Security Projects - Page 36 - Results from #700

Discover Security Projects News

DDoS Returns: What Researchers Are Learning About Targets, Tactics

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The ability of attackers to dig deeper and wider thanks to the proliferation of botnets was covered in the first article of this series, DDoS Attacks Are Back (and Bigger Than Before). The trend is also covered at length in The Botnet Hunters. In this article, two IT security practitioners -- one with experience in dealing with DDoS attacks against government systems, the other an expert from the corporate side -- share what they've learned about the targets chosen for DDoS attacks and how to adjust security strategies based on those lessons.

LinuxSecurity.com Team
Jan 20, 2010

PHP 5.3.1 Released, Security Beefed Up

The PHP development team recently introduced the latest version of the new PHP 5.3 branch, PHP 5.3.1. This version essentially does not change the essential core 5.3 PHP engine, but by focusing on stability and security, the PHP team has introduced more than 100 bug fixes and tweaks to the overall framework.

LinuxSecurity.com Team
Jan 14, 2010

When Vulnerability Management Meets Compliance

Finding and fixing security vulnerabilities in an enterprise is tough enough without someone looking over your shoulder. But when regulatory compliance requirements are involved -- and the auditors who come with them -- the process of vulnerability management brings on a new set of challenges.

LinuxSecurity.com Team
Jan 14, 2010

Establishing a Security Framework

When it comes to securing your Linux system -- or any other system, for that matter -- the first step is to set up a security policy, a set of guidelines that state what you enable users (as well as visitors over the Internet) to do on your Linux system. The level of security you establish depends on how you use the system -- and on how much is at risk if someone gains unauthorized access to it.

LinuxSecurity.com Team
Jan 12, 2010

How security will look in 10 years look

Tom Espiner surveys the security landscape for the shape of things to come. When my editor asked me to predict what would happen to security over the coming year, and over the next 10 years, my heart sank. The permanency of internet publishing, caching and so forth means predictions have a habit of coming back to haunt you.

LinuxSecurity.com Team
Dec 29, 2009

Random Number Between Two Integers

This is a topic that is quite easy and doesn

LinuxSecurity.com Team
Dec 29, 2009

10 Greatest Open Source Software Of 2009

Great summary of the best free (as in speech and beer) applications of 2009, including TrueCrypt Free open-source disk encryption (real-time on-the-fly encryption) software for Windows, Mac OS X, and Linux (for Linux I prefer native disk encryption). From the wikipedia: It can create a virtual encrypted disk within a file or a device-hosted encrypted volume on either an individual partition or an entire storage device. It supports Microsoft Windows, Mac OS X and Linux (using FUSE) and encrypted volumes can be made portable. The version for Windows Vista or XP can encrypt the boot partition or entire boot drive and has the ability to create and run a hidden encrypted operating system whose existence is deniable.

LinuxSecurity.com Team
Dec 28, 2009

Cyber Challenge tests nation's top hackers

Like computers themselves, the Cyber Challenge is simple on the outside and complicated on the inside. The first round of the game began in June, and winners of the earlier games were brought to Washington to compete in NetWars.

LinuxSecurity.com Team
Dec 21, 2009

Linux Advisory Watch: Dec 18th, 2009

Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines. Vulnerabilities exist for virtually every vendor, every week. Check this newsletter to be sure your distribution is secure.

LinuxSecurity.com Team
Dec 18, 2009

Honeynet research lifts the lid on spam trends

Stats from the one billion spam messages blocked by Project Honey Pot over the last five years provide an insight into junk mail trends and spamming practices. The Honey Pot project was formed by a community of web administrators as an alliance against online fraud and abuse back in 2004. The group now numbers 40,000 members in 170 countries, making it the biggest effort of its kind on the web.

LinuxSecurity.com Team
Dec 16, 2009

Linux Security Kernel Clean-Up

While Windows has more security problem than a barn dog has fleas, Linux isn't immune to having its own security holes. Recently, two significant bugs were found, and then smashed. To make sure you don't get bit, you should patch your Linux system sooner rather than later.

LinuxSecurity.com Team
Dec 15, 2009

Linux devs exterminate security bugs from kernel

Developers have exterminated two bugs from the Linux kernel that threatened the security of people using the open-source operating system. The most serious of the two is remote denial-of-service vulnerability that made it possible for attackers to crash systems by sending them oversized packets.

LinuxSecurity.com Team
Dec 14, 2009

A new functionality-based application confinement security system for Linux: FBAC-LSM released today

Cliffe Schreuders wrote, "Today FBAC-LSM, a new security mechanism for Linux, has been released. FBAC-LSM restricts programs based on the features each application provides. You specify high level goals such as "Web Browser", some application-specific information (which can usually be automated), and then FBAC-LSM stops the programs from misbehaving. This limits the damage which can be done by malicious code due to malware or software vulnerabilities.

LinuxSecurity.com Team
Dec 11, 2009

Six-monthly releases: OpenBSD shows the way

Six-monthly releases have become something of a talking point in free and open source software circles after the problems Ubuntu has faced with users unhappy over major bugs. While Ubuntu, which is now five years old, appears to struggle with this pace of development, the OpenBSD project has been doing six-monthly releases for the last 12 years - with no major bugs.

LinuxSecurity.com Team
Dec 09, 2009

I Was Wrong: There Probably Will Be an Electronic Pearl Harbor

Ira Winkler prognosticates on the possibility of a catastrophic online international event. Interesting? For 15 years now, I have been publicly lambasting all of those people who have made their careers, or at least made fleeting news headlines, based on their declaration of an imminent Electronic Pearl Harbor. My disdain is based on several factors, but predominantly the lack of accountability for such statements.

LinuxSecurity.com Team
Dec 01, 2009

SANS official talks security official DG: It seems like many of the current security issues are pr

This is the second of two parts of an interview of Stephen Northcutt by technologist David Greer. Everything that follows is by Messrs Greer and Northcutt with minor edits. DG: It seems like many of the current security issues are problems that we have been dealing with for decades. How do you see the evolution of the problem space of information security?

LinuxSecurity.com Team
Nov 26, 2009

Openwall: Owl moves to 2.6 kernels, integrates OpenVZ; new ISOs

Fresh ISO images of Owl-current for x86 and x86-64 (generated today) are available on our FTP mirrors (well, maybe not on all yet, but should be by tomorrow). There are also direct download links on the Owl homepage (pointing to a specific already-updated and fast mirror)

LinuxSecurity.com Team
Nov 23, 2009

Trust Linux!

A team of researchers has implemented support for 'trusted computing' in a commercially available version of the open source operating system Linux, breaking new ground in the global drive toward more secure computing environments.

LinuxSecurity.com Team
Nov 23, 2009

A Linux Security Primer

Linux aficionados and computer security experts -- not to mention many IT writers -- are known to use a couple of terms with, well, not-easily-discernable definitions when they talk about Linux security. Problem is, you need to know these terms to understand discussions about computer security (and, of course, to communicate effectively with security vendors).

LinuxSecurity.com Team
Nov 20, 2009

Firefox 3.6 locks down component directory

The Mozilla developers have announced that Firefox 3.6 will "lockdown" the components directory of the browser to stop third party applications bypassing the standard add-ons and plug-in support by pushing user invisible changes directly into Firefox. From today's planned release of Firefox 3.6's beta 3, and onwards, the components directory will be for Firefox code only and third party developers will only be able to extend the browser through the officially supported add-ons system.

LinuxSecurity.com Team
Nov 18, 2009

Security Projects - Page 36

Strengthen Your Linux Software Development Pipeline with Code Security Scanners

Linux Security Modules (LSM): SELinux vs AppArmor vs TOMOYO

OpenSSL's New Governance Structure: A Beacon of Progress for Open-Source Security