Section: .. / papers / general /
| /// File Name: |
rfpolicy-2.0.txt |
Description:
|
RFPolicy 2.0 - rain forest puppy's policy on notifying vendors and releasing security vulnerabilities.
| | Author: | rain forest puppy | | Homepage: | http://www.wiretrip.net | | Changes: | Less stringent on timeframes, more stringent on communication. Thanks to everyone who contributed. I also added some supporting notes (FAQ, etc) to help dispell some misconceptions on it. | | File Size: | 15498 | | Last Modified: | Oct 17 15:45:59 2000 |
| MD5 Checksum: | 4bb04bf50ab00e365ec966deb62c2a7a |
|
| /// File Name: |
righttoleft-override.pdf |
Description:
|
Whitepaper called Right To Left Override Unicode Can Be Used In Multiple Spoofing Cases. Written in French.
| | Author: | Jordi Chancel | | File Size: | 1103880 | | Last Modified: | Feb 10 15:49:52 2010 |
| MD5 Checksum: | 16cdd0c97ceb801336262c4322bcde58 |
|
| /// File Name: |
righttoleften-override.pdf |
Description:
|
Whitepaper called Right To Left Override Unicode Can Be Used In Multiple Spoofing Cases. English version.
| | Author: | Jordi Chancel | | File Size: | 830966 | | Last Modified: | Feb 11 19:17:34 2010 |
| MD5 Checksum: | d54a10a4a976b48089351eb26f559d44 |
|
| /// File Name: |
RogueXMLSpecific.pdf |
Description:
|
Whitepaper entitled Rogue XML Specifications. It discusses insecurities that relate to XML schema.
| | Author: | Aditya Sood | | Homepage: | http://zeroknock.metaeye.org/ | | File Size: | 222734 | | Last Modified: | Feb 27 19:38:50 2007 |
| MD5 Checksum: | f09a65b98a3e2e12185cf646d3e793ae |
|
| /// File Name: |
rootkit-analysis.pdf |
Description:
|
Whitepaper called Analysis and Workings of a Rootkit in the Operating System. Written in Italian.
| | Author: | Saitek | | Homepage: | http://www.saitek.altervista.org/ | | File Size: | 66860 | | Last Modified: | Apr 27 23:11:39 2009 |
| MD5 Checksum: | 621afe8f0339e5aa4bbee5ff516d0e2f |
|
| /// File Name: |
router-sniffing.pdf |
Description:
|
Persian whitepaper discussing how to sniff router traffic via a GRE tunneling attack.
| | Author: | Ali Abbasi | | File Size: | 573108 | | Last Modified: | Apr 30 23:27:54 2009 |
| MD5 Checksum: | 2c17e9a1de0b67446ff8fe1074b36478 |
|
| /// File Name: |
routers-nat.pdf |
Description:
|
Whitepaper called Routers and Routing process explanation through NAT. Written in Italian.
| | Author: | Saitek | | Homepage: | http://www.saitek.altervista.org/ | | File Size: | 167217 | | Last Modified: | Apr 27 23:14:04 2009 |
| MD5 Checksum: | 42ec98eb524cde2aeb5427060e8e1075 |
|
| /// File Name: |
Secure-Programs-HOWTO.htm |
Description:
|
Secure Programming Howto - This paper provides a set of design and implementation guidelines for writing secure programs for Linux systems. Such programs include application programs used as viewers of remote data, CGI scripts, network servers, and setuid/setgid programs.
| | Author: | David A. Wheeler | | File Size: | 7529 | | Last Modified: | Jan 11 21:00:27 2000 |
| MD5 Checksum: | 24859d444efc55ac3c4fe643fd1ff557 |
|
| /// File Name: |
secure_smtp_proxy_for_protecting_mt..> |
Description:
|
Whitepaper entitled "Secure SMTP Proxy for Protecting Mail Transfer Agents". This is a 70 page document that discusses new angles for defending mail daemons and more.
| | Author: | Alin-Adrian Anton | | File Size: | 880872 | | Last Modified: | Sep 5 20:24:58 2007 |
| MD5 Checksum: | 5328c8e51d8209c0781888d131361c97 |
|
| /// File Name: |
SecureDevelopmentv06.pdf |
Description:
|
Corsaire White Paper: Secure Development Framework. This paper addresses the need for an infrastructure to exist in which things are securely developed to help mitigate the high costs incurred when vulnerable software is released into the wild.
| | Author: | Glyn Geoghegan | | Homepage: | http://www.corsaire.com | | File Size: | 343216 | | Last Modified: | May 19 21:19:44 2004 |
| MD5 Checksum: | 7155cf428ccb06b0b9b83af4dbfd755f |
|
| /// File Name: |
securing-info.pdf |
Description:
|
Whitepaper called Security in the Computer Science Systems, or Seguridad en los sistemas informaticos. Written in Spanish.
| | Author: | Cygog | | File Size: | 53562 | | Last Modified: | Mar 5 17:27:13 2009 |
| MD5 Checksum: | ab9df0cab88d02a99452921752afc72e |
|
| /// File Name: |
security-policy.pdf |
Description:
|
This paper outlines the strategies and managing of the processes behind implementing a successful Security Policy. Additionally, it gives recommendations for the creation of a Security Awareness Program, where the main objective would be to provide a staff with a better understanding of the issues stated in a security policy.
| | Author: | Dancho Danchev | | Homepage: | http://www.windowsecurity.com/ | | File Size: | 556798 | | Last Modified: | Sep 20 02:38:36 2005 |
| MD5 Checksum: | b57d540352ef547932a99d43e16c848d |
|
| /// File Name: |
Security_Breach_Survey.pdf |
Description:
|
White and Case, a top NYC law firm, posted a survey on Data Security Breach Notifications on September 26, 2005. From the press release: "Victims of personal data security breaches are showing their displeasure by terminating relationships with the companies that maintained their data, according to a new national survey sponsored by global law firm White & Case. The independent survey of nearly 10,000 adults, conducted by the respected privacy research organization Ponemon Institute, reveals that nearly 20 percent of respondents say they have terminated a relationship with a company after being notified of a security breach."
| | Author: | Ponemon Institute | | Homepage: | http://www.whitecase.com/news/news_detail.aspx?newsid=11731&type=News%20Releases | | File Size: | 330889 | | Last Modified: | Oct 4 00:14:13 2005 |
| MD5 Checksum: | 57fc4866bcbc56b61a9f66cfed7993e4 |
|
| /// File Name: |
SecurityIPTelephonyNetworks.pdf |
Description:
|
IP Telephony based networks, which might be a core part of our Telephony infrastructure in the near future, introduce caveats and security concerns which traditional telephony based networks do not have to deal with, have long forgotten about, or have learned to cope with. The security risk is usually overshadowed by the technological hype and the way IP Telephony equipment manufacturers push the technology to the masses. This paper highlights the different security risk factors with IP Telephony based networks.
| | Author: | Ofir Arkin | | File Size: | 459385 | | Last Modified: | Nov 24 22:50:16 2002 |
| MD5 Checksum: | e013b1ffa4ad1861992a3a2038e98d7b |
|
| /// File Name: |
seh-overflows.pdf |
Description:
|
Whitepaper called Buffer Overflow Exploitation SEH Explained. Written in Arabic.
| | Author: | SecurityRules | | Homepage: | http://sec-r1z.com/ | | File Size: | 451804 | | Last Modified: | May 27 18:51:11 2009 |
| MD5 Checksum: | 5daa553305b96fa44098f45720353971 |
|
| /// File Name: |
seh-paper.txt |
Description:
|
Playing around with SEH (the Structured Exception Handler).
| | Author: | suN8Hclf | | Homepage: | http://www.dark-coders.pl/ | | File Size: | 41425 | | Last Modified: | Aug 18 20:00:12 2008 |
| MD5 Checksum: | 679821c48bb8441a75d5ed76b003bd45 |
|
| /// File Name: |
sehop_en.pdf |
Description:
|
Whitepaper called Bypassing SEHOP. Microsoft has recently implemented in many Windows versions a new security feature named Structured Exception Handling Overwrite Protection. This paper discusses how it can be bypassed.
| | Author: | Damien Cauquil,Stefan Le Berre | | File Size: | 199380 | | Last Modified: | Dec 21 19:24:13 2009 |
| MD5 Checksum: | 9d07cf6d2d0a4ac1cc6f92499ee959bb |
|
| /// File Name: |
shortreview.dpf |
Description:
|
Whitepaper entitled Short Review Of Modern Vulnerability Research.
| | Author: | Michal Bucko | | Homepage: | http://www.eleytt.com/ | | File Size: | 268230 | | Last Modified: | Jan 12 15:34:06 2009 |
| MD5 Checksum: | 0b0e1071d27aff3a5a20323f2afb9b33 |
|
| /// File Name: |
SID.pdf |
Description:
|
This whitepaper discusses how misconfigurations and poor practices on social networks can lead to information disclosure. Written in Spanish.
| | Author: | Dedalo | | Homepage: | http://seguridadblanca.org/ | | File Size: | 6971 | | Last Modified: | Sep 10 15:16:11 2009 |
| MD5 Checksum: | 052d27bbe5356242ed69af252fc7829c |
|
|
|
|
|