Articles inside the category: Free Articles

Written By :
on : Tuesday, 14 Feb, 2012

How to Deploy Patch Management

How to Deploy Patch Management

Keeping up with patches is one of the most important things you can do to protect your company from security issues. But if you are staying up late on a Saturday night, logging on to server after server to patch by hand, and sending out emails to users instructing them to run Windows Update before they go to lunch on Friday, you are doing a disservice to yourself, your company, and your users. You need to deploy a patch management strategy that is scalable, automatic, and that ensures maximum compliance with patching and that
Written By :
on : Thursday, 2 Feb, 2012

Interview with Richard Johnson

Richard Johnson is a computer security specialist who spends his time playing in the realm of software vulnerability analysis. Richard currently fills the role of principal research engineer on Sourcefire’s Vulnerability Research Team, offering 10 years of expertise in the software security industry. Current responsibilities include research on exploitation technologies and automation of the vulnerability triage and discovery process. Past areas of research include memory management hardening, compiler mitigations, disassembler and debugger design, and software visualization. Richard has released public code for binary integrity monitoring, exploit mitigations, program debugging, and reverse engineering and has presented at more than 20 conferences
Written By :
on : Thursday, 19 Jan, 2012

Kyrion Digital Securities

Company Profile

Introduction The idea of Kyrion Digital Securities was born in 2009. It is a brainchild of an IIT Delhi Alumni. There was an acute shortage of trained security experts and a dearth of information security solutions in the
Written By :
on : Tuesday, 10 Jan, 2012

Interview with Gord Boyce

READ THE WHOLE INTERVIEW! The early Network Access Control (NAC) market did see a lot of consolidation and failures. Early vendors promised more than they delivered in terms of functionality and deployment ease. Many of those products required managing
Written By :
on : Friday, 23 Dec, 2011

9 Reasons to Enforce Web Security within the Organization

Considering the wide range of malicious content threatening your users, implementing strong web security within the organization is a crucial part of any defense-in-depth strategy. Web security doesn't have to mean blocking your users' access to the
Written By :
on : Thursday, 24 Nov, 2011

MacX DVDRipper Pro

I'm sure I'm not the only one that is tired of booting up a Windows machine or VM whenever you want to rip a disc. Ripping in Linux is still a little cumbersome and usually there is about a 50/50 chance
Written By :
on : Wednesday, 28 Sep, 2011

Apple OS X and iOS Hacking News

READ THE WHOLE ARTICLE This month’s article focuses on Apple technology hacking that has been identified thus far in 2011. Here you will find a compilation of some high profile media reports and research from the Web on the hacking
Written By :
on : Thursday, 15 Sep, 2011

Analysis of Zitmo

READ THE WHOLE ARTICLE by Dhawal Desai Over the time security space has seen a number of versions and variants of banking malware. With the increase in popularity and usage of smart phones, mobile attacks are becoming more frequent. Android platforms have
Written By :
on : Thursday, 8 Sep, 2011

Reverse Shell Through DLL Injection

READ THE WHOLE ARTICLE DLL Injection is a popular technique used by attackers to inject an executable file in order to perform a controlled code execution. Several  methods for preventing this has been developed by Operating System’s  creators, but (as
Written By :
on : Wednesday, 31 Aug, 2011

Mobile and Tablet Application Coding Security

READ THE WHOLE ARTICLE! There are practical techniques to securing app code – the first involves limiting privileges to a set of operations – this is known as sandboxing. The second technique involves identifying executables as they enter
Written By :
on : Tuesday, 23 Aug, 2011

Practical Eavesdropping of Control Data From EPC Gen2 Queries With a Programmable RFID Toolkit

READ THE WHOLE ARTICLE

Like in many other emerging technologies, security threats can target the unprotected wireless channel used between RFID readers and tags to exchange information. We present a practical eavesdropping attack to capture control data exchanged between a standard

Written By :
on : Wednesday, 17 Aug, 2011

To Get Round To The Heart Of Fortress

READ THE WHOLE ARTICLE Cybercrime is becoming a growing threat to society. The thefts of information, crashing a website or manipulating online payment traffic are also increasing. Many organizations offer various services in the battle against digital crime, such as