ISW Security Papers Contest
Home
About Us

ISW News & Events

Text Library

Submit Your Paper
Contest
Recommended Reading
Contact Us
 

Subscribe to our monthly newsletter and receive updates on:
 
Security/Hack Challenges
ISW's Monthly Contest Prizes & Winners
Recommended Security Books & Reviews
Recently Published Papers
Click here to subscribe/unsubscribe!

Opt-in Terms | Archives
Would you listen to an InfoSecWriters Podcast on Information Security?
 
Yes
No
   

Best Security Papers of the Month Contest:

Contest FAQs

Prizes Catalog



Markus Jakobsson & Zulfikar Ramzan

Read the review here!
 

 

A major objective of the Info Security Writers is seeking the security enthusiasts who write. Most of the site’s content is generated by these people willing to share their knowledge and experiences on the various aspects of security/hacking via original white papers, articles and projects.

The Info Security Writers recognizes and rewards such contributors for their efforts through a monthly best-security-papers contest.

Click here for more info on SWG

Text Library contribute, read & rate security papers Recommended Reading comprehensive book reviews
Hitchhiker's World contribute articles & personal commentaries
Policies contribute & download policies
Forums partake in questions & discussions Quiz! the Netcat Geek Quiz here!
20/08/08: Berkeley Packet Filters - The Basics - Jeff Stebelton submits this paper on BPF's and a detailed outline of what they are and what they do.
25/07/08: IDABench – The Network Security Analyst’s Toolbox  - Jeff Stebelton wrote this paper on IDABench which is a compliment to your IDS/IPS.
11/07/08: ITIL V3 Improves Information Security Management - This paper, written by Ginger Taylor, will begin with an historical overview of ITIL and then move into a high level overview of Version 3, with particular focus on the Information Security Management process. This paper will address how this process has matured and how organizations can better ensure the confidentiality, integrity, and availability of their IT services by implementing the ITIL framework.
10/07/08: How to Block NDR Spam - In this paper, submitted by GFI, They provide a technical explanation of NDR Spam and recommend solutions that can prevent or limit exposure to this kind of unsolicited email.
19/06/08: Web Application Security: Don't Bolt It On; Build It In - Caleb Sima submits this paper on Web applications and their inherent risks associated, specifically when security is introduced after development.
02/06/08: Cybercrime & Cyberterrorism Against Corporate America - This paper, written by John Hibbs, discusses the methods and techniques used in cybercrime and cyberterrorism in today’s society.
23/05/08: Digital Piracy - This paper, written by Brett Pladna will discuss piracy and copyright infringement. Since the boom of the Internet it is possible to download all types of files.
14/05/08: The Lack of Attention in the Prevention of Cyber Crime and How to Improve It - This paper, written by Brett Pladna, discusses the issues of cyber crime and what is being done to prevent it
13/05/08: A Brief Guide to Securing Wireless Networks: Closing the Back Door - This paper, written by Aaron Sawyer, aims to give a brief history of wireless security, educate the WLAN administrator about the dangerous vulnerabilities of wireless networking, and make practical suggestions about how to close the door on potential intruders.
09/05/08: An Approach to Web Application Threat Modeling - The aim of this paper, written by Akash Shrivastava, is to identify relevant threats and vulnerabilities in the Web Application and build a Security Framework to help in designing a secure Web Application.
 
Infosecwriters.com anticipates your written contributions. CLICK HERE for writing guidelines & other criteria.

Nmap accepting applications for Summer of Code developers - 2008-03-25
Click here to expand the news item.

It may have taken me four months to send this year's first nmap-hackers mail, but the second only took me four hours. I want to let you all know that Nmap has been accepted for the fourth year running to participate in the Google Summer of Code program. This generous and innovative program provides $4,500 stipends to hundreds of university students to create or enhance open source software. Applications are only accepted for one week, until Monday, March 31.

If you are a college student in any country, I'd strongly encourage you to apply for Nmap SoC. There aren't many opportunities available to get paid to work on free software of your choice, and this is one of them. The last three years have been great! Even if you aren't a student, perhaps you have a talented friend or relative who might be interested. This program is a great benefit to Nmap, and the benefit is proportional to the quality of applicants we get. So please spread the word! Some SoC students have turned into long-term Nmap developers and are still writing great new code. Several have become SoC mentors to guide new Nmap SoC students.

Summer of code successes in recent years have lead to the 2nd Generation OS detection system, the Zenmap GUI, the runtime interaction feature which tells you how soon your scan is likely to finish, and much more. Here are more Nmap SoC success stories:

  1. 2007: http://seclists.org/nmap-dev/2007/q4/0024.html
  2. 2006: http://seclists.org/nmap-dev/2007/q1/0235.html
  3. 2005: http://slashdot.org/comments.pl?sid=183143&cid=15133184

If you or someone you know are interested, you can send them to the Nmap 2008 project ideas page at:

http://nmap.org/GoogleGrants.html

And you can learn more about the program in general at:

http://code.google.com/soc/2008/



544 bytes more >>


ISW's Charles Hornat Teaches Security Management - 2007-10-18
Click here to expand the news item.

ISW's Charles Hornat will be mentoring another SANS class in New York City. This class focuses on what is needed to be known for Information Security Managers. Charles will share his experiences as a Security Manager at companies like Sony and Standard and Poors. This class will begin on October 30th in Times Square, NYC.

If you would like more information or would like to sign up, please go to www.sans.org.

0 bytes more >>


Josh Wright and Eavesdropping on Bluetooth Headsets - 2007-10-08
Click here to expand the news item.

Josh Wright, an instructor for SANS , has produced a video demonstration on how to manipulate a BlueTooth headset. He clealy shows how easy it is to remotley connect to a victims headset, and eaves drop, even while the victim is not in a call, and/or inject audio in to the headset.

This is a must view!

To view it click here.

0 bytes more >>


Covert Google and Exploit Bank - 2007-09-04
Click here to expand the news item.
For more details, check :

http://www.infosecwriters.com/hhworld/

0 bytes more >>


All images, content & text (unless other ownership applies) are © copyrighted 2000 -  , Infosecwriters.com. All rights reserved. Comments are property of the respective posters.