Sans Institute
113 Stories
WPA crack details revealed
News Two German researchers have published a paper giving details of how to crack the Wi-Fi Protected Access encryption standard, as well as a proof-of-concept tool.
Tags: Authentication and encryption, Security, WEP, Access Point, SANS Institute, IT Professional, Attack, TKIP, WPA, Wi-Fi
Why you should hack your own systems
Insight perspective If you want to make sure your systems are safe from hackers, you've got to test, test and test, says analyst.
Tags: Hacking, Operating systems, Web servers, Spam and phishing, Data security, Security, Network security, Security Management, Phishing, SANS Institute
As crunch bites, don't neglect the logs
Insight Managing log files may seem like a mundane issue but doing it well tightens data security and boosts compliance efforts, says Quocirca analyst.
Tags: Business security, Security Management, Security implementation/standards, Data security, Security, Organization, Electronics, PCI, Fran Howarth, compliance
Linux exploit gets around security barrier
News A security hole in the Linux kernel, which allows security features in the operating system to be bypassed, affects Red Hat Enterprise Linux 5, according to a security researcher.
Tags: Linux, Network security, Security Management, Security, Source Code, Exploit, SANS Institute, Training, Red Hat Enterprise Linux 5, Kernel
Top 25 'most dangerous' coding errors revealed
News Security organizations, companies and academics have banded together to produce a list of what they consider to be the most critical coding errors.
Tags: Authentication and encryption, Firewalls, Hacking, Politics, Defense/military, Apple Inc., Error, Security, SANS Institute, Mitre Corp.
Highly predictive blacklists: What, how, and caveats
Techguide General blacklisting is not always efficient--SRI International and the SANS Institute have developed highly predictive blacklists. Find out more in this article.
Tags: Network security, Data security, Security applications/tools, Security Management, Highly Predictive Blacklist, Security, SANS Institute, IP, Blacklist, Access Control
Sans Institute warns of cookie-stealing threat
News The security body says information has been released about the CookieMonster exploit that may facilitate the stealing of cookies from encrypted browser sessions.
Tags: Security, Web sites, Web browsers, Cookie, TCP, Web Browser, SANS Institute, Training, Vulnerability, IP
Stolen data being tunneled through EU and US
News Compromised data is increasingly being channeled through legitimate EU and U.S. companies that provide anonymity services, says security training organization Sans.
Tags: Data security, Data, Security, SANS Institute, IP, VPN, network, researcher, workstation, dynamic DNS
Zero-day flaw found in Firefox 3.5
News Mozilla warns of critical vulnerability in Firefox 3.5 Web browser's Just-in-time JavaScript compiler.
Tags: Network security, Security, Web Browser, Zero-day Bug, JIT, Mozilla Corp., Mozilla Firefox, JavaScript, blog, Network security
Secure software? Experts say it's no longer a pipedream
News Hurdles still exist, but on the eve of a big security conference, industry execs say the prospect of vulnerability-free software may not be that far away.
Tags: Network security, Mobile, PC security, Viruses and worms, Microsoft Corp., IBM Corp., Security, Vulnerability, Open Source, Gary McGraw
CIA: Cyberattack caused multi-city blackout
News The CIA has warned of successful attacks against various countries' critical national infrastructures.
Tags: Security
New Phatbot worm may be on the loose
News A new variant of the Phatbot worm may be attempting to attack SQL Server ports, according to a warning issued by the SANS Institute.
Tags: Servers, Viruses and worms
QuickTime bugs open door to attack
News Several security flaws in Apple Computer's media player could put computers running Windows and Mac OS X at risk of hijack.
Security holes add up in second quarter
News In April, May and June, more than 400 flaws were discovered that could let an attacker take control of a PC remotely.
Tags: Data security, Network security
Vendors urged to take responsibility for security
News When it comes to the security of hardware and software, suppliers should be put on the spot, argue experts at Infosecurity Europe 2008.
Tags: Software engineering/development, PC security, Data security, Network security, Security implementation/standards, Security Management, Barclays Plc., Security, Code, Supplier
