Article Windows 7 Security Features Windows 7 is an Operating System developed and released by Microsoft in 2009. It was designed to be a successor to the Windows Vista range of…
Article DOS Deflate: Layer 7 DOS Protection Tool DOS/DDOS stands for Denial of Service/Distributed Denial of Service. DOS or DDOS is a type of attack in which a machine or a network resource is…
Article Sinkholes: Legal and Technical Issues in the Fight against Botnets Introduction The security community is observing a sensible increase of botnet activities, in particular of cloud-hosted botnets that are mainly…
Article Attacks on android webviews In this series of articles so far, we have discussed various techniques to identify and exploit vulnerabilities in Android applications. In the…
Article A History of Malware: Part Three, 1993-1999 In my previous article, I explained what happened to the evolution of malware when microcomputers started to become a major presence in small…
Article Hack-Proof Drones Possible with HACMS Technology Introduction Unmanned Aerial Vehicles (UAVs) are one of the most flexible and useful solutions adopted by the military and private industries.…
Article A History of Malware: Part Four, 2000-2005 I remember the eager anticipation that led to the turn of century. All throughout 1999, all I ever saw or heard in the media was millenium this,…
Article Vulnerabilities in OpenSSL and GnuTLS: An Earthquake in Internet Encryption HeartBleed … the Internet encryption earthquake The first serious earthquake in the encryption world is the disclosure of the Heartbleed…
Article Hard Drive Head Stack Replacement Demo - Data Recovery Data recovery has been needed since man started to write things down. Why? Because what ever medium they tried to store the data on, it has always…
Article OWASP Practice: Learn and Play from Scratch OWASP Practice is a virtual environment to help people who want to begin their journey into web application security. Lots of material including…
Article PCI-DSS 3.0 - Key Drivers Every organization should follow a proactive rather than a reactive approach to protect against threats, risks, and vulnerabilities to which if…
Article Guerilla Psychology and Tactical Approaches to Social Engineering, Part II Introduction So far, we have discussed techniques used in manipulation, the characteristics that social engineers possess, the cycle of social eng
Article Russia and Ukraine: Information Warfare The Current Situation The fighting in Ukraine has escalated sharply since the elections on May 25th. President-elect Petro Poroshenko, backed by the…
Article What you must know about OS fingerprinting For those of us in the information technology field, there are two reasons why we should understand operating system fingerprinting. The first…
Article Domain Generation Algorithm (DGA) Introduction We all know there have been (and still is) a lot of malware lurking around the Internet. It's quite usual today that once the victims…
Article Data Access Governance: Security's Biggest Unaddressed To-Do If you are like me, there are many things you can check off your to-do list every day. However, if you are really like me, then there are some…
Article Network Time Protocol (NTP): Threats and countermeasures In this article I am going to illustrate how NTP is vulnerable to attacks like replay-delay attacks, MITM, and a very recent attack termed as NTP…
Article Extending Debuggers Sometimes we come across situations when we are in need of doing something inside our debuggers or to extend the functionality of them. For such…
Article Key Elements of an E-mail Retention Policy 1. What is an E-mail Retention Policy? Simply put, an e-mail retention policy/ERP is the process of keeping emails for compliance or business…
Article How Russia Controls the Internet Russia and Internet Freedom The Russian government is increasing its pressure on social media. Many experts maintain that the population is…
Article Why Passwords Won’t Die "What I would really love to be able to do is to kill the password dead," said White House cybersecurity coordinator Michael Daniel recently. A…
Article Root detection and evasion In this article, we will look at the techniques being used by Android developers to detect if a device on which the app is running is rooted or not.…
Article Islamic State of Iraq and Syria (ISIS) a Global Threat: Analysis of the Effects on Cyberspace of the Iraqi Situation What is ISIS and why it is menacing the world? The Islamic State of Iraq and Syria and Islamic State of Iraq and al-Sham, also known as ISIS, is an…
Article Insecure local storage: Shared preferences In the previous article, we discussed the common techniques of how application developers check for a rooted device and then how an attacker can…