Category: Information Security
Everything filed under Information Security.
Honeypot Analytics : 500 Pretty Passwords
I had a few moments this past weekend to play with an idea for visualizing the passwords used against the honeypot @jayjacobs set up. While it's not as informative as Jay's weekend…
2012 WhiteHat Security Website Security Statistics Report Redux
The always #spiffy @WhiteHatSec released their 2011 Web Site Security stats report [ direct link (PDF)] last week (here's one of their teaser…
Honeypot Analytics
For this post (and probably a few subsequent ones), I'm taking the role of 'Pinky" to @jayjacobs' 'Brain' as I share some of my own analysis on the ssh honeypot passwords that Jay collected (you'll need to read his VZB post before…
Breach Reach : Google Insights
We have a burst that – if one is generous – captures interest for about a week. Even more interesting is that it seems said interest was limited to very specific geographic…
WEIS 2012 :: Best of the Best
Sadly, I could not make it to this year's Workshop on the Economics of Information Security . However, the intrepid conference organizers were quick to post the papers that were presented, and I had a chance to sift through them to pick…
Slopegraphs in Python – Log Scales & Spam Data Analysis
Given the focus on actual development of the PySlopegraph tool in most of the blog posts of late, folks may be wondering why an infosec/inforisk guy is obsessing so much on a tool and not talking security. Besides the fixation on filling a…
New SecurID Soft Token Cloning Weakness : What's The Risk?
I posted a link to Twitter earlier on a recent discovery of the ability to clone RSA SecurID soft…
Is Your Organization Ready For a Risk Management Program?
While the slides will be officially available from SIRA web site in the not-too-distant future—complete with video (for all the talks)—I figured it wouldn't hurt to put them up here as…
Angry Birds Keynote Theme
If you went to SOURCE Boston this year (2012), attended my security awareness talk and liked the Angry Birds theme to the slides, here's a copy of the Keynote theme (it's not really a true Keynote theme as there are divergent slides I've…
Slaying the BEAST in nginx
Just a quick post as I noticed that my nginx configuration was vulnerable to the BEAST attack thanks to the #spiffy SSL Certificate Tester from Qualys (I scored an "A" , btw…