Category Archives: Security Research

Security Risk Management for Critical Infrastructures

Paper “Security Risk Management for Critical Infrastructures” prepared by two colleagues and me has been presented on itAIS 2011 conference at Rome Italy on October 8th, 2011.

Citation data for the paper:

Dragan Pleskonjic, Fabrizio Virtuani, Oscar Zoggia: “Security Risk Management for Critical Infrastructures”, ItAIS 2011, Rome, Italy, October 7-8, 2011

Here is conference program.

Abstract: Continue reading

Share
Posted in Conferences, Events, Security, Security Research | Tagged , , | Leave a comment

Cellphone location tracking – are you worried?

As part of ad-hoc research and preparation of presentation to security related conference, I put new poll on this blog. Question is “Cellphone location tracking – are you worried?”, and possible answers: • Yes • No • Don’t know Poll … Continue reading

Share
Posted in Mobile / Cellular / Bluetooth, Polls, Security, Security Research, Wireless Security | Leave a comment

NIST has selected the Third (Final) Round Candidates of the SHA-3 Competition

NIST has selected five SHA-3 candidate algorithms to advance to the third (and final) round: BLAKE, Grøstl, JH, Keccak, Skein. Selection was announced during December 2010. What do you think, which algorithm will win competition and become new SHA-3 standard? You can vote in poll on this blog (right upper corner).
Here is citation for NIST announcement of 3rd (final) round candidates selection: Continue reading

Share
Posted in Cryptography, Polls, Security Research | Tagged , , , , , , , , , | Leave a comment

Security Impact of Cloud Computing

Interesting paper titled “Understanding Cloud-Computing Vulnerabilities” appears in IEEE Security and Privacy Magazine (June 2010 issue). Authors of article are Bernd Grobauer, Tobias Walloschek, Elmar Stöcker, from Siemens (Munich, Germany). It touches topic which is very hot topic nowadays because of increased importance of cloud computing and many discussions and different views of its security advantages and drawbacks. Continue reading

Share
Posted in Operating Systems and Application Security, Security Research | Tagged , | 1 Comment

Citation at Fourth Balkan Conference in Informatics

One statement from our earlier book, which has been published 2007, was cited at IEEE Conference Journal. It is interesting and actual for many organizations at moment: “Security is a process of keeping necessary level of risk in acceptable boundaries. That means security is a continual process and not a final state. Organization or institution can’t consider itself “secured” after last security check. That process needs to be continual.”
DOI link: http://doi.ieeecomputersociety.org/10.1109/BCI.2009.20. Continue reading

Share
Posted in Conferences, Events, Security Research | Tagged , , , , , | 2 Comments

Citation and Quotes

I was cited and quoted couple of times in IEEE Computer Magazine article “Fighting Intrusions into Wireless Networks”, Springer Link Book “Novel Algorithms and Techniques in Telecommunications and Networking” and Telektronikk Journal. Continue reading

Share
Posted in Books, Magazines and Journals, Security Research, Wireless Security | Tagged , , , , , , , , | Leave a comment

Poll: Do You Store Your Credit Card PIN Into Mobile Phone?

I invite you to answer poll question “Do you store your credit card PIN into mobile phone?” Continue reading

Share
Posted in Polls, Security, Security Research | Tagged , , , , | Leave a comment

Interception of GSM Calls

There is serious vulnerability with A5/1 encryption scheme used in GSM networks. It can lead to interception of GSM calls. This vulnerability has been presented by Karsten Nohl and Chris Paget at the 26th Chaos Communication Congress (26C3). Continue reading

Share
Posted in Conferences, Events, Cryptography, Mobile / Cellular / Bluetooth, Security Research, Wireless Security | Tagged , , , , , | Leave a comment

IPS, Whom to believe: Gartner or NSS Labs?

An independent test and evaluation of 15 different network intrusion-protection system products from seven vendors showed none were fully effective in warding off attacks against Microsoft, Adobe and other programs. NSS Labs, which conducted the test without vendor sponsorship of any kind, also evaluated the 15 network IPS offerings for their capability in responding to “evasions,” attacks delivered in an obfuscated and stealthy manner in order to hide. In that arena, Juniper Networks and TippingPoint didn’t perform particularly well. Juniper IPS scored lowest at only 17% effectiveness. In that arena, the McAfee and IBM IPS held up particularly well. Continue reading

Share
Posted in Hardware Security, Intrusion Detection / Prevention Systems, Security Research | Tagged , , , , , , , , , , | 1 Comment

Second Round Candidates of the Cryptographic Hash Algorithm Competition Selected

NIST has selected the Second Round Candidates of the SHA-3 Competition recently. Following 14 second round candidates to continue in the competition: Continue reading

Share
Posted in Cryptography, Security Research | Tagged , , , , , , | 1 Comment