Cloud Security

The Heartbleed problem is actually worse than it can be seen now (it seems to be broken now ). Heartbleed (CVE-2014-0160) is an OpenSSL vulnerability that allows any remote user to dump some of the server's memory. Yes, it's really bad. It is worth

PS: The following are all tested by myself. It is not a theoretical article. If there is anything wrong, please make an axe. Thank you> _ First, we will introduce how SMB relay attacks work. Assume that the host on the left is A, and the host on

I. security algorithms of ASA 1) ASA is a stateful firewall with a connection table about user information, called the conn table. The key information in the table is as follows: Source IP Address Destination IP address The IP Protocol only applies

I have seen many articles on security product vulnerabilities on several portals over the past few days. I 'd like to say a few words:One of the top five firewalls in China was passed in a certain evaluation due to security issues.A buddy once

I have been studying CCNP Security Firewall v1.0 recently. Now the research is complete! It is found that Cisco ASA 8.4 has changed a lot. It is more and more like the checkpoint firewall. The global access control list, whether it is NAT or

For more mobile security topics, see http://mobile.51cto.com/hot-293442.htm   1. Access WiFi 1.1 wireless peer-to-peer Security WEP (Wired Equivalent Privacy) WEP adopts RC4 symmetric encryption technology at the link layer. The user's encryption

Is it really difficult to choose between public and private keys when using public key cryptography for encryption and signature?This article is the second version, because the first version is unfortunately ...... Let's talk less and get down to

Recently, I found that PDF files are increasingly used for advanced persistent threat attacks. Can you describe some new technologies used in PDF attacks? In addition, can you recommend some tools that can scan PDF malware? Can anti-malware or email

I used JDgui and read the decryption methods of the predecessors. I have never succeeded.In jboss, data source passwords can be encrypted. There are many related articles. Here I will talk about how to crack them.Jboss-4.0.4.GA as an example, the

Discussion on the difficulty of ECC deciphering 1. From the above analysis, it seems necessary to know how to create an ECC registration machine.Private KeyThis is possible. If the private key data length is very large or the data pair is used, this

I,A file encryption method 1. EFS encryption can be used only for NTFS partitions; 2. My computer -- tools -- Folder Options -- View -- Cancel simple file sharing; 3. Right-click the file or folder to be encrypted-properties-advanced-encrypted

Software developers usually use some encryption technology to protect their software against illegal use. In addition, software encryption is required to authorize the software based on the purchased content to maximize the sales profit. Software

More and more enterprises have listened to the opinions of regulatory agencies and increased the intensity of database encryption to ensure the security of data information in the event of large-scale violations. However, without a strong and

Undoubtedly, the security of current information is becoming more and more important. Therefore, the system administrator tries to encrypt the data as much as possible. Even so, the "Data Encryption" plan is not the best practice, especially when

To reconfigure Kali Linux as a platform, in addition to updating the system yesterday, some additional configurations are required, such as configuring Grub in dual systems. You need to reconfigure Grub because after Kali is installed on the same

  Preface: This article mainly describes some techniques to speed up blind injection and some exquisite statements in blind injection, although injection is not a new technology. However, database injection vulnerabilities still plague every

  Recent articles have outlined how to use WordPress's XML-RPC pingback functionality for DDos attacks. This article will analyze the attack and provide information to website administrators to protect their websites.This is not a new

Appcms. cc appcms Latest Version 1.3.708 Arbitrary File Download has been verified on the official demo website/pic. php  There is no access control, but the url is base64 encoded. You only need to construct the file path base64 to download the

The most common security threats come from the inside, and these threats are often fatal, and their destructiveness is far greater than that of external threats. Network sniffing is a simple and threatening network for security protection. Many

I. Sniffer Principle Analysis Before implementing the sniffer, We need to master the TCP/IP protocol. TCP and IP protocols refer to two network protocols or data transmission methods used on the Internet ). They are transmission control protocol and