Monthly Archives: November 2006

PCI Rootkit

John Heasman, a security researcher at Next-Generation Security Software, released a paper titled “Implementing and Detecting a PCI Rootkit” describing a way to hide malicious code on graphics and network cards in such a way as to avoid detection and … Continue reading

Share
Posted in Malicious Software | Leave a comment

Secure Coding in C++/CLI

In recent post on this blog, I’ve written about buffer overflow problem and Secure Bit (patent pending) idea to solve it. Colleague Dejan I. spotted to interesting article at Dr. Dobb’s online edition titled: “Is buffer overflow still a problem?” … Continue reading

Share
Posted in Secure Programming | Leave a comment

CrypTool

CrypTool is demonstration and reference program for cryptography by Bernhard Esslinger. It is a freeware program which enables user to apply and analyze cryptographic mechanisms. It has the typical look-and-feel of a modern Windows application. CrypTool has implemented almost all … Continue reading

Share
Posted in Education and Training | Tagged , , | 3 Comments

Dutch Biometric Passport Crack

In yesterdays post, UK RFID passport crack was hot topic. Just to remind here about Dutch biometric passport crack from January: Dutch TV programme Nieuwslicht (Newslight) is claiming that the security of the Dutch biometric passport has already been cracked. … Continue reading

Share
Posted in Privacy, Security | Leave a comment

UK RFID Passport Cracked!!!

Guardian article says: Three million Britons have been issued with the new hi-tech passport, designed to frustrate terrorists and fraudsters. So why did Steve Boggan and a friendly computer expert find it so easy to break the security codes? and: … Continue reading

Share
Posted in Privacy, Security | Leave a comment

PIN Cracking

Research paper by Omer Berkman and Odelia Moshe Ostrovsky: “The Unbearable Lightness of PIN Cracking” describes an inherent flaw with the way ATM PINs are encrypted and transmitted on the international financial networks, making them vulnerable to attack from malicious … Continue reading

Share
Posted in Security Research | Leave a comment

Poll: Top Security Conferences

In my previous post, I mentioned Gartner IT Security Summit. In meantime I’ve found interesting pool on top security conferences by Dr Anton Chuvakin, on his blog, with question: “Which information security conference do you like the most?” You can … Continue reading

Share
Posted in Conferences, Events | Leave a comment

Gartner IT Security Summit

Gartner announced its IT Security Summit to be held: 4-6 June 2007 Washington, DC Marriott Wardman Park Early Bird Price is US $1795. Not cheap by my opinion. You will decide is event worh that price. Read full information here.

Share
Posted in Conferences, Events | Leave a comment

Microsoft SQL Server Runs the Security Table!?

Enterprise Strategy Group just released a research paper comparing the security of Microsoft SQL Server with Oracle and MySQL: Abstract: The rate of security vulnerabilities documented in the National Vulnerability Database for the major database vendors is noteworthy for the … Continue reading

Share
Posted in Database Security | Leave a comment

Will Buffer-Overflow be Over Soon?

It might be, who knows… Based on paper by Krerk Piromsopa and Richard J. Enbody, titled: “Secure Bit: Transparent, Hardware Buffer-Overflow Protection,” and published in IEEE Transactions on Dependable and Secure Computing, vol. 3, no. 4, pp. 365-376, Oct-Dec, 2006, … Continue reading

Share
Posted in Books, Magazines and Journals, Secure Programming, Security Research | Leave a comment