Collaborate Disseminate
Introducing Malwarebytes Endpoint Protection, our latest endpoint security solution for business. This latest release unifies a number of technologies onto a single agent on the endpoint and adds a new machine learning detection engine into our layere… Continue reading Solution Corner: Malwarebytes Endpoint Protection
I was Running Yara, The pattern matching swiss knife for malware researchers on the Windows 10.
I ran a scan using rules from Yara Rules from YARA Rules Github and MalwareConfig rules.
I stumbled upon these DLL that had Signatures that … Continue reading Found KeyLogger in Windows 10 OS?
As part of a project, I need to build/configure profiles based on suspicious processes behavior to which matching can be done within a sandbox, when files are being executed. The directive is to work with the IoC – Indicators… Continue reading How to build profiles based on suspicious processes behavior to be used in sandbox? [on hold]
I am looking for any open source implementation of anomaly based IDS for resource constrained nodes. As in Internet of things, we have heterogeneous endpoints with limited processing and storage. With reference to literature,… Continue reading Anomaly detection system for resource constraint nodes in IoT
I am currently investigation effectiveness of Intrusion Detection/Prevention Systems that are backed my Machine Learning rather than traditional Signature based detection mechanisms, so that the system learns from anomalies i… Continue reading Measuring real effectiveness of Machine Learning based IDS [on hold]
I am currently investigation effectiveness of Intrusion Detection/Prevention Systems that are backed my Machine Learning rather than traditional Signature based detection mechanisms, so that the system learns from anomalies i… Continue reading Measuring real effectiveness of Machine Learning based IDS [on hold]
I am partly responsible for the security and malware detection (in general) of a huge number of hosting accounts. Our methods rely heavily on signature-based detection provided by ClamAV for which we have also created a prett… Continue reading Anomaly-based Malware Detection in Web Applications
SSH Server: I only allow public key authentication.
Malicious Software: If it’s running as my user it has access to my data and an internet connection, it’s bad enough already. Yes, su access would make it worse, but the iss… Continue reading Why does one need a strong password on Unix?
On my mac when I run Google Chrome, it wants connect at unknown domain on port 80, at example some domain name are: cccpveut, fuflavlorxna, crqzzif, ecc. They appear all domain name of first level…..it seems very strange…… Continue reading Google Chrome wants connect at unknown IP
PyPI is a third-party software repository for Python packages. Everybody can upload packages to it (see The Python Package Index (PyPI)).
How does PyPI prevent people from uploading malware?
When I am searching for software, how can I be… Continue reading Which security measures does PyPI and similar third-party software repositories take?