Security Projects - Page 49 - Results from #960

Discover Security Projects News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Get Started With Embedded Linux: Free Summer Webinars Offer Key Insights

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Free Webinars will be offered separately by Wind River; by TimeSys; and by Mocana and its partners MontaVista and Wind River this summer. The events explore getting started with embedded Linux development, graphical embedded Linux development tools, and embedded device security, respectively. . . .

LinuxSecurity.com Team
Jun 17, 2004

CVS: Six Critical Flaws Expose Risks in Open-Source Repository Security

Security researchers have found at least six more flaws in the open-software world's most popular program for maintaining code under development. According to a representative of the project that oversees the program, known as the Concurrent Versions System, the vulnerabilities include a flaw that could let an attacker take control of a CVS server from the Internet, putting the code repository's contents at risk. . . .

LinuxSecurity.com Team
Jun 10, 2004

Achieve High ROI With Effective Secure Development Strategies

Through fuller integration of security and development activities, the effectiveness and efficiency of security assessment will be increased and streamlined, the associated costs greatly reduced and organisations will enjoy the return on security investments (ROSI) at a greater rate. Until then, however, those organisations that are already using secure development implementation early in their development cycles will be able to continue to reap greater advantages over their competition. . . .

LinuxSecurity.com Team
Jun 08, 2004

OpenBSD Security Auditing: A History of Commitment to Safety

One of the goals for the OpenBSD project is to try being the most secure operating system. The OpenBSD developers say the open software development model allows them to take a "more uncompromising view towards security than other vendors are able to". To this end the developers have been auditing OpenBSD components on a file-by-file basis since 1996, and continue the process to this day. . . .

LinuxSecurity.com Team
Jun 07, 2004

Improving Microsoft Security With Essential Linux Tools

This article is mostly about Microsoft and their security woes. Unexpectedly, however, Linux security tools make a significant cameo. Check out this money-quote:Two IT administrators of Windows-centric shops said they're using Snort, a Linux-based intrusion technology, to secure their infrastructures. Sourcefire, a commercial security offering, also makes use of Snort technology in its offerings. "There are better tools in the Linux world for this stuff, not just for intrusion detection but also for antivirus," said Vernon Butler, an IT manager at CWCapital, Needham, Mass. . . .

LinuxSecurity.com Team
Jun 03, 2004

CVS & Subversion Security Advisory: Unauthorized Access Risk

Flaws in two popular source code repository applications could allow attackers to access and corrupt open-source software projects, a security researcher said Wednesday. . . .

LinuxSecurity.com Team
May 20, 2004

Hardened-PHP 0.1.1: Critical Patch for Code Protection Advisory

The Hardened-PHP project team is pleased to announce the release of version 0.1.1 of our PHP security hardening patch. This new Hardened-PHPrelease is the first one that is publicly announced and is consideredstable on atleast linux systems. . . .

LinuxSecurity.com Team
May 17, 2004

Exploring Prelude Hybrid IDS Framework for Effective Security Management

Everyone both involved in information security and many that are not have heard of Snort NIDS (Network Intrusion Detection System). But not many have heard of a little jewel by the name of Prelude. Prelude is an open source framework for building distributed Hybrid Intrusion Detection Systems (HIDS). The reason it is called 'Hybrid' is that it utilizes sensors which are network based (NIDS). But also allows for hosts logs to be transmitted to a central 'Manager' for correlation and storage in a database (mySQL, Postgres, Oracle). . . .

LinuxSecurity.com Team
Apr 28, 2004

Explore Gpgdir: Effective Directory Encryption Using Perl and GnuPG

This is a very interesting new open-source tool, which encrypts and decrypts entire directories using the CPAN GnuPG module. We heartily encourage anyone who wishes to give it a whirl and tell us about it! We are especially interested to know about the user experience, and about any issues that involve speed and scalability. Is it very limiting in these respects that the code is in Perl? . . .

LinuxSecurity.com Team
Apr 26, 2004

Toothing: The New Bluetooth Trend for Anonymous Encounters in the UK

Have you ever wondered if wireless security vulnerabilities might start being used by commuters to find anonymous sex? Well, wonder no more. . . .

LinuxSecurity.com Team
Apr 21, 2004

Experts Warn Against Linux For Critical Defense Systems

Days after an embedded-industry CEO stirred up a firestorm by charging that Linux poses a threat to U.S. security, two prominent computing-security experts said last week that some developers are already inappropriately using Linux in critical security applications where it isn't suitable. . . .

LinuxSecurity.com Team
Apr 20, 2004

Open Source Vulnerability Database: Access Comprehensive Security Insights

In the interest of spreading the security message to as wide an audience as possible, a group of volunteer security professionals has compiled one of the largest, most complete and most freely accessible databases of vulnerabilities on the Internet. . . .

LinuxSecurity.com Team
Apr 12, 2004

Debian, Red Hat, SUSE Address Concerns Over Forrester Linux Security Report

GNU/Linux vendors Debian, Mandrake, Red Hat, and SUSE have joined together to give a common statement about the Forrester report entitled "Is Linux more Secure than Windows?". Despite the report's claim to incorporate a qualitative assessment of vendor reactions to serious vulnerabilities, it treats all vulnerabilities as equal, regardless of their risk to users. . . .

LinuxSecurity.com Team
Apr 07, 2004

New Comprehensive Open Source Vulnerability Database for Software Flaws

A collaborative project intended to give network managers a comprehensive, unbiased source of information on software vulnerabilities has gone live, delivering its entire library of flaws under an open-source licence. . . .

LinuxSecurity.com Team
Apr 06, 2004

Ethereal: Critical Stack Overflow Advisory Detected in Protocol Analyzer

A code audit of the popular protocol analyser, Ethereal, has revealed several stack overflows which can be remotely triggered, according to a posting to the Full-Disclosure vulnerability mailing list. . . .

LinuxSecurity.com Team
Mar 25, 2004

GNOME: 2024-03-23 Moderate: Limited Intrusion and Service Recovery

It looks like the GNOME sources were likely not compromised, so they should be back on line soon. Herein is an updated announcement from the GNOME Project. . . .

LinuxSecurity.com Team
Mar 24, 2004

Linux Netwosix 1.1 Release: Critical Update for Network Security

Vincenzo Ciaglia writes:Linux Netwosix 1.1 is released and assures a high security to your system and your net. The system has been completely rebuilt and this version fix all the bugs of last release.Link points to full announcement. . . .

LinuxSecurity.com Team
Mar 22, 2004

Honeynet Project Scan #30: Discover Insights from Firewall Logs

Honeynet Project Scan of the Month Challenges are BACK with a vengeance! Today we announce a new type of challenge: an Analysis Challenge. Scan of the Month #30 offers you an opportunity to draw your conclusions from a massive pool of honeynet firewall log data. Questions to guide your creativity in the analysis process are provided. . . .

LinuxSecurity.com Team
Mar 02, 2004

FreeS/WAN Project Closure After Five Years: A Shift In VPN Needs

After more than five years of active development, the FreeS/WAN project will be coming to an end. Nine months after the release of FreeS/WAN 2.00, Opportunistic Encryption (OE) has not caught on as we'd hoped. The Linux user community demands feature-rich VPNs for corporate clients, and while folks genuinely enjoy FreeS/WAN and its derivatives, the ways they use FreeS/WAN don't seem to be getting us any closer to the project's goal: widespread deployment of OE. For its part, OE requires more testing and community feedback before it is ready to be used without second thought. The project's funders have therefore chosen to withdraw their funding. . . .

LinuxSecurity.com Team
Mar 02, 2004

Gentoo 2004.0 Security Advisory: Enhanced Protection for x86 Systems

Gentoo Linux has announced the release of Gentoo Linux 2004.0 for x86, AMD64, PowerPC, Sun SPARC, and SGI MIPS architectures. The 'Gentoo Hardened team' has also unveiled the inaugural release of a security-enhanced Gentoo platform for the x86 architecture. . . .

LinuxSecurity.com Team
Mar 02, 2004

Community Poll

More Polls

Security Projects - Page 49

Boost Linux Security Using These 10 Vital Testing Tools Now

New Rust Tool Traur Analyzes Arch Linux AUR Packages for Hidden Risks

Fedora 44 vs. Linux Kernel Exploits: Inside the Move to Strengthen Linux Security Settings