Article Understanding the Origins of the China - Philippine Cyber War For many years, there has been a territorial dispute between China and Philippines over the Scarborough Shoal (Philippine Term: Panatag Shoal) or…
Article Man in the Browser Attack vs. Two Factor Authentication Authentication or E-authentication (Electronic authentication) is the way, technique, and method to establish a connection between two entities.…
Article Firewall Security Testing Testing firewall and IDS rules is a regular part of penetration testing or security auditing. However, because of the unique complexity involved of…
Article w3af walkthrough and tutorial part 4 - w3af tools, profiles and scripting This is part 4 in a series. Part 1 is available here:w3af Tutorial Part 1 Part 2 is available here:Discovery and Audit plugins Part 3 is available…
Article Defending yourself from Google hackers Before looking how we can prevent ourselves from Google hackers, let's see what Google hacking is. Google Hacking: [pkadzone zone="main_top"]…
Article Traffic Anomaly Detection – TCP and DNS Ever since the computer and the critical data it holds came into headlines, so did the malicious programs, attacks and the threat landscape. We have…
Article WebInspect With the exponential increase in internet usage, companies around the world are now obsessed about having a web application of their own which would…
Article Social Media Security Excerpted from Securing the Clicks: Network Security in the Age of Social Media by Gary Bahadur, Jason Inasi, Alex de Carvalho (McGraw-Hill; 2012)…
Article Vulnerability Scanners Security of a website is very crucial thing for any organization or for personal websites. It's always advised to check the security of the website…
Article Chapter 7: The role of cryptography in information security After its human resources, information is an organization's most important asset. As we have seen in previous chapters, security and risk management…
Article Metadata: The Hidden Treasure In today's Information age, Data is very crucial for every organization. From Information security point of view also data is what everybody is…
Article IObit Protected Folder Authentication Bypass Acknowledgements I would like to dedicate this article to all my friends, they know who they are, and to Irene, for her love and support.[pkadzone…
Article Protect Your Wireless Network from Leechers and Hackers Nowadays pretty much everyone uses wireless networking from your smart phone to your home and/or business networks. There are many security issues…
Article Playing by the Rules: Performing Firewall Audits Anyone who has ever managed a firewall will know that all too often it's a one way street. From the moment the device is plugged into the network,…
Article Analysis on pBot - a PHP IRC Bot that has Malicious Functions For IRC enthusiasts like me, it's just common to encounter IRC bots in underground channels that have integrated functions like port scanning, nmap,…
Article Chapter 8 - UEFI and the TPM: Building a foundation for platform trust Traditional boot processes cannot stop sophisticated attacks instantiated before operating system load. Consequently, we need a method to ensure…
Article What does a network security engineer do? MacLeod’s story Jim MacLeod's journey toward becoming a network security engineer wasn't typical. Learn what it takes to become a network security engineer.
Article Webinspect Part 2 In the first part of this article we have seen how to start a scan using WebInspect. As discussed earlier, Default scan settings tab is the heart of…
Article Simple router pawning techniques - Getting the administrative privileges [pkadzone zone="main_top"] Securing the Access Point (AP) of your router's web page and the Telnet or SSH access should be considered as part of the…
Article Complete file upload vulnerabilities Allowing an end user to upload files to your website is like opening another door for a malicious user to compromise your server. However, uploading…
Article Chapter 9: Securing remote access Remote access is no longer just about a laptop or home desktop user connecting to catch up on some work or update customer and order information.…
Article Reconnaissance with Images Gathering data on a target is extremely important if we plan to execute an attack in a more efficient manner. A typical attack scenario starts with…
Article Malicious code execution in PCI expansion ROM The malicious code in x86/x64 firmware can potentially reside in many places. One of them is in the PCI expansion ROM. In the past, the small amount…
Article Intrusion Prevention System: First Line of Defense In the past few years, advancements in technology have grown hand in hand with a substantial increase in hacking and cyber espionage. The whole…
