Custom Shellcode Encoders

January 19, 2016 / Security Kaizen

Introduction We all used Metasploit shellcode encoders like XORmencoder,shikata_ga_nai, and many others,these encoders are targets for most antiviruses to fingerprint as they used by most attackers, so what about writing your own encoders?. In this article we will see how easy it is ...

3035 0

Reviews

Book Review : Trojan Horse

January 18, 2016 / Security Kaizen

It’s two years post-Zero Day, and former government analyst Jeff Aiken is reaping the rewards for crippling al-Qaida’s attack on the computer infrastructure of the Western world. His cyber – security company is flourishing, and his relationship with Daryl Haugen intensifies ...

5660 0

Best Practice

What you don’t know about the REPORTING process in Facebook

January 18, 2016 / Security Kaizen

At Facebook we maintain a robust infrastructure that empowers our more than 900 million person community to help us enforce our policies by using the report links found throughout the site. While it is unlikely that you will have any problems with content on the site, it might not ...

6184 0

Grey Hat

Infecting Android processes for fun and profit

January 17, 2016 / Security Kaizen

In this article we will discuss a way to inject code into a process running on Android and make it execute that code within the context of that running process. The motivation for this project started during my adventures with windows malware. It was very convenient for ...

4925 0

Best Practice

Encrypting Windows Traffic Using IPSec PART1

January 16, 2016 / Security Kaizen

Dear Security Kaizen magazine readers, As part of the Defense-in-Depth strategy, I chose to introduce the topic in this issue to you by taking an excerpt from one of my favorite references in my library, “Microsoft Windows Security Resource Kit, Ben Smith and Brian Komar with ...

4766 0

Best Practice

Risk Based Approach To Mitigating Insider Threats in the SDLC

January 14, 2016 / Security Kaizen

The scope of this article is to discuss the inherent flaws in an SDLC environment that insiders exploit to carry out an insider attack. SDLC process is a development methodology followed by many organizations, and suggests ways of better managing and governing them. Who ...

2712 0

Reviews

Book Review: Mobile Application Security

January 13, 2016 / Security Kaizen

Mobile Application Security is a super technical book. The authors are three mobile security veterans from iSec Partners, a reputable mobile security services company with several mobile 0days and Blackhat talks. They focus on the mobile threat landscape from a developer’s ...

10221 0

Interviews

Interview with Mr. Ahmed Riad, Middle East Business Continuity Leader

January 13, 2016 / Security Kaizen

We had the pleasure to interview one of the best business continuity leaders in the region, Ahmed Riad, Middle East Business Continuity leader. we asked him for the importance of BC and organizational resilience, we also outlined some challenges that are facing Egypt to comply with ...

54461 2

Grey Hat

Writing Your Own Malware

January 12, 2016 / Security Kaizen

Objective Hello All, First I would like to set our objectives and goals through this article, in this article we will have a small tutorial and example on how to write a malware using python, The target audience for this articles are the academic community who seeks to ...

3726 0

Best Practice

“Wireless Security Threats are LIVE in your Network”

January 11, 2016 / Security Kaizen

I can imagine that some of the readers are saying, thanks god, I have not allowed Wi-Fi in my network so, I’m secure and I can flip the paper BUT, wait, unfortunately YOU ARE under Wireless threats even you’ve chosen not to install it and even if you believe that Encryption is enough ...