T

The Guerilla CISO

http://feeds.feedburner.com/TheGuerillaCiso (RSS订阅地址)

DDoS Vocabulary and Mathematics

<p>Some language and math that come in handy when you talk about or fight Distributed Denial of Service&#8230; Distributed Denial of Service: an attack that uses a number of attacking nodes that overwhelm the target with network, web, or application traffic.  DDoS implies 100 or more nodes attacking the same target, although just about everybody [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2170">DDoS Vocabulary and Mathematics</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2012/10/26
閱讀更多

DDoS and Elections

<p>I&#8217;ve noticed a trend over the past 6 months: DDoS traffic associated with elections.  A quick sampling of news will show the following: http://www.opendemocracy.net/od-russia/irina-borogan-andrei-soldatov/kremlin-and-hackers-partners-in-crime &#60;-Russia http://www.theregister.co.uk/2012/03/26/hong_kong_vote_hack/ &#60;-Hong Kong http://www.theregister.co.uk/2011/12/07/korean_election_ddos_row/ &#60;-Korea http://www.cbc.ca/news/politics/story/2012/03/27/pol-ndp-voting-disruption-deliberate.html &#60;-Canada (rybolov: yikes!) http://www.csoonline.com/article/700523/ddos-attackers-target-russian-election-webcams &#60;-Russia again Last week it picked up again with the re-inauguration of Vladimir Putin. http://en.ria.ru/russia/20120506/173265737.html http://www.washingtonpost.com/world/europe/peaceful-protest-turns-violent-in-moscow/2012/05/06/gIQAFti35T_story.html http://english.ruvr.ru/2012_05_06/73954450/ http://www.rferl.org/content/independent_russian_daily_hit_by_dos_attack_kommersant/24571463.html And then yesterday, Ustream and their awesome response: which, [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2144">DDoS and Elections</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2012/5/10
閱讀更多

FedRAMP: It’s Here but Not Yet Here

<p>Contrary to what you might hear this week in the trade press, FedRAMP is not fully unveiled although there was some much-awaited progress. There was a memo that came out from the administration (PDF caveat).  Basically what it does is lay down the authority and responsibility for the Program Management Office and set some timelines.  [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2121">FedRAMP: It’s Here but Not Yet Here</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/12/12
閱讀更多

The “Off The Record” Track

<p>So while I was at some conferences over the past couple of months, I had an awesome idea while sitting in a panel about data breaches, especially notification. While streaming conferences is pretty awesome for most content, I keep thinking that we need that as an industry we need the exact opposite: a track of [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2099">The “Off The Record” Track</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/11/22
閱讀更多

DHS is Looking for a CISO

<p>Job announcement is here.  Share with anybody you think can do it.Similar Posts: Radio Nigel Why You Should Care About Security and the Government Help the Government, Become Literate SP 800-53A Now Finally Final Wanted: Some SCAP Wranglers</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2105">DHS is Looking for a CISO</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/11/5
閱讀更多

#RefRef the Vaporware DoS Tool

<p>Ah yes, you now know how I spend my Saturday mornings lately. Similar Posts: DDoS Planning: Business Continuity with a Twist The Rise of the Slow Denial of Service Training the Apache Killers Oh to be a Program Manager A Little Story About a Tool Named #RefRef</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2089">#RefRef the Vaporware DoS Tool</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/9/24
閱讀更多

A Little Story About a Tool Named #RefRef

<p>Let me tell you a little story. So September 17th was Constitution Day and was celebrated by protestors in most major cities across the US with a sizable percentage of folks on Wall Street in NYC.  In conjunction with this protest, a new Denial-of-Service tool, #RefRef, was supposed to be released.  It supposedly used some [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2085">A Little Story About a Tool Named #RefRef</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/9/24
閱讀更多

Training the Apache Killers

<p>Here at IKANHAZFIZMA, we&#8217;re training the next generation of Apache webserver Denial-of-Service gurus.  It involves punching bags, some nomz for the troops, and lots of requests for kibble. Similar Posts: The Rise of the Slow Denial of Service A Little Story About a Tool Named #RefRef DDoS and Elections DDoS Planning: Business Continuity with a [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2076">Training the Apache Killers</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/9/3
閱讀更多

Apache Killer Effects on Target

<p>Oh noes, the web is broken.  Again.  This time it&#8217;s the Apache Killer.  This inspired a little ditty from @CSOAndy based on a Talking Heads tune: I can&#8217;t seem 2 handle the ranges I&#8217;m forked &#38; memlocked &#38; I Can&#8217;t spawn I can&#8217;t sleep &#8217;cause my net&#8217;s afire Don&#8217;t spawn me I&#8217;m a dead server [&#8230;]</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2063">Apache Killer Effects on Target</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/8/30
閱讀更多

Noms and IKANHAZFIZMA

<p>Kickin&#8217; it old-school with some kitteh overflows Similar Posts: LOLCATS Take on Catalog of Controls LOLCATS and Firewalls Conflicker ala IKANHAZFIZMA IKANHAZFIZMA Tackles the Consensus Audit Guidelines Training the Apache Killers</p> <p>The post <a href="http://www.guerilla-ciso.com/archives/2060">Noms and IKANHAZFIZMA</a> first appeared on <a href="http://www.guerilla-ciso.com">The Guerilla CISO</a>.</p>

2011/8/27
閱讀更多

推薦訂閱

Strategy of Security

Nitrokey - Secure your digital life

WatchGuard Blog

Cybersecurity - Federal News Network

Targeted Threats - The Citizen Lab