Revisiting SOHO Router Attacks Álvaro {Folgado Rueda} and José Antonio {Rodríguez García} and Iván {Sanz de Castro} published in Magdeburger Journal zur Sicherheitsforschung (2017, #14, p. 797-814) Info Domestic routers have lately been targeted by cybercrime due to the huge amount of well-known vulnerabilities which …

Read More

BadGPO Using Group Policy Objects for Persistence and Lateral Movement Immanuel Willi and Yves Kraft published in Magdeburger Journal zur Sicherheitsforschung (2017, #13, p. 772-778) Info Group Policy is a feature which provides centralized management and configuration functions for the Microsoft operating system, …

Read More

»Hast du die Sorge nie gekannt?« -- Tiefenpsychologische Zugänge zur Bedeutung der Angst Theoretische Überlegungen und qualitative Interviewauswertung Bernd Rieken published in Magdeburger Journal zur Sicherheitsforschung (2017, #13, p. 742-750) Info Ausgehend von einem Zitat aus Goethes »Faust«, wird auf die …

Read More

It is about the administrative costs Marcus J. Ranum published in Magdeburger Journal zur Sicherheitsforschung (2017, #13, p. 751-753) Info Everything that's old is new again, and if you work in security long enough, you'll see the same ideas re-invented and marketed as the new new thing. Or, you see solutions in …

Read More

Malicious Hypervisor Threat Phase Two: How to Catch the Hypervisor Mikhail Utin published in Magdeburger Journal zur Sicherheitsforschung (2017, #13, p. 754-771) Info In this article we're addressing the matters discussed at DeepSec 2014 (Utin M. 2014) and 2016 (Utin M. 2016) including the current status of the …

Read More

Informationssicherheit in Versorgungsunternehmen umsetzen Stefan Schumacher published in Trinkwassertagung Sachsen-Anhalt 2016 (2016, #, p. 29-40) Info Versorgungsunternehmen sind als Betreiber kritischer Infrastrukturen vielfältigen Angriffen aus dem Internet ausgesetzt. Sowohl einfache Bürorechner, Abrechnungssystem …

Read More

Applicability of Criminal Law and Jus ad Bellum to Cyber-Incidents Oscar Serrano and Florin-Răzvan Radu and Ele-Marit Eomois published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 715-724) Info Despite current efforts to adapt existing legal instruments to regulate hostile activities in cyber space, …

Read More

Bypassing McAfee’s Application Whitelisting for Critical Infrastructure Systems René Freingruber published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 705-714) Info This paper describes the results of the research conducted by SEC Consult Vulnerability Lab on the security of McAfee Application …

Read More

A Death in Athens The Inherent Vulnerability of »Lawful Intercept« James Bamford published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 725-741) Info I will discuss the »Athens Affair,« the subject of a recent investigation by me in The Intercept. In 2004, the NSA and CIA worked secretly with the …

Read More

ZigBee Exploited The good, the bad and the ugly Tobias Zillner published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 699-704) Info The Internet of Things (IoT) is an emerging trend. IoT involves the integration of digital and wireless technologies in physical objects and systems, especially those …

Read More