~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
238 articles from the new era
The Clark-Wilson security model is based on preserving information integrity against the malicious attempt of tampering with data. The security model maintains that only authorized users should make and be allowed to change the data, unauthorized users should not make any changes, and the system sho
Everybody in the USA that used the mail-in or dropbox voting option, be on alert that there are criminals lurking about with the goal of abusing the confusion going on with the US election the next few days. If anybody calls you and asks you to verify anything about you as a means to “validate y
In a previous lesson, I pointed out that there are three essential ways security tools detect threats. Those methods are signature-based, behavior, and anomaly detection. Most security tools use a combination of one or more of these capabilities to detect threats. The following figure represents
Over the last few days, many of us in the USA have experienced network outages. I’m not sure about you, but I have become the default “IT Support Guy” at my house meaning when the network goes down, my family starts throwing tomatoes at me while they blame me for the outage. As the IT Support Gu
Don't Panic!You will inevitably be affected by a Distributed Denial of Service (DDoS) attack at some point. A DDoS attack is a shock to the system and how you react is everything. When it happens, stay calm and accept it. Someone comfortable at making the right decisions needs to take control of the
As the world increasingly relies on technology, the energy sector’s role becomes more critical. A disruption in the power grid that delivers electricity to businesses and homes could be devastating for any infrastructure and services in an area. Given this severity, cyberattacks on the energy indust
One common question I’ve received is what open source tools are available that I can download now. The answer to this question is simple: LOTS! I will point out however, there are reasons why organizations don’t just run only open-source products within their security operation center. There are
Snort 3 is out. This comes from the official release. This post can be found HERE. We know users have been anticipating this day for years. So, we are excited to announce that the official release of Snort 3 is here! The version number is 3.1.0.0. Snort is an open-source intrusion prevention system
They say the strong survive. How does that apply when you are dead? The Zombie Apocalypse is among us. What are your chances of making it?It really depends on what types of Zombies you are “lucky” enough to encounter. It does look like our advantage of speed from the Zombies, and relying on running
(This blog posting was written with the understanding that the reader already understands how standard LISP operates from a control and data plane perspective.)OverviewFor those who have looked into LISP Extended Subnet Mode (ESM), we have all come to the realization that it is a great leap in tec
Many of us have stress in our lives. We have our jobs to worry about, we need to think about our retirement, and we have to figure out what the health care law means to us. However, a few of us know there are more immediate concerns that must be dealt with.For years, mankind has struggled with what
As the world makes steady progress towards ending the pandemic, the road ahead is still a long one. Previously unforeseen obstacles can pop up at any time and skew the trajectory of how the world handles Covid-19. One obstacle, in particular, that is on the rise currently is phishing scams. The vacc