download issue 24 here - Help Net Security

More documents

Recommendations

Info

Both rules will execute the host-deny script. The first one when rule number 10013 is triggered and the second one when any event with a severity level of 10 or higher is triggered. Conclusion I hope that I have given you a good overview of OSSECʼs capabilities. With the support for multiple operating systems and the flexibility to adapt it to specific environments, I would recommend it to anyone looking to gain control over their environment. host-deny local 10 300 If you want to look into it further, I would suggest starting at the OSSEC website (www.ossec.net). Additionally, the “OSSEC Host-based intrusion detection” book written by Daniel Cid, Andrew Hay and Rory Bray and published by Syngress is a very good reference for the solution. If you really get stuck, you can get a very fast answer from the OSSEC user group. Now off you go! Start loving your log files and give them the attention they deserve. Wim Remes is an information security consultant from Belgium and co-host of the Eurotrash information security podcast (www.eurotrashsecurity.eu). www.insecuremag.com 62
RSA Conference 2010 (www.bit.ly/rsac2010) Moscone Center, San Francisco. 1-5 March 2010. InfoSec World Conference & Expo 2010 (www.misti.com/infosecworld) Disney's Coronado Springs Resort, Orlando, FL. 19-21 April 2010. Infosecurity Europe 2010 (www.infosec.co.uk) Earls Court, London. 27-29 April 2010. Gartner Identity & Access Management Summit (europe.gartner.com/iam) Lancaster London, London, UK. 3-4 March 2010. Corporate Fraud: Prevention, Detection & Investigation in the Aftermath of the Global Economic Downturn (www.bit.ly/b4U0RV) Boston, MA. 15-16 March 2010. SecureCloud 2010 (cloudsecurityalliance.org/sc2010.html) Majestic Hotel and Spa, Barcelona, Spain. 16-17 March 2010. Atlanta SecureWorld Expo 2010 (secureworldexpo.com/events/index.php?id=266) Cobb Galleria Centre, Atlanta, GA. 27-28 April 2010. Cyber Defence 2010 (smi-online.co.uk/2010cyber17.asp) Swissôtel, Tallinn, Estonia. 17-18 May 2010. ISSD 2010 (issdconference.com) Westminster Conference Centre, London. 20-21 May 2010. www.insecuremag.com 63
Page 5 and 6:
25 million new malware strains in o
Page 7 and 8:
Google hacked, plans to leave China
Page 9 and 10:
Hacker attacks on healthcare organi
Page 11 and 12: Even though most standard stacks us
Page 13: Server support still missing Unfort
Page 16 and 17: What are these new approaches? Let
Page 18 and 19: The need for new security controls
Page 21 and 22: How many times have you, as a secur
Page 23 and 24: 1Password interface Although this i
Page 25 and 26: The option “Never prompt for mast
Page 27 and 28: The master password on the iPhone a
Page 29 and 30: Identifying those applications is n
Page 31: The single tool trap Scanning tools
Page 34 and 35: Cloud Security and Privacy By Tim M
Page 36: Spam and phishing scams will follow
Page 39 and 40: This infection method only works if
Page 41 and 42: Hook-createprocess.dll is a DLL tha
Page 43: Here are some of the Twitter feeds
Page 46 and 47: organizations the tools they need t
Page 48: This is not unlike other business o
Page 52 and 53: acronyms without researching their
Page 54 and 55: process of calculation the answer.
Page 57 and 58: In any environment, large or small,
Page 59 and 60: Remoted (running on the server) rec
Page 61: alpha group alpha events 10000 Ch
Page 66: And most of the time, they fail bec
Page 69 and 70: We are also working with SANS on de
Page 71 and 72: There are three components involved
Page 73 and 74: " • Support for health checks by
Page 76 and 77: Sectool (www.net-security.org/softw
Page 78 and 79: To achieve this, retailers must shi
show all

download issue 24 here - Help Net Security

Create successful ePaper yourself

Delete template?

Save as template?