Article Protected Mode and the IDT Introduction The MSDOS system uses IVT (Interrupt Vector Table) to hold the interrupt vectors that are called whenever some action occurs: like an…
Article Snort Rule Writing for the IT professional: Part 2 Welcome back to my series on Snort rule writing. In my first installment, we covered the basic syntax of a simple rule. We established the…
Article "Frictionless Sharing": Browser History Leaked into the Cloud I don't want this article to be alarming, and its purpose is not to make you deactivate / delete your Facebook account or make you stop all your…
Article The Sysenter Instruction and 0x2e Interrupt In this article, we'll present a couple of examples where we'll be using the 0x2e int instruction to interrupt the kernel and call some interrupt…
Article Machine Learning : Naïve Bayes Rule for Malware Detection and Classification ABSTRACT: This paper presents statistics and machine learning principles as an exercise while analyzing malware. Conditional probability or Bayes'…
Article C# Core Programming Construct (PART-1) Introduction This article explores the core C# programming language constructs by presenting numerous stand-alone concepts such as data types,…
Article Windows Kernel Debugging Symbols and Commands Introduction In this tutorial, we'll introduce a few basic tools that we need to have available when doing kernel debugging on Windows. Besides…
Article An Introduction to Data Masking Background: Dealing with Production Data is a challenge, but most organizations around the world have safeguards in place which secure the…
Article Anti-Forensics 2 For part one, click here[pkadzone zone="main_top"] 1. - Analysis Prevention and Memory Resident Execution The second part of this document examines…
Article Embedding Security in Procurement Process and Vendor Contracts Background: Every organization has a procurement process. Some of the software products acquired by an organization are COTS (Commercial off The…
Article A Security Officer’s Playbook I've been writing some pieces for InfoSec Review about my past work in information security management and assurance within the British government.…
Article Linux Booting Process Introduction In this article, we'll take a closer look at the booting process of the Linux operating system. We've already described the booting…
Article Windows booting process In the previous tutorial, we've seen how one would go about booting the Linux operating system by using GRUB. We presented the basic overview of the…
Article Machine Learning Part 3: Ranking INTRODUCTION: In the previous article, we saw the utility of Naïve Bayes Rule for malware classification. While simple to understand and implement,…
Article Botnets and cybercrime - Introduction Preface One of the most insidious cyber threats for security community is represented by diffusion of botnets, networks of infected computers (bots…
Article Windows Building Environment for Kernel Driver Development Details of Driver Development Environment In the previous article , we saw that upon installing WDK 7.1.0, we got build environments for Windows 7,…
Article Dot NET Assemblies and Strong Name Signature General Overview Before going any deeper on this subject, we need to clarify a huge ambiguity regarding signing for versioning and signing for…
Article Writing a Windows Kernel Driver Introduction If you haven't read the first two articles yet, here and here, then you probably should, because they are essential to understanding…
Article Compiling the Windows Kernel Driver Introduction In the previous article, I've written and described a kernel mode driver, but I haven't actually done anything with it. There's…
Article Penetration testing for iPhone applications – Part 4 In the first part of the article, we have discussed the iPhone application traffic analysis. The second part of the article covered privacy issues…
Article Loading the Windows Kernel Driver In the previous part of the article, we've explained how to compile the Windows kernel driver. Now that we know how to compile the driver, we also…
Article Code Access Security (CAS) Abstract Security is an essential part of .NET applications and should be taken into consideration from the grass root level. Security is all about…
Article DDoS Attack on Spamhaus – An insight Spamhaus recently witnessed one of the biggest Distributed Denial of Service attacks on its infrastructure. The Spamhaus Project is an international…
Article Embedding Security in Procurement Process & Vendor Contracts – Part 2 Background: In the previous article, we've covered how to implement security in procurement process and vendor contracts. There are 3 different…
