Clik here to view.
Book review: Foundations of Security (Part 2 Secure Programming Techniques)
Chapter 5: Worms and other malware This chapter present some “famous” worms that had major impact on the security industry. Every worm presented in the chapter had used one of the security holes that...
View ArticleClik here to view.
Book review: Foundations of Security (Part 3 Introduction to Cryptography)
Chapter 12: Symmetric Key Cryptography The chapter starts with an introduction to cryptography that consists in explaining some notations and terminology. Then the block ciphers are explained and the...
View ArticleClik here to view.
Web Application Firewall (WAF) – l’etat de l’art (1)
Introduction Au cours des dernières années, une tendance claire se dégage au sein du paysage de la sécurité de l’information; les applications Web sont l’objet d’attaques. Les applications Web...
View ArticleClik here to view.
Web Application Firewall (WAF) – l’etat de l’art (2)
L’architecture d’un pare-feu applicatif web Le placement du pare-feu applicatif web Les pare-feu applicatifs qui sont des appliances sont d’habitude placés directement derrière un pare-feu classique...
View ArticleClik here to view.
Web Application Firewall (WAF) – l’etat de l’art (3)
Les contre-mesures offerts par un pare-feu applicatif Protection contre les dénis de service Cette protection est assez délicate à mettre en œuvre du fait de la variété des méthodes utilisées pour...
View ArticleClik here to view.
Web Application Firewall (WAF) – l’etat de l’art (4)
Produits et solutions Solutions non-commerciales ModSecurity – www.modsecurity.org Le pare-feu applicatif Web le plus utilisé est ModSecurity qui est un projet open-source. ModSecurity est...
View ArticleClik here to view.
(My) CISSP Notes – Information Security Governance and Risk Management
Note: This notes were made using the following books: “CISPP Study Guide” and “CISSP for dummies”. The Information Security Governance and Risk Management domain focuses on risk analysis and...
View ArticleClik here to view.
(My) CISSP Notes – Security Architecture and Design
Note: This notes were made using the following books: “CISPP Study Guide” and “CISSP for dummies”. Security Architecture and Design describes fundamental logical hardware, operating system, and...
View ArticleClik here to view.
(My) CISSP Notes – Business Continuity and Disaster Recovery Planning
Note: This notes were made using the following books: “CISPP Study Guide” and “CISSP for dummies”. Business Continuity and Disaster Recovery Planning is an organization’s last line of defense: when all...
View ArticleClik here to view.
(My) CISSP Notes – Security Operations
Note: This notes were made using the following books: “CISPP Study Guide” and “CISSP for dummies”. Operations Security is concerned with threats to a production operating environment. So operations...
View ArticleClik here to view.
(My) BruCON 2015 notes (1)
Here are my quick notes from the BruCON 2015 conference.All the slides can be found here. Nightmares of a Pentester The goal is to present some (basic) that the operational security teams (a.k.a Blue...
View ArticleClik here to view.
(My) BruCON 2015 notes (2)
Here are my quick notes from the BruCON 2015 conference.All the slides can be found here. cve-search a free software to collect search and analyze common vulnerabilities and exposures in software Some...
View ArticleClik here to view.
(My) BruCON 2015 notes (3)
Here are my quick notes from the BruCON 2015 conference. All the slides can be found here. Intrusion detection on Linux and OSX with osquery osquery goals: explore your operation system using sql host...
View ArticleClik here to view.
(My) BruCON 2015 notes (4)
Here are my quick notes from the BruCON 2015 conference. All the slides can be found here. Crowdsourced Malware Triage Workshop – Making Sense of Malware with a Browser and a Notepad The malware is...
View ArticleClik here to view.
(My) BruCON 2015 notes (5)
Here are my quick notes from the BruCON 2015 conference. All the slides can be found here. This is the last ticket about the BruCOn 2015 so, it contains the presentations for which my notes are not so...
View ArticleClik here to view.
Threat Modeling for mere mortals
This ticket is an introduction to the threat modeling in the context of software development. Definition In the context of the IT security, threat modeling is a structured approach that enables you to...
View ArticleClik here to view.
Book review: Software Security: Building Security in – Part I: Software...
This is a review of the first part of the Software Security: Building Security in book. Chapter 1: Defining a discipline This chapter lands out the landscape for the entire book; the author presents...
View ArticleClik here to view.
Book review: Software Security: Building Security in – Part II: Seven...
This is a review of the second part of the Software Security: Building Security in book. Chapter 3: Introduction to Software Security Touchpoints This is an introductory chapter for the second part of...
View ArticleClik here to view.
Book review: Software Security: Building Security in – Part III: Software...
This is a review of the third part of the Software Security: Building Security in book. This part is dedicated to how to introduce a software security program in your company; it’s something that I’m...
View Article
![Personal Investments • Re: 401k investments [which to choose?]](http://i.imgur.com/wA51OIw.png)