Category: security

  • DITSCAP, DIACAP, NICAP, ISP

    If you are looking for the acronyms above go to –> http://infoassure.blogspot.com  

    Most human beings have the luxury of not having to know what the acronyms DITSCAP, DIACAP, NIACAP and ISP mean.  I am not one of those human beings. 

    You know all those times you were at work and the Big Wigs decide to come up with some new ridiculous security rule that is just more hassle; have you ever cursed the stupid, stupid bastards that came up with a web blocker that won't let you visit fark.com, ebaum's world or stileproject… I'm the that stupid, stupid bastard

    But hey, man, don't blame me.  Any policy I (or any other System Security Engineer) comes up with usually is and interpretation of a company policy.  And usually (at least in my experience) we aren't the ones making the final decisions.

    (Sigh) Anyway, bitches…  

    I try to include some actual Security Engineering in this blog but it just seems a little over the top because most of my readers (who are either techies or N00bies) can not relate and/or don't have a use for. 

    System Security Engineering has to do with Certification and Accreditation, developing security and business plans, and creating organizational information security policies far Information Systems (boring, boring, booooring stuff… that pays pretty good).  It includes all levels of computer security but also deals with things like… operational security.

    http://infoassure.blogspot.com  will focus on system security engineering.

    I'll continue to put the SSE post in this blog but I'll hide most of them in the DITCAP category so my regular elamb.org visitors don't get nauseated.

  • Systm 2 Out!

    Systm Episode 2!
    http://www.prolexic.com/systm/vid2/systm–0002–mythtv–large.wmv.torrent
    http://www.prolexic.com/systm/vid2/systm–0002–mythtv–large.xvid.avi.torrent
    http://www.prolexic.com/systm/vid2/systm–0002–mythtv–large.h264.mov.torrent
    http://www.prolexic.com/systm/vid2/systm–0002–mythtv–large.theora.ogg.torrent

    read more | digg story

  • Firewall Resources

    Firewalls 101: How stuff works DOT com.  Great for establishing a foundation for understanding the firewall.

    Firewall FAQ great for newbies and rusty IT Security test takers from the undisputed champions on Infosyssec who continue to hack the hackers.

    Exhaustive Firewall Links from CERIAS.

    Another great article by Cisco.  White Paper on Cisco's PIX firewall and Stateful  Firewall Security.

    ISAserver.org: The No.1 unofficial ISA Server 2000
    & 2004 resource site – This feed offers news, articles, tutorials
    and reviews for ISA administrators. —> ISA SERVER/FIREWALL FEED

    Dr. Tom Shinder's ISA Server Firewall Blog.  Not updated very often, but good info on ISA firewalls

    Other Resources:
    Home PC Firewall Guide.  Comprensive site about  configuring  firewalls. 

  • Watch and learn how to crack WEP

    If you only new the POWER of Linux!
    This is step by step tutorial on how to crack Wireless Equivalent Protocol (WEP), which is used to “secure” wireless connections.
    http://whoppix.hackingdefined.com/Whoppix-wepcrack.html

    read more | digg story

  • Careful With That News, Eugene

    This is an important article by Dan Huard, Co-host of Systm, comparing Slashdot with (user-defined) Digg. Diggs future growth and current content problems are among the most interesting topics discussed.

    read more | digg story

  • Mozilla And Firefox Vulnerable To Old Frame Injection Trick

    Something old is new again. Reports by Danish security firm Secunia indicate both Mozilla and Firefox browsers are susceptible to a flaw first discovered in 1998. A malicious coder could use the vulnerability to spoof a legitimate web site, and gather personal information from users tricked into visiting and interacting with the spoofed site.

    read more | digg story

  • Microsoft: SP2 makes Windows 15 times safer

    Computers running Windows XP Service Pack 2 are 15 times less likely than those running XP or XP SP1 to be infected by some of the most dangerous forms of malware, according to a Microsoft security guru. Jason Garms, who heads the company's anti-malware product team, said Tuesday that this improvement had been revealed by an internal…

    read more | digg story

  • The Ten Commandments of PC Security

    Here's 10 PC Security Commandments to fight off nasty viruses, worms, and Trojan horses by following these simple rules.

    read more | digg story

  • The ISO Network Management Model

     


    Network Management Systems

     

    The rumor on how Disney uses Network Management.

    When the temperature
    rises on the park grounds at Disneyland all the prices of the beverage
    vending machines automatically goes up by 10% to fully capitalize on
    consumer demand.  I believe that is an old Information Technology rumor to explain how network management works… at least I hope it is a rumor.

     

    Why Network Management is important.

    More and more organizations depend on their networks.  Business’ the depend heavily on the status of their networks must have network management tools as they grow.  If
    a network dependent business such as ebay, Google, Yahoo and many
    others go down for even a few minutes, they can loose literally
    hundreds of thousands of dollars in sales and even a small piece of
    their customer’s confidence which could in turn affect the value of
    their stock.  When every second of network time counts the system must be monitored continuously.  The most cost effective way to do this is to use an automated network management tool. 

     

    Network Management Standards

    The International
    Organization for Standards (ISO) addresses the five major functional
    area of the Network Management Model as performance management,
    accounting management, configuration management, fault management and
    security management.

     

    Performance Management

    Performance
    management is monitoring, assessing, and adjusting the available
    bandwidth and network resource usage in order make a network run more
    efficiently.  Performance management is a
    very important part of the network management model particularly to the
    business and/or organization that wants to streamline their network's
    performance. 

     

    An example might be a
    business that has an administrative office who works from 9-5 and
    requires steady use of the network all day.  Everyday at right after lunch the network seems to slow down to a halt and slows down the production considerably.  Using a program like Solar Winds might show an increase in actual nodes and data flowing on the network in the afternoon.  Solar Winds
    would actually help an Network Managers pinpoint the group of new nodes
    and find that the reason for the after lunch network performance slow
    down is due to a group of contracted programmers who come in everyday
    at 1pm to do work.  After identifying the performance issues, System Administrators would then be able to balance the usage of bandwidth.  Devices from companies such as Orbital Data and Cisco even support Performance monitoring over Wide Area Networks connection.

     

    Accounting Management

    Accounting management monitors and assesses the usage of data and/or resources for the purpose of billing.  This aspect of the network management is by Internet Service Providers to bill customers for the resources they use. 

     

    Configuration Management

    The configuration
    side of network management is for tracking the hardware and software
    versions on the network to identify their effects on the network's
    operation.  An example of this is
    Microsoft’s System Management Server (SMS) which has the capability to
    monitor, manage and track every piece of software and hardware on a
    given network.  Configuration management
    tools are great for establishing assurance for business owner who know
    the importance of maintaining control of the networks baseline.

     

    Fault Management

    Fault Management is what most people think of when they think of network management.  The
    purpose of this area of network management is to detect, log and alert
    the system administrators of problems that might effect the systems
    operations.  An organization such as Tivoli,
    HP Openview or WhatupGold could be used to actually page the Network
    Manager when a particular node or section of the network goes down.

     

    Security Management

    Security Management
    deals with controlling access to resources and even alerting the proper
    authorities when certain resources are accessed.  In
    the same way that a network manager can be paged or emailed when a
    resource goes down, network management systems can be used to send
    messages when certain files, servers or routers is accesses.  Intrusion detection systems such as Symantec’s Intruder Alert have this security management capability.

     

    There are many products that support some or even all of these areas of network management.  What
    most network management systems have in common is their use of
    protocols such as Simple Network Management Protocols (SNMP), SNMPv3,
    and Common Management Information Protocol (CMIP). There are a variety
    of Network Management tools ranging from Intuit's Network Management
    Software to IBM's Tivoli, Fidelia's Helix to AdventNet.  Maybe
    your network management solution does not include a system that
    increases vending machine prices as the heat rises, but you can
    definitely find what you need among these and other excellent tools on
    the market.

     

      

    References:

     

    Cisco. Network Management Basics. Cisco.com. Feb 2002

                http://www.cisco.com/

     

    RFC 1157. Simple Network Management Protocol.

                http://www.faqs.org/rfcs/rfc1157.html

     

    Wikipedia. Network Management. Wikipedia.org.

    http://en.wikipedia.org/wiki/Network_management

     

    ITPRC. Network Management. Itprc.com

    http://www.itprc.com/nms.htm

     

     
  • TWIT:Macintost goes to Intel, Episode 8 Outline

    With
    Leo Laporte, Patrick Norton (Chairman of the board of SlamDance
    Industries), Robert Heron (PC Mag and famous lab rat), Kevin Rose,
    David Prager (rectal web server installer), Roger Chang (GameSpot),
    John C. Dvorack

     

    Recorded on June 5th 05.

    Contact the TWIT SHOW

    Skype handle: thisweekintech

    (206) 339-TWIT through K7 (Seattle)

    Questions@thisweekintech.com

    Download TWIT:

    Leo’s .Zip Twit cast at

    http://Leoville-downloads.com/twit

    BitTorrent site: http://Twit.tv/hi-b

     

    Intro.

    Getting the TWIT Cast

    Best to get it on BitTorrents

    Get Azereus (http://azureus.sourceforge.net/)

    (YOU WILL NOT GET SUED FOR DOWNLOADING TWIT Cast from BITTORRENTS)

     Deployed service men and women (behind Websense and all other types of filth) download Leo’s .Zip Twit cast at http://Leoville-downloads.com/twit

    High Quality BitTorrent site:http://Twit.tv/hi-b

    Big media companies will put out Twit for free. 

     

    ITEM #1 MACINTEL

    Macintosh going to Intel chip (according to the Wall Street Journal)

    Leo predicts the demise of Macintosh.  Steve Job is falling on his sword

    1)      All software has to be rewritten

    2)      Why x86?

    3)      Osborn effect.  Many Mac products will be obsolete

    John C. Dvorack says this trend will last 10 years.  Dvorack: It will be the one of the biggest benefits of Macintosh (offers other very interesting insight into the move)

    Patrick – Bigger Market goes to bigger MHZ Numbers.  Great if it makes a cheaper MAC but don’t believe its going to happen

    Kevin – Excited about the move.  Apple engineering is excellent.  Now he can game on a Mac.  Thumbs UP.

    Heron – First stage of Mac creating competition for Windows.  Thumbs down for hard ware

    Roger
    – With all the 3-d rendering and content creation tools Mac will be
    able to retain their fan base by keeping the look and feel of the Mac
    on an x86.  Thumbs up for Software Thumbs down for hardware

    Is this good for Microsoft?

     

    ITEM #2 WiMAX

    Patrick Norton talked with Intel– WiMax is still  mostly hype

     

    “WiMax is a microwave replacement for cable or DSL distribution of Broadband” at about 1Mb

     

    Fix WiMax test will start this summer 2005, roll out will begin late 2006, and finally mobile Wireless

     

    ITEM #3 ICANN has approved the XXX domain

    The redlight district of the Internet

    Really being done with .edu ..gov

    Will make it easier to filter

    Twit.XXX?

    MOBI – cell phone content specific (format)

     

    ITEM #4 Roger on New Games

    A bit slow during the summer

    Everyone waiting on the new 360 stuff

    Next generation of consoles usually causes a dip

     

    ITEM #5 More MacIntel

    Roger waiting for Final Cut Pro and compositing /video shaping software

     

     

     

    Contacting the TWIT SHOW

    Skype handle: thisweekintech

    (206) 339-TWIT through K7 (Seattle)

    Questions@thisweekintech.com

    Leo@Thisweekintech.com
    Dan@Thisweekintech.com
    Yoshi@Thisweekintech.com

    Kevin@Thisweekintech.com

    Robert@Thisweekintech.com

    Download TWIT:

    Leo’s .Zip Twit cast at http://Leoville-downloads.com/twit

    BitTorrent site: http://Twit.tv/hi-b