jetlib.sec » Tags » core-architecture

Feeds

133341 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

10 items tagged "core architecture"

Related tags: zorp [+], proxy firewall [+], proxy [+], policy decisions [+], firewall [+], tom cross [+], talk [+], security perspective [+], intercept technology [+], intercept [+], cisco [+]

• January 29, 2012
• 10:11

  Zorp Proxy Firewall Suite 3.9.3

   » ‎ Packet Storm Security Recent Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 10:11

  Zorp Proxy Firewall Suite 3.9.3

   » ‎ Packet Storm Security Tools
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 10:11

  Zorp Proxy Firewall Suite 3.9.3

   » ‎ Packet Storm Security Misc. Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• August 24, 2011
• 7:17

  Zorp Proxy Firewall Suite 3.9.2

   » ‎ Packet Storm Security Recent Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 7:17

  Zorp Proxy Firewall Suite 3.9.2

   » ‎ Packet Storm Security Tools
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 7:17

  Zorp Proxy Firewall Suite 3.9.2

   » ‎ Packet Storm Security Misc. Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• May 14, 2010
• 21:04

  [Video] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective  

• 21:04

  [Slides] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective  

• 21:04

  [Paper] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective  

• 21:04

  [Audio] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective