SANS Analyst Paper: Assessing Your Security Before Attackers Do
528632
Criminal organizations have organized their hacking efforts; it is no longer just "script kiddies" trying to break into your network. In the past several years, it has become apparent that there is real money to be made from criminal hacking. Although there are many ways to secure systems and applications, the only way to truly know how secure you are is to test yourself. By performing penetration tests against your environment, you can actually replicate the types of actions that a malicious attacker would take, giving you a more accurate representation of your security posture at any given time.
364679
In a curious decision on the part of a security software company, a white paper released today on the Symantec's Web site contains the address of an independent research paper which includes a demonstration of defeating PatchGuard, complete with source code, in an early Windows Vista beta.  The address comes by way of a 16-page reduction of Vista's security technologies.
65869
If a concerted cyberattack is coupled with a physical attack, will the system hold up? VeriSign CEO Stratton Sclavos talks about what's being done to prepare.
737263
This paper discusses the use of NetFlow, a traffic profile monitoring technology available on many routers, for use in the early detection of worms, spammers, and other abnormal network activity in large enterprise networks and service providers. Part 2 of 2.
610973
This article discusses the use of Libwhisker, a PERL module which allows for the creation of custom HTTP packets and can be used for penetration  testing various web applications.
408189
The SANS (SysAdmin, Audit, Network, Security) Institute has issued its latest list of 20 most critical Internet security vulnerabilities. Web servers top the list of ten vulnerabilities for Windows-based systems, and they fall second on the list for those that are Unix- or Linux-based.
405148
Passwords are out and tokens are the authentication wave of the future, right? Not so fast, says Jon Espenschied. The next next thing is both stranger and more familiar.
5949
Handling of images could allow an attacker to take over your PC.
150840
Backdoor drafts, security moms and up-armoring
598197
Technique lets intruders exploit flaws previously thought to be insignificant, says security researcher.
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
449182
Multiple vulnerabilities have been reported in version five of the widely-used Kerberos authentication protocol. The most serious could be exploited by crackers to gain root control to authentication servers.
63078
Security researchers have discovered another vulnerability in Windows XP Service Pack 2, but it doesn&#39;t appear to be an immediate threat.
740908
Danish security research firm Secunia has reported a vulnerability that occurs in most browsers that can be exploited by hackers looking to spoof the content of Web sites.
5599
Some see vulnerability researchers who publicize flaws as knights in shining armor; others, especially software vendors, say they're only helping the bad guys. In an interview, researcher H.D. Moore justifies what he does.
507569
InfoWorld - On Aug. 14, IT security training and research authority SANS Institute will convene its inaugural set of exams for software developers seeking to attain its new secure coding certifications. The rise of such initiatives -- and increasing adoption of source code vulnerability scanning tools among internal software development teams -- are finally making a difference in overall applications security, some end users and industry experts contend.
98494
This paper discusses the use of NetFlow, a traffic profile monitoring technology available on many routers, for use in the early detection of worms, spammers, and other abnormal network activity in large enterprise networks and service providers.