm, Lion installs then hides hacker tools on vulnerable systems Linux system administrators have a new worm to worry about. The SANS Institute is reporting the . . .

Anthony Pell
Mar 26, 2001

Apache Insecurity Reveals Directory Contents

In this column, we look at buffer overflows in icecast, Half-Life Dedicated Server, Solaris SNMP, ipop2d, ipop3d, and imapd; format string vulnerabilities in icecast, mutt, Half-Life Dedicated Server, and cfengine; temporary-file problems in the SGML-Tools package and Mesa; and problems with . . .

Anthony Pell
Mar 23, 2001

Bulletin: 'Dangerous' Linux worm in the wild

A dangerous worm is spreading across the Internet and infecting Linux servers running vulnerable domain name software, the SANS Institute warned this morning. Called Lion, the worm steals passwords, installs and hides other hacking tools on infected systems, and then uses . . .

Anthony Pell
Mar 23, 2001

[SATIRE] NAT translation considered harmful

It's just a week shy of April Fools Day, but we thought we'd point our readers to this little piece of satire over a segfault.org. In the age-old tradition of top ten lists, here is one on why NAT is . . .

Anthony Pell
Mar 23, 2001

ALERT! A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET

Late last night, the SANS Institute (through its Global Incident Analysis Center) uncovered a dangerous new worm that appears to be spreading rapidly across the Internet. It scans the Internet looking for Linux computers with a known vulnerability. It infects . . .

Anthony Pell
Mar 23, 2001

Understanding stealth scans: Forewarned is forearmed

This week's column is a basic primer on scanning: what it is, why it's done, and the wonderful world of "secret handshakes" and stealth scans. Scanning a system, or a network, is normally done in order to find out what . . .

Anthony Pell
Mar 22, 2001

Multi-Homed Server Vulnerabilities

In this column, we look at buffer overflows in ircd, ePerl, MIT Kerberos 4 and 5, ascdc, and slrn; temporary file problems in MIT Kerberos 4 and 5, the GNU C Library, and the Athena widget libraries; other problems with proftpd . . .

Anthony Pell
Mar 15, 2001

Beleaguered researcher says TCP weakness is real

Two days after a security vendor announced it had found a new vulnerability in TCP, only to be lambasted for passing an old problem off as news, the researcher who identified the weakness defended his work and the decision to announce . . .

Anthony Pell
Mar 15, 2001

Updated backdoor tool gets even nastier

A new version of SubSeven, a powerful and well-known backdoor program that gives attackers almost complete control over a victim's computer, is making the rounds on the Internet. And taking a cue from legitimate software vendors, SubSeven's creator plans to release . . .

Anthony Pell
Mar 13, 2001

IT security: Keep it at home or take it outside?

As the Internet becomes an ever-more dominant medium for doing business, companies require even greater protection for their intellectual assets. Conducting business via the Web turns your network into a proving ground for hackers bent on infamy. Stepping up to meet . . .

Anthony Pell
Mar 13, 2001

Another serious security flaw found in TCP

For the second time in as many months, researchers have found a serious flaw in one of the key pieces of the Internet's software backbone. Security vendor Guardent on Monday announced it has identified a potentially huge problem in the inner . . .

Anthony Pell
Mar 12, 2001

Advance notice of Web site warning may have helped block attacks

Early warnings issued by the FBI to four vertical-industry groups about the continuing threat of Web site break-ins by Eastern European organized crime groups may have helped block thousands of copycat attacks against banks and other companies doing business online, according . . .

Anthony Pell
Mar 09, 2001

FBI investigating widespread Web site break-ins by crime groups

The FBI today disclosed it has launched 40 separate investigations into alleged hacking incidents by Eastern European organized crime groups that are believed to have stolen more than 1 million credit card numbers from e-commerce and online finance Web sites powered . . .

Anthony Pell
Mar 09, 2001

Deconstructing DoS attacks

Denial of service (DoS) attacks have made headlines in the last year by assaulting a number of large and very successful companies. A rash of hits roughly a year ago left the e-industry aware of how vulnerable it is. The recent . . .

Anthony Pell
Mar 07, 2001

Study: Domain Name System security still lax

Companies rushed to upgrade Domain Name System software after warnings were issued in late January about a flaw in widely used DNS software. In the past weeks, however, upgrading has come to a halt, concludes the Iceland DNS consultancy and software . . .

Anthony Pell
Mar 02, 2001

College: A Cracker's Best Friend

University and college computer systems have become the virtual destination of choice for crackers in search of easy targets. College and university networks are cracked on a regular basis and are then used as secret servers to share music and video . . .

Anthony Pell
Mar 01, 2001

Gnutella worm: How to deal with it

Also known as Mandragore, this Gnutella worm is one of the first to infect peer-to-peer network shares When a virus writer succeeds at something new, the virus community calls it a "proof-of-concept" virus or worm. Gnuman (alias W32/GnutellaMan, . . .

Anthony Pell
Feb 28, 2001

Gnutella users warned of Internet worm

Security firms are warning about a proof-of-concept Internet worm which tries to spread malicious files via the Gnutella peer-to-peer file sharing system. The virus, called Gnutella Mandragore, will connect to the Gnutella network once it affects a users PC and will . . .

Anthony Pell
Feb 27, 2001

Linux Network Security - Page 76

Linux Pentesting Distros: An Essential Tool for Strengthening Network Security

Enhancing Network Security with Linux Proxy Servers

OPNsense 24.7 'Thriving Tiger': Elevating Open-Source Network Security and Performance