Security Projects - Page 50
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
The Defense Department is giving Carnegie Mellon University $35.5 million to develop tools and tactics for fighting cyberterrorism. The inventions to be researched and engineered at the top computer science school would serve equally well in battling hackers and Internet crooks. . . .
Its time for October's scan of the month. This months scan sponsored by Digital Forensic Research Workshop is slightly different than the scans of the month that you are used to. Scan 24 is available here. The police report. . .
The joint project, dubbed Infrastructure for Resilient Internet Systems (IRIS), aims to use distributed hash table (DHT) technology to develop a common infrastructure for distributed applications. DHT is like having a file cabinet distributed over numerous servers, explained Frans Kaashoek, a . . .
Attempting to protect software on CD-ROM disks from illegal copying, Hudson Soft Co. Ltd. and Victor Company of Japan Ltd. (JVC) have developed a copy protection technology that employs embedded encryption keys. . .
Privoxy is a web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk. . .
A new and novel way of communicating over fiber optics is being developed by physicists supported by the Office of Naval Research. Rather than using the amplitude and frequency of electromagnetic waves, they're using the polarization of the wave to . . .
The Internetworked Security Information Service (ISIS) brings together four independent projects--the Open Source Vulnerability Database, the Alldas.de defacement-tracking service, the PacketStorm software database and the vulnerability watchdog VulnWatch--into a loosely organized collaboration. "There are a lot of commercial organizations that . . .
Boffins have moved one step closer to a practical implementation of the Holy Grail of encryption - quantum cryptography - by exchanging keys across a 67km fibre optic network. Until recently, the idea of quantum key distribution has been tested only. . .
LogError sent in a pointer to a PDF on the LSM project. "The access control mechanisms of existing mainstream operating systems are inadequate to provide strong system security. Enhanced access control mechanisms have failed to win acceptance into mainstream . . .
Peer-to-peer networks such as Morpheus and Audiogalaxy have enabled millions to trade music, movies and software freely. A group of veteran hackers is about to unveil a new peer-to-peer protocol that may eventually let millions more surf, chat and e-mail free. . .
Some of the world's best-known hackers unveiled a plan this weekend to offer free software to promote anonymous Web surfing in countries where the Internet is censored, especially China and Middle Eastern nations. . .
A header that includes a unique magic key allows a receiver to detect if the message is known. This header may also include a data length to allow TCP packet segregation and possibly even a simple checksum to validate the encapsulated . . .
In an effort to help Netizens in the more paranoid corners of the world evade national censorship, the cDc's Hacktivismo group is developing a browser product called Camera/Shy capable of creating and displaying images with messages which would likely get a . . .
Jim writes, "Worried about Web Application security? https://owasp.org/ has released this excellent 1.67meg document on how to safely write web applications. This paper covers everything you could possibly think of and is worth the read.". . .
David Wheeler, author of the Secure Programming HOWTO and the RATS development team from Secure Software Solutions today announced open source source code security flaw scanners. "RATS scans through code, finding potentially dangerous function calls. . . .
RSBAC is a flexible, powerful and fast open source access control framework for current Linux kernels, which has been in stable production use since January 2000 (version 1.0.9a). All development is independent of governments and big companies, and no existing access . . .
A conservative U.S. think tank suggests in an upcoming report that open-source software is inherently less secure than proprietary software, and warns governments against relying on it for national security. The white paper, Opening the Open Source Debate, from the Alexis . . .
In this special section, eWeek Labs examines the state of the art in security vulnerability detection from several angles. It's cheapest--and most effective--to fix problems while they are in development, and I evaluate two tools designed to detect application security problems . . .
A technical overview of heap and buffer overflows, Linux tools that can be used to reduce their risk, the kinds of exploits these tools can prevent, and more. "This study deals with the various kinds of overflows (heap, stack) to understand how they work and how they may be used to execute malicious code. . .
Inflow, Espion and Deloitte & Touche are running a new "Honeynet" in Ireland to attract would-be cyber attackers and study their habits. The new Honeynet is already up and running at an unspecified Internet address. On-line for just 48 hours . . .