Security Basics mailing list archives
RES: How to prevent zero day attacks
From: Fábio Soto <fabio () andradesoto com br>
Date: Sat, 26 May 2012 10:40:35 -0300
Great resource... thanks -----Mensagem original----- De: listbounce () securityfocus com [mailto:listbounce () securityfocus com] Em nome de Peter Thomas Enviada em: quinta-feira, 24 de maio de 2012 20:31 Para: amishra.jsr () gmail com Cc: security-basics () securityfocus com Assunto: Re: How to prevent zero day attacks The Australian department of defence has a good resource on protecting systems against threats for which there are no signatures available. These are the Top 4, from a full list of 35. Implementing the Top 4 will provide a significant increase in security. 1. patch applications such as PDF readers, Microsoft Office, Java, Flash Player and web browsers 2. patch operating system vulnerabilities 3. minimise the number of users with administrative privileges 4. use application whitelisting to help prevent malicious software and other unapproved programs from running. More details are available here - http://www.dsd.gov.au/infosec/top35mitigationstrategies.htm Regards, Peter -------------------------------------------------- Security Scanning Tools On-line Web: http://hackertarget.com/ -------------------------------------------------- On Tue, May 22, 2012 at 4:04 PM, <amishra.jsr () gmail com> wrote:
Hello, Traditionally all the anitvirus, IPS works using signature based technique. This doesn't help in zero day attack. Therefore, what can be done to prevent zero-day attacks? ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------ ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- How to prevent zero day attacks amishra . jsr (May 22)
- Re: How to prevent zero day attacks AK (May 22)
- Re: How to prevent zero day attacks Cody Alexander (May 22)
- Re: How to prevent zero day attacks Littlefield, Tyler (May 22)
- Re: How to prevent zero day attacks Brandon Edmunds (May 22)
- Re: How to prevent zero day attacks Nathan Sherlock (May 22)
- RE: How to prevent zero day attacks David Gillett (May 22)
- Re: How to prevent zero day attacks GreyHat LispHacker (May 23)
- Re: How to prevent zero day attacks Peter Thomas (May 25)
- RES: How to prevent zero day attacks Fábio Soto (May 28)
- <Possible follow-ups>
- Re: How to prevent zero day attacks securityfocus (May 22)
- Re: How to prevent zero day attacks Matt J. Corrigan (May 22)
- Re: How to prevent zero day attacks synja (May 22)
- Re: How to prevent zero day attacks Stephanus J Alex Taidri (May 22)
- Re: How to prevent zero day attacks Michał Purzyński (May 22)
- Message not available
- Re: How to prevent zero day attacks Memory Vandal (May 22)
- Re: How to prevent zero day attacks synja (May 22)
- Re: How to prevent zero day attacks Stephanus J Alex Taidri (May 22)
- Re: How to prevent zero day attacks AK (May 22)
- Re: How to prevent zero day attacks Jeffrey Walton (May 22)
- Re: How to prevent zero day attacks Michał Purzyński (May 22)