The Experts below are selected from a list of 1854 Experts worldwide ranked by ideXlab platform
Mathieu Gorge - One of the best experts on this subject based on the ideXlab platform.
-
Security for third level education organizations and other educational bodies
Computer Fraud & Security, 2007Co-Authors: Mathieu GorgeAbstract:Students' online networking habits are leaving universities and them open to attack according to Security Consultant Mathieu Gorge. Students are revealing personal details on websites like Bebo and MySpace leaving them potentially vulnerable to bullying or even stalkers. Mathieu Gorge looks at the dangers of social networking sites in universities and looks at the terrorist loophole provided by lax educational Security.
James H Clark - One of the best experts on this subject based on the ideXlab platform.
-
ethics in Security consulting
Strategic Security Management#R##N#A Risk Assessment Guide for Decision Makers, 2007Co-Authors: James H ClarkAbstract:This chapter explains the role of ethics in Security consulting. The chapter offers guidelines for maintaining vigilance in one's own practice and for avoiding getting caught in someone else's ethical lapses. The chapter also offers guidelines for sending out the right signals to create a set of expectations for ethical behavior when dealing with the Consultant. Ethics can be defined simply as the principles or values by which one conducts himself or herself in practice. Independence of thought and objective analysis are the two great commandments of the independent Security Consultant and are prominent in the International Association of Professional Security Consultant's Code of Ethics. It is important for the modern-day Security Consultant dealing with risk issues on a global scale with many diverse cultures and values to understand that not everyone has the same value system as they or is interested in fair play. The ethical Consultant can and should create high expectations for those who look to this industry for help. It is up to the Consultant to raise the bar and create an environment where people are willing to work at a high ethical level because the Security expert brings value to the process and because most people value a positive outcome or an honest assessment over unethical behavior.
Jamie Butler - One of the best experts on this subject based on the ideXlab platform.
-
rootkits subverting the windows kernel
2005Co-Authors: Greg Hoglund, Jamie ButlerAbstract:"It's imperative that everybody working in the field of cyber-Security read this book to understand the growing threat of rootkits." --Mark Russinovich, editor, Windows IT Pro / Windows & .NET Magazine"This material is not only up-to-date, it defines up-to-date. It is truly cutting-edge. As the only book on the subject, Rootkits will be of interest to any Windows Security researcher or Security programmer. It's detailed, well researched and the technical information is excellent. The level of technical detail, research, and time invested in developing relevant examples is impressive. In one word: Outstanding." --Tony Bautts, Security Consultant; CEO, Xtivix, Inc."This book is an essential read for anyone responsible for Windows Security. Security professionals, Windows system administrators, and programmers in general will want to understand the techniques used by rootkit authors. At a time when many IT and Security professionals are still worrying about the latest e-mail virus or how to get all of this month's Security patches installed, Mr. Hoglund and Mr. Butler open your eyes to some of the most stealthy and significant threats to the Windows operating system. Only by understanding these offensive techniques can you properly defend the networks and systems for which you are responsible." --Jennifer Kolde, Security Consultant, Author, and Instructor"What's worse than being owned? Not knowing it. Find out what it means to be owned by reading Hoglund and Butler's first-of-a-kind book on rootkits. At the apex the malicious hacker toolset--which includes decompilers, disassemblers, fault-injection engines, kernel debuggers, payload collections, coverage tools, and flow analysis tools--is the rootkit. Beginning where Exploiting Software left off, this book shows how attackers hide in plain sight. "Rootkits are extremely powerful and are the next wave of attack technology. Like other types of malicious code, rootkits thrive on stealthiness. They hide away from standard system observers, employing hooks, trampolines, and patches to get their work done. Sophisticated rootkits run in such a way that other programs that usually monitor machine behavior can't easily detect them. A rootkit thus provides insider access only to people who know that it is running and available to accept commands. Kernel rootkits can hide files and running processes to provide a backdoor into the target machine. "Understanding the ultimate attacker's tool provides an important motivator for those of us trying to defend systems. No authors are better suited to give you a detailed hands-on understanding of rootkits than Hoglund and Butler. Better to own this book than to be owned." --Gary McGraw, Ph.D., CTO, Cigital, coauthor of Exploiting Software (2004) and Building Secure Software (2002), both from Addison-Wesley"Greg and Jamie are unquestionably the go-to experts when it comes to subverting the Windows API and creating rootkits. These two masters come together to pierce the veil of mystery surrounding rootkits, bringing this information out of the shadows. Anyone even remotely interested in Security for Windows systems, including forensic analysis, should include this book very high on their must-read list." --Harlan Carvey, author of Windows Forensics and Incident Recovery (Addison-Wesley, 2005)Rootkits are the ultimate backdoor, giving hackers ongoing and virtually undetectable access to the systems they exploit. Now, two of the world's leading experts have written the first comprehensive guide to rootkits: what they are, how they work, how to build them, and how to detect them. Rootkit.com's Greg Hoglund and James Butler created and teach Black Hat's legendary course in rootkits. In this book, they reveal never-before-told offensive aspects of rootkit technology--learn how attackers can get in and stay in for years, without detection.Hoglund and Butler show exactly how to subvert the Windows XP and Windows 2000 kernels, teaching concepts that are easily applied to virtually any modern operating system, from Windows Server 2003 to Linux and UNIX. Using extensive downloadable examples, they teach rootkit programming techniques that can be used for a wide range of software, from white hat Security tools to operating system drivers and debuggers.After reading this book, readers will be able to Understand the role of rootkits in remote command/control and software eavesdropping Build kernel rootkits that can make processes, files, and directories invisible Master key rootkit programming techniques, including hooking, runtime patching, and directly manipulating kernel objects Work with layered drivers to implement keyboard sniffers and file filters Detect rootkits and build host-based intrusion prevention software that resists rootkit attacksVisit rootkit.com for code and programs from this book. The site also contains enhancements to the book's text, such as up-to-the-minute information on rootkits available nowhere else.
Peter Fairley - One of the best experts on this subject based on the ideXlab platform.
-
CyberSecurity at U.S. utilities due for an upgrade: Tech to detect intrusions into industrial control systems will be mandatory [News]
IEEE Spectrum, 2016Co-Authors: Peter FairleyAbstract:The hackers who unplugged 225,000 people from the Ukrainian electricity grid in December–the first confirmed cyber-takedown of a power system–have lent credence to calls by cyberSecurity experts for greater vigilance by utilities. "It's really brought the whole thing to a head and made people aware that this isn't just chatter about the sky falling," says Eric Byres, a Security Consultant who commercialized one of the first firewalls for industrial control systems.
Tom Rowan - One of the best experts on this subject based on the ideXlab platform.
-
IPS: Intrusion prevention systems: superior Security
Network Security, 2007Co-Authors: Tom RowanAbstract:As blackhats became more versatile and Security researchers gained expertise, the technologies employed to thwart zero-day attacks have grown more sophisticated. This led to intrusion detection systems that were designed to spot attempted attacks on the network, and then to intrusion prevention systems that would take things a stage further and automatically block the intrusion. Tom Rowan, Security Consultant at specialist distributor Magirus, provides an overview of the IPS product category from a Security practitioner's perspective, highlighting the potential benefits and design/deployment challenges that they may encounter. The article describes the history of the IPS category, while highlighting some of the challenges involved in designing and deploying such systems. Today, most networks are protected by firewall technology. There are numerous types of firewall, but essentially they all work in the same way: allow in the authorised traffic, filter the rest. The majority of purebred firewalls do not apply any further filtering on the traffic beyond IP and service port source or destination values. Originally, network Security seemed to be as simple as blocking IP addresses and filtering ports.