Information Security Hub - Collection of Best InfoSec Articles

How to select a CAAT

noreply@blogger.com (PassCISA) — Mon, 24 Nov 2008 16:17:00 +0000

How to select a CAAT

CAAT stands for Computer Assisted Audit Techniques

This is a common thing of discussion among IS Auditors is "which one is best - CAATs or Manual method of IS Audit". Sometimes manual method is not enough to find out effective and efficient IS Audit results. On the other hand in many instances use of CAATs gives less efficient results than corresponding manual IS Audit methods.

IP Security & Authentication Header (AH)

noreply@blogger.com (PassCISA) — Mon, 24 Nov 2008 16:16:00 +0000

IP Security & Authentication Header (AH)

IP Security (IPSec) is a super set of protocols which to large extent ensure security of Internet Protocol (IP). Beside Internet Key Exchange (IKE) two other important protocol supported by IPSec are

1. Authentication Header (AH)
2. Encapsulating Security Payload (ESP)

Access Control in UNIX based operating systems

noreply@blogger.com (PassCISA) — Tue, 18 Nov 2008 00:45:00 +0000

Access Control in UNIX based operating systems:

A lot of UNIX based operating systems are available. Although basic architecture is same for all these Operating System but they varies in functionality.

Vishing

noreply@blogger.com (PassCISA) — Fri, 24 Oct 2008 16:47:00 +0000

Vishing like phishing is a socially engineered attempt to get your financial information. Unlike phishing rather than luring you to a website, it lures you to a phone number

read more

Antivirus Plasma

noreply@blogger.com (PassCISA) — Fri, 24 Oct 2008 16:29:00 +0000

Antivirus Plasma is a faux security program that does not provide any additional security features or functions for your computer. As we thought, Antivirus Plasma is nothing more than another rogue application that performs various malicious actions to get computer users to purchase the Antivirus Plasma

read more

Chrome Antics: Did Google Reverse-Engineer Windows?

noreply@blogger.com (PassCISA) — Fri, 26 Sep 2008 17:01:00 +0000

Since its release a few weeks ago, curious developers have been sniffing through the source code for Google's new Chrome web browser.

read more

The Hacker's Voice Digest Issue - No. 3 Released Today!!

noreply@blogger.com (PassCISA) — Fri, 26 Sep 2008 17:01:00 +0000

Contents:# Rough guide to number stations - Part 3 By Demonix# History of BT Strowger Systems - By Belial# List of interesting phone numbers - Blue_Chimp# VoIP spectacular with 10nix and...# Hacking Vonage - Belial# Easy Peasy ID theift - Hyper# Urban Exploration - BT exchanges# Rants# News# Interviews# and a fuckton more!...

read more

Top 5 Very Important Security Tests For Your Computer

noreply@blogger.com (PassCISA) — Fri, 26 Sep 2008 17:00:00 +0000

Until and unless you are not attacked by any virus or spyware you think that your computer security is very high but when your PC gets infected it is too late. So if you think that you have a good Internet security why not you go for some Internet Security Tests :

read more

IDS – an Information security tool to protect your network

noreply@blogger.com (PassCISA) — Fri, 26 Sep 2008 16:59:00 +0000

How an Intrusion Detection System or IDS can help Network administrator, Information Security professionals, IS Auditors and Penetration testers for detection of any external or internal network intrusion(s)...

read more | digg story

Thrown in the Fire - Database Corruption Investigation

noreply@blogger.com (PassCISA) — Fri, 26 Sep 2008 16:58:00 +0000

Analyzing an incident when the manufacturer claims that it's an operator error and the operator claims that it is an application error is one of the most daunting tasks of a security officer.

read more

Five Generations of programming languages

noreply@blogger.com (PassCISA) — Mon, 15 Sep 2008 13:43:00 +0000

So far 5 generations of programming languages have been defined. These ranges from machine level languages (1GL) to languages necessary for AI & Neural Networks (5GL).

read more | digg story

How Crackers Deface Websites? Why They Do It?

noreply@blogger.com (PassCISA) — Fri, 12 Sep 2008 16:10:00 +0000

The title speaks itself. Through this blog post I am not purposing to influence you to start defacing, but to briefly give you a better understanding of how and why it is done. ...Almost everyday I visit Zone-H’s archive of special digital attacks, I find that at least 1 or 2 attacks were done against US governmental web servers...

read more

INCREASE SPEED LIMIT OF INTERNET

noreply@blogger.com (PassCISA) — Thu, 11 Sep 2008 16:32:00 +0000

Does your ISP deliver the speed you pay for? It’s rather easy to test your broadband internet speed. However, there are a few things to keep in mind. For one, ISPs usually promise an “up to” speed, so you can’t expect top performance at all times

read more | digg story

Kerberos - a Single Sign-on Network Security Tool

noreply@blogger.com (PassCISA) — Thu, 11 Sep 2008 02:04:00 +0000

Have you ever worked in an environment where 10 or more different user credentials and passwords are required for different applications and services.What if, the number of applications and user credentials are even more?

read more | digg story

5 Reasons to Consult Your SysAdmin for New Systems

noreply@blogger.com (PassCISA) — Thu, 11 Sep 2008 00:15:00 +0000

A lot of organizations isolate system administrators from new system implementations, lead by the premise that their admin teams need to focus on maintenance, and may not bring benefit to the implementation when consultants are engaged to implement. But Bear in mind that SysAdmins have special insight that any project manager will find useful

read more

Error detection & correction by Parity Checking

noreply@blogger.com (PassCISA) — Thu, 04 Sep 2008 16:13:00 +0000

In parity checking an extra bit called a parity bit is added to a byte of data or more appropriately a data set to detect if data set is transmitted correctly. This is a means of error detection and sometimes error correction. Parity bit is sometimes also called check bit.

read more | digg story

10 important Benefits of Decision Support System (DSS)

noreply@blogger.com (PassCISA) — Thu, 04 Sep 2008 16:02:00 +0000

A Decision Support System (DSS) is an Interactive Information System which may encompass Expert System (s), Artificial Intelligence / Business Intelligence whose function is to collect semi structured information (data), to analyze and to shape the data to form a model .and present...

read more | digg story

The Web Incidents Hacking Database

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 16:39:00 +0000

The web hacking incident database (WHID) is a Web Application Security Consortium project dedicated to maintaining a list of web applications related security incidents. The database is unique in tracking only media reported security incidents that can be associated with a web application security vulnerability.

read more

Comparison of different SQL implementations

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 16:38:00 +0000

The following tables compare how different DBMS products handle various SQL (and related) features. If possible, the tables also state how the implementations should do things, according to the SQL standard.

read more | digg story

‘Forgot your password?’ may be weakest link in web security

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 16:09:00 +0000

Almost everyone forgets a Web site password once in a while. When you do, you click on the familiar Forgot your password? link. As an experiment, Thompson recently asked a few friends for permission to "hack" into their bank accounts. Using only information gathered from Web sites such as Facebook, he found his way in to each account within minutes

read more

Integrated Test facility for CISA Exam

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 15:34:00 +0000

f the IS auditor is very comfirtable with the database and application and he is wll aware of flow of data, then only he should use this techniques. Otherwise this will be very difficult to differentiate two types of data.

read more | digg story

Important points to remember about OSI – Application Layer

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 15:34:00 +0000

Application Layer is highest layer /7th Layer/Closest to user layer of 7 OSI layers. Many people think that Application Layer will contain different applications. Application Layer does not contain any application. It contains the protocols supporting different applications.

read more | digg story

Use of Sequence Check as CAAT tool

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 15:33:00 +0000

Sequence Check is an important CAAT tool which is mainly used in:1. Validation Control2. Processing ControlThis a way by which w ensure whether a set of data is :1. properly ordered or sequenced or out of ordered2. within a predefined limit or range or out of predefined range

read more | digg story

How to plan a Penetration Test

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 15:32:00 +0000

Penetration Tests is very important as it leads to the modification/adoption of policies related to Information System. Vulnerabilities detection may lead to a stronger system.Proper planning of Penetration testing is even more important.

read more | digg story

Corrective Control & Information System's irregularities

noreply@blogger.com (PassCISA) — Tue, 02 Sep 2008 15:31:00 +0000

Corrective Controls are one of the three basic types of internal control which are basically meant to correct detected irregularities of Information System. Success of corrective control (any type of internal control) depends mainly upon the following factors:1. Control Objective definition2. Control Rule sets .....

read more | digg story