Article A History of Malware: Part Two, 1989-1992 In my previous article, I told the story of the very first worms and viruses. Interestingly, a groundbreaking mathemetician, John von Neumann, and a…
Article Penetration testing apps for android devices According to recent research, the amount of mobile phone users is larger than PC users. At the same time, the number of people who own Android…
Article Qualitative risk analysis with the DREAD model This article introduces two types of risk analysis (quantitative, qualitative) and presents how to perform qualitative risk analysis with the DREAD…
Article Building a Secure API in a Cloud Environment Introduction In the last couple of years there has been a boom in cloud computing, but mainly just the term is new, as we've been using cloud…
Article Behind Cyberbullying – Legislation & Coping Strategies 1. Preface: Cyberbullying and Digital Natives Dr. Sameer Hinduja and Dr. Justin Patchin at the Cyberbullying Research Center define cyberbullying as…
Article Exploiting debuggable android applications In the previous article, we have seen how to debug Java applications using a little tool called JDB. In this article, we will apply the same logic…
Article Windows 7 Security Features Windows 7 is an Operating System developed and released by Microsoft in 2009. It was designed to be a successor to the Windows Vista range of…
Article DOS Deflate: Layer 7 DOS Protection Tool DOS/DDOS stands for Denial of Service/Distributed Denial of Service. DOS or DDOS is a type of attack in which a machine or a network resource is…
Article Sinkholes: Legal and Technical Issues in the Fight against Botnets Introduction The security community is observing a sensible increase of botnet activities, in particular of cloud-hosted botnets that are mainly…
Article Attacks on android webviews In this series of articles so far, we have discussed various techniques to identify and exploit vulnerabilities in Android applications. In the…
Article A History of Malware: Part Three, 1993-1999 In my previous article, I explained what happened to the evolution of malware when microcomputers started to become a major presence in small…
Article Hack-Proof Drones Possible with HACMS Technology Introduction Unmanned Aerial Vehicles (UAVs) are one of the most flexible and useful solutions adopted by the military and private industries.…
Article A History of Malware: Part Four, 2000-2005 I remember the eager anticipation that led to the turn of century. All throughout 1999, all I ever saw or heard in the media was millenium this,…
Article Vulnerabilities in OpenSSL and GnuTLS: An Earthquake in Internet Encryption HeartBleed … the Internet encryption earthquake The first serious earthquake in the encryption world is the disclosure of the Heartbleed…
Article Hard Drive Head Stack Replacement Demo - Data Recovery Data recovery has been needed since man started to write things down. Why? Because what ever medium they tried to store the data on, it has always…
Article OWASP Practice: Learn and Play from Scratch OWASP Practice is a virtual environment to help people who want to begin their journey into web application security. Lots of material including…
Article PCI-DSS 3.0 - Key Drivers Every organization should follow a proactive rather than a reactive approach to protect against threats, risks, and vulnerabilities to which if…
Article Guerilla Psychology and Tactical Approaches to Social Engineering, Part II Introduction So far, we have discussed techniques used in manipulation, the characteristics that social engineers possess, the cycle of social eng
Article Russia and Ukraine: Information Warfare The Current Situation The fighting in Ukraine has escalated sharply since the elections on May 25th. President-elect Petro Poroshenko, backed by the…
Article What you must know about OS fingerprinting For those of us in the information technology field, there are two reasons why we should understand operating system fingerprinting. The first…
Article Domain Generation Algorithm (DGA) Introduction We all know there have been (and still is) a lot of malware lurking around the Internet. It's quite usual today that once the victims…
Article Data Access Governance: Security's Biggest Unaddressed To-Do If you are like me, there are many things you can check off your to-do list every day. However, if you are really like me, then there are some…
Article Network Time Protocol (NTP): Threats and countermeasures In this article I am going to illustrate how NTP is vulnerable to attacks like replay-delay attacks, MITM, and a very recent attack termed as NTP…
Article Extending Debuggers Sometimes we come across situations when we are in need of doing something inside our debuggers or to extend the functionality of them. For such…
