msakamoto-sfのブックマーク - はてなブックマーク

Server Security: Indicators of Compromised Behavior with OSSEC
Server Security: Indicators of Compromised Behavior with OSSEC We leverage OSSEC extensively here at Sucuri to help monitor and protect our servers. If you are not familiar with OSSEC, it is an open source Intrusion Detection System (HIDS); with a powerful correlation and analysis engine that integrates log analysis, file integrity monitoring, rootkit detection, real-time alerting, and active resp
msakamoto-sf 2016/09/20
IDS

IPS

OSSEC

Security

SecurityTool
リンク
Critical 0-day Remote Command Execution Vulnerability in Joomla
Critical 0-day Remote Command Execution Vulnerability in Joomla Nov 2016 Update: If you need to clean your hacked Joomla site, we have released a new free guide to show you how to identify and remove hacks. Read the Guide! The Joomla security team have just released a new version of Joomla to patch a critical remote command execution vulnerability that affects all versions from 1.5 to 3.4. This is
msakamoto-sf 2015/12/16
security

Joomla

PHP
リンク
Inverted WordPress Trojan
A trojan (or trojan horse) is software that does (or pretends to be doing) something useful but also contains a secret malicious payload that inconspicuously does something bad. In WordPress, typical trojans are plugins and themes (usually pirated) which may have backdoors, send out spam, or inject hidden links and malware. The trojan model is easy to understand: package malware inside something u
msakamoto-sf 2015/03/12
wordpress

Security
リンク
Google Bots Doing SQL Injection Attacks
One of the things we have to be very sensitive about when writing rules for our CloudProxy Website Firewall is to never block any major search engine bot (ie., Google, Bing, Yahoo, etc..). To date, we’ve been pretty good about this, but every now and then you come across unique scenarios like the one in this post, that make you scratch your head and think, what if a legitimate search engine bot wa
msakamoto-sf 2013/11/12
security

SQL
リンク
1