http://conference.hackinthebox.org/hitbsecconf2010kul/



hackinthebox
 ::  hitb portal  ::  hitb portal (SSL)  ::  hitb forum (SSL)  ::  hitb security conference  ::  hitb training ::  hitb irc  ::  hitb photos  ::  hitb videos :: 
Who's Online
There are 171 unregistered users and 0 registered users on-line.

You can log-in or register for a user account here.



Main Menu

Top Stories for Today

Top 20 of the Last 2 Weeks

Past Articles
Thursday, September 09
·Security vendor demonstrates insider attack on VMware ESX
·DHS Cybersecurity Watchdogs Miss Hundreds of Vulnerabilities on Their Own Network
·Court OKs Microsoft's new weapon for taking down botnets
·Half think downloading music for free is legal
·Google Instant promises live search results
·Customer database threatened by insider leakages
·When business brains turn to crime
·Dev Team Says Don’t Accept iOS 4.1, “It’s a Trap!”
·Hackers create 57,000 malicious pages per week
·Luis Corrons on taking down cyber criminals
·Apple patches DLL hijacking bug in Safari
·Beware the Fake Interview
·Hackers exploit new PDF zero-day bug, warns Adobe
·Microsoft Rumored To Buy Symantec. Why Would It Bother?
·Research Firm NSS Will Launch ‘Exploit Hub
·50% increase in attacks against Malaysian servers detected
·Ten held in swoop on film pirates
·WorldPay Hacker Gets Suspended Sentence for $9 Million Heist
Wednesday, September 08
·NSA Director Says U.S. Has a Duty to Secure the Internet
·Police in File-Sharing Raids Across Europe
·Flash Player as a spy system
·Cloud Computing: The Invisible Revolution
·Creepy Biometric IDs to Be Forced Onto India's 1.2 Billion Inhabitants
·Why Surging Security Vulnerability Rate May Be a Good Thing
·The world's most advanced smart ID card?
·TechCrunch hacked to distribute Zeus Trojan via JavaScript file
·O2 Forced To Pull Faulty Android 2.2 Desire Update
·Scaling Intrusion Prevention Systems for 10G, 40G and Beyond
·Career turning points: Step up to the big challenges
·HMRC tax problems quickly tapped by cash hungry hackers
 Older articles

An introduction to the FBI's anti-cyber crime network
Posted by l33tdawg on Friday, November 20, 2009 - 12:05 AM (Reads: 2983)
Source: Arstechnica



The Federal Bureau of Investigation told Congress this week that when it comes to cyber crime, terrorist groups like Al Qaeda aren't the sharpest pencils in the cup, but they're not out of the game either. "It is always worth remaining mindful that terrorists do not require long term, persistent network access to accomplish some or all of their goals," Steven R. Chabinsky, one of the Bureau's Cyber Division directors, explained to a Senate Judiciary Subcommittee. "Rather, a compelling act of terror in cyberspace could take advantage of a limited window of opportunity to access and then destroy portions of our networked infrastructure."

And there are lots of such windows, Chabinsky added, since, "we, as a nation, continue to deploy new technologies without having in place sufficient hardware or software assurance schemes, or sufficient security processes that extend through the entire lifecycle of our networks."

Thus the FBI has set up its own network to respond to whatever comes down the pike. Time will tell, and probably soon, how effective it is, but Chabinsky laid it out all the parts at the hearing. They include a division within the bureau, an inter-federal task force, an alliance with state, local, and industry enforcers, and a consumer complaint center.

(Printer-friendly page Send this story to someone)

 
Login
 



 


 Log in Problems?
 New User? Sign Up!

HITBSecConf2010 - Malaysia
Register now for the 8th annual HITB security conference in Asia!

Day 1 (13th Oct) Keynote Speakers

Keynote 1: Chris Wysopal (CTO/Co-Founder, Veracode)

Keynote 2: Paul Vixie (President, ISC)

Day 2 (14th Oct) Special Keynote Panel Discussion

“The Future of Mobile Malware & Cloud Computing”

Keynote Panelist 1: Mikko Hypponen

Keynote Panelist 2: Paul Ducklin

Keynote Panelist 3: Denis Maslennikov

Keynote Panelist 4: Dr. Jose Nazario

Moderator: Dr. Dinesh Nair


Conference Speakers (alphabetical order)

1.) Alexander Polyakov (CTO, Digital Security Company)

2.) Cedric Halbronn (Sogeti / ESEC)

3.) Claudio Criscione (Principal Consultant, Secure Network S.r.l.)

4.) Dennis Brown (Research Engineer, Tenable Network Security)

5.) Don Bailey (Security Consultant, iSEC Partners)

6.) Fabian Mihailowitsch (IT Security Consultant, cirosec GmbH)

7.) Jean-Baptise Bedrune (Sogeti / ESEC)

8.) Jonathan Brossard (CEO, Toucan Systems)

9.) Laurent Oudot (Founder, TEHTRI-Security)

10.) Long Le (VNSECURITY)

11.) Luis Corrons (Director of Research, PandaLabs)

12.) Marco Slaviero (Associate, SensePost)

13.) Mary Yeoh (Intel Corp)

14.) Meder Kydyraliev (Google Security Team)

15.) Mitja Kolsek (CTO, ACROS Security)

16.) Paul Sebastian Ziegler (Independent Network Security Researcher)

17.) Paul Thierault (Security Consultant, stratsec)

18.) Saumil Shah (Founder, Net-Square)

19.) Shreeraj Shah (Founder, BlueInfy)

20.) The Grugq (Senior Security Researcher, COSEINC)

There are very limited seats and registrants are encouraged to register early!

REGISTER NOW


HITB eZine Issue 003

Last 15 Postings to HITB Forum

Topics
· All topics
· AMD News (Aug 10, 2010)
· Apple News (Sep 10, 2010)
· Articles (Mar 03, 2009)
· Ask Us (Feb 01, 2003)
· Audio/Video (Sep 01, 2010)
· Encryption (Sep 06, 2010)
· Games (Aug 27, 2010)
· Hardware (Sep 10, 2010)
· HITB News (Sep 03, 2010)
· Industry News (Sep 10, 2010)
· Intel News (Aug 31, 2010)
· Law and Order (Sep 10, 2010)
· Linux (Aug 30, 2010)
· Microsoft (Sep 10, 2010)
· Networking (Sep 01, 2010)
· PDAs (Feb 09, 2007)
· Privacy (Sep 10, 2010)
· Red Hat (Mar 30, 2010)
· Science (Aug 30, 2010)
· Security (Sep 10, 2010)
· Software & Programming (Sep 10, 2010)
· Spam (Sep 10, 2010)
· Technology (Sep 07, 2010)
· Transmeta (Jul 07, 2007)
· Viruses & Malware (Sep 08, 2010)
· Wireless (Sep 07, 2010)

Packet Storm Security Latest
· OIG_10-111_Aug10.pdf
Office of Inspector General report OIG-10-1111 - DHS Needs to Improve the Security Posture of Its Cybersecurity Program Systems.
· USN-978-1.txt
Ubuntu Security Notice 978-1 - Several dangling pointer vulnerabilities were discovered in Thunderbird. It was discovered that the XPCSafeJSObjectWrapper (SJOW) security wrapper did not always honor the same-origin policy. Matt Haggard discovered that Thunderbird did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. Chris Rohlf discovered an integer overflow when Thunderbird processed the HTML frameset element. Several issues were discovered in the browser engine. David Huang and Collin Jackson discovered that the tag could override the charset of a framed HTML document in another origin. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. A buffer overflow was discovered in Thunderbird when processing text runs. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine.
· USN-975-1.txt
Ubuntu Security Notice 975-1 - Several dangling pointer vulnerabilities were discovered in Firefox. Blake Kaplan and Michal Zalewski discovered several weaknesses in the XPCSafeJSObjectWrapper (SJOW) security wrapper. Matt Haggard discovered that Firefox did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. Chris Rohlf discovered an integer overflow when Firefox processed the HTML frameset element. Several issues were discovered in the browser engine. David Huang and Collin Jackson discovered that the tag could override the charset of a framed HTML document in another origin. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. A buffer overflow was discovered in Firefox when processing text runs. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine.
· USN-985-1.txt
Ubuntu Security Notice 985-1 - Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user.
· ESA-2010-016.txt
RSA Access Manager Agent version 4.7.1 with RSA Adaptive Authentication Integration contains a potential vulnerability that could be exploited by malicious people to bypass authentication restrictions.
· ESA-2010-015.txt
A vulnerability exists in EMC Celerra which can be exploited to gain unauthorized access to root NFS export on EMC Celerra NAS. NAS Code versions 5.6.50 and below are affected.
· ESA-2010-014.txt
RSA Access Manager Server contains a potential vulnerability that could be exploited to bypass certain security restrictions, potentially enabling unauthorized access to protected resources.
· dsa-2106-1.txt
Debian Linux Security Advisory 2106-1 - Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications.

Follow us
Join our Facebook Group

Follow us on Twitter

Follow our RSS feed


HITB Affiliates

Page created in 0.821156024933 seconds.