HSB15 - Aiko Pras - TU Twente
•
0 likes•878 views
This document discusses the risks of distributed denial of service (DDoS) attacks and the growing threat posed by the internet of things (IoT). It summarizes research that identified over 1.2 million unprotected IoT devices. It is predicted that billions of IoT devices will be vulnerable. The document warns that DDoS attacks may reach terabits per second from botnets composed of IoT devices and that critical infrastructure is not adequately prepared to handle such large-scale attacks. It concludes by recommending the development of early warning systems and trusted networking initiatives to help address the problem.
Report
Share
Report
Share
Download to read offline
Recommended
MIKVAH November
1) The author recounts her experience undergoing a pre-wedding ritual immersion in a mikvah, a Jewish purification ritual traditionally required for women.
2) While the mikvah ritual has historically been tied to rules of female purity and implied that menstruation is impure, some modern Jewish women are reclaiming the mikvah as an empowering ritual celebrating their bodies.
3) The number of mikvah facilities, especially progressive non-Orthodox ones, has been growing as more secular and casually observant Jewish women embrace the ritual for reasons of spiritual renewal and transformation.
Gustavo rosas ruiz
El documento resume los hitos más importantes en el desarrollo de Internet desde 1974 hasta 2012, incluyendo la creación de protocolos como TCP/IP y HTTP, el nacimiento de servicios como el correo electrónico, Usenet y la World Wide Web, y el crecimiento exponencial del número de usuarios de Internet a nivel mundial y en México a lo largo de las décadas.
Status of administrative control on environment in india
The document discusses several environmental protection acts enacted by the Indian parliament, including the Wildlife Protection Act of 1972, Water Pollution Control Acts of 1974 and 1977, the Forest Conservation Act of 1980, and Air Pollution Control Act of 1981. It also discusses the establishment of committees and boards for environmental protection in India beginning in the late 1960s and early 1970s, culminating in the comprehensive Environment Protection Act of 1986.
Apresentação do tema
O documento discute os tipos de florestas no mundo, incluindo as florestas amazônicas, tropicais, savanas e tundras. Ele também aborda as vantagens, desvantagens e importância das florestas para os seres vivos, usando powerpoints, panfletos, cartazes e vídeos para apresentar o tema.
Escobedo maria elena_act2.ppt
Este documento presenta las actividades para elaborar instrumentos de evaluación como rúbricas y listas de cotejo a partir de una secuencia didáctica. Los estudiantes conceptualizarán la evaluación por competencias y elaborarán una rúbrica para evaluar procesos de enseñanza y aprendizaje, con el objetivo de desarrollar habilidades de autoevaluación.
Jjghjgh
Este documento contiene la letra de la canción "Quedate Junto a Mi" del artista Ken-Y. La letra expresa los sentimientos de querer pasar tiempo con una persona amada después de mucho tiempo separados, pidiéndole que se quede a su lado, olviden el pasado y vivan el presente juntos.
2014 Milwaukee BizExpo: Business Strategy Seminar | BRANDeliver = BRANDemand ...
Your ability to communicate how your company stands out from the competition is essential to sustain and grow your business. In this session, experts will present case studies and explain how businesses can tell a distinctive story of their company, which compels customers to choose their products and services. You will also hear from two business leaders whose companies stand out through strong branding. This session will actively explore the issues and challenges, and will provide you with practical tips and tools that you can apply immediately to begin strengthening your presence in the marketplace.
Bennett Counsell, THIEL Design
Keith Walters, THIEL Design
Gary Zimmerman, Creative Business Interiors
Sarah Ocampo, RC Insurance Services
2014 — Milwaukee, WI
Recommended
MIKVAH November
1) The author recounts her experience undergoing a pre-wedding ritual immersion in a mikvah, a Jewish purification ritual traditionally required for women.
2) While the mikvah ritual has historically been tied to rules of female purity and implied that menstruation is impure, some modern Jewish women are reclaiming the mikvah as an empowering ritual celebrating their bodies.
3) The number of mikvah facilities, especially progressive non-Orthodox ones, has been growing as more secular and casually observant Jewish women embrace the ritual for reasons of spiritual renewal and transformation.
Gustavo rosas ruiz
El documento resume los hitos más importantes en el desarrollo de Internet desde 1974 hasta 2012, incluyendo la creación de protocolos como TCP/IP y HTTP, el nacimiento de servicios como el correo electrónico, Usenet y la World Wide Web, y el crecimiento exponencial del número de usuarios de Internet a nivel mundial y en México a lo largo de las décadas.
Status of administrative control on environment in india
The document discusses several environmental protection acts enacted by the Indian parliament, including the Wildlife Protection Act of 1972, Water Pollution Control Acts of 1974 and 1977, the Forest Conservation Act of 1980, and Air Pollution Control Act of 1981. It also discusses the establishment of committees and boards for environmental protection in India beginning in the late 1960s and early 1970s, culminating in the comprehensive Environment Protection Act of 1986.
Apresentação do tema
O documento discute os tipos de florestas no mundo, incluindo as florestas amazônicas, tropicais, savanas e tundras. Ele também aborda as vantagens, desvantagens e importância das florestas para os seres vivos, usando powerpoints, panfletos, cartazes e vídeos para apresentar o tema.
Escobedo maria elena_act2.ppt
Este documento presenta las actividades para elaborar instrumentos de evaluación como rúbricas y listas de cotejo a partir de una secuencia didáctica. Los estudiantes conceptualizarán la evaluación por competencias y elaborarán una rúbrica para evaluar procesos de enseñanza y aprendizaje, con el objetivo de desarrollar habilidades de autoevaluación.
Jjghjgh
Este documento contiene la letra de la canción "Quedate Junto a Mi" del artista Ken-Y. La letra expresa los sentimientos de querer pasar tiempo con una persona amada después de mucho tiempo separados, pidiéndole que se quede a su lado, olviden el pasado y vivan el presente juntos.
2014 Milwaukee BizExpo: Business Strategy Seminar | BRANDeliver = BRANDemand ...
Your ability to communicate how your company stands out from the competition is essential to sustain and grow your business. In this session, experts will present case studies and explain how businesses can tell a distinctive story of their company, which compels customers to choose their products and services. You will also hear from two business leaders whose companies stand out through strong branding. This session will actively explore the issues and challenges, and will provide you with practical tips and tools that you can apply immediately to begin strengthening your presence in the marketplace.
Bennett Counsell, THIEL Design
Keith Walters, THIEL Design
Gary Zimmerman, Creative Business Interiors
Sarah Ocampo, RC Insurance Services
2014 — Milwaukee, WI
Male repro epididymis vas seminal vescile
The epididymis is a coiled tube that receives sperm from the testis via efferent ductules. It has three parts - head, body, and tail. Sperm undergoes maturation as it travels through the epididymis. The ductus deferens is a thick-walled muscular tube that carries sperm from the epididymis to the prostate and ejaculatory ducts. It passes through the inguinal canal in the spermatic cord and enters the abdomen through the deep inguinal ring. The seminal vesicles secrete fluid that provides motility and nourishment to sperm. They join the lower end of the ductus deferens to form the ejaculatory ducts.
Творческий проект "Вот оно какое, моё сибирское лето!"
Творческая работа на всероссийский конкурс "Вот оно какое, наше лето!"
Kaizen Presentation Js847 Slideshow Sept 2011
The Kaizen team identified and removed excess, obsolete, and potentially hazardous materials stored outside at the Cummins manufacturing plant. This freed up over 50,000 square feet of space, reclaiming areas for employee parking and other intended uses. The team developed a new inventory tracking system and identified better storage locations. Their work saved the company money by recycling scrap materials and reclaiming valuable yard space.
Metabolic syndrome,obesity
This document discusses weight control strategies for patients with metabolic syndrome. It defines metabolic syndrome as a constellation of risk factors that promote cardiovascular disease. Weight loss through diet and exercise is the first-line treatment, aiming for 7-10% weight loss in the first year. Bariatric surgery may be considered for patients with a BMI over 40 or over 35 with comorbidities if medical treatment fails. The risks and types of bariatric surgeries are outlined, noting that surgery provides the greatest sustainable weight loss for treating metabolic syndrome and reducing cardiovascular risk factors.
Energy Efficiency computing
This document discusses energy efficiency in green computing. It defines energy efficiency as using less energy to provide the same service, compared to energy conservation which reduces energy usage by reducing services. The document outlines advantages like saving money and reducing pollution. Techniques discussed for reducing energy usage include putting computers in sleep, standby, or hibernate modes when not in use and implementing hard disk sleep modes. The Energy Star program is described as an early voluntary standard for energy efficient computing products. The document also discusses "Blackle", a search engine powered by Google that aims to save energy by using a black background instead of a white one.
Lecture 25 conversion cycle -wolrd class companies & lean manufacturing-...
World class companies and lean manufacturing, What is world class company and it characteristics. How lean Manufacturing and its principles with tools and techniques automate production process. CAD, CAM, and CNC .
Environmental regulation in india fro training dulapally 18th august
The document provides a history of environmental legislation in India from the pre-independence era to modern times. It summarizes key acts and initiatives over five eras: (1) Pre-independence to 1947, (2) Post-independence to 1972, (3) 1972-1984 following the Stockholm Conference, (4) 1984-1998 in response to the Bhopal disaster, and (5) post-1998 developments. Major legislation includes the Water Act (1974), Forest Conservation Act (1980), Environment Protection Act (1986), and decentralization through the 73rd Constitutional Amendment (1992). However, challenges remain around implementation, transparency, and environmental awareness.
Lean Waste
This presentation introduces lean manufacturing and identifies the eight types of waste. Lean manufacturing aims to eliminate waste through continuous improvement. The eight types of waste are overproduction, over processing, rework, waiting, excess inventory, excess motion, excess transportation, and disconnection of staff skills. Specific examples are provided for each type of waste along with potential causes. Steps for waste elimination include motivation, just-in-time processes, correct automation, leveled scheduling, balanced workloads, quality inspection, line balancing, forecasting, and communication. Tools for waste reduction include visual controls, quick changeovers, cellular manufacturing, and total productive maintenance.
Demographic transition-theory-optimum-population-1
This document summarizes Demographic Transition Theory and discusses optimal population. It describes the five stages of demographic transition that countries generally progress through as they develop economically: (1) high birth and death rates; (2) declining death rates and high birth rates leading to population growth; (3) declining birth rates as well as death rates; (4) low birth and death rates as population growth stabilizes; and (5) potentially declining population. It then discusses India's progression through these stages and the implications, including a current demographic dividend opportunity due to a large working-age population. The document estimates an optimal global population of 1.5-2 billion people based on allowing basic human rights and preservation of biodiversity.
Object-Orientated Design
Object-Orientated Design, More at: http://www.damiantgordon.com/Videos/ProgrammingAndAlgorithms/MainMenu.html
Galería Multiprogramática Valdivia, Chile - Mauricio Silva
Fundamento Conceptual
De la evolución que han experimentado las manzanas, surge una nueva manera de utilizar y explotar su interior: las galerías. La principal función de éstas es la de vincular el exterior e interior de la manzana, a partir de la galería como espacio de mediación y donde se mezcla el espacio público con el comercio. En Valdivia, ciudad donde llueve gran parte del tiempo, este tipo de espacios es una oportunidad para vivir la ciudad durante todo el año y de esta manera revitalizar el espacio público y la actividad comercial local.
Propuesta Formal
La propuesta busca establecer una nueva forma de habitar el centro, acorde a la condición climática de la ciudad, y donde se genere arraigo e identidad en e valdiviano. Se propone una galería con pasajes comerciales, que en contraposición al mall, establezca un diálogo con su entorno, asumiendo sus programas y elementos espaciales relevantes. Se construye un volumen denso, pero a la vez permeable, con espacios públicos cubiertos, que proporcionan cobijo ante las inclemencias del clima y que integren el espacio público.
Propuesta Bioclimática
El proyecto al poseer gran densidad y ocupación de suelo, se enfoca principalmente a solucionar los problemas lumínicos que puede presentar un edificio de este tipo. La mejor solución en ciudades como Valdivia, con un cielo generalmente nublado, es generar aberturas, y establecer focos de iluminación cenital, aprovechando así la parte mas luminosa de la bóveda celeste.
El uso de las aguas subterráneas de la ciudad para extracción de energía, y la reutilización de aguas lluvia generan un edificio sostenible con la redes energéticas propias de la ciudad.
20160816 amlight popbahia_rnp_ansp
Collaboration Opportunities between:
-University of Twente
-AMLight
-PoP-Bahia/Brazil
-RNP
-ANSP
IBCAST 2021: Observations and lessons learned from the APNIC Community Honeyn...
The document discusses observations from the APNIC Community Honeynet Project, including Linux/Unix malware targeting servers and IoT devices, and lessons learned. Some key observations are the prevalence of Linux/Unix malware like Mirai that targets exposed devices with weak credentials. Honeypots captured login attempts and payloads downloaded from command and control servers. Lessons include the need to patch systems, use strong unique credentials, and monitor for infections.
WebSocket Perspectives 2015 - Clouds, Streams, Microservices and WoT
WebSocket is not just a push mechanism. There are other HTTP-based mechanisms for simply sending a short notification to the browsers. It is much more. This presentation was given at both JavaOne 2015 and HTML5DevConf 2015 with slightly different Java/JavaScript information, but the basic information is the same.
V2 peter-lubbers-sf-jug-websocket
Peter Lubbers from Kaazing gave a presentation on HTML5 WebSocket and communication technologies to the San Francisco Java User Group. He discussed the limitations of traditional HTTP for real-time applications and how technologies like polling and long polling add complexity. He then introduced HTML5 WebSocket as a new standard that enables true full-duplex communication with low latency. Finally, he briefly covered other HTML5 communication features like Server-Sent Events, XMLHttpRequest Level 2, and Cross Document Messaging.
Web3 File Storage Options
Smart contracts and NFTs call for a revised approach to store data. In these slides, 3 options for distributed and fault-tolerant data storage are presented:
IPFS
Filecoin
Arweave
Let's go HTTPS-only! - More Than Buying a Certificate
1) The document discusses various ways to secure a website or client's users, including getting an SSL certificate, setting up HTTPS, ensuring strong security practices with headers and configurations.
2) It describes letting's encrypt as a free and easy way to get SSL certificates with automated renewal, and quality testing services like QUALYS to check SSL configuration.
3) Additional security best practices discussed include HTTP headers like HSTS, CSP, and PKP to prevent vulnerabilities and protect against MITM attacks. Regular testing and integrating checks into development processes are recommended.
Web browsers & the realtime web
It's been possible to instantly push information from a web server to a web browser for at least 10 years, but this technology has finally gone mainstream. In this talk I'll cover the past, present and future of web browser technology and the realtime web.
Slides saved as PDF from HTML presentation. Original presentation available here:
http://www.leggetter.co.uk/pres/techmeetup_edi_2012-02-08/
Threat Con 2021: What's Hitting my Honeypots
APNIC Senior Security Specialist Adli Wahid presented on the APNIC Honeynet Project, interesting observations, mitigation and multistakeholder collaboration at Threat Con 2021, held online from 8 to 11 September 2021.
20190516 web security-basic
The document provides an overview of basic web security concepts including:
1. It defines common web terms like front-end, back-end, cookies, sessions, URLs, HTTP methods, headers and status codes.
2. It discusses how cookies and sessions are used to track users and maintain state on the web.
3. It covers potential information leaks from files like robots.txt, hidden files and directories as well as techniques for searching websites like Google hacking.
4. It introduces common web vulnerabilities like XSS, CSRF and discusses how attacks are carried out and potential impacts. It also notes some PHP quirks that could be exploited if not understood.
Hosting Open Source Projects at the OSUOSL
The document summarizes the Open Source Software Lab (OSUOSL) at Oregon State University, which provides hosting for open source projects. It discusses the history and growth of OSUOSL over the past 4 years, from hosting around 60 projects on 10 racks to now hosting over 300 machines and 130 VMs for many well-known open source projects across 22 racks. It also outlines the services, staffing, funding sources, tools, and future plans of OSUOSL.
More Related Content
Viewers also liked
Male repro epididymis vas seminal vescile
The epididymis is a coiled tube that receives sperm from the testis via efferent ductules. It has three parts - head, body, and tail. Sperm undergoes maturation as it travels through the epididymis. The ductus deferens is a thick-walled muscular tube that carries sperm from the epididymis to the prostate and ejaculatory ducts. It passes through the inguinal canal in the spermatic cord and enters the abdomen through the deep inguinal ring. The seminal vesicles secrete fluid that provides motility and nourishment to sperm. They join the lower end of the ductus deferens to form the ejaculatory ducts.
Творческий проект "Вот оно какое, моё сибирское лето!"
Творческая работа на всероссийский конкурс "Вот оно какое, наше лето!"
Kaizen Presentation Js847 Slideshow Sept 2011
The Kaizen team identified and removed excess, obsolete, and potentially hazardous materials stored outside at the Cummins manufacturing plant. This freed up over 50,000 square feet of space, reclaiming areas for employee parking and other intended uses. The team developed a new inventory tracking system and identified better storage locations. Their work saved the company money by recycling scrap materials and reclaiming valuable yard space.
Metabolic syndrome,obesity
This document discusses weight control strategies for patients with metabolic syndrome. It defines metabolic syndrome as a constellation of risk factors that promote cardiovascular disease. Weight loss through diet and exercise is the first-line treatment, aiming for 7-10% weight loss in the first year. Bariatric surgery may be considered for patients with a BMI over 40 or over 35 with comorbidities if medical treatment fails. The risks and types of bariatric surgeries are outlined, noting that surgery provides the greatest sustainable weight loss for treating metabolic syndrome and reducing cardiovascular risk factors.
Energy Efficiency computing
This document discusses energy efficiency in green computing. It defines energy efficiency as using less energy to provide the same service, compared to energy conservation which reduces energy usage by reducing services. The document outlines advantages like saving money and reducing pollution. Techniques discussed for reducing energy usage include putting computers in sleep, standby, or hibernate modes when not in use and implementing hard disk sleep modes. The Energy Star program is described as an early voluntary standard for energy efficient computing products. The document also discusses "Blackle", a search engine powered by Google that aims to save energy by using a black background instead of a white one.
Lecture 25 conversion cycle -wolrd class companies & lean manufacturing-...
World class companies and lean manufacturing, What is world class company and it characteristics. How lean Manufacturing and its principles with tools and techniques automate production process. CAD, CAM, and CNC .
Environmental regulation in india fro training dulapally 18th august
The document provides a history of environmental legislation in India from the pre-independence era to modern times. It summarizes key acts and initiatives over five eras: (1) Pre-independence to 1947, (2) Post-independence to 1972, (3) 1972-1984 following the Stockholm Conference, (4) 1984-1998 in response to the Bhopal disaster, and (5) post-1998 developments. Major legislation includes the Water Act (1974), Forest Conservation Act (1980), Environment Protection Act (1986), and decentralization through the 73rd Constitutional Amendment (1992). However, challenges remain around implementation, transparency, and environmental awareness.
Lean Waste
This presentation introduces lean manufacturing and identifies the eight types of waste. Lean manufacturing aims to eliminate waste through continuous improvement. The eight types of waste are overproduction, over processing, rework, waiting, excess inventory, excess motion, excess transportation, and disconnection of staff skills. Specific examples are provided for each type of waste along with potential causes. Steps for waste elimination include motivation, just-in-time processes, correct automation, leveled scheduling, balanced workloads, quality inspection, line balancing, forecasting, and communication. Tools for waste reduction include visual controls, quick changeovers, cellular manufacturing, and total productive maintenance.
Demographic transition-theory-optimum-population-1
This document summarizes Demographic Transition Theory and discusses optimal population. It describes the five stages of demographic transition that countries generally progress through as they develop economically: (1) high birth and death rates; (2) declining death rates and high birth rates leading to population growth; (3) declining birth rates as well as death rates; (4) low birth and death rates as population growth stabilizes; and (5) potentially declining population. It then discusses India's progression through these stages and the implications, including a current demographic dividend opportunity due to a large working-age population. The document estimates an optimal global population of 1.5-2 billion people based on allowing basic human rights and preservation of biodiversity.
Object-Orientated Design
Object-Orientated Design, More at: http://www.damiantgordon.com/Videos/ProgrammingAndAlgorithms/MainMenu.html
Galería Multiprogramática Valdivia, Chile - Mauricio Silva
Fundamento Conceptual
De la evolución que han experimentado las manzanas, surge una nueva manera de utilizar y explotar su interior: las galerías. La principal función de éstas es la de vincular el exterior e interior de la manzana, a partir de la galería como espacio de mediación y donde se mezcla el espacio público con el comercio. En Valdivia, ciudad donde llueve gran parte del tiempo, este tipo de espacios es una oportunidad para vivir la ciudad durante todo el año y de esta manera revitalizar el espacio público y la actividad comercial local.
Propuesta Formal
La propuesta busca establecer una nueva forma de habitar el centro, acorde a la condición climática de la ciudad, y donde se genere arraigo e identidad en e valdiviano. Se propone una galería con pasajes comerciales, que en contraposición al mall, establezca un diálogo con su entorno, asumiendo sus programas y elementos espaciales relevantes. Se construye un volumen denso, pero a la vez permeable, con espacios públicos cubiertos, que proporcionan cobijo ante las inclemencias del clima y que integren el espacio público.
Propuesta Bioclimática
El proyecto al poseer gran densidad y ocupación de suelo, se enfoca principalmente a solucionar los problemas lumínicos que puede presentar un edificio de este tipo. La mejor solución en ciudades como Valdivia, con un cielo generalmente nublado, es generar aberturas, y establecer focos de iluminación cenital, aprovechando así la parte mas luminosa de la bóveda celeste.
El uso de las aguas subterráneas de la ciudad para extracción de energía, y la reutilización de aguas lluvia generan un edificio sostenible con la redes energéticas propias de la ciudad.
Viewers also liked (12)
Творческий проект "Вот оно какое, моё сибирское лето!"
Творческий проект "Вот оно какое, моё сибирское лето!"
Lecture 25 conversion cycle -wolrd class companies & lean manufacturing-...
Lecture 25 conversion cycle -wolrd class companies & lean manufacturing-...
Environmental regulation in india fro training dulapally 18th august
Environmental regulation in india fro training dulapally 18th august
Demographic transition-theory-optimum-population-1
Demographic transition-theory-optimum-population-1
Galería Multiprogramática Valdivia, Chile - Mauricio Silva
Galería Multiprogramática Valdivia, Chile - Mauricio Silva
Similar to HSB15 - Aiko Pras - TU Twente
20160816 amlight popbahia_rnp_ansp
Collaboration Opportunities between:
-University of Twente
-AMLight
-PoP-Bahia/Brazil
-RNP
-ANSP
IBCAST 2021: Observations and lessons learned from the APNIC Community Honeyn...
The document discusses observations from the APNIC Community Honeynet Project, including Linux/Unix malware targeting servers and IoT devices, and lessons learned. Some key observations are the prevalence of Linux/Unix malware like Mirai that targets exposed devices with weak credentials. Honeypots captured login attempts and payloads downloaded from command and control servers. Lessons include the need to patch systems, use strong unique credentials, and monitor for infections.
WebSocket Perspectives 2015 - Clouds, Streams, Microservices and WoT
WebSocket is not just a push mechanism. There are other HTTP-based mechanisms for simply sending a short notification to the browsers. It is much more. This presentation was given at both JavaOne 2015 and HTML5DevConf 2015 with slightly different Java/JavaScript information, but the basic information is the same.
V2 peter-lubbers-sf-jug-websocket
Peter Lubbers from Kaazing gave a presentation on HTML5 WebSocket and communication technologies to the San Francisco Java User Group. He discussed the limitations of traditional HTTP for real-time applications and how technologies like polling and long polling add complexity. He then introduced HTML5 WebSocket as a new standard that enables true full-duplex communication with low latency. Finally, he briefly covered other HTML5 communication features like Server-Sent Events, XMLHttpRequest Level 2, and Cross Document Messaging.
Web3 File Storage Options
Smart contracts and NFTs call for a revised approach to store data. In these slides, 3 options for distributed and fault-tolerant data storage are presented:
IPFS
Filecoin
Arweave
Let's go HTTPS-only! - More Than Buying a Certificate
1) The document discusses various ways to secure a website or client's users, including getting an SSL certificate, setting up HTTPS, ensuring strong security practices with headers and configurations.
2) It describes letting's encrypt as a free and easy way to get SSL certificates with automated renewal, and quality testing services like QUALYS to check SSL configuration.
3) Additional security best practices discussed include HTTP headers like HSTS, CSP, and PKP to prevent vulnerabilities and protect against MITM attacks. Regular testing and integrating checks into development processes are recommended.
Web browsers & the realtime web
It's been possible to instantly push information from a web server to a web browser for at least 10 years, but this technology has finally gone mainstream. In this talk I'll cover the past, present and future of web browser technology and the realtime web.
Slides saved as PDF from HTML presentation. Original presentation available here:
http://www.leggetter.co.uk/pres/techmeetup_edi_2012-02-08/
Threat Con 2021: What's Hitting my Honeypots
APNIC Senior Security Specialist Adli Wahid presented on the APNIC Honeynet Project, interesting observations, mitigation and multistakeholder collaboration at Threat Con 2021, held online from 8 to 11 September 2021.
20190516 web security-basic
The document provides an overview of basic web security concepts including:
1. It defines common web terms like front-end, back-end, cookies, sessions, URLs, HTTP methods, headers and status codes.
2. It discusses how cookies and sessions are used to track users and maintain state on the web.
3. It covers potential information leaks from files like robots.txt, hidden files and directories as well as techniques for searching websites like Google hacking.
4. It introduces common web vulnerabilities like XSS, CSRF and discusses how attacks are carried out and potential impacts. It also notes some PHP quirks that could be exploited if not understood.
Hosting Open Source Projects at the OSUOSL
The document summarizes the Open Source Software Lab (OSUOSL) at Oregon State University, which provides hosting for open source projects. It discusses the history and growth of OSUOSL over the past 4 years, from hosting around 60 projects on 10 racks to now hosting over 300 machines and 130 VMs for many well-known open source projects across 22 racks. It also outlines the services, staffing, funding sources, tools, and future plans of OSUOSL.
Surf iOS版 中文用户指南
This document discusses various topics related to internet privacy and security including VPNs, proxies, ad blocking, and the Surge iOS app. It provides links to Wikipedia pages on topics like SOCKS and VPNs. It also includes links to the Surge GitHub for configuration examples and a script to generate single file configs, and provides the App Store link for the Surge app.
HTTP cookie hijacking in the wild: security and privacy implications
The widespread demand for online privacy, also fueled by widely-publicized demonstrations of session hijacking attacks against popular websites (see Firesheep), has spearheaded the increasing deployment of HTTPS. However, many websites still avoid ubiquitous encryption due to performance or compatibility issues. The prevailing approach in these cases is to force critical functionality and sensitive data access over encrypted connections, while allowing more innocuous functionality to be accessed over HTTP. In practice, this approach is prone to flaws that can expose sensitive information or functionality to third parties. In this work, we conduct an in-depth assessment of a diverse set of major websites and explore what functionality and information is exposed to attackers that have hijacked a user's HTTP cookies. We identify a recurring pattern across websites with partially deployed HTTPS; service personalization inadvertently results in the exposure of private information. The separation of functionality across multiple cookies with different scopes and inter-dependencies further complicates matters, as imprecise access control renders restricted account functionality accessible to non-session cookies. Our cookie hijacking study reveals a number of severe flaws; attackers can obtain the user's home and work address and visited websites from Google, Bing and Baidu expose the user's complete search history, and Yahoo allows attackers to extract the contact list and send emails from the user's account. Furthermore, e-commerce vendors such as Amazon and Ebay expose the user's purchase history (partial and full respectively), and almost every website exposes the user's name and email address. Ad networks like Doubleclick can also reveal pages the user has visited. To fully evaluate the practicality and extent of cookie hijacking, we explore multiple aspects of the online ecosystem, including mobile apps, browser security mechanisms, extensions and search bars. To estimate the extent of the threat, we run IRB-approved measurements on a subset of our university's public wireless network for 30 days, and detect over 282K accounts exposing the cookies required for our hijacking attacks. We also explore how users can protect themselves and find that, while mechanisms such as the EFF's HTTPS Everywhere extension can reduce the attack surface, HTTP cookies are still regularly exposed. The privacy implications of these attacks become even more alarming when considering how they can be used to deanonymize Tor users. Our measurements suggest that a significant portion of Tor users may currently be vulnerable to cookie hijacking.
(Source: Black Hat USA 2016, Las Vegas)
Evolution of The Twitter Stack
The document summarizes the evolution of Twitter's technology stack over time as Twitter grew exponentially. It started as a simple Ruby on Rails application on MySQL in 2006. By 2010, Twitter had to decompose the monolithic application and transition services to the JVM for improved performance and scalability. Twitter developed open source projects like Finagle, Zipkin, Scalding, and contributed to Mesos to distribute applications across a cluster. These transitions helped Twitter scale to support over 500 million tweets per day while improving reliability and reducing costs.
What should a hacker know about WebDav?
WebDav implementations are complex and have many vulnerabilities. Hackers should test for XXE issues by sending XML payloads to methods like PROPPATCH and PROPFIND. XXE can be used to read files on the system or perform SSRF. Other issues include CSRF, authentication bypass by overwriting configuration files, and DoS attacks using large payloads. Developers should carefully follow security best practices for XML parsing and input validation when building WebDav services.
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
Webinar recording here: https://www.heroku.com/tech-sessions/creating-secure-web-apps
Secure internet communication is one of the most important issues facing technology practitioners these days. But for many software development teams, it’s an afterthought. Almost every week there’s a new headline about web security: Google Chrome flagging non-HTTPS sites as insecure, Apple requiring iOS apps’ API communication to use HTTPS, and Google giving search ranking preference to HTTPS.
Join Josh Aas, Executive Director of Let's Encrypt, and Chris Castle, Developer Advocate from Heroku, as they take you on a quick tour of what you, as a developer, need to know about HTTPS today plus show you how Let's Encrypt and Heroku are making it easier than ever for all developers to add HTTPS to their web apps.
Blockchain and Apache NiFi
The document discusses Timothy Spann, a Senior Solutions Engineer at Cloudera who has been running Big Data meetups in Princeton since 2015. It provides links to his profiles on various websites and details some of the topics he has spoken about at conferences, including Apache NiFi, Deep Learning, and Streaming. The rest of the document focuses on use cases for data integration and movement using Apache NiFi, as well as concepts like blockchain, distributed data stores, and accessing blockchain and Ethereum data.
Sneaky computation
Talk on sneaky computation to be given at Reykjavik University. Sneaky computation is the using spare CPU cycles with little or no intervention from the user.
The Need For Speed
The document discusses ways to improve website performance by reducing page load times. It identifies several factors that affect performance like request size, response size, number of components, and bandwidth. It then provides recommendations to shrink the response size through compression and optimization, reduce the number of requests by merging files, and minimize third-party scripts when possible. Specific techniques mentioned include minifying assets, using content delivery networks, browser caching, and tools for testing and monitoring performance.
Using Social Networking & Other Free Software
The document provides a list of free and open source software tools for social networking, collaboration, file sharing, presentations, diagrams, screen capturing, calendars, photo editing, video editing, 3D modeling, and more. Many of the tools listed are for online collaboration, file sharing, project management, mind mapping, and creating diagrams, presentations, and spreadsheets. The document also provides links to open access journals and educational resources that can be freely downloaded.
20150909_cybercrime_cybersecurity_minor
[Guest lecturer]
Place: University of Twente
Course: Cybercrime & Cybersecurity [Minor]
Consortium: University of Twente, European Research Center for Information (ERCIS), Westfälische Wilhelms - Univerität Münster, Universität Innsbruck, University of Leicester
Similar to HSB15 - Aiko Pras - TU Twente (20)
IBCAST 2021: Observations and lessons learned from the APNIC Community Honeyn...
IBCAST 2021: Observations and lessons learned from the APNIC Community Honeyn...
WebSocket Perspectives 2015 - Clouds, Streams, Microservices and WoT
WebSocket Perspectives 2015 - Clouds, Streams, Microservices and WoT
Let's go HTTPS-only! - More Than Buying a Certificate
Let's go HTTPS-only! - More Than Buying a Certificate
HTTP cookie hijacking in the wild: security and privacy implications
HTTP cookie hijacking in the wild: security and privacy implications
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
More from Splend
Fiber Vakdag 2019 - Gerben Roseboom - MapXact
Bekijk de presentatie van Gerben Roseboom, van MapXact, die tijdens de Fiber Vakdag 2019 is gegeven.
Fiber Vakdag 2019 - Lex Wils - FCA
Bekijk hier de presentatie van Lex Wils, voorzitter van de FCA, die tijdens de Fiber Vakdag 2019 is gegeven.
Martin Pels - NLNog ring
Martin Pels, manager engineering bij Quanza Engineering, gaat op 6projects vertellen hoe je als netwerk beheerder inzicht krijgt in andere netwerken van ISP’s. Martin is één van de admins van de NLNOG Ring, een community project van enthousiaste netwerkbeheerders van ISP’s waarmee zij toegang hebben tot elkaars netwerken.
Wido den Hollander - IPv6
Wido den Hollander, CTO bij PCextreme, zal vertellen hoe IPv6 ingezet kan worden in hosting omgevingen. Niet op netwerkniveau, maar op server niveau, waar de ondersteuning voor applicaties voor IPv6 nog flink verbeterd kan worden. IPv6 heeft de toekomst, daar is iedereen het wel over eens.
Pim van Stam - BGP
Pim van stam, teamleider bij NBIP, vertelt hoe een ExaBGP script een koppeling maakt met een RabbitMQ message broker om BGP updates bekend te maken. Het script stuurt de BGP update als message door en komt op de message queue terecht.
Bart Lageweg - Ansible/Cobbler
Bart Lageweg, oprichter Bizway, gaat tijdens 6projects vertellen over de winst van het automatisch deployen van VMs doormiddel van Ansible/Cobbler. Hiermee behalen beheerders veel tijdwinst, omdat een verplichte standaard voor basis installs zorgt voor een voorspelbare en stabiele omgeving.
6projects - Eyle Brinkhuis - SURFnet - Virtuele Netwerkfuncties
Eyle Brinkhuis, Technisch Product Manager Netwerk Functie Virtualisatie bij SURFnet, gaat op de toekomst vooruitlopen. Hij presenteert een project dat traditionele netwerken loslaat en hij neemt je mee in de wereld van dynamische netwerken en virtuele netwerkfuncties.
HSB15 - Dr. Michel van Eeten - TU Delft
Jouw lek, mijn data. Wat doen we als de beheerder van de data niet de schade draagt voor de diefstal ervan?
Dr. Michel van Eeten
TU Delft
Holland Strikes Back 2015
HSB15 - Xander Jansen - SURFnet
Leergierig of juist te weinig geleerd: waarom zijn scholen zo vaak de pineut?
Xander Jansen
SURFnet
HSB15 - 0xDUDE
The document discusses responsible disclosure of security vulnerabilities found by researchers. It provides statistics on known data breaches versus prevented breaches in 2014 and 2015. It notes that responsible disclosure success rates have been higher but the number of records affected is much lower. The document recommends best practices for security researchers conducting responsible disclosure, including finding the appropriate contact, being clear on goals, making a good impression, carefully qualifying issues, avoiding demands or threats, and using clear writing.
HSB15 - Pavel Minarik - INVEATECH
Flow-based network visibility and its role in cyber defense
Pavel Minarik
INVEATECH
Holland Strikes Back 2015
HSB15 - Lennert den Teuling - ISPConnect
Samen in de strijd: AbuseIO , AbuseIX en Nederland Schoon sluiten de rijen
Lennert den Teuling
CEO PC-Extreme
Bestuur ISPConnect
Holland Strikes Back 2015
HSB15 - Thijs Bosschert - Radically Open Security
The document discusses lessons learned from the hacking of Hacking Team, an Italian company that sells surveillance technology to governments. It describes how Hacking Team was compromised after using weak passwords, failing to properly secure their network and data, and not following security best practices. Over 400GB of internal documents and source code were leaked, exposing exploits and surveillance tools. The takeaway is that security companies must practice rigorous security and prepare for being a prime target if they want to advise others on security.
HSB15 - Richard Bosboom - HackerOne
Draagt vulnerability research bij aan de veiligheid van het internet?
Richard Bosboom - HackerOne
Holland Strikes Back 2015
DHPA Techday 2015 - Patrick Savalle - Are you out of your mind?
Patrick trapt de dag af en zet jouw wereldbeeld totaal op zijn kop. Is jouw box van rubber of van beton? Een kort bezoek aan zijn hersengarage geeft jou het antwoord. Je leven zal nooit meer hetzelfde zijn. Beloofd!
DHPA Techday 2015 - Patrick Savalle - Disruptive Technology
This document discusses emerging technologies and their implications. It describes how 3D printing allows for decentralized manufacturing, how the internet of things connects devices, and how platforms like Uber and Airbnb use crowdsourcing. Blockchain technology eliminates the need for intermediaries in transactions. Decentralized autonomous corporations and distributed collaboration are discussed. The future of artificial intelligence, biology-inspired technology, and the battle for control between centralized vs distributed systems are also summarized.
DHPA Techday 2015 - Ger Apeldoorn - Deep dive into Puppet
Ger neemt je mee in de wereld van Puppet. Waarom heb je eigenlijk configuration management nodig? Hoe manage je grote aantallen servers efficiënt en wat zijn de nieuwste ontwikkelingen? Ger deelt zijn visie op toekomstig server management en laat je de 3 ultimate tips zien waarmee jij morgen al aan de slag kunt.
DHPA Techday 2015 - Maciej Korczyński - Reputation Metrics Design to Improve ...
Intermediaries such as registries, registrars, DNS providers and hosting providers are responsible for the security of domains. However, it can be hard to hold any one of them directly responsible for any domain. In this presentation, we analyze the interplay between these four actors. We also provide some evidence that the concentrations of maliciously registered and hacked domains are due to some attackers’ profit maximizing behaviors such as abusing free hosting and domain registration services, hacking more easily available targets like shared hosting, and hosting a few resilient name server.
DHPA Techday 2015 - Johan Benning - HP Mobility
This document discusses HP's solutions for enabling mobility and a flexible workstyle. It proposes delivering applications and desktops virtually to allow secure access from any device. It also discusses strategies for mobile device and application management. The document advocates an approach that provisions resources specifically for each user's needs in order to improve the user experience and efficiency.
DHPA Techday 2015 - Arjen Zonneveld - Jelte Jansen - DNSSEC College
DNSSEC-college voor hosters door Jelte Jansen en Arjen Zonneveld
More from Splend (20)
6projects - Eyle Brinkhuis - SURFnet - Virtuele Netwerkfuncties
6projects - Eyle Brinkhuis - SURFnet - Virtuele Netwerkfuncties
DHPA Techday 2015 - Patrick Savalle - Are you out of your mind?
DHPA Techday 2015 - Patrick Savalle - Are you out of your mind?
DHPA Techday 2015 - Patrick Savalle - Disruptive Technology
DHPA Techday 2015 - Patrick Savalle - Disruptive Technology
DHPA Techday 2015 - Ger Apeldoorn - Deep dive into Puppet
DHPA Techday 2015 - Ger Apeldoorn - Deep dive into Puppet
DHPA Techday 2015 - Maciej Korczyński - Reputation Metrics Design to Improve ...
DHPA Techday 2015 - Maciej Korczyński - Reputation Metrics Design to Improve ...
DHPA Techday 2015 - Arjen Zonneveld - Jelte Jansen - DNSSEC College
DHPA Techday 2015 - Arjen Zonneveld - Jelte Jansen - DNSSEC College
Recently uploaded
Microsoft - Power Platform_G.Aspiotis.pdf
Revolutionizing Application Development
with AI-powered low-code, presentation by George Aspiotis, Sr. Partner Development Manager, Microsoft
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
National Security Agency - NSA mobile device best practices
Threats to mobile devices are more prevalent and increasing in scope and complexity. Users of mobile devices desire to take full advantage of the features
available on those devices, but many of the features provide convenience and capability but sacrifice security. This best practices guide outlines steps the users can take to better protect personal devices and information.
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Unlocking Productivity: Leveraging the Potential of Copilot in Microsoft 365, a presentation by Christoforos Vlachos, Senior Solutions Manager – Modern Workplace, Uni Systems
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
ここ3000字までしか入らないけどタイトルの方がたくさん文字入ると思います。
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
How to Get CNIC Information System with Paksim Ga.pptx
Pakdata Cf is a groundbreaking system designed to streamline and facilitate access to CNIC information. This innovative platform leverages advanced technology to provide users with efficient and secure access to their CNIC details.
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
Neha Bajwa, Vice President of Product Marketing, Neo4j
Join us as we explore breakthrough innovations enabled by interconnected data and AI. Discover firsthand how organizations use relationships in data to uncover contextual insights and solve our most pressing challenges – from optimizing supply chains, detecting fraud, and improving customer experiences to accelerating drug discoveries.
20240609 QFM020 Irresponsible AI Reading List May 2024
Everything I found interesting about the irresponsible use of machine intelligence in May 2024
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/
Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit.
In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing.
van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Presentation of the OECD Artificial Intelligence Review of Germany
Consult the full report at https://www.oecd.org/digital/oecd-artificial-intelligence-review-of-germany-609808d6-en.htm
20240605 QFM017 Machine Intelligence Reading List May 2024
Everything I found interesting about machines behaving intelligently during May 2024
Video Streaming: Then, Now, and in the Future
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
As the digital landscape continually evolves, operating systems play a critical role in shaping user experiences and productivity. The launch of Nitrux Linux 3.5.0 marks a significant milestone, offering a robust alternative to traditional systems such as Windows 11. This article delves into the essence of Nitrux Linux 3.5.0, exploring its unique features, advantages, and how it stands as a compelling choice for both casual users and tech enthusiasts.
UiPath Test Automation using UiPath Test Suite series, part 5
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
Recently uploaded (20)
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
National Security Agency - NSA mobile device best practices
National Security Agency - NSA mobile device best practices
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
Presentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of Germany
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5
HSB15 - Aiko Pras - TU Twente
- 1. University of Twente the Netherlands Prof.dr.ir. Aiko Pras a.pras@utwente.nl http://wwwhome.cs.utwente.nl/~pras/ Internet of Things Think twice
- 3. DDoS Ziggo 3
- 4. Booters 4
- 5. Booters 5 DNS 0 1.5 3 4.5 6 7.5 0 20 40 60 80 100 Trafficrate[Gbps] Time [s] CharGen
- 6. Booters 6 Booter Offer [Gbps] 1 http://boo....tw ? 2 http://res.....info 5 3 http://ano....net 5 4 http://des....com 25 5 http://fla....net ? 6 http://dej....com 10 7 http://reb....com Up to 3 8 http://gri....com 6 9 http://qua....net 1,5 10 http://oly....org Up to 3 11 http://ebo....com ? 12 http://vdo....net ? 13 http://res....ca 8 14 http://oni....com ? Price [€] 10,90 1,95 3,12 3,89 3,89 3,89 3,00 3,90 8,00 4,90 free 3,11 3,90 3,90 Attacks based on DNS DNS DNS DNS CharGen DNS CharGen DNS DNS IPs Involved 8281 7369 6075 4486 3779 2970 281 78 54
- 7. Booters 7 Booter Offer [Gbps] 1 http://boo....tw ? 2 http://res.....info 5 3 http://ano....net 5 4 http://des....com 25 5 http://fla....net ? 6 http://dej....com 10 7 http://reb....com Up to 3 8 http://gri....com 6 9 http://qua....net 1,5 10 http://oly....org Up to 3 11 http://ebo....com ? 12 http://vdo....net ? 13 http://res....ca 8 14 http://oni....com ? Price [€] 10,90 1,95 3,12 3,89 3,89 3,89 3,00 3,90 8,00 4,90 free 3,11 3,90 3,90 Attacks based on DNS DNS DNS DNS CharGen DNS CharGen DNS DNS IPs Involved 8281 7369 6075 4486 3779 2970 281 78 54 3381x
- 8. Building the Ultimate DDoS 8 We identified about 1.2 million unique unprotected devices
- 9. Internet of Things 9 There will be billions of IoT devices According to HP, 70% will be vulnerable
- 11. Conclusions • Expect DDoS attacks by Terrorists • Expect tenths of Terabits/second • We are not prepared • NAWAS • Trusted Network Initiative (TNI) 11
- 12. Have fun ;-)