Theoretical Methodology for Detecting ICMP Reflected Attacks: SMURF Attacks - InfoSec Institute

 There are plenty of different ways to track the original source of a DoS
attack, but those techniques are not efficient enough to track a
reflected ICMP attack. When I say “reflected ICMP attack,” that means a
SMURF attack. Here I am going to show you a new model to trackback the
reflective DOS attack caused by ICMP packets. This is a very efficient
method, because you can do this with the help of a really few attack
packets. We have seen that, to detect ICMP attacks in direct attack, we
need a large amount of packets to be revised, which is not true in this
case.



LIKE AND SHARE IT PLEASE



Read Full Story : Theoretical Methodology for Detecting ICMP Reflected Attacks: SMURF Attacks - InfoSec Institute:

Notes On Biometric Template Security - InfoSec Institute

Notes On Biometric Template Security - InfoSec Institute

Metropolitan Police – A Case Study on Identity Management Key Issues (Biometrics) - InfoSec Institute

Metropolitan Police – A Case Study on Identity Management Key Issues (Biometrics) - InfoSec Institute

Vigilance complaints pile up as Delhi Police doesn’t know password | The Indian Express

Over 600 complaints regarding the Delhi Police forwarded by the Central Vigilance Commission
to an online portal have been pending for the past eight years. The
reason: the Delhi Police didn’t know the password to access the portal
or how to operate it, a lapse that went undetected since 2006.

In January finally, two Delhi Police officers, one of the level of
deputy commissioner of police and another an inspector, were imparted
“training” by the CVC on the same.

Sources in the CVC said 667 complaints had piled up, with no action taken by the police.

Each Delhi government department under the CVC, including the MCD,
DDA and several investigating agencies, have a chief vigilance officer
to look into complaints. If a complaint reaches the CVC, either it
tackles it independently or it sends it to the concerned department

Read Full Story :Vigilance complaints pile up as Delhi Police doesn’t know password | The Indian Express

Computer Forensics Investigation – A Case Study - InfoSec Institute

Computer technology is the major integral part of everyday human
life, and it is growing rapidly, as are computer crimes such as
financial fraud, unauthorized intrusion, identity theft and intellectual
theft. To counteract those computer-related crimes, Computer Forensics
plays a very important role. “Computer Forensics involves obtaining and
analysing digital information for use as evidence in civil, criminal or
administrative cases (Nelson, B., et al., 2008)”.


A Computer Forensic Investigation generally investigates the data
which could be taken from computer hard disks or any other storage
devices with adherence to standard policies and procedures to determine
if those devices have been compromised by unauthorised access or not.
Computer Forensics Investigators work as a team to investigate the
incident and conduct the forensic analysis by using various
methodologies (e.g. Static and Dynamic) and tools (e.g. ProDiscover or
Encase) to ensure the computer network system is secure in an
organization. A successful Computer Forensic Investigator must be
familiar with various laws and regulations related to computer crimes in
their country (e.g. Computer Misuse Act 1990, the UK) and various
computer operating systems (e.g. Windows, Linux) and network operating
systems (e.g. Win NT). According to Nelson, B., et al., (2008), Public
Investigations and Private or Corporate Investigations are the two
distinctive categories that fall under Computer Forensics
Investigations. Public investigations will be conducted by government
agencies, and private investigations will be conducted by private
computer forensic team. This report will be focused on private
investigations, since an incident occurred at a new start-up SME based
in Luton.


This report also includes a computer investigation model, data
collections and its types, evidence acquisitions, forensics tools,
malicious investigation, legal aspects of computer forensics, and
finally this report also provides necessary recommendations,
countermeasures and policies to ensure this SME will be placed in a
secure network environment.









Read Full Article at Here : Computer Forensics Investigation – A Case Study - InfoSec Institute

Congress vs BJP vs AAP : How Media is Biased ?

Today the 3 major political parties – Congress, BJP and AAP had rallies of Rahul Gandhi, Narendra Modi and Arvind Kejriwal respectively.

While ABP news and NDTV were live telecasting all the three rallies alternatively, Times Now and CNN-IBN were only showing Rahul Gandhi and Narendra Modi’s rallies.

Even the “Tickr”(scrolling news at the bottom of the channel” on both the channel talks only about Modi and Rahul… Headlines on Tickr show only statements of Rahul and Modi.

Also, I checked the Timeline of Times Now’s Twitter handle @timesnow for last 5 hours. Not a single tweet on Kejriwal’s speech while they have live-tweeted both Narendra Modi and Rahul Gandhi. Have taken Screenshots of the TL.

I checked the Timeline of CNN-IBN’s Twitter Handle @ibnlive for last 5 hours. They have live-tweeted both Narendra Modi and Rahul Gandhi. There was only one tweet on Arvind Kejriwal’s rally (that too an anti-Congress statement that AK made).

(Screenshots of Twitter TL are at the end of this blog)

I Called Times Now Office at 02224999944 and spoke to the News desk member. Someone by name Preeti answered my call and she was able yo hear me until I asked the question. Then she started saying “hello.. hello” as if she cant hear me and then hung up… called back again and got connected to some other lady. She refused to reveal her name. When I asked her why they are not showing Kejriwal’s rally, she asked me to send a mail to their mail id “nowdesk@gmail.com” as she is not authorized to answer me.

Then I called CNN-IBN at 01204341818 and I was connected to news room guy Saharsh. He says they have covered Kejriwal’s rally as well and says may be I have missed the braodcast. I asked him for a mail ID where I can send a mail about this. He gave ” Assignment@network18online.com”
I guess we should start questioning these guys on such things to tame them. Its a known fact that these news channels are controlled by corporates that are closely connected to politicians. And as long as we dont question them, they will continue to show the biased news.

I will be sending a mail to the given mail IDs and also, will send a mail to News Broadcasting Association of India.

Until I get a satisfactory answer from them, the channels will be boycotted by me.
Note- I have recorded these calls : https://drive.google.com/folderview?id=0B7DWrSEAJy5_RVp1YzA0OW1PSFU#

Have uploaded the audio files again into a new folder. Please check this – Call Recordings New – https://docs.google.com/folder/d/0B7DWrSEAJy5_OHBTZER1ZWNfeVE/edit

Here is alternate link to access the audio files: https://drive.google.com/?authuser=0#folders/0B7DWrSEAJy5_MG5PQmx2QmQ5UUU

Read more @ http://syedshahalihussaini.wordpress.com/2014/02/23/biased-media/