|
|
Written by Michael Shinn
|
|
Monday, 14 May 2012 00:00 |
|
While participating in a security conference, I was asked a very important question: "How do we protect ourselves from Zero Day vulnerabilities?". My answer: "There is no such thing as zero day vulnerabilities". Crazy right? How can that be true? People report "zero day vulnerabilities" everyday, so how can that statement be true? And how does that answer solve the problem? Fear not fair reader, all will be revealed! Lets dig a little deeper and find why there may not really be "zero day" vulnerabilities and why protecting against them isn't as hard you may think.
|
|
|
Written by Michael Shinn
|
|
Sunday, 29 April 2012 17:30 |
|
And oldie but a goodie: we run a number of honeypots as part of our ongoing efforts to learn what attackers are doing and how to best protect customers and users of our products. An interesting trend we have seen lately is the use of a very old xmlrpc vulnerability from 2005 being widely used in attacks. What's really interesting is that there appears to be a new variant to this old vulnerability. Could there be holes in new applications using this old vulnerability? And what should you do about it?
|
|
Written by Michael Shinn
|
|
Friday, 02 March 2012 00:00 |
|
We got an interesting question from a potential customer recently that I'd like to answer here. Our customer asked:
"I recently purchased a new dedicated server. I was told the server is managed so not to worry about security, and they will patch the system and also provide a complementary firewall. Is this enough security for my server? Thank you in advance, I just want to make sure I'm doing the right things to protect my server and data."
The short answer is no.
|
|
Written by Michael Shinn
|
|
Monday, 27 February 2012 13:08 |
|
Note: This article is not about ASL, it is about all modern Linux based systems. This characteristic of modern Linux based systems is universal to all modern Linux systems, not just systems running ASL.
We often get asked by Linux seems to be using so much memory. Even on huge systems with tons of memory over time a Linux seems seems to use up all the memory available. People get worried that something is wrong, or maybe that there is a bug in something. Most of the time, it turns out that a Linux system isn't really using as much memory as it may appear, and this article is targeted at explaining how memory works in Linux and what tools you can use to find out how much memory is actually being used.
|
|
|
Written by Scott Shinn
|
|
Monday, 13 June 2011 16:31 |
|
Now that we're nearing the finish line for the 3.0 ASL release, there has been some time for those of us that are not gifted with user interface design skills to focus on some much needed back end updates & feature completion. The first major project was to get the Kernel build system into a much less manual state.
|
|
Written by Michael Shinn
|
|
Monday, 09 May 2011 12:59 |
|
Recently we had a customer ask a great question if the WAF could be configured to only inspect attacks if the file existed. In other words, to only look at an action if the URL was valid. The WAF can be configured to do this, and this article explains how to do it. But before you do it, I'd like to take a moment to discuss why I recommend against this.
|
|
|
|
|
<< Start < Prev 1 2 3 4 5 Next > End >>
|
|
Page 1 of 5 |
