Linux has a unique way of securing its kernel code. This is important because it helps prevent hackers from gaining access to the kernel, which is the operating system's core. . The kernel is written in C and assembler languages, which makes it difficult for hackers to access and modify. The only way they can do this would be to exploit a vulnerability in one of the programs running on top of the kernel, such as an application or web server. However, some vulnerabilities allow attackers to modify the kernel's memory directly from user space—the part of memory used by processes like applications or web servers. These vulnerabilities are known as zero-day exploits because they are unknown until they are used in an attack. At Open Source Summit Japan, Linux developer Greg Kroah-Hartman recapped kernel security's current state and future challenges. Kroah-Hartman admitted, "There are other groups, kernel security teams, and other projects that are proactive. But that's not what we do. We just react to problems." This is an area where there is room for significant improvement. Check out the article linked below to learn about other kernel security challenges Kroah-Hartman identified and his advice for robust kernel security. I found it very insightful and wanted to share it with you! . Unix strengthens core defenses through strategies such as ASLR and CFI, combating unknown vulnerabilities and differing variants.. Kernel Security, Linux Strategies, Zero-Day Threats, Security Challenges, Open Source Security. . Brittany Day
Here are some thoughts about providing users and businesses ways for a website to authenticate a user all the way to the hardware connection to his computer or mobile device. . There are many cases where software methods are sufficient, of course, but higher grades of security might be required by certain applications. More standard software stacks are needed to link the hardware authenticators to the users The link for this article located at Dark Reading is no longer available. . There are many cases where software methods are sufficient, of course, but higher grades of security. thoughts, about, users, businesses, website, authenticate. . LinuxSecurity.com Team
We often bemoan the seeming immortality of username/password authentication schemes. Why can't everyone implement strong authentication, multifactor authentication, Secure Sockets Layer Virtual Private Networks (SSL VPN) for remote access?. The answer is really quite simple: Doing those things is too expensive -- the actual cost of the software and/or hardware, the ongoing maintenance, and support and the "human capital" cost in terms of educating and training users who only want quick and easy access to their data. Well, RSA believes they have the answer. That's "RSA, The Security Division of EMC," of course (and why is EMC so afraid we'll forget that?). We'll just call them "RSA" -- you'll know who I mean. The link for this article located at Network World is no longer available. . Investigating the hurdles and expenses involved in deploying two-step verification to ensure safe entry.. Multi-Factor Authentication, Remote Access Solutions, User Training, Security Measures. . LinuxSecurity.com Team
WikiLeaks has gone down, returned, gone down again, returned and other sites have been taken down by supporters of WikiLeaks like Visa.com. From a technical standpoint, what is happening exactly and what will happen next in this ongoing cyberspace saga? HuffPost Tech asked SafeCentral CTO Ray Dickenson to help us break it all down based on his Internet security expertise.. Q: How can WikiLeaks withstand attacks against their site, and how might they propagate the sensitive information they're leaking? Dickenson: They already are withstanding the attacks. There are many mirror sites where their content is available now. A list is available here: wikileaks.info. The link for this article located at Huffington Post is no longer available. . WikiLeaks has established effective strategies to withstand cyber attacks, ensuring its leaks' integrity and accessibility through decentralized servers and encryption.. WikiLeaks, Cyber Threats, Resilience, Security Methods, Data Propagation. . LinuxSecurity.com Team
Now this is another interesting attack vector using little bits of data not many people consider. I have heard about this kind of technique before and considered how it. Finally someone has put together a public version of a tool that can tell you how unique your browser footprint is. As for me I The link for this article located at Darknet is no longer available. . Finally someone has put together a public version of a tool that can tell you how unique your browse. another, interesting, attack, vector, using, little, people, consider. . LinuxSecurity.com Team
Office workers looking to protect their documents may want to select a higher grade of encryption. Swiss information-technology firm Objectif S. The link for this article located at Security Focus is no longer available. . Delve into sophisticated encryption methodologies that can proficiently protect your corporate documents from illicit entry.. Document Security, Encryption Techniques, Data Protection. . LinuxSecurity.com Team
Peter Clarke, head of Scotland Yard's anti-terrorist branch, told the BBC that the surveillance involved in foiling the plot to blow up trans-Atlantic planes had been "unprecedented". Officials haven't said if it involved data mining, but experts say that data mining can be a valuable tool in the war on terror if it is applied properly. The question is: Is it? . Data mining is a relatively new field within computer science. In the broadest sense, it combines statistical models, power. Data mining is a relatively new field within computer science. In the broadest sense, it combines st. peter, clarke, scotland, yard's, anti-terrorist, branch, surveillance. . Brittany Day
Security developers took more than a decade to move from intrusion detection to intrusion prevention in the world of wired networking. But in the fast-paced wireless space, vendors are already jumping on prevention as the first step in security. . . .. Security developers took more than a decade to move from intrusion detection to intrusion prevention in the world of wired networking. But in the fast-paced wireless space, vendors are already jumping on prevention as the first step in security. Companies such as AirDefense Inc. and Wibhu Technologies Inc. are set to release new tools that borrow heavily from their wired counterparts and introduce IPSes (intrusion prevention systems) to WLANs (wireless LANs) for the first time. The link for this article located at Dennis Fisher and Carmen Nobel is no longer available. . Explore the progression of security strategies from merely identifying threats to actively thwarting them within wireless networking environments.. Wireless Security, Intrusion Prevention, Network Defense, WLAN Security, Security Techniques. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.