Microsoft Security EssentialsãŒãƒ†ã‚¹ãƒˆã§èªå®šã‚’得られãªã‹ã£ãŸä»¶ã«ã¤ã„ã¦è‡ªç¤¾æ¤œè¨¼ã®çµæžœã‚’発表
By I woz ere Microsoftã®æä¾›ã—ã¦ã„るウイルス対ç–ソフト「Microsoft Security Essentialsã€ãŒç¬¬ä¸‰è€…æ©Ÿé–¢ã«ã‚ˆã‚‹ãƒ†ã‚¹ãƒˆã§èªå®šã‚’得られãªã‹ã£ãŸä»¶ã«ã¤ã„ã¦ã€MicrosoftãŒã‚µãƒ³ãƒ—ルを用ã„ã¦è‡ªç¤¾ã§æ¤œè¨¼ã‚’è¡Œã„ã€AV-TESTã®çµæžœã¨ã®å·®ã‚’発表ã—ã¦ã„ã¾ã™ã€‚ Key lessons learned from the latest test results - Microsoft Malware Protection Center - Site Home - TechNet Blogs http://blogs.technet.com/b/mmpc/archive/2013/01/16/lessons-learned-from-the-latest-test-results.aspx Microsoft Security Essentials Fails
Denyhosts | åˆã‚ã¦ã®makeserver
DenyHostsã¨ã¯ ã“ã‚Œã¯SSHブルートフォース対ç–ã«ä½¿ã„ã¾ã™ã€‚ 辞書攻撃ã¨ã‹ã§ã€é©å½“ãªãƒ¦ãƒ¼ã‚¶å･パスワードを使ã£ã¦ã€ä¾µå…¥ã‚’ã—よã†ã¨ã—ã¾ã™ã€‚ 1分間ã«10回以上ã¯ã‚¢ã‚¿ãƒƒã‚¯ã—ã¦ãã¾ã™ã€‚ ãƒã‚°ã«å¤§é‡ã«æ®‹ã‚Šã†ã£ã¨ã†ã—ã„ã®ã§ã€ã€ŒDenyHostsã€ã‚’使ã£ã¦å¯¾å¿œã—ã¾ã™ã€‚ （以下「/var/log/messageã€ã§ã®ãƒã‚°ï¼‰ã“ã‚“ãªæ„Ÿã˜ã®ãŒå¤§é‡ã«å‡ºã¾ã™ã€‚ イヤã§ã™ãー vsftpd(pam_unix)[4842]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=221.2.229.170 vsftpd(pam_unix)[4842]: check pass; user unknown vsftpd(pam_unix)[4842]: authentication failure; logname= ui
DenyHostã§ssh攻撃を防ã
インストール wget http://jaist.dl.sourceforge.net/sourceforge/denyhosts/DenyHosts-2.6.tar.gz tar zxvf ./DenyHosts-2.6.tar.gz cd DenyHosts-2.6 python setup.py install è¨å®š cd /usr/share/denyhosts/ cp denyhosts.cfg-dist denyhosts.cfg SECURE_LOG = /var/log/secure ã‚»ã‚ュリティãƒã‚°ã®å ´æ‰€ã€‚ 特ã«ã€sshdã®ã‚¨ãƒ©ãƒ¼é–¢ä¿‚ãŒè¨˜éŒ²ã•ã‚Œã‚‹ãƒã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã€‚ HOSTS_DENY = /etc/hosts.deny æ‹’å¦ãƒ›ã‚¹ãƒˆã®æƒ…å ±ãŒæ›¸ã‹ã‚Œã¦ã„るファイル。 PURGE_DENY = 一旦拒å¦ã‚¢ãƒ‰ãƒ¬ã‚¹ã«è¿½åŠ ã—ãŸã¨ãã€ãã®æ‹’å¦ã‚’解除ã™ã‚‹ã¾ã§ã®æ™‚間。 m(分)h(時間)d(æ—¥
SSHGuard
SSHGuard protects hosts from brute-force attacks by: Monitoring system logs Detecting attacks Blocking attackers using a firewall Fast, simple, secure, and protects a wide range of services out of the box! Internet-connected hosts are subject to constant probing and attacks from malicious actors. Brute-force attacks represent a large threat to account compromise for hosts and their networks. Block
æ¥ç•Œæœ€å¤§ç´šã®ãƒ©ã‚¤ãƒ–ãƒãƒ£ãƒƒãƒˆDXLIVE
9月14日（水）åˆå‰5時～5時30分(日本時間)ã«ã€ã‚µã‚¤ãƒˆã®ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã‚’è¡Œãªã„ã¾ã™ã€‚ãã®é–“ã¯ã€ä¸€æ™‚çš„ã«ãƒãƒ£ãƒƒãƒˆãŒä¸æ–ã•ã‚Œã‚‹å ´åˆãŒã”ã–ã„ã¾ã™ã€‚メンテナンス期間ã¯ã€ä½œæ¥çŠ¶æ³ã«ã‚ˆã‚Šå¤šå°‘å‰å¾Œã™ã‚‹ã“ã¨ã‚‚ã”ã–ã„ã¾ã™ã€‚ã”利用ã®çš†æ§˜ã«ã¯ã”迷惑をãŠã‹ã‘致ã—ã¾ã™ãŒã€ã”ç†è§£ãªã‚‰ã³ã«ã”å”力ã®ç¨‹ã€ä½•å’宜ã—ããŠé¡˜ã„申ã—上ã’ã¾ã™ã€‚ 日本時間åˆå¾Œ10時30åˆ†é ƒã‹ã‚‰åˆå‰é›¶æ™‚é ƒã¾ã§ã®é–“ã€ãƒãƒ£ãƒƒãƒˆã«ç¹‹ãŒã‚Šã«ãã„状態ãŒã‚ã‚Šã¾ã—ãŸãŒã€ç¾åœ¨ã¯è§£æ±ºã—ã¦ã„ã¾ã™ã€‚ã”利用ã•ã‚Œã¦ã„る皆様ã«ã¯å¤§å¤‰ã”迷惑ãŠã‹ã‘ã„ãŸã—ã¾ã—ãŸã“ã¨ã‚’ãŠè©«ã³è‡´ã—ã¾ã™ã€‚ 9月6日（水）åˆå‰4時30分(日本時間)より約1時間ã€ã‚µã‚¤ãƒˆã®ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã‚’è¡Œãªã„ã¾ã™ã€‚ãã®é–“ã¯ã€ä¸€æ™‚çš„ã«ãƒãƒ£ãƒƒãƒˆãŒä¸æ–ã•ã‚Œã‚‹å ´åˆãŒã”ã–ã„ã¾ã™ã€‚メンテナンス期間ã¯ã€ä½œæ¥çŠ¶æ³ã«ã‚ˆã‚Šå¤šå°‘å‰å¾Œã™ã‚‹ã“ã¨ã‚‚ã”ã–ã„ã¾ã™ã€‚ã”利用ã®çš†æ§˜ã«ã¯ã”迷惑をãŠã‹ã‘致ã—ã¾ã™ãŒã€ã”ç†è§£ãªã‚‰ã³ã«ã”å”力ã®ç¨‹ã€ä½•å’宜ã—ããŠé¡˜ã„申ã—上ã’ã¾ã™
ライザムーン(LizaMoon)攻撃ã«å¯¾ã—ã¦ã‚‚WAFã¯æœ‰åŠ¹ - ockeghem's blog
ライザムーン攻撃ã«å¯¾ã™ã‚‹è¡Œã届ã„ãŸè§£èª¬ã‚’èªã¿ã¾ã—ãŸã€‚ 大è¦æ¨¡ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ 「LizaMoonã€æ”»æ’ƒã«ã¤ã„ã¦èª¿ã¹ã¦ã¿ãŸã€‚ - piyolog ã“ã“ã§ç´¹ä»‹ã•ã‚Œã¦ã„る内容ã¯ç´ 晴らã—ã„ã¨æ€ã†ã®ã§ã™ãŒã€ä¸€ç‚¹ã€WAFã«é–¢ã™ã‚‹ä»¥ä¸‹ã®è¨˜è¿°ãŒå¼•ã£ã‹ã‹ã‚Šã¾ã—ãŸã€‚ SQLインジェクションã§ã‚ã‚Œã°æ—¢çŸ¥ã®æ”»æ’ƒæ‰‹æ³•ã§ã‚ã‚ŠWAFã§é˜²ãã“ã¨ã¯å‡ºæ¥ã‚‹ã®ã§ã¯ã¨ã„ã†è€ƒãˆæ–¹ã‚‚ã‚ã‚Šã¾ã™ãŒã€ä¾‹ãˆã°ãƒ–ラックリストタイプã®WAFã§ã“ã®æ•°å€¤ãƒªãƒ†ãƒ©ãƒ«åž‹ã‚’ã¤ãSQLインジェクションを防ãã“ã¨ãŒå‡ºæ¥ã¾ã›ã‚“。HTTPリクエストã¨ã—ã¦å—ã‘ãŸæ–‡å—列ã ã‘ã§ã€æœ€çµ‚çš„ã«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«å¯¾ã—ã¦ç™ºè¡Œã•ã‚Œã‚‹SQLã§ãã®æ–‡å—列ãŒã©ã®ã‚ˆã†ãªæ‰±ã„ã«ãªã‚‹ã‹(数値リテラルã«ãªã‚‹ã®ã‹ã©ã†ã‹)判æ–ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ãªã„ãŸã‚ã§ã™ã€‚ 本当ã«ãƒ–ラックリストタイプã®WAFã§é˜²ãã“ã¨ãŒã§ããªã„ã®ã§ã—ょã†ã‹ã€‚IBMã®ãƒ¬ãƒãƒ¼ãƒˆã«ç´¹ä»‹ã•ã‚Œã¦ã„る以下ã®æ”»æ’ƒã§è€ƒãˆã¦ã¿ã¾ã™ã€‚ /target.asp
WordPress Security Hacks and Tricks | WPZine
WPzine is a blog dedicated to Wordpress tutorials, themes, plugins, news and other resourcesFollowing on from my recently article about WordPress security plugins there are a number of ways you can shore up your security by using a few choice snippets and hacks. Please do ensure you backup before making any changes to your files, the .htaccess if broken can cause your blog to stop working complete
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
http://www.isg.rhul.ac.uk/tls/TLStiming.pdf
tech note: sshguard
{{#tags}}- {{label}}
{{/tags}}