顯示具有 secure 標籤的文章。 顯示所有文章
顯示具有 secure 標籤的文章。 顯示所有文章

2009年3月30日 星期一

Howto block DDOS attacks on Ubuntu

Howto block DDOS attacks on Ubuntu - this ariticle shows the usage of PASD .

What is PSAD ? quoted from its home page:
"psad is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze iptables log messages to detect port scans and other suspicious traffic. A typical deployment is to run psad on the iptables firewall where it has the fastest access to log data. "

Other tools from the same host:
fwknop - Single Packet Authorization and Port Knocking.

fwsnort - Application Layer IDS/IPS with iptables.

2008年8月18日 星期一

CORE Security

CORE Security creates some projects that I am interesting. e.g. Pcapy , impacket and Pass-The-Hash .

2008年4月30日 星期三

patch kernel without reboot

Ksplice: Rebootless Linux kernel security updates

Ksplice allows system administrators to apply security patches to the Linux kernel without having to reboot. Ksplice takes as input a source code change in unified diff format and the kernel source code to be patched, and it applies the patch to the corresponding running kernel. The running kernel does not need to have been prepared in advance in any way.

To be fully automatic, Ksplice's design is limited to patches that do not introduce semantic changes to data structures, but most Linux kernel security patches don't make these kinds of changes. An evaluation against Linux kernel security patches from May 2005 to December 2007 finds that Ksplice can automatically apply 84% of the 50 significant kernel vulnerabilities from this interval.
...
...