Article Crowdsensing: State of the Art and Privacy Aspects 1. Introduction It is estimated that today approximately three-quarters of the human population has a mobile phone. Crowdsensing, a new business…
Article Shellcode Detection and Emulation with Libemu Introduction Libemu is a library which can be used for x86 emulation and shellcode detection. Libemu can be used in IDS/IPS/Honeypot systems for…
Article Xplico Downloading Xplico In this article we'll present Xplico, which is a network forensics tool installed in major digital forensics Linux distributions…
Article Have New Backdoors Been Discovered in iOS? An Interview With iOS Developer and Digital Forensics Expert Jonathan Zdziarski When the HOPE X (Hackers On Planet Earth) 2014 convention started on July 18th, one particular presentation caught the undivided attention of…
Article Bringing Down Security Risks With A BYOD Encryption Policy The number of employees using their personal devices for work-related purposes is absurd. Let's just say there's an employee or two in every…
Article Blackbox Assessments with Introspy This article explains how to start performing black box assessments on Android applications using Introspy. Introspy is one of the important tools…
Article Securing Shared Preferences with Third Party Libraries In one of the previous articles, we have seen how developers implement Shared Preferences in Android applications. We have also seen how one can…
Article Securing VoIP systems Voice over Internet Protocol (VoIP) is a methodology and group of technologies for the delivery of voice communications and multimedia sessions over…
Article Cookies with Secure Flag: Undesired Behavior in Modern Browsers Introduction When a cookie has secure flag set, it will only be sent over secure HTTPS, which is HTTP over SSL/TLS. This way, the authentication…
Article Analyzing the mod security logs In the previous article, we had already configured the Mod-Security Firewall with OWASP Core Rule Set (CRS). But installing and configuring the Mod…
Article Cyber Insurance Introduction Cyber insurance coverage has been available on the market for a decade, but only recently companies have been seeing a significant…
Article Windows registry forensics using ‘RegRipper’ command-line on Linux Windows registry is a gold mine for a computer forensics investigator. During case analysis, the registry is capable of supplying the evidence…
Article Operation Emmental: Banking Hit by Even More Sophisticated Cyber Attacks Operation Emmental Security experts at Trend Micro have recently uncovered a hacking campaign dubbed "Operation Emmental" which targeted Swiss bank…
Article Microsoft NAP (Network Access Protection) In this article we will learn about one of the most important features introduced by Microsoft from the perspective of network access protection…
Article Getting started with android forensics This article introduces Android forensics and the techniques used to perform Android forensic investigations. We will discuss Android file systems,…
Article PGP Alternatives for Email Encryption A few weeks ago, I wrote an article for 2600 Magazine. (If you're curious, publication has been confirmed and you'll probably see it in the Winter…
Article Exploiting Systemic Query Vulnerabilities: Why You Should Not Attempt to Re-invent PDO The particular exploits in this article take advantage of systemic query factory vulnerabilities, vulnerabilities which exist throughout an entire…
Article Windows registry analysis with RegRipper – A ‘hands-on’ case study Every analysis begins with specific goals in mind. As a forensics investigator, you are expected to know the type and importance of information you…
Article iOS Application Security Part 35 - Auditing iOS applications with iDB In this article, we will look at another cool utility named iDB for pentesting iOS applications. Before that, i would like to apologize for coming…
Article Data Backups with Bacula: Creating the Storage Partition Introduction In this endeavor I've chosen to use Bacula backup software for the reasons outlined above. First we must talk about the Bacula server,…
Article Data Backups with Bacula: Bacula Internals Introduction This article presents the integral concepts of Bacula operation and management, which are integral parts of every Bacula backup…
Article Data Backups with Bacula: Client Data Backup and Restoration Introduction When configuring the Bacula client, we don't need the full-blown Bacula installation, but just the bacula-client package that we can…
Article Data Backups with Bacula: Backup Encryption Introduction Bacula supports file encryption on the file daemon, which sends encrypted data to the storage daemon for storage. Since the file daemon…
Article Hacking traffic light systems Traffic light systems security issues We often see movie scenes in which hackers are able to hack systems for the control of traffic lights, with…
