Protecting Conversations (Secure Network Protocols) Talk - ISC 2/7/13
The presentation from UAH's Information Security Club meeting of February 7, 2013. This presentation was Protecting Conversations, and was given by guest presenter Jonathan Creekmore of Pikewerks. This...
View ArticleOpen Forum Meeting: OpenDNS DoS Attacks and Defending Against DDoS - ISC 2/14/13
This recording is from the Open Forum ISC meeting of February 14, 2013. We opened with around 20 minutes of news such as recent security vulnerabilities, looking over items on the Bugtraq mailing list...
View ArticlePenetration Testing Part One - ISC 2/21/13
The presentation from UAH's Information Security Club meeting of February 21, 2013. This presentation was the first of two introducing the subject of penetration testing a.k.a "ethical hacking". Its...
View ArticlePenetration Testing Part Two - ISC 2/28/13
The presentation from UAH's Information Security Club meeting of February 28, 2013. This presentation was the second of two introducing the subject of penetration testing a.k.a "ethical hacking". Its...
View ArticleARP Poisoning Presentation - ISC 3/7/13
The presentation from UAH's Information Security Club meeting of March 7, 2013. This talk dealt with ARP Poisoning, which allows an attacker to redirect IP addresses to their MAC address over a LAN,...
View ArticleARP Poisoning with Ettercap Demonstration
This demo is a follow-on to the ARP Poisoning Presentation. It uses the program ettercap to acheive an ARP poisoning attack.Skip straight to the videos To start with, here's a written description of...
View ArticleEugene's Law of Security
Categories: SecurityEugene's Law of Security: There's always someone smarter.Corollary: Beware of stupid, malicious people in groups.Eugene's Law of Security is my way of describing what the designer...
View ArticleSocial Engineering Presentation - ISC 3/21/13
The presentation from UAH's Information Security Club meeting of March 21, 2013. This talk dealt with Social Engineering, the art of manipulating and reading people put into a penetration testing...
View ArticlePhishing Presentation - ISC 4/11/13
The presentation from UAH's Information Security Club meeting of April 11, 2013. This talk dealt with Phishing, a social engineering technique, and was given by Eugene Davis.Slides (PDF)Audio...
View ArticleWhat's the Difference Between a Threat and a Vulnerability?
Categories: SecurityThreat ModelingRisk AssessmentNot long ago I was working on a threat modeling project, and found that I was rather confused by the distinction between a threat and a vulnerability....
View ArticleBook Review: Threat Modeling by Frank Swiderski and Window Snyder
Categories: Book ReviewSecurityThreat modeling is something that probably should be done whenever developing a complex system, especially software, but all too often isn't. In part this deficiency is...
View ArticleBook Review: Security Engineering by Ross Anderson
Categories: SecurityBook ReviewEducationSecurity Engineering is all about designing and building secure systems. Unlike many security books, this one attempts to cover the entire range of security...
View ArticleMaking a "Linux Foundation" for Cryptography Libraries
Categories: SecurityGNU/Linux One of the things that the recent Heartbleed bug really should alert us to is the fact that our crypto libraries need work. On the one hand, we know that trusting a crypto...
View ArticleIPFire on the Dreamplug - Major Version Upgrade
Categories: SecuritydreamplugipfireIPFire (http://www.ipfire.org/) is a Linux distribution targeted towards providing a security focused router/firewall that can provide a number of services beyond...
View ArticleHow to Get 1 Million Blog Comments in a Month - A.K.A. Cleaning My Spam...
Categories: SecuritySpamI'd like to tell a brief, cautionary tale about what can happen when you don't monitor your website's comments for spam for a little while. Please note – the events within...
View Article