Monday, August 25, 2008

Security Research

For our third research assignment I chose to research various e-commerce security issues.

I started off with talking about safe internet browsing, research and downloading.

Using a combination of the free Virtual Machine player - http://www.vmware.com/products/player/ - and a prepackaged Ubuntu with Firefox VM -http://jars.de/linux/ubuntu-710-vmware-image-download-english - you can surf without worries.

I then went on to talk a bit more in depth on the recent DNS flaw, thanks to http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html for the easy to follow guide.

You can use Dan Kaminsky's self test on his blog - http://www.doxpara.com/ - to see if you are still vulnerable.

I wrapped up the presentation with a brief discussion of the difficulties of applying security to something that was never designed with security in mind, the Internet.

The web 2.0 era has an enormous challenge of combining the new web technologies securely on an unsecure 'hostile' [inter]network.

No comments:

Post a Comment