Security Problems and Breaches

• 2013 Data Breach Investigations Report (Verizon)
• Know Your Enemy: Statistics, Honeynet project for tracking hackers.
• Classified from Orange Book classification A1 to C2.
• Network Rating Model: "A consistent, cost-effective methodology based upon a defined set of characteristics for assessing the total security of any network or combination of networks, either in operation or development" (but seems to have died in 1996)

Microsoft security flaws

• Foot-and-mouth believed to be first virus unable to spread through microsoft outlook
• Security Holes Threaten Microsoft Game Plan - describes password guessing attacks based on the NT challenge-response mechanism
• Using ActiveX to transfer funds from the authors

Netscape Security Problems

• Alleges ability of remote users to read local files NYT

Java

Unix

• How To Eliminate The Ten Most Critical Internet Security Threats
• Solaris Security FAQ

Others

• NetBSD security advisories, e.g., select(2)/accept(2) race condition
• NYT
• Bullet-proof security
• Stacheldraht

Technical explanation: A form may use GET to deliver forms content in its URL, typically through a cgi-bin script and possibly encrypted using SSL. If the page that is returned via the cgi-bin script contains a link to another site, the Referer field of the GET request contains the URL of that form submission, including the credit card numbers. You can try this out.

• Go Ahead, Be Paranoid: Hackers Are Out to Get You (NYT)

Physical Damage

Software Tools

• SATAN

Last updated by Henning Schulzrinne