Security

Pierluigi Paganini June 19, 2012
Deep Web and censorship

  We clarified the use of anonymizing networks is not only related to criminal intents, they represent in fact a powerful instrument to elude censorship introduced by governments in critical areas of the planet. We have provided the examples of Syria and Iran, but the world is full of similar operations that introduce a detailed […]

Pierluigi Paganini June 18, 2012
On new generation of P2P botnets

Zeus is one of the longest-running malware that raged for months, appearing in various forms on the web thanks to the continuous changes made by the cybercrime industry. This time the news is really interesting, Symantec security researchers have detected a new variant of Zeus that not relies on command and control (C&C) servers for […]

Pierluigi Paganini June 18, 2012
Part 2 of 2 – Serious safety and security problems in automotive, aviation, aerospace and other cyber-physical systems

Article published on The Malta Indipendent by Ron Kelson, Pierluigi Paganini, David Pace In last week’s article, we explored the issue of today’s high-speed computers and why their inability to consistently meet software deadlines causes serious problems to automotive applications, industrial control systems, (nuclear) power generators and other computer systems that interact with the real world. […]

Pierluigi Paganini June 17, 2012
Serious safety and security problems in automotive, aviation, aerospace and other cyber-physical systems

Article published on The Malta Indipendent Convergence in world leading research in Europe to tackle these problems This the first part of a two-part mini-series in which we look at the safety (and security) problems in real-time cyber-physical systems used around the world Ron Kelson, Pierluigi Paganini, David Pace, Benjamin Gittins  Modern computer chips… a marvel of […]

Pierluigi Paganini June 16, 2012
The malware factory

Article Published on The Hacker New Magazine – June Edition “Malware” With the term malware we refer a heterogeneous family of malicious software designed with the purpose to disrupt computer operation, gather sensitive information, or gain unauthorized access to victims systems. With the term we indicate in fact several types of malicious code such as computer […]

Pierluigi Paganini June 15, 2012
US cyber warfare, budget cuts and shortage of cyber experts

The Flame case has raised the question on the real cyber warfare capabilities of every country, we have spoken of the strong commitment of Indian and German government, praising the US capabilities for the involvement in operations such as the “Olympic Games” project. But what are the real cyber capabilities of the United States? No […]

Pierluigi Paganini June 14, 2012
The right to anonymity on Internet and legal implications

The demand of anonymity services is increased in response to the increase network monitoring and censorship,but the anonymity is a concept that induces fear. Everyday, all our web actions leave traces of ourselves and of our way of life through the storing of massive amounts of personal data in databases in the internet, all these information […]

Pierluigi Paganini June 13, 2012
Cyber security during sporting events

Excerpt from the article published on the last edition of PenTest AUDITING & STANDARDS 05 2012.  The article offers an overview on cyber security issues relating to sports events, competitions that are a priority target for terrorists and cyber criminals. What weight has the information security component on the overall organization? An analysis of the main types of computer attacks and possible consequences in a highly critical contest such as a sporting event. Introduction Whenever we see a major sporting event we […]

Pierluigi Paganini June 13, 2012
Hacktivist vs Twitter, security of OAuth authorization

There isn’t peace for social network platforms, priority target for cybercrime and governments, they represent a mine of data useful for business and espionage. After the news of the LinkedIN hack, also Twitter have been successfully attacked by a group of hacktivist named LulzSec Reborn that has leaked user credentials of more of 10,000 accounts. […]

Pierluigi Paganini June 12, 2012
5 Reasons Why You Need Good Patch Management

Patch management is one area where many IT organizations struggle. The operating systems vendors have done a good job with providing easy patching solutions for their products, but there are so many third party applications out there to patch that it can become an impossible task. With new vulnerabilities announced each week, keeping up with […]