Category: Information Security
Everything filed under Information Security.
Herding [Fire]sheep
By now, many non-IT and non-Security folk have heard of Firesheep , a tool written by @codebutler which allows anyone using Firefox on unprotected networks to capture and hjijack active sessions to popular social media sites (and other web…
Securing 'su' with Google Authenticator
Google's new do-it-yourself two-factor authentication (Google Authenticator) enables you to setup stronger logins on your linux system. Nick Wilkens (@nwilkens) has a good/quick tutorial up on his company's blog for acquiring, compiling…
For Everyone Who Thought I Was Just A Zombie
For Everyone Who Thought I Was Just A Zombie — rud.is blog archive
Metricon: Verification versus Validation
Use systemogram to show what systems are supposed to do (very cool visualization for differing views of "security systems…
Metricon: Measuring Metrics Programs (Why Aren't We?)
If metrics are valuable, why aren't we measuring them. Virtually no research on…
Metricon: Software Security's Futures Plural
Metrics are the servants of risk management and RM is about making…
Metricon: Name Server Log Data
"On the use of name server log data as input for security…
Metricon: Automated Incident Reporting
Goal: make finland mostly harmless to the rest of the…
Metricon: Critical Consumption Of Infosec Statistics
Every major infosec company publishes quarterly/yearly summary reports. Some based on survey, some based on real captured…
Metricon: Evidence Based Risk Management
Better management through better measurement Speakers: Wade Baker and Alex Hutton and Chris…