Elie Bursztein

TrackBack Spam: Abuse and Prevention

Elie Bursztein — Fri, 11 Dec 2009 01:44:49 +0000

Contemporary blogs receive comments and TrackBacks, which result in cross-references between blogs.
We conducted a longitudinal study of TrackBack spam, collecting and analyzing almost 10 million samples from a massive spam campaign over a one-year period. Unlike common delivery of email spam, the spammers did not use bots, but took advantage of an official Chinese site as a relay.

Based on our analysis of TrackBack misuse found in the wild, we propose an authenticated TrackBack mechanism that
defends against TrackBack spam even if attackers use a very large number of different source addresses and generate unique URLs for each TrackBack blog.

Presented by Eric at CCSW
slides
Paper

XCS: cross channel scripting and its impact on web applications

Elie Bursztein — Tue, 10 Nov 2009 01:17:17 +0000

We study the security of embedded web servers used in consumer electronic devices, such as security cameras and photo frames, and for IT infrastructure, such as wireless access points and lights-out management systems. All the devices we examine turn out to be vulnerable to a variety of web attacks, including cross site scripting (XSS) and cross site request forgery (CSRF). In addition, we show that consumer electronics are particularly vulnerable to a nasty form of persistent XSS where a non-web channel such as NFS or SNMP is used to inject a malicious script. This script is later used to attack an unsuspecting user who connects to the device’s web server. We refer to web attacks which are mounted through a non-web channel as cross channel scripting (XCS). We propose a client-side defense against certain XCS which we implement as a browser extension.

Presented by Hristo at CCS’09 Chicago USA
Paper

Decaptcha: Breaking 75% of eBay Audio CAPTCHAs.

Elie Bursztein — Tue, 11 Aug 2009 00:47:35 +0000

CAPTCHA tests aim at preventing attackers from performing automatic registration. In this paper we show that our prototype Decaptcha is able to successfully break 75% of eBay audio captchas. We compare its performance with the state of the art, readily
available speech recognition system Sphinx and discuss the implications for eBay security.

Presented at Woot’09, montréal Canada

Paper (PDF)
presentation slides (PDF)

Embedded Management Interfaces: Emerging Massive Insecurity

Elie Bursztein — Sat, 25 Jul 2009 01:00:59 +0000

Over the last few years, the number of devices that embed user-friendly management interfaces accessible from the network has drastically increased. These interfaces can be found on almost every kind of device, from lights-out management systems for PCs, to small SOHO NAS appliances, to photo frames.

In this talk, we will cover the attack surface of embedded management interfaces and pinpoint which parts of them are the most likely to be vulnerable, based on our evaluation of more than a dozen device models from different categories. In particular, we will review known yet underestimated implementation shortcuts that lead to vulnerabilities. To illustrate each shortcut, we will describe real-world vulnerabilities that we have found and exploited in devices from Intel, Linksys, Lacie, Samsung, and Dell among others.

Presented at the Blackhat 2009 Las Vegas, USA

Paper
Slides

Extending Anticipation Games with Location, Penalty and Timeline

Elie Bursztein — Sat, 11 Oct 2008 00:36:46 +0000

Over the last few years, attack graphs have became a well recognized tool to analyze and model complex network attack. The most advanced evolution of attack graphs, called anticipation games, is based on game theory. However even if anticipation games allow to model time, collateral effects and player interactions with the network, there is still key aspects of the network security that cannot be modeled in this framework. Theses aspects are network cooperation to fight unknown attack, the cost of attack based on its duration and the introduction of new attack over the time. In this paper we address these needs, by introducing a three-fold extension to anticipation games. We prove that this extension does not change the complexity of the framework. We illustrate the usefulness of this extension by presenting how it can be used to find a defense strategy against 0 days that use an honey net. Finally, we have implemented this extension into a prototype, to show that it can be used to analyze large networks security.

Presented at FAST’08, Malaga, Spain

Full paper (PDF)

NetQi: A Model checker for Anticipation Game

Elie Bursztein — Sun, 17 Aug 2008 11:53:33 +0000

NetQi is a freely available model-checker designed to analyze network incidents such as intrusion. This tool is an implementation of the anticipation game framework, a variant of timed game tailored for network analysis.
The main purpose of NetQi is to find, given a network initial state and a set of rules, the best strategy that fulfills player objectives by model-checking the anticipation game and comparing the outcome of each play that fulfills strategy constraints. For instance, it can be used to find the best patching strategy.
NetQi has been successfully used to analyze service failure due to hardware, network intrusion, worms and multiple-site intrusion defense cooperation.

Presented at ATVA 2008 (Automated Technology for Verification and Analysis) Seoul, Korea

Full article (PDF)

Slides (PDF)

Montréal 2008

Elie Bursztein — Thu, 12 Jun 2008 16:21:24 +0000

Photos taken while attending the 1st MITACS workshop to present NetQi.

[View with PicLens]

Apsm: Apache Status Monitor

Elie Bursztein — Wed, 28 May 2008 17:11:11 +0000

Apsm is a desktop application that gathers Apache status mod data to plot charts and compute statistics. Its goal is to help you analyze how the load of your HTTP servers evolves real time. It is written in Java so it should run on every OS.

Download it from Google Code

While fully functional, this is a very early release: I have spent only a day to code it. I will put more effort into it, if I see that it fulfill a need hence do not hesitate to provide your feedback As far as I know, this is the first software that use apache mod to make charts.

Here is some screenshot, If you want to see what it look like before using it:

[View with PicLens]

Sevilla 2008

Elie Bursztein — Tue, 20 May 2008 15:30:50 +0000

Photos taken while I was attending the WISTP conference in Sevilla.

[View with PicLens]

Probabilistic Identification for Hard to Classify Protocol (Best Paper Award)

Elie Bursztein — Tue, 20 May 2008 12:55:25 +0000

Published at WISTP 2008 and Awarded Best Paper

With the growing use of protocols obfuscation techniques, protocol identification for Q.O.S enforcement, traffic prohibition, and intrusion detection has became complex task. This paper address this issue with a probabilistic identification analysis that combines multiples advanced identification techniques and returns an ordered list of probable protocols. It combines a payload analysis with a classifier based on several discriminators, including packet entropy and size.
We show with its implementation, that it overcomes the limitations of traditional port-based protocol identification when dealing with hard to classify protocol such as peer to peer protocols. We also details how it deals with tunneled session and covert channel.

Author Version (PDF)

Code Ideas

Elie Bursztein — Wed, 19 Mar 2008 08:53:45 +0000

This is a sort of code think tank. I put here all the code ideas – improvement that I haven’t time to do but wish I could. One day I might code them, of course if if you are interested by one of those ideas, I will be happy to discuss it with you.

RSS aggregator – re-seeder

Create a serveur side aggregator that fetch a list of rss feed and reseed them as aggregated feed. Gregarius seems a strong base to start but many many feature are missing. The most important are:

Duplicate removal: when a new is reseed in multiple feed, it should be removed, or better an importance counter can be incremented
Smart feed based on keyword/regexp should be implemented
Tag browsing
Post clustering to group near duplicate
Related article

Windows HIDS

One security issue with high level interface such as the Windows GUI is that you are completely unaware of what is going on at the network level. Therefore the idea is to use the Windows Filtering Platform to gather low level information useful to know how the computer interact with the network. Here is a list of some information that appears usefull:

Which process send data to the network
Does the data sent are encrypted ?
Alert when a station join or leave the network (specially when dealing with a wifi network)
Who is your dhcp ?
Which computer share are available on network (windows, itune, osx)

Ideally the application will be displayed as a red/green dot on the status bar.

Exercise TraceNG: Traceoute Next Generation

Elie Bursztein — Fri, 15 Feb 2008 17:43:23 +0000

The traceroute tool is one of the basic tool used for network troubleshooting. It has been available since network early days. Still because it is based on TTL header modification and ICMP message, it is not straightforward to understand and implement. The goal of this exercise is to re-implement and add additional techniques to this utility.
This will allow student to understand the notion of packet injection and packet sniffing. It also gives the opportunity to play with more subtle thing such as
network latency, packet filtering and Q.O.S because the main goal is to have a tool that will adapt its behavior according to router and packets filter behavior.
The exercice v0.2 (PDF)
Structure de protocol structure header (.h)
portable types for C code (.h)

A good book that details how the libnet and libpcap can be used is:

Building Open Source Network Security Tools: Components and Techniques

(The author of the book is also the author of the libnet)

TD intelligence Economique: benchmarking de sociétés éditrices de logiciels

Elie Bursztein — Fri, 01 Feb 2008 12:54:57 +0000

Ce TD vise a comprendre les mécanismes de collecte et de synthèse de l’information au travers d’un exercice pratique qui fait appel à l’autonomie et à la capacité d’analyse des étudiants. L’objectif du TD est la récolte, l’analyse, la synthèse et la restitution de données concernant les stratégies d’innovation et de marketing de sociétés conceptrices de logiciels.

Le sujet (format pdf)

Résultats Round 1

Suite aux votes effectuer après le round 1, le classement suivant à été établie. Les scores ont été normalisé sur 100. Le bareme suivanté été utilisé pour calculer les scores:

10 pts pour une 1er place
8 pts pour une 2 eme place
6 pts pour une 3 eme place
5 pts pour une 4 eme place
4 pts pour une 5 eme place

Chaque personne ayant votée au plus pour 5 groupes et sans possibilité de voter pour son propre groupe. Un grand bravo à l’équipe Google qui remporte le premier round.

Smashing the stack for understanding and learning

Elie Bursztein — Sat, 19 Jan 2008 06:01:30 +0000

Ce TD permet de mieux comprendre les problÃ¨mes de sÃ©curitÃ© liÃ© Ã la mÃ©moire des programmes et la nature des “exploits”. Il les aborde en vous faisant rÃ©aliser un exploit sur un programme qui souffre d’un dÃ©bordement de mÃ©moire (buffer overflow). Ce type de bug est le plus courant et concerne prÃ¨s de 80% des failles actuelles.

Le premier article expliquant comment dÃ©tourner un bug mÃ©moire pour l’exploiter est du Ã Aleph-One dans phrack 49. Il s’appelle smashing the stack for fun and profite. La mÃ©thode proposÃ©e dans le TP est d’utiliser un shellcode. Il existe d’autres mÃ©thodes comme le retour dans la libc (Libc return) mais celles-ci sont moins abordables. Il existe de nombreux type de buffers overflow : off-by-one, heap-overflow, double-free …

TD Smashing the stack for understanding and learning (pdf)

Qatar December 2007

Elie Bursztein — Tue, 08 Jan 2008 21:09:03 +0000

[View with PicLens]

Analyse de site web pour la detection de fuite d’information

Elie Bursztein — Fri, 16 Nov 2007 15:20:15 +0000

Le Sujet

Lorsque l’on parle de securite web l’on pense imediatement aux vulnerabilites classiques telque le cross-scripting, l’injection SQL, les vulnerabilites PHP. Ce TD propose d’explorer une autre facette des problemes de securite web la fuite d’information. La mise en ligne d’information s’accompagne en effet toujours du risque de divulger des informations sensibles voir confidentiels. Le dernier exemple en date est biensur Orange qui par erreur a mis en ligne les tarifs de l’iphone avant l’heure. Information qui a reprise par de nombreux blogs annulant l’effet d’annonce escompter.

Afin de mettre en avant ce probleme, le TP vous propose de realiser un logiciel qui analyse les pages web d’un site et indique via une representation sous forme de graph dirige les pages contenant des informations sensibles. Ce TD est aussi l’occasion de tester et s’agguerrir a l’utilisation de diverse technique d’intelligence artificiel pour l’analyse de texte.

Fichier

sujet version 1 (pdf)

A Logical Framework for Evaluating Network Resilience Against Faults and Attacks

Elie Bursztein — Mon, 29 Oct 2007 12:05:22 +0000

Accepted paper at ASIAN 2007 at Carnegie Mellon University in Qatar.

Abstract

We present a logic-based framework to evaluate the resilience of computer networks in the face of incidents, i.e., attacks from malicious intruders as well as random faults. Our model uses a two-layered presentation of dependencies between files and services, and of timed games to represent not just incidents, but also the dynamic responses from administrators and their respective delays. We demonstrate that a variant TATL$\Diamond$ of timed alternating-time temporal logic is a convenient language to express several desirable properties of networks, including several forms of survivability. We illustrate this on a simple redundant Web service architecture, and show that checking such timed games against the so-called TATL$\Diamond$ variant of the timed alternating time temporal logic TATL is EXPTIME-complete.

Files

Incident Logic author version (PDF)

TD Permutation mono-alphabÃ©tique, RSA, et C

Elie Bursztein — Fri, 26 Oct 2007 11:20:39 +0000

L’enoncÃ©

Le td en version pdf

Quelques liens utiles

Test de primalitÃ© (pensez Ã utilisÃ© une version itÃ©rative)
Algorithme d’euclide
PGCD
Fonction liÃ© Ã la thÃ©orie des nombres de gmp

References

Un example de chiffrement RSA par Francis Litterio

Une excellente rÃ©fÃ©rence (gratuite) pour la cryptographie :
Lecture Notes on Cryptography par S. Goldwasser and M. Bellare.
Abstract: This is a set of lecture notes fo r a summer course on cryptography, taught by the authors at the Massachusetts Institute of Technology (MIT), 1996–2001.( Version PDF – Local copy)

Time has something to tell us about Network Address Translation

Elie Bursztein — Fri, 26 Oct 2007 10:32:07 +0000

This work was presented at NordSec 2007: The 12th Nordic Workshop on Secure IT Systems as short paper.

In this paper we introduce a new technique to count the number of hosts behind a NAT. This technique based on TCP timestamp option, works with Linux and BSD system and therefore is complementary to the previous one base on IPID than does not work for those systems. Our implementation demonstrates the practicability of this method.

Time has something to tell us about Network Address Translation (PDF Version)

@InProceedings{ Bursztein2007_1,
title = “Time has something to tell us about Network Address Translation”,
booktitle = “NordSec 2007″,
author = “E. Bursztein”,
month = “Nov.”,
year = “2007″
}

Cours politique de securitÃ© et introduction Ã la cryptographie

Elie Bursztein — Mon, 29 Nov 1999 22:00:00 +0000

Informations le cours politique de securite des 4 eme annee ESGI. Vous trouverez ici, Les dates importantes, ce qu’il faut rendre, ce qu’il faut reviser et les supports

Objectifs

L’objectif du cours est de s’initier Ã la cryptographie et de savoir concevoir, implementer, et deployer une politique de sÃ©curitÃ©. Pour plus de dÃ©tails veuillez vous consulter le plan de cours (pdf)

ExposÃ©s

Les exposÃ©s sont Ã faire par groupe de 3.
Leur durÃ©e est de 15 mn.
Vous devez remettre une fiche de synthÃ¨se qui resume votre exposÃ© (1 page recto verso maxi)
Vous devez avoir une presentation powerpoint ou pdf. Environs 15 slides.
Une dÃ©monstration doit etre fait si le sujet le permet.

Lecture obligatoires

Pour suivre le cours vous devez lire les documents suivants impÃ©rativement:

Guide NIST de sÃ©curisation des donnÃ©es: Guidelines for Media Sanitization: NISTSP800-88_rev1.pd (cours 3)
Guide NIST sur la gestion du risque: Managing Risk from Information Systems: An Organizational Perspective: SP-800-39-ipd.pdf (cours 3)
Guide NIST sur la sÃ©curisation des postes sous Windows XP: SP800-69 (cours 6)

Partiel premier semestre

Le partiel de 2 heures portera sur les notions suivantes:

La sÃ©curitÃ© questions de culture generale
La cryptographie notions generale et question sur le TD rendu
Politique de securitÃ© questions d’ordre generale
La mÃ©thode EBIOS et la mÃ©thode OCTAVE
Questions spÃ©cifiques sur les guides NIST Ã©tudiÃ©s

RÃ©ferences

Sites

Le site de la mÃ©thode Octave avec de nombreux documents. (En)
Le site de la mÃ©thode EBIOS avec de nombreux documents et le logiciel. (Fr, En)

Livres

CompTIA Security +

Une introduction a la certification CompTIA Security+ qui sert de base au sÃ©minaire d’introduction.

Australia Gold Coast Photo (RAID 2007)

Elie Bursztein — Mon, 10 Sep 2007 19:27:16 +0000

[View with PicLens]

Best of partiel 2007

Elie Bursztein — Tue, 05 Jun 2007 16:22:21 +0000

Voici quelques perles relevÃ©es durant la correction des copies. Toutes sont evidement fausses. Sans plus attendre le famex bestof de l’annÃ©e: partiel 2007 bestof (pdf)

Traces rÃ©seau

Elie Bursztein — Thu, 24 May 2007 15:13:42 +0000

Ce document contient une partie des traces reseaux vu en cours pour la detection d’intrusion et l’analyse de traces. Il vous permet de vous assurez que vous avez bien suivi le cours et d’appronfondir le sujet. Vous trouverez des traces d’activites normales, des traces d’attaques mais aussi deux traces mysteres. Celle-ci seront developper en cours. Essayer d’apporter la reponse.

Le fichier: Traces reseau (pdf)

Scanner de ports

Elie Bursztein — Sun, 20 May 2007 10:19:23 +0000

Le but de ce TD est de vous permettre de voir en dÃ©tail le fonctionnement d’un scanner de ports. L’autre objectif de ce TD est aussi de vous faire decouvrir le fonctionnement de la libpcap et la libnet qui sont des briques essentiels dans la programmation d’outils de sÃ©curitÃ© systÃ¨me. Enfin c’est l’occasion de revoir la pile TCP. Les deux techniques demandÃ©es vanilla scan et half-open scan sont celle employer de base par NMAP. Elles furent decrites dans un article de Phrack 51 en 1997.

Le TD Scanner rÃ©seau (PDF)

L’article de phrack (en) : The Art of Port Scanning

la traduction francais (qualitÃ© moyenne)

Cryptographie asymÃ©trique et C: RSA

Elie Bursztein — Wed, 25 Apr 2007 10:36:56 +0000

Ce TD a pour objectif de vous faire mieux comprendre la cryptographie Ã clÃ© publique au travers du crypto systÃ¨me le plus utilisÃ©e actuellement : RSA. Il permet aussi de ce familiariser avec les librairies de grands nombres. Ce TD vous propose d’implementer les methodes de gÃ©neration. chiffrement. dechiffrement de clÃ© RSA. Mais aussi la mÃ©thode d’attaque par brute force afin de mettre en evidence la liaison entre le problÃ¨me de la factorisation et la sÃ©curitÃ© de RSA. Enfin pour les plus motivÃ©, la partie bonus parle d’attaque sur les petits exposants.
TD: Cryptographie asymÃ©trique et C: RSA (PDF)

Analyse de journaux maillog, perl et XML

Elie Bursztein — Sat, 17 Feb 2007 15:52:04 +0000

Ce TD vise Ã faire apprÃ©hender l’analyse de journaux qui est une activitÃ© importante dans le cadre de la surveillance et la sÃ©curitÃ© des systÃ¨mes d’information. Il est demandÃ© d’analyser le fichier maillog en utilisant perl et les expressions rÃ©guliÃ¨res.

Ce TD permet de mieux comprendre pourquoi l’analyse de journaux insufisamement structurÃ©s peut etre ardu et comment les regexp peuvent aider Ã regler ce problÃ¨me. Enfin la sortie en XML et la transformation XSLT permet de faire le lien avec les technologies web et montre l’interet d’un middleware.

TD: Analyse de journaux maillog, perl et XML (PDF)

ZDT files

Elie Bursztein — Sun, 14 Jan 2007 13:10:59 +0000

My personnal collection of ZDT files. ZDT is a wonderfull flashcard tool for chinese learning. I made one file for each lesson found in the book “methode d’initiation a la langue et l’ecriture chinoise” by Bellassen. There is also various other flashcard deck that I use on regular basis.

Bellassen

Personnal set

I made theses files from the “ping pang” and the “introduction to chinese” books. Hence they are not strictly correlated with a specific lesson.
- file 3
- file 4
- file 5
- file 6
- file 7
- file 8

Toward Agent IDS: agent platform security features study

Elie Bursztein — Sun, 11 Jul 2004 22:10:28 +0000

Intrusion Detection Systems (IDS) are used to discover several kinds of attacks. Commercial solutions are, generally centralized and suffer from significant limitations when used in high speed networks. This is one of our major motivations to use distributed model based on agent platform. We believe that agent facilities will help collecting efficent and useful informations for IDS. We also propose to use a combined analysis by invoking speciallized agents. The idea is to have a signature based agent, temporal analysis agent and behavior analysis agent. By combining three ananlysis, our IDS will be able to detect several kinds of attacks and intrusions. Before introducing our global agent IDS architecture, we need to validate the agent palteforme use and verify a set of security features. The first step is to choose a platforme which can offer security mechanisms needed by IDS solutions. In this paper, we first sum up IDS security needs, we introduce a set of comparison criteria and we present a security feautures study of agent platforme. After studying Concordia, JADE, Aglet, Voyager, Agent-TCL , MAP and JATLite platformes, we introduce our agent IDS by presenting the global architecture and future works.

Toward Agent IDS: agent platform security features study abstract

Toward Agent IDS: agent platform security features study slides

Touquet

Elie Bursztein — Sat, 28 Feb 2004 23:01:46 +0000

[View with PicLens]

Las Vegas

Elie Bursztein — Thu, 22 Jan 2004 20:41:40 +0000

[View with PicLens]

Barcelona

Elie Bursztein — Fri, 22 Aug 2003 19:40:52 +0000

[View with PicLens]

Network scouting techniques : utilisation and prevention

Elie Bursztein — Sat, 21 Sep 2002 20:21:05 +0000

This tutorial focus on the techniques used to scout a network, from host probing to advance fingerprint identification. It also present the methods that can be used to deceive scouting attempts.

Network scouting techniques : utilisation and prevention slides

Network scouting techniques : utilisation and prevention article french

Network scouting techniques : utilisation and prevention article english

Tunisia

Elie Bursztein — Thu, 01 Aug 2002 20:47:40 +0000

[View with PicLens]

FAQ windows

Elie Bursztein — Thu, 25 Jul 2002 21:48:42 +0000

I had done this FAQ while I was working at Club-internet (French ISP) to sum up various internet problem solution

Ensemble de questions rÃ©ponses sur des problÃ¨mes que j’ai rÃ©solu durant ma periode de travail au support technique de Club-internet. On trouve dans cette FAQ notament des mÃ©thodes de rÃ©solutions pour les premiers modems ADSL type manta ray.

FAQ windows

Comparaison des protocoles utilisant un gÃ©nÃ©rateur alÃ©atoire pour rÃ©soudre le problÃ¨me du consensus asynchrone distribuÃ©

Elie Bursztein — Thu, 25 Jul 2002 21:44:26 +0000

Le consensus est un problÃ¨me fondamental pour l’implÃ©mentation de services fiables utilisant un systÃ¨me distribuÃ© asynchrone supportant les pannes. Le problÃ¨me du consensus est de mettre d’accord un groupe de n processus sur une valeur. Un protocole de consensus est un algorithme qui produit un tel accord. Cet algorithme se doit de supporter la tolÃ©rance de pannes. Fischer, Lynch et Paterson ont dÃ©montrÃ© qu’il est impossible de rÃ©soudre ce type de problÃ¨me dans un systÃ¨me dÃ©terministe avec ne serait-ce qu’une seule panne. Deux types d’approche ont Ã©tÃ© dÃ©veloppÃ©es pour essayer de contourner cette impossibilitÃ©. Chacune d’elles dote le systÃ¨me d’un systÃ¨me d’oracle appropriÃ©.

Protocols de consensus rapport

FBUS V2 protocol (Nokia)

Elie Bursztein — Sun, 30 Jun 2002 22:24:50 +0000

This document focus on how a Nokia phone talk to a computer namely the FBUS procotol. It try to give a comphrensive explantion of how the exchange protocol is performed. This document summarise my experiment results with a Nokia 5510. At the time of writting few documentation were available. I had focus on the Nokia monitor mode.

Fbus protocol analysis report

IDLE scan research

Elie Bursztein — Mon, 05 Nov 2001 22:02:14 +0000

This work focus on the use of the IDLE scan (-sI in nmap) to probe a network that use a nat. The code used was retired due to the lack of support and the robust implementation of idle scan in nmap.

Idle scan advisory

Idle scan article fr

Idle scan article En

Advisory on Internet explorer 5.5 Overflow

Elie Bursztein — Fri, 04 May 2001 22:29:07 +0000

By putting this malformed link on a web page a malicious user could crash all the IE windows with version above or equal to 5.5. It also work by passing the link directly into the address field of IE.

Internet explorer 5.5 overflow advisory

Egypt

Elie Bursztein — Thu, 01 Feb 2001 20:52:13 +0000

[View with PicLens]

Elie Bursztein

TrackBack Spam: Abuse and Prevention

XCS: cross channel scripting and its impact on web applications

Decaptcha: Breaking 75% of eBay Audio CAPTCHAs.

Embedded Management Interfaces: Emerging Massive Insecurity

Extending Anticipation Games with Location, Penalty and Timeline

NetQi: A Model checker for Anticipation Game

Montréal 2008

Apsm: Apache Status Monitor

Sevilla 2008

Probabilistic Identification for Hard to Classify Protocol (Best Paper Award)

Code Ideas

RSS aggregator – re-seeder

Windows HIDS

Exercise TraceNG: Traceoute Next Generation

TD intelligence Economique: benchmarking de sociétés éditrices de logiciels

Résultats Round 1

Smashing the stack for understanding and learning

Qatar December 2007

Analyse de site web pour la detection de fuite d’information

Le Sujet

Fichier

A Logical Framework for Evaluating Network Resilience Against Faults and Attacks

Abstract

Files

TD Permutation mono-alphabÃ©tique, RSA, et C

L’enoncÃ©

Quelques liens utiles

References

Time has something to tell us about Network Address Translation

Cours politique de securitÃ© et introduction Ã la cryptographie

Objectifs

ExposÃ©s

Lecture obligatoires

Partiel premier semestre

RÃ©ferences

Sites

Livres

Australia Gold Coast Photo (RAID 2007)

Best of partiel 2007

Traces rÃ©seau

Scanner de ports

Cryptographie asymÃ©trique et C: RSA

Analyse de journaux maillog, perl et XML

ZDT files

Bellassen

Part 0

Part 1

Part 2

Personnal set

Toward Agent IDS: agent platform security features study

Touquet

Las Vegas

Barcelona

Network scouting techniques : utilisation and prevention

Tunisia

FAQ windows

Comparaison des protocoles utilisant un gÃ©nÃ©rateur alÃ©atoire pour rÃ©soudre le problÃ¨me du consensus asynchrone distribuÃ©

FBUS V2 protocol (Nokia)

IDLE scan research

Advisory on Internet explorer 5.5 Overflow

Egypt