Open Source Security Mother Lode

Open source security is like a military general who shows his plans to both his allies and his enemies. On the one hand, his enemies can try to exploit the plan by targeting its weaknesses. But on the other hand, by exposing his tactics to those who want to help, the plan is ultimately much stronger as a result of their feedback and modifications.
<Read More>

Virtual Desktop

As government strives to grant employees access to internal information resources when and where it’s needed while simultaneously reducing costs, desktop virtualization offers help in meeting those goals, in addition to providing both greater control over PC resources and stronger IT security.
<Read More>

Investigating Cyber Crime/Hacking and Intrusions

Proficient hacker ( he doesn't have to be a computer genius, but merely follow a few simple instructions!) telnets from his current hacked account into another of his pirated accounts, then telnets from that location to yet another account that he has hacked, remotely logging on to it in preparation to run port scans looking for targetable systems. This process forces investigating law enforcement to obtain search warrants in a number of different jurisdictions, immensely complicating the investigation.
<Read More>

3 Simple Security Principles

I use three simple rules to evaluate security solutions. These are:

Analyzing a Hack from A to Z 

What we shall cover is the actual hack itself, from the reconnaissance stage, through to enumeration, network service exploitation, and ending with post-exploitation strategies. All of these steps will then be viewed at the packet level, and then explained. Being able to view, and understand an attack at the packet level is critically important for both system administrators (sys admin) and network security personnel. The output of firewalls, Intrusion Detection Systems (IDS) and other security devices will always in turn lead you to look at the actual network traffic. If you don’t understand what you are looking at, at the packet level, then all of the network security technology you have is utterly useless. This will then be followed by how to write a Snort signature based off of the attack traffic.Tools Used ?
<Read More>