Meta tags:

Headings (most frequently used words):

dr, anton, chuvakin, information, security, publications,

Text of the page (most frequently used words):
and (90), published (78), the (77), security (74), covers (29), for (26), log (25), 2001 (24), analysis (21), 2002 (20), linux (17), with (16), #information (16), how (16), compliance (16), data (15), management (15), web (14), network (14), article (14), magazine (13), 2007 (13), here (12), securityfocus (12), mistakes (12), computerworld (12), this (12), com (12), system (11), describes (11), discusses (11), issues (10), 2003 (10), unix (10), attacks (10), part (10), portal (9), enterprise (9), intrusion (9), database (9), recent (8), paper (8), infrastructure (8), securitywatch (8), your (8), some (8), detection (8), response (8), logs (8), other (7), methods (7), their (7), five (7), tools (7), about (7), linuxsecurity (7), ids (7), pci (7), logging (7), from (6), that (6), risks (6), based (6), journal (6), company (6), computer (6), review (6), systems (6), translation (6), using (6), policy (6), dss (6), age (6), incident (6), newsletter (6), event (6), 2010 (5), new (5), org (5), users (5), office (5), secure (5), penetration (5), programs (5), requirements (5), common (5), honeynets (5), honeypot (5), technology (5), honeypots (5), lessons (5), case (5), mandates (5), changed (5), collection (5), 2004 (5), home (4), protection (4), infosecurity (4), issa (4), several (4), digital (4), local (4), can (4), vulnerability (4), testing (4), outlines (4), popular (4), ways (4), make (4), various (4), iptables (4), snort (4), honeynet (4), events (4), infosecwriters (4), study (4), real (4), world (4), 2008 (4), 2009 (4), sim (4), correlation (4), iii (4), are (3), use (3), page (3), england (3), site (3), such (3), copy (3), faq (3), many (3), used (3), basic (3), brief (3), shell (3), covert (3), them (3), root (3), organizations (3), encryption (3), reviews (3), application (3), products (3), defense (3), compromised (3), spanish (3), featured (3), chroot (3), hardening (3), kernel (3), internet (3), setting (3), host (3), complete (3), one (3), also (3), discovering (3), attack (3), hacker (3), forensics (3), what (3), first (3), practices (3), related (3), audit (3), time (3), dealing (3), large (3), small (3), environment (3), old (2), contact (2), book (2), powered (2), blog (2), summarizes (2), results (2), meeting (2), critical (2), call (2), need (2), impacts (2), hacking (2), etc (2), form (2), useful (2), impact (2), 1999 (2), linuxdoc (2), howto (2), 2000 (2), access (2), non (2), end (2), faqs (2), checklist (2), important (2), level (2), guide (2), windows (2), configuration (2), tips (2), basics (2), series (2), operating (2), challenges (2), software (2), when (2), future (2), components (2), services (2), ipsec (2), approaches (2), detailed (2), rootkits (2), maintain (2), distributed (2), overview (2), talks (2), hidden (2), erased (2), way (2), russian (2), best (2), high (2), matching (2), packet (2), public (2), squid (2), proxy (2), get (2), automated (2), touches (2), monitoring (2), solutions (2), companies (2), while (2), architecture (2), italian (2), types (2), its (2), value (2), online (2), incidents (2), research (2), investigation (2), securitywriters (2), ftp (2), server (2), insider (2), internal (2), social (2), engineering (2), nlp (2), people (2), compliant (2), really (2), debunking (2), criticisms (2), take (2), issue (2), practical (2), environments (2), platform (2), why (2), introduction (2), networks (2), csi (2), alert (2), machines (2), analyzing (2), through (2), conference (2), tisc (2), insight (2), grc (2), 2005 (2), medium (2), choosing (2), publications (2), anton (2), chuvakin (2), preblog, entries, modified, mar, questions, comments, look, posts, see, content, below, subscribe, rss, headline, updates, feedburner, email, joint, community, role, increasing, sharing, pdf, format, protecting, action, lists, focus, areas, efforts, infosec, perspective, under, development, diagram, structures, assessment, purposes, insurance, taxonomy, browser, station, mini, pocket, isp, redhat, anywhere, managers, administrators, personnel, concise, things, should, convinced, will, drastically, increase, very, low, cost, awareness, program, features, command, samples, ssh, articles, channels, modern, channeling, which, compares, classic, rainbow, channles, submitted, publication, gives, methodology, ossptmm, standartizing, standardizing, sendmail, html, tricks, have, others, fetchmail, remote, media, player, nsc, file, bug, hotmail, messenger, flaws, samba, takes, studies, realistic, exploit, scenarios, developed, suggested, mitigating, considered, ones, proposed, hack, week, often, occur, try, protect, rest, transit, thus, improve, posture, addressing, ipv6, focuses, next, generation, vpn, anti, defacement, depth, excure, poor, provides, discussion, packages, presense, idefense, restrict, activities, privileges, restricting, hide, ext2, partitions, recover, sure, stays, slashdot, hiding, recovery, enahnced, break, sloppy, jail, securely, emphasis, patches, add, ons, applications, capabilities, pattern, payloads, firewall, string, support, terminals, kiosks, setup, cache, combination, simple, anonymizer, anonymizing, newest, firewalling, code, enhancements, kernels, comparison, automation, integrity, checkers, limitations, against, usenix, login, ups, downs, briefly, deploying, deal, switched, shared, lan, point, respond, implementation, confusing, sensors, sending, carefully, crafted, tcp, packets, shortcomings, has, nids, reached, road, most, source, uses, free, collected, elsevier, compsec, daily, happening, decoy, run, author, days, essentials, maintaining, control, capture, benefits, patterns, password, whys, hows, present, ultimate, challenge, expect, unexpected, running, aggressive, careless, contains, fun, infected, protected, but, 0wned, example, today, desktop, drawn, above, hard, drive, tool, evaluates, defacements, versus, penetrations, money, life, malicious, provide, few, effective, doom, report, breaches, attacker, motivations, countermeasures, relative, efficiency, crc, scary, performing, powerful, persuasion, status, not, just, achieve, stay, shoud, come, duh, cso, shrugged, ben, rothke, regulatory, motivates, seriously, feb, computing, shut, presents, guidance, priorities, imposed, payment, card, industry, standard, must, soa, ieee, privacy, gunnar, peterson, six, trends, collect, analyze, wide, servers, across, boundaries, operations, underutilized, bulwark, problem, reliably, corporate, typical, records, produced, correlating, rules, statistical, implemented, volume, may, isc2, presentation, outlining, deployment, cross, offer, particularly, transmission, goes, into, detail, sql, storing, files, advanced, processing, attempts, cover, whatever, stuff, unified, replacing, piecemeal, committed, planning, executing, timing, aspect, where, needed, fallacy, netforensics, help, automate, processes, evidence, handling, intricacies, size, midsize, linuxtoday, strength, measures, trail, back, list, appearances, more, gcia, gcih, gcfa,

Text of the page (random words):
ious environments small office medium company and large environment this part is about a small office environment published at computerworld 12 17 2002 security response in a midsize office part ii of iii article covers dealing with security event analysis for a medium size company published at computerworld 01 07 2003 security response at a large company part iii of iii article describes the intricacies of dealing with security events and incidents at a large company published at computerworld 09 14 2004 automated incident handling using sim this paper covers how security information products sim such as netforensics can help to automate the enterprise incident management processes investigation evidence collection etc published in issa journal 03 02 2005 real time fallacy how real time your security really is this talks about the timing aspect of your security and discusses where real time security is needed published in csi alert newsletter 04 08 2005 five mistakes of incident response this article covers five common mistakes committed by the organizations while planning and executing their incident response programs published in computerworld 03 18 2008 unified grc replacing a piecemeal response to compliance the paper attempts to cover whatever useful stuff in it grc published in sc magazine log analysis log management and data correlation 08 01 2002 advanced log processing this article offer a brief overview of log analysis particularly log transmission log collection and log analysis it goes into some detail on using sql for storing and analyzing security log files published at securityfocus italian translation is here 12 13 2002 cross platform security analysis the article discusses the issues of event data collection analysis and presentation outlining many challenges with security information management sim technology and its enterprise deployment published at the internet security conference newsletter tisc insight 09 02 2003 event correlation in security covers the security event analysis through several types of correlation methods published at the internet security conference newsletter tisc insight 09 14 2004 security event analysis through correlation covers correlating intrusion and other security events using rules and statistical methods as implemented by sim products published in information systems security isc2 journal volume 13 issue 2 may 2004 10 21 2004 five mistakes of log analysis covers the typical mistakes organizations make when analyzing audit logs and other security related records produced by security infrastructure components published at computerworld 10 25 2004 issues discovering compromised machines discusses the problem of reliably discovering the compromised machines on corporate networks published at securityfocus 01 25 2007 introduction to database log management discusses the issues related to database logs and log analysis published in csi alert newsletter 07 01 2007 database logs the underutilized security bulwark discusses database logs and methods for their collection and analysis published in it defense magazine 11 01 2007 log analysis across system boundaries for security compliance and operations discusses how and why to collect and analyze network and server logs enterprise wide published in enterprise networks and servers magazine 12 01 2007 tips and trends on database log management discusses database logs and methods for their collection and analysis published in dm review magazine 07 08 2007 introduction to database log management discusses database log analysis published in infosecwriters com 08 31 2007 six mistakes of log management covers common mistakes of log analysis and log management published in infosecwriters com 3 20 2008 network database and system log data management the what why and how the paper covers the basics of platform and application logging computer technology review published in computer technology review 03 03 2009 logging in the age of web services with gunnar peterson covers the issues related to audit and event logging in soa and ws environments published in ieee security privacy home 3 8 2010 pci dss logging a must for compliance part 1 reviews logging requirements imposed by the payment card industry data security standard published in network world newsletter 3 10 2010 practical priorities in pci dss logging part 2 presents some practical guidance on pci dss logging published in network world newsletter 2 2 2010 shut up and log motivates people to take logs seriously published in feb 2010 issue of network computing regulatory and policy compliance 05 18 2007 incident management in the age of compliance this article covers how recent compliance mandates changed incident response programs and practices published in computerworld 07 07 2007 log management in the age of compliance this article covers how recent compliance mandates changed log analysis and log management programs and practices published in computerworld 09 16 2007 intrusion detection in the age of compliance this article covers how recent compliance mandates changed intrusion detection published in computerworld 11 19 2007 computer forensics in the age of compliance this article covers how recent compliance mandates changed computer forensics programs and practices published in computerworld 1 28 2008 security policy in the age of compliance this article covers how recent compliance mandates changed security policy requirements published in computerworld 4 16 2009 pci shrugged debunking criticisms of pci dss with ben rothke this covers the debunking of common criticisms of pci dss published in cso magazine online 12 2 2009 security first or compliance first discusses what shoud come first security or compliance duh 8 2 2009 what do i really need to do to stay pci dss compliant covers how to maintain compliant and secure status not just achieve it in russian policy and people issues of information security 03 20 2001 nlp powered social engineering attacks describes a scary way of performing social engineering attacks based on powerful nlp persuasion technology published at securityfocus 08 2001 internal attacks doom of information security research report on internal security breaches attacker motivations various countermeasures and their relative efficiency published in the journal of information security crc 11 01 2007 log analysis vs insider attacks covers how logs provide one of the few effective methods vs insider attacks published at issa journal 2 29 2008 five basic mistakes of security policy covers common mistakes of security policy management published at computer world malicious hacker attacks 08 2001 your money or your life evaluates risks and impacts of web page defacements versus hidden server penetrations published at securitywatch 05 08 2002 ftp attack case study part i the analysis also published here at securitywriters org covers a detailed case study of a hacker penetration with network and hard drive forensics hacker tool analysis and network infrastructure analysis published at linuxsecurity com spanish translation is here 06 19 2002 ftp attack case study part ii the lessons also published here at securitywriters org covers several important security lessons drawn from the above case published at linuxsecurity com spanish translation is here 05 04 2007 protected but 0wned a real world example of today s desktop security contains a fun case study of a infected system investigation published at infosecwriters com honeypots and honeynets 06 18 2002 lessons of the honeypot i aggressive and careless describes some of the lessons one can get from running a honeypot published at sc magazine web portal 09 25 2002 lessons of the honeypot ii expect the unexpected outlines how honeynets and honeypots present an ultimate challenge in information security published at sc magazine web portal 10 08 2002 whys and hows of honeynets and honeypots discusses issues in setting up and maintaining honeypots and honeynets covers some of the honeynet data control and data capture requirements and touches on benefits from research honeypots in discovering attacks and attack patterns published in the issa password magazine 01 17 2003 honeypot essentials the paper describes the honeypot technology and how it can be used published in the journal of information systems security 04 25 2003 days of the honeynet attacks tools incidents the paper covers some of the daily events happening in the honeynet decoy network run by the author published at linuxsecurity com also featured on infosecwriters com 07 24 2003 honeynets high value security data the article covers the types of data collected from the honeynet and its value for security published in the elsevier compsec online portal local copy here security tools and intrusion detection 08 2001 free security tools review describes several most popular one source security tools and their best uses for enterprise defense published at securitywatch 02 06 2002 network ids shortcomings has nids reached the end of the road article about confusing network ids sensors by sending carefully crafted tcp ip packets published at sc magazine web portal 04 22 2002 intrusion detection response about using linux unix intrusion detection system snort to respond to attacks it describes requirements and some implementation issues published at linuxsecurity com portal site italian translation is here 11 06 2002 complete snort based ids architecture part i on setting up a complete snort based intrusion detection infrastructure for switched or shared lan in point or distributed configuration published at securityfocus 11 19 2002 complete snort based ids architecture part ii published at securityfocus 02 20 2003 five ids mistakes that companies make briefly describes the five common mistakes companies make while deploying network intrusion detection and how to deal with them published at computerworld 04 08 2003 ups and downs of unix linux host based security solutions covers unix and linux host security solutions such as host ids and integrity checkers their limitations and attacks against them published in usenix login magazine 10 08 2003 monitoring ids describes requirements for monitoring intrusion detection systems published in information systems security unix linux security 04 23 2001 comparison of iptables automation tools describes automated tools used for setting newest linux firewalling code iptables and touches on security enhancements of 2 4 kernels published at securityfocus 10 20 2001 anonymizing with squid proxy is about the setup of squid proxy and cache in combination with secure shell to get a simple web anonymizer published at securityfocus 12 13 2000 linux internet kiosks covers security issues in linux public web access terminals published at securityfocus 12 31 2001 iptables linux firewall with packet string matching support applications of new iptables capabilities pattern matching in packet payloads published at securityfocus 01 23 2002 linux kernel hardening describes unix system hardening with an emphasis on kernel hardening using various kernel patches and high security add ons published at securityfocus 02 10 2002 using chroot securely outlines how to best use chroot system call for enahnced security in unix programs and how to break from sloppy chroot jail published at linuxsecurity com 03 10 2002 linux data hiding and recovery describes ways to hide data on linux ext2 partitions recover hidden and erased data and to make sure that erased data stays this way published at linuxsecurity com and featured on slashdot org russian translation is here spanish translation is here 05 01 2002 restricting unix users talks about the ways to restrict the activities and privileges of non root unix users on a system published at securityfocus 03 05 2003 an overview of unix rootkits provides detailed discussion of unix linux rootkits packages of tools to maintain the presense on the compromised systems distributed by idefense a paper review is here application security 08 2001 anti defacement products defense in depth or an excure for poor system security reviews web application security approaches published at securitywatch vpn ipsec and encryption 08 2001 future ip security outlines the future of ip addressing ipv6 and focuses on the security components of next generation ip services ipsec published at securitywatch 03 2007 five mistakes of data encryption covers some of the other mistakes that often occur when organizations try to use encryption to protect data at rest and data in transit and thus improve their security posture published at computerworld vulnerability analysis hack of the week series takes a recent vulnerability in some popular operating system or other software and studies it realistic exploit scenarios are developed and suggested ways of mitigating risks are considered and new ones proposed published at securitywatch 08 2001 vulnerability in popular linux network software samba 08 2001 ms hotmail and messenger flaws 08 2001 windows media player nsc file bug 08 2001 fetchmail remote root 08 2001 html form tricks to have others do your hacking 08 2001 sendmail local root other vulnerability and penetration testing articles 05 01 2002 standardizing penetration testing gives an outlines of popular penetration testing methodology ossptmm and challenges with standartizing penetration testing published at sc magazine web portal 04 22 2003 covert channels a modern review of network covert channeling methods which compares them with classic rainbow series covert channles on secure operating systems submitted for publication security basics and faqs 09 2001 secure shell ssh a brief guide brief guide to many of the secure shell features with command samples and linux windows configuration tips local copy 11 05 2001 basic security checklist for home and office users a concise checklist of many important things that company and home computer users should be convinced to do it will drastically increase the level of security at very low cost can be used for enterprise basic security awareness program published at securityfocus information security faqs 08 2001 infosecurity faq for system network administrators and it personnel published at securitywatch 08 2001 infosecurity faq for managers published at securitywatch 08 2001 infosecurity faq for end users published at securitywatch other it issues non security 12 13 2000 access the web anywhere published in linux journal 01 1999 pocket isp based on redhat linux howto published on linuxdoc org 05 1999 linux web browser station mini howto published on linuxdoc org digital risks 09 2001 digital risks taxonomy a diagram that structures digital risks such as hacking do etc in the form useful for impact assessment for the purposes of insurance local copy 09 2001 impacts of digital risks on enterprise under development 12 05 2001 infrastructure protection infosec perspective the paper cove...