Internet Security Review

RESOURCES: DOWNLOADS, DOCUMENTS & PUBLICATIONS



		Pipe Networks submarine cable landing. Video courtesy of ZDNet AU.
		Covert channel technology in VoiP Whitepaper by Wojciech Mazurczyk, Krzysztof Szczypiorski, Warsaw University of Technology, Faculty of Electronics and Information Technology, Institute of Telecommunications. Download here.
		DoS attacks using SQL Wildcards - White Paper This paper discusses abusing Microsoft SQL Query wildcards to consume CPU in database servers using only the search field present in most common web applications. Majority of the Microsoft SQL Server based web applications are vulnerable to this attack. Other databases could be vulnerable depending on how the applications implement search functionalities although common implementation of the search functionality in SQL Server back-end applications is vulnerable. There are real world scenarios and detailed analysis in the paper which explains and shows the impact of this attack. http://www.portcullis-security.com/uplds/wildcard_attacks.pdf
		WIFI - Electromagnetic fields and public health. http://www.who.int/mediacentre/factsheets/fs304/en/index.html
		PENTEST - Pangolin version 1.3.0.624 now available. Download at http://www.nosec.org/web/pangolin
		If you are looking for a commercial tool to test the effectiveness of your IDS/IPS or any security device for that manner, download this Traffic IQ Pro tool FREE at www.karalon.com/downloads.htm
		PENTEST - Sqlninja versions 0.2.3 now available. Download at http://sqlninja.sourceforge.net
		DNSSEC - New Open-Source DNS Server Supports DNSSEC Unbound is so-named to contrast it to BIND (Berkeley Internet Name Domain), the overwhelmingly most popular recursive DNS (Domain Name System) server on the Internet. But BIND, which is also open source, is not many people's favorite program. It has a long history of serious security problems and is not considered high performance. Recursive, as opposed to authoritative DNS servers, are the bread-and-butter DNS servers used by enterprises and ISPs to connect users to the rest of the Internet's Domain Name System. They cache results locally and pass requests back up to authoritative servers, such as the ones that run big domains like .com. Unbound was written by NLnet Labs, VeriSign, Nominet and Kirei. Unbound will support DNSSEC, a version of DNS that uses public-key cryptography to protect DNS results, from begriming. Unbound and BIND are the only open-source recursive DNS servers that support DNSSEC. BIND is bewilderingly popular considering its reputation and performance, and a great deal of this must be due to it being open source and free. After BIND, the next most popular recursive DNS server is probably Microsoft's DNS which, of course, is not open source or free. Perhaps Unbound can change things. Details and downloads at http://www.unbound.net/