<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.8.4" -->
<rss version="0.92">
<channel>
	<title>Fresh Defense</title>
	<link>http://freshdefense.net/blog</link>
	<description>Perspectives on Information Security and Intrusion Defense</description>
	<lastBuildDate>Thu, 11 Mar 2010 10:55:22 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>PKI Does Work in the Real World</title>
		<description><![CDATA[PKI is typically the object of much scorn: something this inherently dependent on human-level trust surely cannot provide digital trust, especially between (for example) countries that have no diplomatic ties. See, for example, the classic point/counterpoint:
Ten Risks of PKI: What You&#8217;re Not Being Told
7 and a Half Non-risks of PKI
For these kinds of reasons and [...]]]></description>
		<link>http://freshdefense.net/blog/2010/03/11/pki-does-work-in-the-real-world/</link>
			</item>
	<item>
		<title>Measuring Entropy</title>
		<description><![CDATA[After some investigation and casting about, I started to write a small C library for measuring entropy.
The libdisorder Web page has more.
]]></description>
		<link>http://freshdefense.net/blog/2010/03/08/measuring-entropy/</link>
			</item>
	<item>
		<title>Counterfeit Hardware</title>
		<description><![CDATA[An interesting detective story dealing with hardware disassembly to check the provenance of micro SD cards:
	http://www.bunniestudios.com/blog/?p=918
Not exactly trojan hardware, but a good case illustrating the actual level of trustworthiness of real hardware nonetheless, and it includes an interesting foray into the economics of micro SD production near the end.
[I picked this link up from a [...]]]></description>
		<link>http://freshdefense.net/blog/2010/02/17/counterfeit-hardware/</link>
			</item>
	<item>
		<title>System Forensics</title>
		<description><![CDATA[RFC 3227 is a handy resource for students interested in the challenges of beginning the recovery process:
http://www.faqs.org/rfcs/rfc3227.html
I hadn&#8217;t known about this until reviewing a paper recently. This (short) RFC contains some guidelines for performing forensics on a compromised computer system. Nothing earth-shattering, but it does provide a nice collection of principles.
Why do these practices matter? [...]]]></description>
		<link>http://freshdefense.net/blog/2010/02/12/system-forensics/</link>
			</item>
	<item>
		<title>Installing Bootcamp</title>
		<description><![CDATA[I recently installed Bootcamp and Microsoft Windows XP SP3 on my MacBook Pro.
While this was mostly straightforward, the process got complicated because I did not have my Leopard installation DVD with me, and the cost of traveling to it&#8230;well, you can guess. Not worth it.
The lack of the DVD is crucial because it contains Windows [...]]]></description>
		<link>http://freshdefense.net/blog/2010/01/14/installing-bootcamp/</link>
			</item>
	<item>
		<title>DHS Hiring Spree</title>
		<description><![CDATA[The DHS is indeed committing to hiring 1000 clearable US citizens over the next three years. If you&#8217;re interested, you can &#8220;attend&#8221; their cyber job fair:
http://www.dhs.gov/xabout/careers/cyberjobfair
They are looking to fill these types of roles:

 Cyber Incident Response
 Vulnerability Detection and Assessment
 Networks and Systems Engineering
 Cyber Risk and Strategic Analysis
 Intelligence and Investigation

I&#8217;m glad that [...]]]></description>
		<link>http://freshdefense.net/blog/2009/12/14/dhs-hiring-spree/</link>
			</item>
	<item>
		<title>Information Considered Harmful</title>
		<description><![CDATA[It looks like a manual containing information about TSA screening procedures has been posted to the web (with yet more poor redaction &#8212; will they never learn? Actually, software vendors should really improve their redaction function to eliminate all versions of sensitive info from the given file, and prove it to the user).
http://us.cnn.com/2009/TRAVEL/12/08/u.s.tsa.training.manual/index.html
Although most quotes [...]]]></description>
		<link>http://freshdefense.net/blog/2009/12/09/information-considered-harmful/</link>
			</item>
	<item>
		<title>Network Intrusion Recovery</title>
		<description><![CDATA[Yesterday I gave a talk at the USENIX LISA conference about the difficulties involved in the process of recovering a network infrastructure from a large-scale intrusion.
Stories about post-mortem analysis of such incidents are rare. Here are a few links and pointers:
&#8220;Big-Box Breach: The Inside Story of Wal-Mart’s Hacker Attack&#8221; (HTML)

Chronicle of a Server Break-In (HTML, [...]]]></description>
		<link>http://freshdefense.net/blog/2009/11/05/network-intrusion-recovery/</link>
			</item>
	<item>
		<title>Deriving Intent From Biometrics</title>
		<description><![CDATA[Biometrics as a measure of intent dates at least to the polygraph. Humans often do have physical reactions to stress, but does this kind of system employed as a filter for further screening really buy us much safety?
In the name of finding terrorists before they board an airplane, the TSA has adopted a number of [...]]]></description>
		<link>http://freshdefense.net/blog/2009/11/01/deriving-intent-from-biometrics/</link>
			</item>
	<item>
		<title>Demand for a Cybersecurity Workforce</title>
		<description><![CDATA[This recent Washington Post article highlights the competition between DHS and NSA in their publically stated goals of hiring 1000 to 3000 new cybersecurity professionals per year over the next few years.
I find it extremely doubtful that this level of expertise even exists. The sum total of &#8220;real&#8221; cybersecurity expertise (in terms of deep technical [...]]]></description>
		<link>http://freshdefense.net/blog/2009/10/26/demand-for-a-cybersecurity-workforce/</link>
			</item>
	<item>
		<title>Death of Privacy</title>
		<description><![CDATA[This Canadian scifi writer doesn&#8217;t seem to understand the concept of DoS, or the abuse potential of a deeply embedded surveillance and monitoring system. He claims that we could have
a small implant, say, that keeps track of your whereabouts using signals from the satellite-based Global Positioning System. Suppose the implant constantly broadcasts your exact location [...]]]></description>
		<link>http://freshdefense.net/blog/2009/09/15/death-of-privacy/</link>
			</item>
	<item>
		<title>Cybersecurity Act of 2009 Revisited</title>
		<description><![CDATA[It looks like the Rockefeller-Snowe bill dealing with national cybersecurity has undergone revisions during the recent summer break. I originally scribbled a blurb about this legislation back in March.
Among some of the most troubling provisions in the original draft were clauses allowing the Executive Branch to effectively turn off national access to the Internet. Regardless [...]]]></description>
		<link>http://freshdefense.net/blog/2009/09/09/cybersecurity-act-of-2009-revisited/</link>
			</item>
	<item>
		<title>CPU DoS Attacks</title>
		<description><![CDATA[Also known as CPU starvation or CPU consumption attacks, such attacks present a difficult challenge to commodity computing platforms: users typically believe that commodity hardware is a high-assurance product and that software errors present more of a threat to reliability, quality of service, or security.
A Denial-of-Service (DoS) attack on a Central Processing Unit (CPU) represents [...]]]></description>
		<link>http://freshdefense.net/blog/2009/09/08/cpu-dos-attacks/</link>
			</item>
	<item>
		<title>Russion FSB Can Read Postal Mail, No Rights Violation</title>
		<description><![CDATA[I saw this news tidbit in the Vancouver Sun yesterday morning on the plane back to DC.
The Russian FSB now has the power to open postal mail without a warrant. [ Update: similar shenanigans by the UAE for cell phones. Thanks to Apu K. for the link. -Ed.]
It really doesn&#8217;t matter which government or what [...]]]></description>
		<link>http://freshdefense.net/blog/2009/07/23/russion-fsb-can-read-postal-mail-no-rights-violation/</link>
			</item>
	<item>
		<title>Can You See the Real Me?</title>
		<description><![CDATA[[I originally wrote this essay in early March of 2007 as a reaction to the public request for comments by DHS on the implementation measures of the law. The RealID Act has been analyzed a number of times and is still in the process of being challenged, repealed, and amended by a number of groups. [...]]]></description>
		<link>http://freshdefense.net/blog/2009/07/16/can-you-see-the-real-me/</link>
			</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.799 seconds -->
