Article Key Elements of an E-mail Retention Policy 1. What is an E-mail Retention Policy? Simply put, an e-mail retention policy/ERP is the process of keeping emails for compliance or business…
Article How Russia Controls the Internet Russia and Internet Freedom The Russian government is increasing its pressure on social media. Many experts maintain that the population is…
Article Why Passwords Won’t Die "What I would really love to be able to do is to kill the password dead," said White House cybersecurity coordinator Michael Daniel recently. A…
Article Root detection and evasion In this article, we will look at the techniques being used by Android developers to detect if a device on which the app is running is rooted or not.…
Article Islamic State of Iraq and Syria (ISIS) a Global Threat: Analysis of the Effects on Cyberspace of the Iraqi Situation What is ISIS and why it is menacing the world? The Islamic State of Iraq and Syria and Islamic State of Iraq and al-Sham, also known as ISIS, is an…
Article Insecure local storage: Shared preferences In the previous article, we discussed the common techniques of how application developers check for a rooted device and then how an attacker can…
Article Data loss prevention (DLP) strategy guide In this article, we'll learn about the concept of data loss prevention: why it is needed, what are the different types of DLP and its modes of…
Article Advanced sqlmap sqlmap is an attack tool which can be effectively used to perform SQL injection attacks and post exploitation acts. It is a versatile tool when it…
Article Windows Cryptography API Microsoft Windows provides a sleek API for cryptographic purposes. It is a generic interface for accessing cryptographic services provided by…
Article Honey Encryption Current Scenario In today's world, cyber criminals often use software to brute force passwords, and some may lead to successful attacks. Since there…
Article DragonFly, Cosmic Duke and Pitty Tiger: From State-Sponsored Espionage to Campaign of Independent APTs Introduction Cyber espionage is one of the most aggressive cyber threats for private companies and government entities. In recent years, the number…
Article Computer Forensics with P2 Commander Introduction Computer Forensics is the methodical series of procedures and techniques used for procuring evidence from computer systems and storage…
Article File integrity monitoring (FIM) and PCI-DSS In this article, we will learn about the requirement of file integrity monitoring in PCI-DSS (Payment Card Industry Data Security Standard). If we…
Article Configuring the ModSecurity Firewall with OWASP Rules In today's world, over 70% of all attacks carried out over are done so at the web application level, so we need to implement security at multiple…
Article Explaining cyberterrorism Introduction People feel endangered by cyberterrorists, and this topic has raised an alarm in many societies. Many experts in the IT field and many…
Article Pafish (Paranoid Fish) Introduction In this tutorial we'll take a look at a Pafish tool, which performs anti debugger/vm/sandbox tricks to detect whether the malware is…
Article Padding oracle attack Firstly, this vulnerability is not related to the Oracle database or the Oracle Company in any way. In cryptography, an 'oracle' is a system that…
Article How cybercrime exploits digital certificates What is a digital certificate? The digital certificate is a critical component of a public key infrastructure. It is an electronic document that…
Article Crowdsensing: State of the Art and Privacy Aspects 1. Introduction It is estimated that today approximately three-quarters of the human population has a mobile phone. Crowdsensing, a new business…
Article Shellcode Detection and Emulation with Libemu Introduction Libemu is a library which can be used for x86 emulation and shellcode detection. Libemu can be used in IDS/IPS/Honeypot systems for…
Article Xplico Downloading Xplico In this article we'll present Xplico, which is a network forensics tool installed in major digital forensics Linux distributions…
Article Have New Backdoors Been Discovered in iOS? An Interview With iOS Developer and Digital Forensics Expert Jonathan Zdziarski When the HOPE X (Hackers On Planet Earth) 2014 convention started on July 18th, one particular presentation caught the undivided attention of…
Article Bringing Down Security Risks With A BYOD Encryption Policy The number of employees using their personal devices for work-related purposes is absurd. Let's just say there's an employee or two in every…
Article Blackbox Assessments with Introspy This article explains how to start performing black box assessments on Android applications using Introspy. Introspy is one of the important tools…
