This project will use one of the web attacker's most trusted tools against them - the Open Proxy server. Instead of being the target of the attacks, we opt to be used as a conduit of the attack data in order to gather our intelligence. By deploying multiple, specially configured open proxy server (or proxypot), we aim to take a birds-eye look at the types of malicious traffic that traverse these systems. The honeypot systems will conduct real-time analysis on the HTTP traffic to categorize the requests into threat classifications outlined by the Web Security Threat Classification and report all logging data to a centralized location.. You can participate by deploying the WASC Open Proxy Honyepot sensor on your own network. WASC has created a VMware image of the standard sensor. This image includes all of the software to quickly get your sensor up and running with little configuration on the end user's part. You must contact the project leader via email in order to participate. You will then recieve the link location to download the VMware image. You will need to have the free version of VMware player or Server. If you would like to deploy a honeypot sensor, include the following details in your email to the project leader. The link for this article located at Web App Security is no longer available. . You can participate by deploying the WASC Open Proxy Honyepot sensor on your own network. WASC has c. project, attacker's, trusted, tools, against, proxy. . LinuxSecurity.com Team
The past few weeks have been frustrating and rewarding all at the same time. I had set a goal to configure an intrusion-detection system (IDS) using the de facto standard, Snort on Linux. In our environment, we have very little in the way of security tools and devices, and little or no budget to procure such items. This project was the first step in being able to detect potentially malicious network traffic as inexpensively as possible. security manage This article discuses a security managers experience with deploying a Linux intrusion-detection system. Have you implemented a IDS on your network? If so what was your experience? . The link for this article located at ComputerWorld is no longer available. . Implementing an Intrusion Detection System (IDS) using Snort on Linux significantly improves network security while offering a hands-on experience in threat monitoring. Intrusion Detection, Snort IDS, Linux Network Protection. . Bill Locke
With the launch of its Aspen 8800 enterprise LAN switches, Extreme Networks Inc. is challenging network designers to rethink the way they build systems to deal with voice traffic and growing internal security threats. . With the rise of VOIP (voice over IP) and the exponential growth of malicious traffic, Extreme officials said they believe the requirement for voice-quality connections, continuous uptime and stronger security suggests that a two-tier network architecture must replace today's more prevalent three-tiered designs. "We think less is more. That way, you make fewer hops and have fewer moving parts," said Varun Nagaraj, vice president of product management at the Santa Clara, Calif., company. "The tier that faces the user is the unified access tier or layer—the user- or device-facing side. Then there is the core of the network, where the data center servers connect and where you connect to the WAN." The Aspen 8800 Series, with Extreme's new, more modular ExtremeWare XOS operating system, addresses the unified access layer. The switches allow a more robust edge network to be built, overcoming deficiencies in performance and availability that have existed in typical edge switches, Nagaraj said. The link for this article located at Paula Musich is no longer available. . Amid the surge in remote communications and increasing cyber threats, Cisco Systems is transforming cybersecurity protocols.. VoIP Security, Aspen Switches, Network Design, Malicious Traffic. . Joe Shakespeare
If current trends continue, we will probably see encryption's use increase. However, the extensive use of encryption affects current conventional security methods in a very profound way, and this is something the security community must consider. Currently, we rely a great deal on security infrastructure such as proxy firewalls and network-based intrusion detection, tools that rely on being able to inspect the traffic that's passing through the network.. . .. If current trends continue, we will probably see encryption's use increase. However, the extensive use of encryption affects current conventional security methods in a very profound way, and this is something the security community must consider. Currently, we rely a great deal on security infrastructure such as proxy firewalls and network-based intrusion detection, tools that rely on being able to inspect the traffic that's passing through the network. Proxy firewalls and network-based intrusion detection systems examine the actual contents of packets moving through them. If those contents are encrypted, then current network security infrastructure tools cannot inspect them. Malicious traffic could pass through all the best network security tools available, simply because it's encrypted and the tools have no way of knowing what it is. A system using stacheldraht, one of the most dangerous distributed denial of service tools out there, communicates to its infected servers through an encrypted connection. Detecting it is hard for network security tools, as they must rely on detecting the unencrypted parts of stacheldraht's communication. Proxy firewalls can block dangerous attachments in email that may contain viruses, but if the email is encrypted, then the firewall offers no protection at all -- for that matter, neither do filters on the mail server. The link for this article located at IT World is no longer available. . If current trends continue, we will probably see encryption's use increase. However, the extensive u. current, trends,continue, probably, encryption's, increase, however, extensive. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.