Author Archives: Dragan Pleskonjic

About Dragan Pleskonjic

Chief Security Officer (CSO), Adjunct Professor, Security Researcher, Entrepreneur, Security Architect & Adviser, Software Development Manager, ISO 27001 Certified ISMS Lead Auditor, PCI ISA (Payment Card Industry Internal Security Assessor) More info about Dragan Pleskonjic.

New Version of CrypTool

New version of CrypTool has been released on August 4th, 2010. The current release version for users is CrypTool 1.4.30. It is available in English, German, Spanish, Polish, and from this version, in Serbian version. My students from “Visoka škola elektrotehnike i računarstva” from Belgrade, contributed localization of this software to Serbian language.
Continue reading

Share
Posted in Cryptography, Education and Training | Tagged , , , | 1 Comment

Intrusion Prevention Summit (Online)

A free online summit on Intrusion Prevention takes place on July 8, 2010. At this summit, leading experts will look at the emerging threat landscape and provide tips to ensure your security management program can best overcome these new challenges in intrusion prevention. It will also cover key aspects in detecting, patching and immunizing your network to prevent repeated attacks from occurring. Hear leading industry experts from TechTarget, Vodafone, SecureWorks, ISACA, Fortinet and more as they discuss the latest innovations, best practices, barriers to implementation and measurable benefits of intrusion prevention.

Register here: http://www.brighttalk.com/r/svf. Continue reading

Share
Posted in Conferences, Events, Intrusion Detection / Prevention Systems | Tagged , , , , | Leave a comment

Threatsaurus from Sophos

Sophos, one of world leaders in IT security and data protection, issued “Threatsaurus, the a-z of computer and data security threats”. Free PDF is here.
Whether you’re an IT professional, use a computer at work, or just browse the Internet, this book is for you. We tell you the facts about the threats to your computers and to your data in simple, easy-to-understand language. Continue reading

Share
Posted in Books, Magazines and Journals, Education and Training | Tagged , , , | Leave a comment

What’s Wrong With Secure Software Development?

Despite a wealth of security knowledge and developers’ access to advanced tools, many software security risks remain. Analysts say that vulnerabilities arise because many software developers do not understand how to build security into their code… Continue reading

Share
Posted in Secure Programming | Tagged , , , , | 1 Comment

Security Impact of Cloud Computing

Interesting paper titled “Understanding Cloud-Computing Vulnerabilities” appears in IEEE Security and Privacy Magazine (June 2010 issue). Authors of article are Bernd Grobauer, Tobias Walloschek, Elmar Stöcker, from Siemens (Munich, Germany). It touches topic which is very hot topic nowadays because of increased importance of cloud computing and many discussions and different views of its security advantages and drawbacks. Continue reading

Share
Posted in Operating Systems and Application Security, Security Research | Tagged , | 1 Comment

New WordPress Version and Theme

This blog has new look now. With change to the newest version of WordPress 3.0, I decided to change theme as well. As with every new thing, it will need some time to fine tune all small bits, plug-ins and other details. I hope you’ll like this theme even more than previous and continue to read my blog as before. Continue reading

Share
Posted in General | Tagged , | Leave a comment

Citation at Fourth Balkan Conference in Informatics

One statement from our earlier book, which has been published 2007, was cited at IEEE Conference Journal. It is interesting and actual for many organizations at moment: “Security is a process of keeping necessary level of risk in acceptable boundaries. That means security is a continual process and not a final state. Organization or institution can’t consider itself “secured” after last security check. That process needs to be continual.”
DOI link: http://doi.ieeecomputersociety.org/10.1109/BCI.2009.20. Continue reading

Share
Posted in Conferences, Events, Security Research | Tagged , , , , , | 2 Comments

Citation and Quotes

I was cited and quoted couple of times in IEEE Computer Magazine article “Fighting Intrusions into Wireless Networks”, Springer Link Book “Novel Algorithms and Techniques in Telecommunications and Networking” and Telektronikk Journal. Continue reading

Share
Posted in Books, Magazines and Journals, Security Research, Wireless Security | Tagged , , , , , , , , | Leave a comment

Poll: Do You Store Your Credit Card PIN Into Mobile Phone?

I invite you to answer poll question “Do you store your credit card PIN into mobile phone?” Continue reading

Share
Posted in Polls, Security, Security Research | Tagged , , , , | Leave a comment

Interception of GSM Calls

There is serious vulnerability with A5/1 encryption scheme used in GSM networks. It can lead to interception of GSM calls. This vulnerability has been presented by Karsten Nohl and Chris Paget at the 26th Chaos Communication Congress (26C3). Continue reading

Share
Posted in Conferences, Events, Cryptography, Mobile / Cellular / Bluetooth, Security Research, Wireless Security | Tagged , , , , , | Leave a comment