Posts Tagged ‘Security’

Reverse Engineering Tools for Linux

objdump – displays information from object files. strace – trace system calls and signals ltrace – A library call tracer etrace – is a configurable static port network tracing tool, similar to traceroute, but supporting ICMP, TCP, UDP and other IP protocols. gdb –  The GNU debugger valgrind – a suite of tools for debugging [...]

Standard C library Functions That You Should Avoid Using Because of Security

OpenSolaris Project has  a very good reference about the security considerations for the standard C library functions. But here I compiled a list of the most used ones. Also refer to the ACM’s C library Reference page about the functionalities of these functions. gets: This function can cause buffer overflows, because it is impossible to [...]

Network Anomaly Detection

Anomaly detection is one of the most important aspect of Network Security Monitoring. Most of the current approaches in Network Intrusion Detection Systems use signature based techniques. Recently data-mining approaches become popular and many paper published about that topic. Supervised data-mining approaches rely on some kind of training data. But for network traffic, it is [...]

Stateful and Stateless Firewalls

Firewalls are one of  the most important part of your network defense because most of your traffic data flows through them. Stateless Firewalls Stateless Firewalls are the most basic and they are the most common type of firewalls. Stateless Firewalls(SlF) basically watch the traffic and compares the packets with the rules from its rules database. [...]