Article Windows booting process In the previous tutorial, we've seen how one would go about booting the Linux operating system by using GRUB. We presented the basic overview of the…
Article Machine Learning Part 3: Ranking INTRODUCTION: In the previous article, we saw the utility of Naïve Bayes Rule for malware classification. While simple to understand and implement,…
Article Botnets and cybercrime - Introduction Preface One of the most insidious cyber threats for security community is represented by diffusion of botnets, networks of infected computers (bots…
Article Windows Building Environment for Kernel Driver Development Details of Driver Development Environment In the previous article , we saw that upon installing WDK 7.1.0, we got build environments for Windows 7,…
Article Dot NET Assemblies and Strong Name Signature General Overview Before going any deeper on this subject, we need to clarify a huge ambiguity regarding signing for versioning and signing for…
Article Writing a Windows Kernel Driver Introduction If you haven't read the first two articles yet, here and here, then you probably should, because they are essential to understanding…
Article Compiling the Windows Kernel Driver Introduction In the previous article, I've written and described a kernel mode driver, but I haven't actually done anything with it. There's…
Article Penetration testing for iPhone applications – Part 4 In the first part of the article, we have discussed the iPhone application traffic analysis. The second part of the article covered privacy issues…
Article Loading the Windows Kernel Driver In the previous part of the article, we've explained how to compile the Windows kernel driver. Now that we know how to compile the driver, we also…
Article Code Access Security (CAS) Abstract Security is an essential part of .NET applications and should be taken into consideration from the grass root level. Security is all about…
Article DDoS Attack on Spamhaus – An insight Spamhaus recently witnessed one of the biggest Distributed Denial of Service attacks on its infrastructure. The Spamhaus Project is an international…
Article Embedding Security in Procurement Process & Vendor Contracts – Part 2 Background: In the previous article, we've covered how to implement security in procurement process and vendor contracts. There are 3 different…
Article An Introduction to Returned-Oriented Programming (Linux) INTRODUCTION: In 1988, the first buffer overflow was exploited to compromise many systems. After 20 years, applications are still vulnerable,…
Article Risks of using a shared hosting server In this article, I would like to present the risks associated with hosting your site on a shared hosting server. I often correlate it with the…
Article .NET Framework CLR: Common Language Runtime Introduction The point of this article is to lay down the conceptual groundwork of numerous .NET related topics such as CLR, CTS, CLS, Managed Code,…
Article Android Forensics The article tries to cover various Android forensic techniques that can be helpful in a variety of situations. The techniques or discussions below…
Article Phishing and social engineering techniques Internet usage is growing dramatically, but the vast majority of internet users don't have any security backgrounds. Neither do a large majority of…
Article The export directory Example of the export directory Let's take a look at a simple example to understand how the export directory is used by the executables/libraries.…
Article Massive Vulnerability CVE-2013-0027 Owns/Strikes Internet Explorer 6 to 10 The recent major vulnerability CVE-2013-0027 flooded almost all versions of Microsoft Internet Explorer and affected operating systems like Windows…
Article Software Patent Law: EU, New Zealand, and the US compared 1. Introduction A patent is defined as an exclusive right or rights provided by a government to an inventor for a certain period of time in exchange…
Article Snort Rule Writing for the IT Professional: Part 3 Welcome back to my continuing series of articles on Snort rule writing. My first couple of installments in this series addressed some very simple…
Article Botnets, how do they work? Architectures and case studies – Part 2 In the first part of this of this mini-series on the botnet cyber threat, we have shown the current scenario and the technological evolution in…
Article Running Metasploitable2 on virtualBox Metasploitable is a Linux-based vulnerable virtual machine. It is designed especially for people interested in learning system exploitation. Rapid7…
Article Cracked Web Applications Leak Credentials and Data If you've been paying attention to vulnerabilities in web applications, you've certainly heard of attacks involving SQL injections, cross-site…
