Articles inside the category: Free Articles
on :
Tuesday, 14 Feb, 2012
How to Deploy Patch Management
How to Deploy Patch Management
Keeping up with patches is one of the most important things you can do to protect your company from security issues. But if you are staying up late on a Saturday night, logging on to server after server to patch by hand, and sending out emails to users instructing them to run Windows Update before they go to lunch on Friday, you are doing a disservice to yourself, your company, and your users. You need to deploy a patch management strategy that is scalable, automatic, and that ensures maximum compliance with patching and that
on :
Thursday, 2 Feb, 2012
Interview with Richard Johnson
Richard Johnson is a computer security specialist who spends his time playing in the realm of software vulnerability analysis. Richard currently fills the role of principal research engineer on Sourcefire’s Vulnerability Research Team, offering 10 years of expertise in the software security industry. Current responsibilities include research on exploitation technologies and automation of the vulnerability triage and discovery process. Past areas of research include memory management hardening, compiler mitigations, disassembler and debugger design, and software visualization. Richard has released public code for binary integrity monitoring, exploit mitigations, program debugging, and reverse engineering and has presented at more than 20 conferences
on :
Thursday, 19 Jan, 2012
Kyrion Digital Securities
Company Profile
Introduction The idea of Kyrion Digital Securities was born in 2009. It is a brainchild of an IIT Delhi Alumni. There was an acute shortage of trained security experts and a dearth of information security solutions in the
on :
Tuesday, 10 Jan, 2012
Interview with Gord Boyce
READ THE WHOLE INTERVIEW! The early Network Access Control (NAC) market did see a lot of consolidation and failures. Early vendors promised more than they delivered in terms of functionality and deployment ease. Many of those products required managing
on :
Friday, 23 Dec, 2011
9 Reasons to Enforce Web Security within the Organization
Considering the wide range of malicious content threatening your users, implementing strong web security within the organization is a crucial part of any defense-in-depth strategy. Web security doesn't have to mean blocking your users' access to the
on :
Thursday, 24 Nov, 2011
MacX DVDRipper Pro
I'm sure I'm not the only one that is tired of booting up a Windows machine or VM whenever you want to rip a disc. Ripping in Linux is still a little cumbersome and usually there is about a 50/50 chance
on :
Wednesday, 28 Sep, 2011
Apple OS X and iOS Hacking News
READ THE WHOLE ARTICLE This month’s article focuses on Apple technology hacking that has been identified thus far in 2011. Here you will find a compilation of some high profile media reports and research from the Web on the hacking
on :
Thursday, 15 Sep, 2011
Analysis of Zitmo
READ THE WHOLE ARTICLE by Dhawal Desai Over the time security space has seen a number of versions and variants of banking malware. With the increase in popularity and usage of smart phones, mobile attacks are becoming more frequent. Android platforms have
on :
Thursday, 8 Sep, 2011
Reverse Shell Through DLL Injection
READ THE WHOLE ARTICLE DLL Injection is a popular technique used by attackers to inject an executable file in order to perform a controlled code execution. Several methods for preventing this has been developed by Operating System’s creators, but (as
on :
Wednesday, 31 Aug, 2011
Mobile and Tablet Application Coding Security
READ THE WHOLE ARTICLE! There are practical techniques to securing app code – the first involves limiting privileges to a set of operations – this is known as sandboxing. The second technique involves identifying executables as they enter
on :
Tuesday, 23 Aug, 2011
Practical Eavesdropping of Control Data From EPC Gen2 Queries With a Programmable RFID Toolkit
READ THE WHOLE ARTICLE
Like in many other emerging technologies, security threats can target the unprotected wireless channel used between RFID readers and tags to exchange information. We present a practical eavesdropping attack to capture control data exchanged between a standard
on :
Wednesday, 17 Aug, 2011
















