psad: Linux Detect And Block Port Scan Attacks In Real Time

08/12/2008  IIII
Relevance: 6.43
A port scanner (such as nmap) is a piece of software designed to search a network host for open ports. Cracker can use nmap to scan your network before starting attack. You can always see scan patterns by visiting /var/log/messages. But, I recommend the automated tool called psad - the port scan attack detector under Linux which is a collection of lightweight system daemons that run on Linux machines and analyze iptables log messages to detect port scans and other suspicious traffic.
Search further arrow


Detect insider threats with Linux auditing

06/22/2007  I
Relevance: 6.37
Organizations of all sizes need to mitigate the risk of insider threats. Misconduct by authorized users represents a grave threat to an organization. According to the 2005 Computer Security Institute and Federal Bureau of Investigation Computer Crime and Security Survey, organizations reported that computer intrusions from inside sources accounted for nearly half of all incidents. You can secure your network perimeter with intrusion detection systems, firewalls, and virus scanners, but don't neglect to monitor authorized users. The Linux Audit daemon can help you detect violations of your security policies.
Search further arrow


Envy - ATI and NVIDIA drivers installation made easy

08/13/2007  IIIIIIIIII
Relevance: 4.87
'Envy' is an application for Ubuntu Linux and Debian written in Python and PyGTK which can detect your graphics hardware, download the appropriate drivers from the official websites, download all their dependencies and finally build, install and configure the driver for you.
Search further arrow


Various ways of detecting rootkits in GNU/Linux

12/18/2006  I
Relevance: 4.86
This article takes a look at two programs which can be effectively used to detect any rootkits that are installed on your machine. The programs conducts a number of tests and checks against a database of known rootkits to see if the machine is infected by any of them.
Search further arrow


Linux Detecting Rootkits

01/28/2008  I
Relevance: 4.75
A rootkit is a program designed to take fundamental control of a computer system, without authorization by the system's owners and legitimate managers. Most rootkits use the power of the kernel to hide themselves, they are only visible from within the kernel. How do I detect rootkits under CentOS or Debian Linux server?
Search further arrow


Firefox Security add-ons

01/08/2008  III
Relevance: 4.64
When it comes to security, Firefox is the best browser. Not only because of the way that browser is built and how fast all bugs were fixed in it, but also because of its addons. Security add-ons are very effective to detect viruses before download, stop any sort of malicious scripts that could be injected to your computer. It also advice you which site you should avoid in order to be away from any bad cookies that could come from it. You better get you're add-ons installed because without them, your Firefox is vulnerable.
Search further arrow


Feel like taunting an identity thief? Don’t.

10/22/2008  I
Relevance: 4.63
The next time you get the urge to enter angry messages to phishers on fake (malicious) Web sites, stop and consider this discovery by researcher Joe Stewart. The identity thieves behind the Asprox botnet have built extra logic into phishing sites to detect taunts and subject those computer users to drive-by malware exploits.
Search further arrow


Firefox users gain location tool

10/08/2008  I
Relevance: 4.45
Mozilla, the company behind the Firefox browser, has released technology that helps websites detect the physical location of computers. The system will allow users, for instance, to find local restaurants when they travel to a new town. The Geode project is an experimental add-on ahead of a full blown launch of geolocation technology in version 3.1 of Firefox.
Search further arrow


How To Secure Your CentOS Server Against Attackers

08/23/2006  IIIIIII
Relevance: 4.39
This article shows how to secure a CentOS server using psad, Bastille, and some other tweaks. psad is a tool that helps detect port scans and other suspicious traffic, and the Bastille hardening program locks down an operating system, proactively configuring the system for increased security and decreasing its susceptibility to compromise.
Search further arrow


Web Input - Securing Data, First Level of Defense

05/19/2008  III
Relevance: 4.37
LXer Feature: 19-May-2008This article focuses upon testing the reliability user input at the lowest level. The first line of defense is use of automated searches that might detect malicious inputs. Personally I wish there were a better option. Being realistic, we are confronting coders with superior skills that have added advantage of surprise, stealth and economic incentives. Whereas we are reactive to new or suspected threats as they arise or worse discovered later.
Search further arrow



Showing 10 articles of total 22095 in database (Flag English).