Category: Information Security
Everything filed under Information Security.
Once More Into The [PRC Aggregated] Breaches
If you're not on the SecurityMetrics .org mailing list you missed an interaction about the Privacy Rights Clearinghouse Chronology of Data Breaches data source started by Lance Spitzner (@lspitzner). You'll need to subscribe to the list…
SHODAN API in R (With Examples)
Folks may debate the merits of the SHODAN tool, but in my opinion it's a valuable resource, especially if used for "good". What is SHODAN? I think ThreatPost summed it up nicely…
The 'fing' Corollary
Back in 2011, @joshcorman posited "HD Moore's Law" which is…
Extracting OSE Firewall Alert Data From IMAP (Gmail) Mail To CSV With Python
I played around with OSE Firewall for WordPress for a couple days to see if it was worth switching to from the plugin I was previously using. It's definitely not as full featured and I didn't see any WP database extensions where it kept a…
Putting Cybercrime [Infographics] Behind Bars
HP & the Ponemon Institute have released their third annual "Cost of Cybercrime" report and the web wizards at HP have given us an infographic from…
DIY ZeroAccess Analysis Lesson #1 : Treat GeoIP Results Lightly
We're still crunching through some of the ZeroAccess data and have some (hopefully) interesting results to present, but an weirld GeoIP anomaly has come up that I wanted to quickly…
DIY ZeroAccess GeoIP Analysis : So What?
Did you know that – if you're a US citizen – you have approximately a 1 in 5 chance of getting the flu this year? If you're a male (no regional bias for this one), you have a 1 in 400 chance of developing Hodgkin's Disease and a 1 in 5,000…
VERIS Community :: JSON vs XML
You may not be aware of the fact that the #spiffy Verizon Biz folk have some VERIS open source components, one of which is the XML schema for the "Vocabulary for Event Recording and Incident…
SSH Password Time-series Heatmap In D3
In @jayjacobs' latest post on SSH honeypot passsword analysis he shows some spiffy visualizations from crunching the data with Tableau. While I've joked with him and called them "robocharts", the reality is that Tableau does let you work…
Security & Privacy Of Mountain Lion's Dictation Feature
With Gizmodo doing a post hyping Mountain Lion's new dictation feature it's probably a good time to note that folks in regulated environments or who just care about security & privacy a bit more than others should not enable or use this…