Latest Research

TrackBack Spam: Abuse and Prevention Contemporary blogs receive comments and TrackBacks, which result in cross-references between blogs. We conducted a longitudinal study of TrackBack spam, collecting and analyzing almost 10 million samples...

Readmore

XCS: cross channel scripting and its impact on web... We study the security of embedded web servers used in consumer electronic devices, such as security cameras and photo frames, and for IT infrastructure, such as wireless access points and lights-out management...

Readmore

Embedded Management Interfaces: Emerging Massive Insecurity Over the last few years, the number of devices that embed user-friendly management interfaces accessible from the network has drastically increased. These interfaces can be found on almost every kind of...

Readmore

Decaptcha: Breaking 75% of eBay Audio CAPTCHAs. CAPTCHA tests aim at preventing attackers from performing automatic registration. In this paper we show that our prototype Decaptcha is able to successfully break 75% of eBay audio captchas. We compare...

Readmore

Extending Anticipation Games with Location, Penalty... Over the last few years, attack graphs have became a well recognized tool to analyze and model complex network attack. The most advanced evolution of attack graphs, called anticipation games, is based...

Readmore

  • Prev
  • Next

Apsm: Apache Status Monitor

Posted on : 28-05-2008 | By : Elie Bursztein | In : Software

0

Apsm is a desktop application that gathers Apache status mod data to plot charts and compute statistics. Its goal is to help you analyze how the load of your HTTP servers evolves real time. It is written in Java so it should run on every OS.

Download it from Google Code

While fully functional, this is a very early release: I have spent only a day to code it. I will put more effort into it, if I see that it fulfill a need hence do not hesitate to provide your feedback :) As far as I know, this is the first software that use apache mod to make charts.

Here is some screenshot, If you want to see what it look like before using it:

Analyse de site web pour la detection de fuite d’information

Posted on : 16-11-2007 | By : Elie Bursztein | In : Exercise, Teaching

0

Le Sujet

Lorsque l’on parle de securite web l’on pense imediatement aux vulnerabilites classiques telque le cross-scripting, l’injection SQL, les vulnerabilites PHP. Ce TD propose d’explorer une autre facette des problemes de securite web la fuite d’information. La mise en ligne d’information s’accompagne en effet toujours du risque de divulger des informations sensibles voir confidentiels. Le dernier exemple en date est biensur Orange qui par erreur a mis en ligne les tarifs de l’iphone avant l’heure. Information qui a reprise par de nombreux blogs annulant l’effet d’annonce escompter.

Afin de mettre en avant ce probleme, le TP vous propose de realiser un logiciel qui analyse les pages web d’un site et indique via une representation sous forme de graph dirige les pages contenant des informations sensibles. Ce TD est aussi l’occasion de tester et s’agguerrir a l’utilisation de diverse technique d’intelligence artificiel pour l’analyse de texte.

Fichier

sujet version 1 (pdf)

Advisory on Internet explorer 5.5 Overflow

Posted on : 04-05-2001 | By : Elie Bursztein | In : Various

0

By putting this malformed link on a web page a malicious user could crash all the IE windows with version above or equal to 5.5. It also work by passing the link directly into the address field of IE.

Internet explorer 5.5 overflow advisory