Collaborate Disseminate
I’m wondering how to successfully detect malicious activity in my web server traffic?
Could you point me out some popular solutions which can help me to detect attacks on my web application?
I didn’t find similar questions … Continue reading How to detect anomalous activity in web server traffic?
I’ve got an SSH server setup in a remote location, which I use to tunnel traffic from an android tablet. On the tablet, I have the Cisco AnyConnect app to connect to my company’s VPN. We want to be able to detect that a proxy… Continue reading How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?
Stuxnet and others in this list of state-of-the-art Internet worms had certain features that they were very stealthy in leaking out the information they harvested. Thus it managed to go under the radar and would typically go … Continue reading How could malware like Stuxnet be detected?
A packer is a way of obfuscating an executable program, i.e., transforming so the result is still executable and has the same effect when run, but looks different (so it won’t be detected by static anti-virus). Bad guys ofte… Continue reading Possible to detect packed executable?
So basically I need to know is there any way to find a connection (or relation) between packets sent by my VMs and my host machine.
In my lab I have lots of workstations, each running a VirtualBox with network adapter bridged to the host … Continue reading Is it possible to detect host-machine of my virtual-machines?
After reading @Iszi’s answer to this question he states
Viruses attached in e-mails do not only come in .EXE files. They can be any form of document – PDF, PPT, DOC, XLS, SWF, etc.
Are there any formats that cannot carry malware, fo… Continue reading Can malware come in any format?
I want to learn how to write and Android application that can detect a run time spy application. In this instance, a “spy application” is a background application that uses the camera, microphone and other important device.
… Continue reading How can I detect which background application is using the camera, microphone or GPRS?
We have many scripts in shared folders in our IT Department. Are malicious scripts in batch files detected by antiviruses?
Continue reading Are malicious scripts in batch files detected by antiviruses?
I just hit upon an idea I have used in the past to distinguish between two instances of the same program, one of which was hung. While Task Manager is open and visible and sorted by CPU usage, I pick up the windows of one of… Continue reading How effective is Windows Task Manager at identifying keyloggers?
I am writing a research paper on tracking hackers and how to include keystroke timings to create a profile of hackers.
I want to combine the keystroke timings that I capture in ttylog with other data from sessions, like IP address, type o… Continue reading Profiling hackers with keystroke dynamics