Archive | Security Tools RSS feed for this section
MIT Lincoln Lab Network Security Software
MIT Lincoln Laboratory has developed a Network Security Analysis application known as NetSPA. In short, I am very impressed with this tool. NetSPA (Network Security Planning Architecture) correlates firewall rules / ACL’s with vulnerability data such as Nessus output. This tool then visually plots attack paths through an interactive interface that lets you model different [...]
Continue reading...Record IM video on the network?
1. July 2008
A friend of mine is works in the financial services market. His company has a need to record Instant Messenger video sessions (think AOL and MSN webcam ) and archive them. They need to do this on the network as opposed to having client software do it locally on the desktop. This is due to [...]
Continue reading...RFP for PenTesting
11. July 2007
eWeek has a decent RFP template you can use when selecting a company to provide PenTest services. It’s not perfect but it is a great start if you have nothing. The RFP is on page 44 of the July9th issue. If you happen to be looking for those services check out NMI InfoSecurity Solutions. They [...]
Continue reading...Declassified window film stops wireless / cell signals
6. July 2007
I saw this one on Slashdot the other day http://science.slashdot.org/article.pl?sid=07/07/03/0228246&from=rss Quote from article: “Once manufactured under an exclusive contract with the US government, this recently declassified window film is now available to the public. But don’t expect to see it on store shelves anytime soon. Currently, it’s only available directly from the manufacturer, and at [...]
Continue reading...List of Malware Analysis tool from SANS
3. November 2006
The Internet Storm Center at SANS has a post with a list of Malware Analysis tools submitted mostly by readers. If you are thinking about dissecting that piece of malware you just found, take a look at this list of helpers. Unless you do this a lot you’ve probably never heard of most of these [...]
Continue reading...Malware Analyzing Sandbox
3. November 2006
The clever folks over at Sunbelt Software have created a great free service to analyze malware samples called CWSandbox. How it works is you upload your suspected malware sample to their site. The CWSandbox then runs the malware and gives you a detailed report of what it did, it’s name if known, and a bunch [...]
Continue reading...Free Windows Honeypot from NetVigilance
2. November 2006
VA provider NetVigilance has released a free Honeypot for Windows called WinHoneyd. It is a low-interaction (it simulates services such as RPC, HTTP, FTP, etc.) honeypot based on the Open Source honeyd software written by Niels Provos. Instructions, sample configs and FAQ’s can be found on the NetVigilance site. –Chris Technorati Tags: WinHoneyd, honeypot, netvigilance, [...]
Continue reading...Ajax based port scanner
27. October 2006
In the “WEB 2.0″ world we live in it was a matter of time before Ajax security tools showed up. Ener OPScanner, an Ajax based port scanner. I definitely wouldn’t start making plans to replace NMAP with it. It’s more a novelty and a useful way to can yourself when making basic firewall or ACL [...]
Continue reading...- Record IM video on the network?
- WoW adds 2 factor authentication
- New blog theme
- Twitter + Security = Security Twits
- Security for Web Meetings?
- 3 open InfoSec positions at MIT Lincoln Laboratory
- NAC Panel Discussion: What is the state of NAC?
- ICANN shutting down a Chinese registrar?
- Shoot yourself in the foot in any language
- MIT Lincoln Lab Network Security Software
- Your favorite Mac apps? (8)
- Should I renew my CISSP? (7)
- NAC Panel Discussion: What is the state of NAC? (6)
- Is Data Leak Prevention the next “big thing” in security? (6)
- NitroSecurity files for IPO (5)
- Whitedust.net called it quits? (5)
- Over reliance on industry analysts (4)
- VA loses another PC…36,000 at risk (4)
- Stopping 100% of web proxies? (4)
- Juniper launches a switch line (4)
- APT and attribution
- McAfee acquires NitroSecurity
- RIM fix your Blackberry S/MIME experience, please?
- Some things to look for in your SecurID / Remote Access logs
- WPScan – WordPress Security Scanner
- Do you digitally sign email?
- Giving a presentation on APT tonight in Manchester, NH
- RSA Security breached by APT
- New mass-mailing worm spreading like crazy – VBMania
- Intel to acquire McAfee for $7.7 Billion
Latest Videos
InfoSecPodcast tweets
3 weeks ago
Reading now
10. February 2009
0 Comments