DeepSec 2015

IT Security Compliance Management can make sense

Nov 24, 2015 · 2 min read · compliance management regulation ·

IT Security Compliance Management can make sense Adrian Wiesmann published in Magdeburger Journal zur Sicherheitsforschung (2015, #10, p. 661-666) Info What kind of internal and external controls from regulations and other sources are there? What is IT-Risk and IT-Compliance management? Why and for whom does it matter? …

From Misconceptions to Failure Security and Privacy in US Cloud Computing FedRAMP Program

Oct 25, 2015 · 2 min read · cloud security security privacy ·

Share on:

From Misconceptions to Failure Security and Privacy in US Cloud Computing FedRAMP Program Mikhail Utin published in Magdeburger Journal zur Sicherheitsforschung (2015, #10, p. 628-660) Info This Articles considers practical implementations of »Cloud Computing« (CC) and associated services (CCS) in the US FedRAMP …

Psychology of Security A Research Programme

Oct 25, 2015 · 3 min read · Stefan-Schumacher psychology security research ·

Share on:

Psychology of Security A Research Programme Stefan Schumacher published in Magdeburger Journal zur Sicherheitsforschung (2015, #10, p. 667-674) Info IT Security is often considered to be a technical problem. However, IT Security is about decisions made by humans and should therefore be researched with psychological …

The Compromised Devices of the Carna Botnet As used for the Internet Census 2012

Oct 22, 2015 · 4 min read · carna botnet analysis ·

Share on:

The Compromised Devices of the Carna Botnet As used for the Internet Census 2012 Parth Shukla published in Magdeburger Journal zur Sicherheitsforschung (2015, #10, p. 547-627) Info This article will showcase the latest analysis and the progress of industry collaboration on the problem of Internet facing devices that …

Why Anti-virus Software Fails

Jul 19, 2015 · 2 min read · antivir antivirus fail evasion ·

Share on:

Why Anti-virus Software Fails Daniel Sauder published in Magdeburger Journal zur Sicherheitsforschung (2015, #10, p. 540-546) Info Based on my work about antivirus evasion techniques, I started using antivirus evasion techniques for testing the effectivity of antivirus engines. I researched the internal functionality …

Trusting Your Cloud Provider Protecting Private Virtual Machines

Jun 17, 2015 · 2 min read · cloud virtual-machine trust virtualisation ·

Share on:

Trusting Your Cloud Provider Protecting Private Virtual Machines Armin Simma published in Magdeburger Journal zur Sicherheitsforschung (2015, #9, p. 530-539) Info This article proposes an integrated solution that allows cloud customers to increase their trust into the cloud provider including cloud insiders (e.g. …

IPv6 Security Attacks and Countermeasures in a Nutshell

Mar 30, 2015 · 3 min read · IPv6 insecurities ·

Share on:

IPv6 Security Attacks and Countermeasures in a Nutshell Johanna Ullrich and Katharina Krombholz and Heidelinde Hobel and Adrian Dabrowski and Edgar Weippl published in Magdeburger Journal zur Sicherheitsforschung (2015, #9, p. 514-529) Info The history of computers is full of underestimation: 640 kilobyte, 2-digit …

Java’s SSLSocket How Bad APIs Compromise Security

Mar 20, 2015 · 2 min read · java api security ssl sslsocket ·

Share on:

Java’s SSLSocket How Bad APIs Compromise Security Georg Lukas published in Magdeburger Journal zur Sicherheitsforschung (2015, #9, p. 506-513) Info Internet security is hard. TLS is almost impossible. Implementing TLS correctly in Java is »Nightmare!«. This paper will show how a badly designed security API introduced …

An innovative and comprehensive framework for Social Driven Vulnerability Assessment

Dec 16, 2014 · 3 min read · human-vulnerabilities human-factors social-engineering security-awareness ·

Share on:

An innovative and comprehensive framework for Social Driven Vulnerability Assessment Enrico Frumento and Roberto Puricelli published in Magdeburger Journal zur Sicherheitsforschung (2014, #8, p. 493-505) Info Nowadays security attacks greatly rely on the human vulnerabilities, hence is fundamental to include the human …

Social Authentication Vulnerabilities, Mitigations, and Redesign

Nov 13, 2014 · 2 min read · 2fa two-factor-authentication ·

Share on:

Social Authentication Vulnerabilities, Mitigations, and Redesign Marco Lancini published in Magdeburger Journal zur Sicherheitsforschung (2014, #8, p. 476-492) Info High-value services have introduced two-factor authentication to prevent adversaries from compromising accounts using stolen credentials. Facebook has …