Business Safety

You do not understand my tears: some of the safety of enterprises landing experience. Hi everyone, what I am sharing today is the experience of our company's security system. Since the last time I read the article "A Security Department for a Person" of atiger77, I was deeply touched. After that, I joined a person's "Security Department WeChat group and his comrades to communicate, in which found a commonplace question: the theory is theory, the safety of landing is one thing. Struct2 and fastjson outbreak some time ago exp loopholes in the shortest time spread everywhere, after a week, ...

The establishment of enterprise security building Open source SIEM platform, SIEM (security information and event management), as the name suggests is for security information and event management system for most businesses is not cheap security system, this article combined with the author's experience describes how to use open source software Analyze data offline and use algorithms to mine unknown attacks. Recalling the system architecture to WEB server log, for example, through logstash WEB server to collect query log, near reality ...

Construction of enterprise security building open source SIEM platform. SIEM (security information and event management), as its name implies, is a management system for security information and events. It is not a cheap security system for most enterprises. This article uses the author's experience to introduce how to use open source software to analyze data offline and use attack modeling Way to identify attacks. Review the system architecture to the database, for example, through logstash to collect mysql query log, near real-time backup ...

Preface The construction of enterprise security building Open source SIEM platform, SIEM (security information and event management), as the name suggests is for security information and event management system, for most businesses is not cheap security system, this article combined with the author's experience describes how to use Open source software to build enterprise SIEM system, data depth analysis in the next chapter. The development of SIEM compared Gartner global SIEM rankings in 2009 and 2016, we can clearly see that ...

Enterprise security embrace open source FREEOTP deploy actual combat. In the process of safety construction, the overall budget, input-output ratio are the first issues to be considered, the lack of development staff, lack of capital budget, open source products has become an inevitable choice. 0 × 01 Foreword The tiger symbol is the troop symbol of the ancient emperor's dispatch of troops, the token of tiger shape made of bronze or gold, split into two halves, half of which is handed to generals and the other half preserved by the emperor, with only two tigers At the same time the merger, holders who get the troop movement. Tiger symbol can generally be seen as a two-factor identity ...

1. Kernel-Level Vulnerability Dirty COW Dirty Cow Vulnerability. The COW mechanism of the Linux kernel memory subsystem competes with memory writes, causing read-only memory pages to be tampered with. Impact: Linux kernel> = 2.6.22 Vulnerability Affected: Low privilege Users can write to this read-only memory page (including a file read-only to this user on a writable file system) and to root PoC Reference: https://github.com/dirtycow/di ...