33 open-source cybersecurity solutions you didn’t know you needed - Help Net Security
Please turn on your JavaScript for this page to function normally. Open-source cybersecurity tools provide transparency and flexibility, allowing users to examine and customize the source code to fit specific security needs. These tools make cybersecurity accessible to a broader range of organizations and individuals. In this article, you will find a list of 33 open-source cybersecurity tools for
グーグルã€ã‚»ã‚ュリティã‚ー「Titan Security Keyã€ã‚’発売ã¸
GoogleãŒã€8万5000人以上ã„る従æ¥å“¡ã®ä¸ã«2017å¹´åˆã‚以æ¥ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ãƒãƒƒã‚ングã•ã‚ŒãŸè€…ã¯èª°ã‚‚ã„ãªã„ã¨æ˜Žã‹ã—ãŸãŒã€ãã‚Œã¯ã™ã¹ã¦ã€åŒç¤¾ãŒãƒ†ã‚¹ãƒˆã—ã¦ã„ãŸåˆæœŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®ã‚»ã‚ュリティã‚ーã®ãŠã‹ã’ã ã£ãŸã€‚ ãã—ã¦ä»Šå›žã€ãã®ã‚»ã‚ュリティã‚ー「Titan Security Keyã€ã®æœ€æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’世界ä¸ã®äººãŒåˆ©ç”¨ã§ãるよã†ã«ãªã‚‹ã€‚ ã‚»ã‚ュリティã‚ーã¯ã€å¤šè¦ç´ èªè¨¼ï¼ˆè¤‡æ•°ã®æ–¹æ³•ã«ã‚ˆã£ã¦ãƒã‚°ã‚¤ãƒ³ã®æ¨©é™ã‚’æŒã¤ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã‚ã‚‹ã“ã¨ã‚’証明ã™ã‚‹ã“ã¨ï¼‰ã‚’通ã˜ã¦ã‚»ã‚ュリティを強化ã—ã¦ãれる。パスワードã¯ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã§ç›—ã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ãŒã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæŒã£ã¦ã„る物ç†çš„ãªã‚»ã‚ュリティã‚ーを盗むã®ã¯ã‚‚ã£ã¨å›°é›£ãªã“ã¨ãŒå¤šã„。 Googleã¯ä»¥å‰ã‹ã‚‰ã‚»ã‚ュリティã‚ーを支æŒã—ã€ã€ŒAdvanced Protection Programã€ã®è¦ä»¶ã«åŠ ãˆã€ã€Œæœ€ã‚‚フィッシングã•ã‚Œã«ãã„最強ã®èªè¨¼è¦ç´ ã€ã¨å®£ä¼ã—ã¦ã„ãŸã€‚ åŒç¤¾ã®ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†
Security + DevOps – DevSec Hardening Framework
Add security to your automation Hardening adds a layer into your automation framework, that configures your operating systems and services. It takes care of difficult settings, compliance guidelines, cryptography recommendations, and secure defaults. What Others Say The team behind dev-sec.io “Hardening Framework†programmed most of the benchmark into InSpec rules that make it easy to “test†compl
実用的ãªå¤§è¦æ¨¡ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ãƒ‡ã‚£ãƒ•ã‚§ãƒ³ã‚¹:ã‚ã‚‹ã„ã¯ã€ŒEierlegende Wollmichsauã€ã®ä¿è· by Travis Carelock - CODE BLUE 2015
68. name: travis carelock twitter: @l3d email: [email protected] pgp: 463E B548 F3B1 F879 4589 6505 E417 7480 D1A4 A990 private: travis@carelock.net pgp: 4CFC 8E69 4A07 59F2 4508 8A39 0AFA 9CC3 2D65 031E otr: l3d@dukgo.com fingerprint: 40FCAFD7 FAA097B6 29BE95CE 6740E37E 0790E295 åªä»Šç¤¾å“¡å‹Ÿé›†ä¸! Web: http://soundcloud.com/jobs Email: jobs@soundcloud.com è´ã„ã¦ãã‚Œã¦ã‚ã‚ŠãŒã¨ã†! Special Thank You to Code Blue and
ã‚»ã‚ュリティ監査ツールLynis | Nobwak's Lair
Lynisã¨ã¯ Linuxå‘ã‘ã®ã‚»ã‚ュリティ監査ツール。 http://www.rootkit.nl/projects/lynis.html Linuxå‘ã‘ã§ã¯ã‚ã‚‹ãŒã€Linux以外ã§ã‚‚使ãˆã‚‹ã€‚ FreeBSD, Solarisã«åŠ ãˆã¦ãªã‚“ã¨OS Xã¾ã§ã€‚ ã“ã®ãƒ„ールを実行ã™ã‚‹ã¨ã€OSã ã‘ã§ãªãã€ãã“ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„るソフトウェアã®ã‚»ã‚ュリティãƒã‚§ãƒƒã‚¯ã‚‚ã—ã¦ãれる。 Lynisã®ã„ã„ã¨ã“ã‚ Lynisã®ãƒã‚¤ãƒ³ãƒˆã¯ã€å•é¡Œã®ã‚ã‚‹è¨å®šã€çŠ¶æ…‹ã‚’指摘ã—ã¦ãれるã¨ã“ã‚ã«ã‚る。 具体的ã«ã¯ã€æœŸé™åˆ‡ã‚Œã«ãªã£ã¦ã„ã‚‹SSLã‚„ã€ãƒ‘スワードè¨å®šã®ãªã„ユーザアカウントやã€ä¸é©åˆ‡ãªãƒ‘ーミッションã¨ã‹ã€ãã†ã„ã£ãŸã‚‚ã®ã‚’指摘ã—ã¦ãれる。 指摘ã®ã—ã‹ãŸã‚‚ã€ã€ŒWarningsã€ã§å±é™ºæ€§ã‚’挙ã’ã‚‹ã“ã¨ã®ã»ã‹ã«ã€ã€ŒSuggestionsã€ã§æŽ¨å¥¨å¯¾å¿œæ–¹æ³•ã‚‚æ•™ãˆã¦ãれる。 ãŸã¨ãˆã°ã“ã‚ŒãŒã€Œã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„るソフトウェアã«è„†å¼±
Introducing Lemur
Netflix is pleased to announce the open source release of our x.509 certificate orchestration framework: Lemur! The Challenge of Certificate ManagementPublic Key Infrastructure is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption. PKI allows for secure communication by est
Windows標準ã®æ©Ÿèƒ½ã‚’使用ã—ãŸæ¨™çš„型攻撃ã®å¯¾ç– #ssmjp /ssmjp1507
2015å¹´7月31æ—¥ #ssmjp ã§ã®è³‡æ–™ã§ã™ã€‚
パスワードを入力ã•ã›ã‚‹SaaSã¯å…¨ã¦è„†å¼±ã¨ã„ã†è€ƒãˆæ–¹ - ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
シンジã§ã™ã€‚ãã‚“ãªã“ã¨è¨€ã£ãŸã‚‰ãªã‚“ã«ã‚‚使ãˆãªã„ã˜ã‚ƒç„¡ã„ã‹ï¼ã¨ã„ã†ã®ã¯ãã®é€šã‚Šãªã®ã§ã™ãŒã€cloudpack - CTO鈴木ã¯ã€Œè‡ªç¤¾ã®ADã‹ã‚‰SSO（シングルサインオン）ã§ããªã„サービスã¯åŽŸå‰‡æŽ¡ç”¨ã—ãªã„ã‚‚ã‚“ï¼ã€ã¨ã„ã†ãƒãƒªã‚·ãƒ¼ã‚’æŒã£ã¦ã„ã¾ã™ã€‚ã“ã‚Œã£ã¦å®Ÿéš›ã®ã¨ã“ã‚ã©ã†ã§ã—ょã†ã‹ï¼Ÿä»Šå›žã¯cloudpackãŒã©ã†ã‚„ã£ã¦SaaSを採用ã™ã‚‹ã‹ã¨ã„ã†å†…部資料ã®ä¸€éƒ¨ã‚’特別ã«å…¬é–‹ã—ã¦ã€SaaSã®é¸ã³æ–¹ã«ã¤ã„ã¦è€ƒãˆã¦ã¿ã¾ã™ã€‚ cloudpackã¯åŽŸå‰‡ã€AWSãªã©ã¸ã®ãƒã‚°ã‚¤ãƒ³ã«ãƒ‘スワードを使ã„ã¾ã›ã‚“ã“ã¡ã‚‰ã¯ã€ã€Œæœ€å¼·ã®ã‚»ã‚ュリティã§AWSマãƒã‚¸ãƒ¡ãƒ³ãƒˆã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ–¹æ³•ã€ã§ã”紹介ã—ãŸé€šã‚Šãªã®ã§è©³ç´°ã¯å‰²æ„›ã—ã¾ã™ãŒã€ç¤¾å†…ã§ã¯ãƒ‘スワードを使ã†ã‚·ãƒãƒ¥ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã€ã€Œãƒ‘ソコン/Macã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã¨ãã¨ã€SSOã™ã‚‹ã¨ãã®ã¿ã€ã§ã™ã€‚ã©ã¡ã‚‰ã«ã—ã¦ã‚‚ADã®ãƒ¦ãƒ¼ã‚¶ãƒ¼IDã¨ãƒ‘スワードã—ã‹ä½¿ã„ã¾ã›ã‚“。ã¾ã•ã—ãSSOã§ã™ã€‚SAML
Norton ConnectSafe
Retirement Announcement for Norton TM ConnectSafe On November 15, 2018, Norton ConnectSafe service is being retired or discontinued meaning the service will no longer be available or supported. You may continue to use ConnectSafe until November 15, 2018. However, we do recommend that you take a moment to review important details related to this announcement below. ConnectSafe Retirement FAQ For co
クラウド型Web脆弱性診æ–ツール「VAddyã€
今日ã‹ã‚‰ä½¿ãˆã‚‹ã‚¯ãƒ©ã‚¦ãƒ‰åž‹ Web脆弱性診æ–ツール Webアプリケーションã®è„†å¼±æ€§è¨ºæ–ã‚’ 社内ã§å®Ÿæ–½ã—ã¾ã›ã‚“ã‹ï¼Ÿ VAddyãªã‚‰ã‚»ã‚ュリティ専門家以外ã®æ–¹ã‚‚ 脆弱性診æ–ãŒã§ãã¾ã™ã€‚ 1週間無料トライアルã§ã¯ã˜ã‚ã‚‹ オンライン個別相談会 実施ä¸ï¼
Retire.js
There is a plethora of JavaScript libraries for use on the web and in node.js apps out there. This greatly simplifies, but we need to stay update on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10 and insecure can libraries can pose a huge risk for your webapp. The goal of Retire.js is to help you detect use of version with known vulnerabilities. Ret
シンボリック実行ã«å…¥é–€ã—よã†ã¨ã—㟠| 一生ã‚ã¨ã§èªã‚“ã§ã‚
ã¯ã˜ã‚ã«ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯å®Ÿè¡Œ(symbolic execution)ã¨ã„ã†ç”¨èªžã‚’ã‚»ã‚ュリティ系ã®è«–æ–‡ã§ã‚ˆã見ã‹ã‘るよã†ã«ãªã£ãŸï¼Žã“ã“ã§ã¯ï¼Œã‚·ãƒ³ãƒœãƒªãƒƒã‚¯å®Ÿè¡Œã®åŸºç¤Žã¨ãªã‚‹ç†è«–を辿る．ç†è€…ã¯ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ†ã‚¹ãƒˆã®ç ”究ã«ã¯ç–Žã，ãŠãらã本稿ã«ã¯è‹¥å¹²ä»¥ä¸Šã®èª¤è¬¬ã¨èª¤è§£ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã ã‚ã†ï¼Žãœã²è˜è€…ã®æ•™ç¤ºã‚’乞ã„ãŸã„． 発祥シンボリック実行ã¯ä¸»ã«ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ†ã‚¹ãƒˆã®é ˜åŸŸã§å¤ãã‹ã‚‰ç ”究ã•ã‚Œã¦ããŸãƒˆãƒ”ックã§ã‚る．シンボリック実行ã¨ã„ã†ç”¨èªžã®åˆå‡ºã¯é¡ã‚‹ã“ã¨38å¹´å‰ï¼ŒJames C. Kingらã«ã‚ˆã‚‹Symbolic Execution and Program Testing [PDF]ã¨ã„ã†è«–æ–‡ã ．DijkstraãŒgotoæ–‡ã®æ¿«ç”¨ã«ã‚ˆã‚‹å¤§åŸŸè„±å‡ºã‚’批判ã—ãŸã®ãŒ1968å¹´ã§ã‚り，Guarded Command Languageã‚’æ案ã—ãŸã®ãŒ1975å¹´ã®ã“ã¨ã§ã‚る．ã“ã®è«–æ–‡ãŒç™ºè¡¨ã•ã‚ŒãŸ1976年当時ã¯ã¾ã•ã«æ§‹é€ 化プãƒã‚°ãƒ©
Page Redirection
If you are not redirected automatically, follow the link to example
The Zeek Network Security Monitor
Zeek has been a cornerstone of the open-source and cybersecurity communities for decades. Originally developed by Vern Paxson in the 1990s under the name “Bro,†Zeek was designed to provide deep insights into network activity across university and national lab networks. In 2018, the project was renamed Zeek to reflect its growing role and evolution in the world of network security. Today, Zeek rem
「オンライン本人èªè¨¼æ–¹å¼ã®å®Ÿæ…‹èª¿æŸ»ã€å ±å‘Šæ›¸ã«ã¤ã„ã¦ï¼šIPA 独立行政法人 æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
2013年以é™ã€æµå‡ºã—ãŸå€‹äººã®ID・パスワード（以後ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆï¼‰ãŒã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«æ‚ªç”¨ã•ã‚Œã‚‹ã€â€œãƒ‘スワードリスト攻撃“ãŒå¤šç™ºã—ã¦ã„ã¾ã™ï¼ˆ*1）。IPAã§ã¯ã“れをå—ã‘ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚µãƒ¼ãƒ“スã«ãŠã‘る利用者（個人）ã¨ã‚µãƒ¼ãƒ“ス事æ¥è€…åŒæ–¹ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³æœ¬äººèªè¨¼ï¼ˆ*2）ã®å®Ÿæ…‹èª¿æŸ»ã‚’ãŠã“ãªã„ã€å®‰å…¨ãªã‚ªãƒ³ãƒ©ã‚¤ãƒ³èªè¨¼ã‚’実ç¾ã™ã‚‹ä¸Šã§ã®åˆ©ç”¨è€…å´ã€ã‚µãƒ¼ãƒ“ス事æ¥è€…å´ã®å¯¾ç–を検討ã—ã€å„ªå…ˆã™ã¹ã対ç–é …ç›®ã‚’å ±å‘Šæ›¸ã¨ã—ã¦å–ã‚Šã¾ã¨ã‚ã¾ã—ãŸã€‚ 調査çµæžœã‹ã‚‰ã€åˆ©ç”¨è€…ã®å®‰å…¨ãªãƒ‘スワードã«å¯¾ã™ã‚‹èªè˜ã¯æ±ºã—ã¦ä½Žãã¯ãªã„ãŒã€é©åˆ‡ã«è¨å®šã—ã¦ã„る割åˆã¯ä½Žã„。ã¾ãŸã€ã‚µãƒ¼ãƒ“ス事æ¥è€…ãŒæä¾›ã—ã¦ã„るパスワードè¨å®šã®ã‚»ã‚ュリティレベルã¯æœ€ä½Žé™ã®å®‰å…¨æ¡ä»¶ã‚’満ãŸã—ã¦ã„ã‚‹ã¨ã¯è¨€ã„難ã„ã€ã¨ã„ã†çµæžœãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚調査çµæžœã®ãƒã‚¤ãƒ³ãƒˆåŠã³è©³ç´°ã«ã¤ã„ã¦ã¯ã€ä»¥ä¸‹ã®ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ã‚„èª¿æŸ»å ±å‘Šæ›¸ã‚’ã”å‚ç…§ãã ã•ã„。 （*1ï¼‰æœ¬å ±å‘Šæ›¸ã§ã¯å…¬é–‹æƒ…å ±ã‚’ã‚‚ã¨ã«2013å¹´ã«ç™ºç”Ÿã—ãŸ
OWASP Zed Attack Proxy (ZAP)ã§è„†å¼±æ€§æ¤œæŸ»ã™ã‚‹æ–¹æ³•
OWASP Zed Attack Proxy (ZAP)ã®ä½¿ã„æ–¹ã®ä¾‹ã‚’ã„ãã¤ã‹ãƒ¡ãƒ¢ã—ã¾ã™ã€‚å„æ“作ã®ç´°ã‹ã„説明ã¯åˆ¥ã®è¨˜äº‹ã§æ›¸ãã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。 ※ 本記事ã§ä½¿ç”¨ã™ã‚‹OWASP ZAPã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯ã€2.2.2ã§ã™ã€‚ 使ã„方１：ãƒãƒ¼ã‚«ãƒ«ãƒ»ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ãƒ–ラウザã®é€šä¿¡å†…容をãƒã‚§ãƒƒã‚¯ã™ã‚‹OWASP ZAPã‚’ãƒãƒ¼ã‚«ãƒ«ã®ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ä½¿ç”¨ã—ã€ãƒ–ラウザã®é€šä¿¡ã‚’OWASP ZAP経由ã§è¡Œã„ã¾ã™ã€‚ãã®å¾Œã€è¨˜éŒ²ã•ã‚ŒãŸé€šä¿¡å†…容を確èªã™ã‚‹ã€ã¨ã„ã£ãŸä½¿ã„æ–¹ã§ã™ã€‚ OWASP ZAPã‚’èµ·å‹•ã—ã¾ã™ã€‚ブラウザを起動ã—ã¾ã™ã€‚ブラウザã®ãƒ—ãƒã‚ã‚·è¨å®šã§ã€OWASP ZAPã®å‹•ä½œã™ã‚‹ãƒ›ã‚¹ãƒˆã¨ãƒãƒ¼ãƒˆç•ªå·ã‚’セットã—ã¾ã™ã€‚ブラウザ上ã§è¨ºæ–ã®å¯¾è±¡ã¨ãªã‚‹Webサイトã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¾ã™ã€‚目的ã®ãƒšãƒ¼ã‚¸ã§ç›®çš„ã®å‹•ä½œã‚’è¡Œã„ã¾ã™ã€‚OWASP ZAPã®[サイト]タブã§ã€ç›®çš„ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆ(URL)をクリックã—ã€[リクエスト]タブや[レスãƒãƒ³ã‚¹]タブã§é€šä¿¡
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
FireHOL IP Lists | IP Blacklists | IP Reputation Feeds
Yosai
Never Ending Security
http://www.selectrealsecurity.com/public-block-lists
{{#tags}}- {{label}}
{{/tags}}