Security Projects - Page 48 - Results from #940

Discover Security Projects News

Group Releases Anti-Disclosure Plan

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A group of 11 of the largest software companies and computer security firms released the first public draft of a proposed bug disclosure standard on Wednesday, and asked the security community for comments. The 37-page document sets out a detailed . . .

LinuxSecurity.com Team
Jun 05, 2003

OASIS to Develop Common Security Language

A new committee at the Organization for the Advancement of Structured Information Standards (OASIS) is laying the groundwork for a new classification system to describe Web security vulnerabilities. The OASIS Web Application Security (WAS) Technical Committee will be responsible for . . .

LinuxSecurity.com Team
Jun 02, 2003

Secure Wi-Fi standard in 12 months

Wireless network hardware manufacturers are keen to embrace a new security standard, but 802.11i will take another year before it is signed off. Wi-Fi product makers are lining up to lend support to a new security standard, as they try to allay concerns about transmitting data over wireless networks.. . .

LinuxSecurity.com Team
May 05, 2003

Port Scan Attack Detector

Michael Rash submits psad (the Port Scan Attack Detector) is a collection of four lightweight system daemons written in Perl and C that are designed to work with Linux firewalling code (iptables in the 2.4.x kernels, and ipchains in . . .

LinuxSecurity.com Team
Apr 29, 2003

Too cool for secure code

The last several weeks, as always, have brought a constant flow of security advisories. Perhaps not a torrent, but certainly more than a mere trickle. Most notable among these is the Linux kernel ptrace vulnerability, which allows local users to acquire root privileges.. . .

LinuxSecurity.com Team
Mar 26, 2003

Security Mailing Lists Come Under Fire

A Danish security company, angry over what it perceives as censorship on several popular mailing lists, is launching "a revolution to remove SecurityFocus and CERT from power. . .

LinuxSecurity.com Team
Mar 26, 2003

Bait N Switch Honeypot

Albert Gonzalez submits, "The Bait N Switch Honeypot system is a multifaceted attempt to take honeypots out of the shadows of the network security model. We attempt to make them a participant in your systems defense. To do this, we are . . .

LinuxSecurity.com Team
Mar 23, 2003

Military Academies Get Hands-on Experience Defending Cyberspace

The Cyber Defense Exercises were started over a conversation between military officers at a Dairy Queen in Waxahachie, Texas outside of Texas A&M in 1997. Initially they joked about how cool it would be to have a cyber war competition between . . .

LinuxSecurity.com Team
Mar 19, 2003

IETF creates anti-spam research group

Underscoring growing concern over spam, the Internet Engineering Task Force (IETF) has created a new Anti-Spam Research Group (ASRG) that aims to put unsolicited commercial e-mail in its crosshairs by setting standards for spam detection and potential legislation. . . .

LinuxSecurity.com Team
Mar 05, 2003

Linux Push On Security Standard

IBM, Oracle and Red Hat are backing efforts to ensure the Linux operating system achieves security assurances recognised by the Australian government. IBM and Oracle are working to get Linux certified under the International Common Criteria for Information Technology Security . . .

LinuxSecurity.com Team
Mar 04, 2003

IBM: IP Security Validator

IP Security Validator is an experimental tool that allows validation of Virtual Private Network (VPN) configurations between two network interfaces. As with testing connectivity using the Ping program, IP Security Validator enables verification and validation of VPN configurations and their connectivity.. . .

LinuxSecurity.com Team
Feb 19, 2003

New Wireless Standard Same Issues

Broadband wireless access took another step forward late last month when the IEEE approved 802.16a, an amendment that adds features to the group's 802.16 standard that defines the WirelessMAN air interface specification. 802.16 was developed by the IEEE's 802.16 Working . . .

LinuxSecurity.com Team
Feb 14, 2003

IBM Announces Commitment to Common Criteria Security Certification of Linux across IBM eServer Platf

Bernadette Rose submits, " IBM today announced that it will work with the Linux community to enter the Common Criteria certification process for the Linux operating system early this year and proceed with a progressive plan for certifying Linux at increasing security levels through 2003 and 2004. . . .

LinuxSecurity.com Team
Feb 13, 2003

Open Source Honeypots: Learning with Honeyd

Lance Spitzner submits the latest from the Honeynet Project. "Honeypots are an exciting new technology. They allow us to turn the tables on the bad guys, we can take the initiative. In the past several years there has been growing interest in exactly what this technology is and how it works. The purpose of this paper is to introduce you to honeypots and demonstrate their capabilities. We will begin by discussing what a honeypot is and how it works, then go into detail using the OpenSource solution Honeyd.. . .

LinuxSecurity.com Team
Feb 12, 2003

Cyclone: A Safe Dialect of C

Cyclone is a programming language based on C that is safe, meaning that it rules out programs that have buffer overflows, dangling pointers, format string attacks, and so on. High-level, type-safe languages, such as Java, Scheme, or ML also provide safety, but they don't give the same control over data representations and memory management that C does (witness the fact that the run-time systems for these languages are usually written in C.). . .

LinuxSecurity.com Team
Feb 01, 2003

Santa Considering Move to Linux

North Pole - Citing concerns about security and licensing costs, Santa Claus is considering migrating his computer systems from Microsoft Windows to Linux. . .

LinuxSecurity.com Team
Dec 26, 2002

OWASP CodeSeeker - An Open Source Application Firewall and IDS

The Open Web Application Security Project (OWASP) are pleased to annouce the imminent availability of CodeSeeker, an Application Level Firewall and Intrusion Detection System (AFWIDS) for Linux, Win32 and Solaris.. . .

LinuxSecurity.com Team
Nov 25, 2002

Open-Source Trojans: A Growing Problem?

Experts say the insertion of Trojans into two popular tools reinforces the need to run readily available programs, such as MD5 hashes, to ensure that code hasn't been altered. Experts recommend using MD5 hashes to expose Trojans. This and similar programs, such as MD4, SHA and SHA-1, continually compare codes generated by "healthy" software to hashes of programs in the field.. . .

LinuxSecurity.com Team
Nov 25, 2002

BIND / crypt_blowfish Openwall Linux Info

Yesterday I've put out the BIND 4.9.10-OW2 patch, which includes the patch provided by ISC and thus has the two recently announced vulnerabilities affecting BIND 4 fixed. Another recent update is crypt_blowfish 0.4.5.. . .

LinuxSecurity.com Team
Nov 17, 2002

Industry Briefs: Grounds for Identity

A year ago, identity was mostly the concern of privacy and crypto guys. The only company taking much public interest was Microsoft, which was busy scaring everybody with its Passport identity management system and the Hailstorm initiative that went along with . . .

LinuxSecurity.com Team
Nov 08, 2002

Security Projects - Page 48

Strengthen Your Linux Software Development Pipeline with Code Security Scanners

Linux Security Modules (LSM): SELinux vs AppArmor vs TOMOYO

OpenSSL's New Governance Structure: A Beacon of Progress for Open-Source Security