Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Sign up!
EnGarde Community
What is the most important Linux security technology?
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Latest Newsletters
Linux Advisory Watch: February 27th, 2015
Linux Security Week: February 23rd, 2015
LinuxSecurity Newsletters
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

Intrusion Detection
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.

SANS Releases Info on "Adore Worm"  04 April 2001 
Source: SANS - Posted by Dave Wreski   
There is apparently a new worm to follow on the heels of the Rame and Lion worms. "Adore is a worm that we originally called the Red Worm. It is similar to the Ramen and Lion worms. Adore scans the Internet checking Linux hosts to determine whether they are vulnerable to any of the following well-known exploits: LPRng, rpc-statd, wu-ftpd and BIND. LPRng is installed by default on Red Hat 7.0 systems. From the reports so far, Adore appears to have started its spread on April 1.. . .
To Trap A Thief  02 April 2001 
Source: ComputerWorld - Posted by Dave Wreski   
If you want to break into a house, why spend time prying open the front door if the back door is wide open? Same goes when breaking into computer networks. Most networks and servers are set up with configuration errors that . . .
SANS Lion Worm Protection  01 April 2001 
Source: SANS - Posted by Nick DeClario   
Lion is a new worm, that is very similar to the Ramen worm. However, this worm is much more dangerous and should be taken seriously. It infects Linux machines with the BIND DNS server running. It is known to infect BIND version(s) 8.2, 8.2-P1, 8.2.1, 8.2.2-Px. BIND 8.2.3-REL and BIND 9 are not vulnerable. The BIND vulnerability is the TSIG vulnerability that was reported back on January 29, 2001.. . .
Digital sleuthing uncovers hacking costs  22 March 2001 
Source: ZDNet UK - Posted by Dave Wreski   
It took the intruder less than a minute to break into the university's computer via the Internet, and he stayed less than a half an hour. Yet finding out what he did in that time took researchers, on average, more than 34 hours each.. . .
Realisic Expectations for Intrusion Detection Systems  20 March 2001 
Source: Security Focus - Posted by Benjamin D. Thomas   
Intrusion detection forms an increasingly important segment of the security technology market. While intrusion detection systems were, until recently, both expensive and difficult to maintain, they have become more affordable. With the arrival of less expensive off-the-shelf solutions, IDSs are becoming . . .
Intrusion Detection Systems: An Opening For Hackers?  17 March 2001 
Source: NewsBytes - Posted by Nick DeClario   
System administrators who rely on intrusion detection systems to snag malicious hacker trying to break into their system may actually be lulling themselves into a false sense of security, the government's security watchdog warned today. The National Infrastructure Protection Center (NIPC), . . .
Responding to a Security Incident  14 March 2001 
Source: Linux Journal - Posted by Jen Olson   
The question that often comes up is what to do about it. Unless it's a financial or safety issue, it's probably going to get laughed at by the legal authorities, but it's worth reporting. .. We'll not go into detecting . . .
Analysis of the KNARK rootkit  14 March 2001 
Source: Toby Miller - Posted by Ryan W. Maple   
Toby Miller has written an analysis of the KNARK rootkit: "The purpose of this paper is to identify signatures related to the KNARK rootkit. This paper does not show how to install the rootkit nor does it make any comparisons . . .
Stopping Internet 'zombies' in their tracks  14 March 2001 
Source: Boston Globe - Posted by Nick DeClario   
A couple of Boston-area companies think they've found a way to control a common and devastating form of computer vandalism. Now the two firms are racing to get their sophisticated hardware and software into hundreds of key Internet chokepoints.. . .
PortSentry and Snort Compared  11 March 2001 
Source: - Posted by Pete O'Hara   
A brief description of port sentry and snort. "A port scan detector that can be configured to bind to ports you want monitored, reporting scans made to these ports and optionally running a command to deal with the scanning host . . .
<< Start < Prev 79 80 81 Next > End >>

Results 781 - 790 of 837


Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Why Silicon Valley Hackers Still Won’t Work With the Military, and Vice Versa
Bad movie: Hackers can raid networks with burnt Blu-Rays
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2015 Guardian Digital, Inc. All rights reserved.