Aggregator

归因溯源技术有没有成为杀手锏的潜质？

Verisign just released its Q2 2018 DDoS Trends Report, which represents a unique view into the attack trends unfolding online, through observations and insights derived from distributed denial of service (DDoS) attack mitigations enacted on behalf of customers of Verisign DDoS Protection Services. Verisign observed that 52 percent of DDoS attacks that were mitigated in Q2 2018 […]

The post Q2 2018 DDOS TRENDS REPORT: 52 PERCENT OF ATTACKS EMPLOYED MULTIPLE ATTACK TYPES appeared first on Verisign Blog.

There are many good reasons for having a national ID system, but proper implementation is crucial to mitigate threats and maintain the balance of data privacy.

互联网的开放互联特性真的会让归因溯源成为不可能的任务么？

归因溯源等同于司法诉讼意义上构建证据链么？

By targeting critical infrastructure, cyberwarfare attackers can plunge a nation into chaos without ever firing a single shot.

前言 因为数据结构和算法这一块的知识比较匮乏，很多东西都是只有一个模糊的概念，并不知其所以然，其实很早就想学习数据结构和算法，但是由于很多原因（懒）一直

Introduction A few days ago, I happened to know that this is a simplified version of Keen Team’s exploit on Hua Wei baseband. Therefore, I decide to take this as a practice for ARM exploitation. This post is based on the write-up from 217[3] and KeenTeam[4]. I will add more reversing engineering details in this […]

引子 上周末，一个好兄弟找我说一个很重要的目标shell丢了，这个shell之前是通过一个S2代码执行的漏洞拿到的，现在漏洞还在，不过web目录全部不可写，问我有没有办法搞个webshell继续做内网。正好我之前一直有个通过“进程注入”来实现内存webshell的想法，于是就趁这个机会以Java为例

Spring Data Redis隶属于Spring Data家族, 提供简单易用的方式来访问Redis缓存。 Spring Data Redis在往Redis里面写数据的时候，默认会先对数据进行序列化，然后把序列化之后的字节码写入Redis；然后当Spring Data Redis从Redis里取

下载5.0.2的版本来分析 5.0.2的war包地址 http://archive.apache.org/dist/roller/roller-5/v5.0.2/bin/roller-weblogger-5.0.2-for-javaee.zip 从web.xml入手分析，可以看到如下servlet映

青藤云安全四年来产品研发管理经验干货分享。

Evaluate your needs, prioritize apps, implement with users in mind, but most of all, stop waiting and just get started.

A simple search of public records confirms the astounding number of potentially vulnerable cellular gateways in use in many cities’ emergency services vehicles.

[TOC] ### 前言 >最近在看着《汇编语言》这本书，记录了书内前篇的小结以及问答题的练习 >PS：好久没有更新博客了，出来冒个泡。 >（这是我年初看的，然后做的笔记，距离年初我看这...

现在思路还是有点乱，希望后面能重新写 先上pon.xml 包 方法解析如下： test.java:代码 解析Json的时候要开启Feature.SupportNonPublicField才能反序列化成功，因为_bytecodes是私有属性，也有其他方式不需要开启Feature.SupportNonP

While DDoS attack rates hold, tensions rise for organizations trying to mitigate app-targeted attack that can be easily launched by script kiddies.

Misuse AI Misuse AI字如其意，即指黑客对AI技术的“误用”。

Misuse AI Misuse AI字如其意，即指黑客对AI技术的“误用”。