Cloud Security

Source: emotional network The so-called "prison" refers to modifying the root directory that a process can see through the chroot mechanism, that is, limiting a process to a specified directory, ensure that the process can only act on the files in

Two questions need to be discussed: one is the Audit object, and the other is the audit method.First, let's talk about the audit objects. In the 2000 system, there is a security audit policy, but it is disabled by default and needs to be

Research on Content-based spam filteringAuthor: Met3or Source: http://www.istroop.orgEmail has become one of the important means of communication and communication in people's daily life, but the problem of spam is also becoming increasingly serious.

Prohibit others from accessing shared files in your "Network Neighbor"/disable common trojan portsWe don't all want others to share their resources online...Not to be disturbed by Trojans...You only need to do the following work to prevent others

Source: Computer newspaper In recent times, Internet surfing often encounters an unpleasant thing, that is, the title bar of IE browser is tampered with after browsing some websites mostly personal homepages, such as "welcome to visit ...... Website,

Http://www.donews.net/zwell There are already many ways for administrators to obtain SYSTEM permissions.The fourth brother mentioned: "MSDN series (3) -- Administrator users directly obtain SYSTEM permissions" and "remote thread injection version to

Recently, we heard about the remote script execution vulnerability in Mac OS in Skype 0day news. In fact, we discovered this vulnerability two months ago. We did not report the vulnerability to the vendor in time because we are still testing the

 When we get a background permission and upload PHPshell, we hate that he will automatically change the keyword PHP to PHP-and add a horizontal bar, which is quite common in South Korea. If you are not lucky enough, the environment is apache and

English name: P2P-Worm.Win32.Palevo.cjklVirus length: 100,779,160 bytesVirus Type: WormHazard level:★★★Affected platform: 2008 win7 and vista XPMD5 verification: 70f012b8b2ec6b8b39f7c67be6d4d1a7 It is written in advanced languages and processed by

Run the xcacls. vbs script. @ Color 0a@ Title Server Security Mechanism one-click batch Configuration@ Pause: Disable the WS command line component.Regsvr32/s wshom. ocx : Prevents WINDOWS vulnerabilities from [Sticky Keys]. "This is a history of

Modify sysctl Parameters$ Sudo sysctl-a | grep ipv4 | grep syn The output is similar to the following: Net. ipv4.tcp _ max_syn_backlog = 1024Net. ipv4.tcp _ syncookies = 0Net. ipv4.tcp _ synack_retries = 5Net. ipv4.tcp _ syn_retries = 5   Net.

  This software can effectively defend against DDOS attacks such as cc and syn semi-connections. In fact, it does not have the Interception Capability. It is based on the IPtables firewall and uses netstat + filtering rules to implement linkage with

Just now I was bored. I found an Oracle 11g database with a 0-day attack with a somewhat high impact (but low likleyhood. This vulnerability is resolved in the "file" field in the specified parameter file on the command line of the Oracle export

Apache server's defense against DoS attacks is mainly implemented through the Apache DoS Evasive Maneuvers Module. It is an alternative to mod_access and can defend against DoS attacks. The software can quickly reject repeated requests from the

A few days ago, the website was attacked by the latest "Flash Media Vulnerability", which affected versions earlier than Adobe Flash Player 10.3.183.5, you must know that 10.3.183.5 is the highest flash version before Wednesday. Even if an update

Gary blog See http://forge.mysql.com/wiki/MySQL_Internals_ClientServer_Protocol#Password_functionsLet me explain the following content: Earlier than 4.0 1. the server sends a random string (scramble_buff) to the client. 2. The client encrypts

Previously, because there was nothing important in the server, I had never followed the login log. I checked the auth only when I encountered an error in configuring ssh chroot. log, remember that this file is a login log, and I occasionally view

  1   Use IPTABLES   The command is as follows: iptables-a input-p tcp-s 192.168.1.1-j ACCEPT allows access to 192.168.1.1 (domain name can also be used)   Iptables-a input-p tcp -- dport 22-j DROP   2       Use the files under/etc/hosts.

Release: dedicated wait SYN attacks use the three-way handshake principle of the TCP/IP protocol to send a large number of network packets that establish connections, but do not actually establish connections. As a result, the network queue of the

  Step 1: edit the ssh server configuration file Vi/etc/ssh/sshd_config ListenAddress 10.0.0.23: 22 ListenAddress 202.106.0.20: 2012 Step 2: restart ssh and check whether the port is enabled /Etc/init. d/sshd restart Netstat-lntp Tcp 0 0 202.106.0.20