Spikes Security Isla Browser Isolation System. Prepared for Spikes Security
|
|
|
- Hilda Skinner
- 8 years ago
- Views:
Transcription
1 Prepared for Spikes Security April 8, 2015 Evaluated by ICSA Labs 1000 Bent Creek Blvd., Suite 200 Mechanicsburg, PA
2 Table of Contents Executive Summary... 1 Spikes Security Isla Browser Isolation System Overview... 1 Evaluation Criteria... 1 Initial Setup... 2 Evaluation Results... 2 Testing Notes... 3 Appendix A... 4 Page i of i April 8, ICSA Labs. All rights reserved.
3 Executive Summary Spikes Security asked ICSA Labs, an Independent Division of Verizon to evaluate the Spike s Isla Browser Isolation System. The goal of this engagement was to evaluate the Isla Browser Isolation System s effectiveness in protecting users from web borne malware. As a result of the testing, ICSA Labs did not observe any web based malware being delivered to the Isla Client system. Spikes Security Isla Browser Isolation System Overview The Isla solution consists of multiple appliance configurations that scale to support any number of users working inside the enterprise. In addition, Isla appliances can be deployed in a public, private, or hybrid cloud configuration to support users working outside the corporate network. The Isla client viewer application available for Windows, OSX and Linux platforms - connects to appliances to safely access web content without fear of any malware attacks. ICSA Labs evaluated version of the Isla Browser Isolation System. Evaluation Criteria Functional Security ICSA Labs tested that the product performs its intended security operation to protect the client web browser access to the internet: Protects the client from web browser-borne malware When accessing secure web sites: o Supports TLS v1.2 protocol and AES256-SHA256 cipher suite o Properly validates server certificates and alerts the client when a certificate cannot be validated o Protects the client's private web browser data Platform Security ICSA Labs tested that the product is secure as deployed per the administrative guidance, verifying that the product: Is not vulnerable to remotely executable exploits known within the information security community Is not rendered inoperable to trivial denial-of-service attacks Does not introduce vulnerabilities or security-degrading mistakes Does not leak data between virtual sessions Provides secure remote administration such that: o remote administration traffic is protected using standards based cryptography o the product does not allow unauthorized access to administrative functions Provides secure communications between clients and the appliance such that: o traffic is protected using standards based cryptography o the product does not allow unauthorized access to its services Logging ICSA Labs tested that product provides adequate logging to audit the following specific events: Page 1 of 8 April 8, 2015
4 A successful or failed administrative authentication A successful or failed client authentication Initial Setup Spikes Security provided ICSA Labs with the Isla controller and appliance. For testing purposes, the controller and appliance were deployed within the same subnet as the client system running the Isla browser application. The controller and appliance arrived preconfigured for testing and ready to connect to the network. ICSA Labs elected to install the Isla browser application on a Windows XP SP3 client system without any other security protection software, configurations, or updates to keep the system vulnerable to malware during the malicious URL testing. Monitoring software was installed on the client system to make comparison snapshots and monitor for malware infection changes. The network traffic of the controller, appliance, and client system was monitored and analyzed throughout testing to help confirm the results. Evaluation Results Protects the client from web browser-borne malware ICSA Labs captured live traffic of a vulnerable system accessing malicious URLs. ICSA Labs then attempted to send the captured attacks through the Isla appliance and deliver the malware to the Isla client. Throughout the malicious URL testing, network traffic was monitored to confirm that the malicious payload was sent. The Isla client system remained unchanged and showed no signs of an attack or infection. There was no evidence that the Isla appliance acted on, execute or deliver, any malicious payload. When accessing secure web sites: Supports TLS v1.2 protocol and AES256-SHA256 cipher suites Using a secure web server to test the client/server SSL/TLS negotiations, ICSA Labs confirmed the Isla appliance supported TLS v1.2 AES256-SHA256 connections and did not propose weak cipher suites in the TLS Client Hello messages. When accessing secure web sites: Properly validates server certificates and alerts the client when a certificate cannot be validated ICSA Labs configured a secure web server with a valid server certificate, an expired server certificate, a server certificate that the Common Name did not match the server host name in the URL, and a server certificate that was not properly signed by the trusted Certification Authority. Testing showed that the Isla appliance properly rejected the connections when presented with certificates that were not valid. However, when tested with a revoked server certificate, the appliance did allow the connection and did not notify the client of the revocation status. When accessing secure web sites: Protects the client's private web browser data The Isla system did not appear to support caching user's private information within the Isla browser. The information, such as website authentication credentials and form data, was not persistent from previous browser sessions. Is not vulnerable to remotely executable exploits know within the information security community; does not introduce vulnerabilities or security-grading mistakes ICSA Labs security assessment tested for but did not reveal any exploitable remote vulnerability on the Isla controller or appliance. Access to the CLI indicated that Debian 7.8 wheezy and OpenSSL package 1.0.1e-2+deb7u16 were installed. These were the latest releases and addressed many security issues, including the Bash vulnerability Page 2 of 8 April 8, 2015
5 Is not rendered inoperable to trivial denial-of-service attacks ICSA Labs attacked the Isla appliance with a SYN-flood targeting open client session ports. This had an adverse effect on the communication responses between the appliance and the Isla browsers using the ports. Because of the attack, client sessions that had been terminated appeared to still be in use on the appliance. Does not leak data between virtual sessions ICSA Labs review of the Isla appliance did not uncover any issues regarding data leaking between virtual sessions. It should be noted that ICSA Labs access to the Isla system was based on non-privileged accounts, limiting the extent of searching for indications of compromise. Provides secure remote administration such that: Remote administration traffic is protected using standards based cryptography The Isla controller's remote administration through the Web UI was protected using TLS v1.2 DHE-RSA- AES128-SHA256. Accessing the controller and appliance CLI over an SSH connection was protected using AES256-SHA Provides secure remote administration such that: The product does not allow unauthorized access to administrative functions ICSA Labs confirmed that accessing the administrative functions required proper authentication. Provides secure communications between clients and the appliance such that: Traffic is protected using standards based cryptography ICSA Labs could not verify that standards based cryptography was used for communications between the Isla clients and appliance. Spikes Security stated that the communication traffic between the Isla appliance and the client system is a proprietary protocol wrapped in AES256-bit symmetric encryption. ICSA Labs confirmed that the data did not disclose protected information. Provides secure communications between clients and the appliance such that: The product does not allow unauthorized access to its services The Isla browser required proper authentication with the controller initially to register the client system after installation. Once the system was registered, the browser was able to access the Internet through the appliance without any further authentication. Authentication to the controller was required each time the user's bookmarks and history were accessed within the browser. ICSA Labs determined that by copying the Isla application data files from a registered system onto an unregistered system, the unregistered system was able to bypass the initial registration authentication process and access the Internet as the registered user. Logging: A successful or failed administrative authentication The Isla controller provided logs for successful and failed Web UI authentications. Logging: A successful or failed client authentication The Isla controller provided logs for successful and failed client authentications. Testing Notes We experienced some stability issues with the pre-release version of the Isla software that was provided to us for testing. However the company subsequently provided a later version of the software which corrected this problem. Page 3 of 8 April 8, 2015
6 Appendix A Malicious URL s used for testing engagement. Note that the http string was changed to prevent accidental clicking of a malicious link. URLs: hxxp://archoncybertech.com.au/clienthosting/acatrees/testimonials.html hxxp://archoncybertech.com.au/clienthosting/acatrees/testimonials.html hxxp://bbs.pxecn.com/forum.php?mod=attachment&aid=nzc5otl8mwq0mjc4mtv8 MTM2OTgyMTc0NnwxMTE5OHwxMDY1NjU= hxxp://bbs.pxecn.com/forum.php?mod=attachment&aid=nzc5otl8mwq0mjc4mtv8 MTM2OTgyMTc0NnwxMTE5OHwxMDY1NjU= hxxp://bibliotecacenamec.org.ve/logo.gif?164cf= hxxp://bibliotecacenamec.org.ve/logo.gif?164cf= hxxp://blog.pixelbomber.net/?p=18 hxxp://cdn3.partnersserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=20322 hxxp://cdn3.partnersserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=20322 hxxp://cdn3.partnersserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=31964 hxxp://cdn3.partnersserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=31964 hxxp://cdn3.partnersserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=4518 hxxp://cdn3.partnersserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=4518 hxxp://cdn3.partnerserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=18684 hxxp://cdn3.partnerserving.com/toolbar/pub/66920/6787/download/hometab.exe?rnd=18684 hxxp://chinamv.net.cn hxxp://chinamv.net.cn Page 4 of 8 April 8, 2015
7 hxxp://consonchina.cn/download hxxp://csskafa.blogspot.ca hxxp://dailyreport.cffy88.com/notifica.zip?awotrx=lanebarberis+at+li%2 Ffile%2F6a38368ca3cdc5d1c1b6f %3Ffid%3D hxxp://dailyreport.cffy88.com/notifica.zip?awotrx=lanebarberis+at+li%2 Ffile%2F6a38368ca3cdc5d1c1b6f %3Ffid%3D DRIVE.COM/1/965/ct /d8b382a91d48496ca87690f22678ef6a/downloads/p rod/smallstub / /stardoll.exe DRIVE.COM/1/965/ct /d8b382a91d48496ca87690f22678ef6a/downloads/p rod/smallstub / /stardoll.exe DRIVE.COM/45/873/ct /8ac71ca d4e88cb0be/downloads/ prod/smallstub / /icytower.exe DRIVE.COM/47/412/ct /ff6914cb444e483c864031ba34329d5e/downloads/ prod/smallstub / /stardoll.exe DRIVE.COM/47/412/ct /ff6914cb444e483c864031ba34329d5e/downloads/ prod/smallstub / /stardoll.exe DRIVE.COM/66/637/ct /5b2ebe154b524b83a333ad1da7b378b5/downloads/ prod/smallstub / /etvonline.exe DRIVE.COM/66/637/ct /5b2ebe154b524b83a333ad1da7b378b5/downloads/ prod/smallstub / /etvonline.exe hxxp://dde.s.aondemand- ABOUT.COM/62/220/ct /f349938c7be548efaa3a67c5cc11ae83/downloads/ prod/smallstub / /autocaddrawingviewer.exe hxxp://dde.s.aondemand- ABOUT.COM/62/220/ct /f349938c7be548efaa3a67c5cc11ae83/downloads/ prod/smallstub / /autocaddrawingviewer.exe Page 5 of 8 April 8, 2015
8 hxxp://dde.s.ddirectdownload- ABOUT.COM/32/805/ct /948d71e82d9147abb6ebd73f8e4fbebe/downloads/ prod/dde / /incredimail.exe?filename=incredimail_tsa1xlg8t.exe hxxp://dde.s.ddirectdownload- ABOUT.COM/32/805/ct /948d71e82d9147abb6ebd73f8e4fbebe/downloads/ prod/dde / /incredimail.exe?filename=incredimail_tsa1xlg8t.exe hxxp://dde.s.ddirectdownload- ABOUT.COM/32/805/ct /948d71e82d9147abb6ebd73f8e4fbebe/downloads/ prod/dde / /incredimail.exe?filename=incredimail_tsv3gpwd7.exe hxxp://dde.s.ddirectdownload- ABOUT.COM/32/805/ct /948d71e82d9147abb6ebd73f8e4fbebe/downloads/ prod/dde / /incredimail.exe?filename=incredimail_tsv3gpwd7.exe hxxp://dentalsouthchina.com/product_info.asp?p_id=2736&sortid=19&sortn ame=%c6%e4%cb%fb hxxp://dentalsouthchina.com/product_info.asp?p_id=2736&sortid=19&sortn ame=%c6%e4%cb%fb hxxp://dl.desk1992get.com/n/ /matlab.exe?secure= _1de3 307ad04bdd93c947896cb7b66fde hxxp://dl.desk1992get.com/n/ /matlab.exe?secure= _1de3 307ad04bdd93c947896cb7b66fde hxxp://dl.desk1992get.com/n/3.2.10/ /bluestacks%20offline%20ins taller.exe hxxp://dl.desk1992get.com/n/3.2.10/ /bluestacks%20offline%20ins taller.exe hxxp://dl.desk1992get.com/n/ / /smart+movingmod+5.exe hxxp://dl.desk1992get.com/n/ / /smart+movingmod+5.exe hxxp://dl.desk1992get.com/n/ / /stellar_phoenix_excel_rec overy_4.exe hxxp://dl.desk1992get.com/n/ / /stellar_phoenix_excel_rec overy_4.exe hxxp://dl.getdesk1994.com/n/ /fluvore_downloader.exe Page 6 of 8 April 8, 2015
9 hxxp://dl.getdesk1994.com/n/ /fluvore_downloader.exe hxxp://dl.pocodoctor.com/n/ / /dj+music+mixer.exe hxxp://dl.pocodoctor.com/n/ / /dj+music+mixer.exe hxxp://dl.pocodoctor.com/n/ / /winrar.exe hxxp://dl.pocomissus.com/n/ /7zip.exe?secure= _82dd0d6 1ecbc3fa2f b836623a hxxp://dl.pocomissus.com/n/3.2.96/ /showbox%20installer.exe? hxxp://dl.pocomissus.com/n/3.2.96/ /showbox%20installer.exe? hxxp://dl.tutofourpc.com/download/udp/majt4pc.exe?jurmqp9yix5ajhr+rhf8 ulq8lu0hgmaotbpyeluxkdseapmeerrw4+hfgx8fdfbeohau7xwknoteflbhpsftjhz590 9FTnhG58sYiX3HBAv4gnd+XQjnEg== hxxp://dl.tutofourpc.com/download/udp/majt4pc.exe?jurmqp9yix5ajhr+rhf8 ulq8lu0hgmaotbpyeluxkdseapmeerrw4+hfgx8fdfbeohau7xwknoteflbhpsftjhz590 9FTnhG58sYiX3HBAv4gnd+XQjnEg== hxxp://dl4.getz.tv/setup/zonawebsetup.exe?pid=60&url=hxxp%3a%2f%2fdl.2 4video.net%2F3c779dff37c034a019b380192c6d37c4%2F1242%2F %2Frelak satsiya_po_russki.mp4&title=%d0%a0%d0%b5%d0%bb%d0%b0%d0%ba%d1%81%d0%b0 %D1%86%D0%B8%D1%8F+%D0%BF%D0%BE+%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%B8&c over=hxxp%3a%2f%2fimg3.24video.net%2f1242%2f %2fframe00000.jpg&a utoplay=true&adult=true hxxp://dmpattenonline.com/?page_id=69 hxxp://down.reaboo.com/setup/all/xk/v /db/xiakan_xk_db2.exe hxxp://down.youbo.cc/setup/all/cpa/v /k/youbo_k exe hxxp://down.youbo.cc/setup/all/cpa/v /k/youbo_k exe hxxp://down cn/adfgdg (??????????????????????????????????????????????????????????????? Page 7 of 8 April 8, 2015
10 ??????????????????????????????? hxxp://down cn/adfgdg (?????????????????????????????????????????????????????????????????????????????????????????????? hxxp://download2v.freesoftstore2.com/installers/out/ /pi id- 547fd1ebb6aca /on/2/freesoftstorecom/english/revenue/msie/ado be_flash_player/d/275876e34cf609db118f3d84b799a790/ici/na/na/installer _adobe_flash_player_english.exe Page 8 of 8 April 8, 2015
SSL-TLS VPN 3.0 Certification Report. For: Array Networks, Inc.
SSL-TLS VPN 3.0 Certification Report For: Array Networks, Inc. Prepared by: ICSA Labs 1000 Bent Creek Blvd., Suite 200 Mechanicsburg, PA 17050 USA http://www.icsalabs.com SSL-TLS VPN 3.0 Certification
ICSA Labs Web Application Firewall Certification Testing Report Web Application Firewall - Version 2.1 (Corrected) Radware Inc. AppWall V5.6.4.
ICSA Labs Web Application Firewall Certification Testing Report Radware Inc. V5.6.4.1 May 30, 2013 Prepared by ICSA Labs 1000 Bent Creek Blvd., Suite 200 Mechanicsburg, PA 17050 www.icsalabs.com WAFX RADWAREINC-2013-0530-01
Sophistication of attacks will keep improving, especially APT and zero-day exploits
FAQ Isla Q&A General What is Isla? Isla is an innovative, enterprise-class web malware isolation system that prevents all browser-borne malware from penetrating corporate networks and infecting endpoint
S E C U R I T Y A S S E S S M E N T : B o m g a r A p p l i a n c e s
S E C U R I T Y A S S E S S M E N T : B o m g a r A p p l i a n c e s During the period between November 2012 and March 2013, Symantec Consulting Services partnered with Bomgar to assess the security
McAfee Web Gateway Administration Intel Security Education Services Administration Course Training
McAfee Web Gateway Administration Intel Security Education Services Administration Course Training The McAfee Web Gateway Administration course from Education Services provides an in-depth introduction
ICSA Labs Network Firewall Certification Testing Report Enterprise (VoIP) - Version 4.1x. SonicWALL, Inc.
ICSA Labs Network Firewall Certification Testing Report SonicWALL, Inc. E-Class Network Security Appliance (NSA) Series February 28, 2011 Prepared by ICSA Labs 1000 Bent Creek Blvd., Suite 200 Mechanicsburg,
SonicOS Enhanced 3.8.0.6 Release Notes TZ 180 Series and TZ 190 Series SonicWALL, Inc. Firmware Release: August 28, 2007
SonicOS Enhanced 3.8.0.6 TZ 180 Series and TZ 190 Series SonicWALL, Inc. Firmware Release: August 28, 2007 CONTENTS PLATFORM COMPATIBILITY SONICWALL RECOMMENDATIONS KNOWN ISSUES RESOLVED KNOWN ISSUES UPGRADING
FINAL DoIT 11.03.2015 - v.4 PAYMENT CARD INDUSTRY DATA SECURITY STANDARDS APPLICATION DEVELOPMENT AND MAINTENANCE PROCEDURES
Purpose: The Department of Information Technology (DoIT) is committed to developing secure applications. DoIT s System Development Methodology (SDM) and Application Development requirements ensure that
CSSIA CompTIA Security+ Domain. Network Security. Network Security. Network Security. Network Security. Network Security
Security+ Supported Labs - V1 Lab 1 Network Devices and Technologies - Capturing Network Using tcpdump to Capture Network with Wireshark with Network Miner 2 Secure Network Administration Principles -
MTP. MTP AirWatch Integration Guide. Release 1.0
MTP MTP AirWatch Integration Guide Release 1.0 FireEye and the FireEye logo are registered trademarks of FireEye, Inc. in the United States and other countries. All other trademarks are the property of
PCI Compliance Considerations
PCI Compliance Considerations This article outlines implementation considerations when deploying the Barracuda Load Balancer ADC in an environment subject to PCI Data Security Standard (PCI DSS) compliance.
Grandstream Networks, Inc. UCM6100 Security Manual
Grandstream Networks, Inc. UCM6100 Security Manual Index Table of Contents OVERVIEW... 3 WEB UI ACCESS... 4 UCM6100 HTTP SERVER ACCESS... 4 PROTOCOL TYPE... 4 USER LOGIN... 4 LOGIN TIMEOUT... 5 TWO-LEVEL
Cisco Expressway Basic Configuration
Cisco Expressway Basic Configuration Deployment Guide Cisco Expressway X8.1 D15060.03 August 2014 Contents Introduction 4 Example network deployment 5 Network elements 6 Internal network elements 6 DMZ
4. Getting started: Performing an audit
4. Getting started: Performing an audit Introduction Security scans enable systems administrators to identify and assess possible risks within a network. Through GFI LANguard N.S.S. this is performed automatically,
How To Secure An Rsa Authentication Agent
RSA Authentication Agents Security Best Practices Guide Version 3 Contact Information Go to the RSA corporate web site for regional Customer Support telephone and fax numbers: www.rsa.com. Trademarks RSA,
College of Education Computer Network Security Policy
Introduction The College of Education Network Security Policy provides the operational detail required for the successful implementation of a safe and efficient computer network environment for the College
Integrated SSL Scanning
Software Version 9.0 Copyright Copyright 1996-2008. Finjan Software Inc. and its affiliates and subsidiaries ( Finjan ). All rights reserved. All text and figures included in this publication are the exclusive
Cyber Essentials. Test Specification
Cyber Essentials Test Specification Contents Scope of the Audit...2 Assumptions...3 Success Criteria...3 External systems...4 Required tests...4 Test Details...4 Internal systems...7 Tester pre-requisites...8
Release Notes. Contents. Release Purpose. Platform Compatibility. Windows XP and Internet Explorer 8 Update
Secure Remote Access Dell SonicWALL SRA 7.5.0.12 Contents Release Purpose... 1 Platform Compatibility... 1 Licensing on the Dell SonicWALL SRA Appliances and Virtual Appliance... 2 Important Differences
Where every interaction matters.
Where every interaction matters. Peer 1 Vigilant Web Application Firewall Powered by Alert Logic The Open Web Application Security Project (OWASP) Top Ten Web Security Risks and Countermeasures White Paper
Cornerstones of Security
Internet Security Cornerstones of Security Authenticity the sender (either client or server) of a message is who he, she or it claims to be Privacy the contents of a message are secret and only known to
74% 96 Action Items. Compliance
Compliance Report PCI DSS 2.0 Generated by Check Point Compliance Blade, on July 02, 2013 11:12 AM 1 74% Compliance 96 Action Items Upcoming 0 items About PCI DSS 2.0 PCI-DSS is a legal obligation mandated
FINAL DoIT 04.01.2013- v.8 APPLICATION SECURITY PROCEDURE
Purpose: This procedure identifies what is required to ensure the development of a secure application. Procedure: The five basic areas covered by this document include: Standards for Privacy and Security
NetBrain Security Guidance
NetBrain Security Guidance 1. User Authentication and Authorization 1.1. NetBrain Components NetBrain Enterprise Server includes five components: Customer License Server (CLS), Workspace Server (WSS),
JK0 015 CompTIA E2C Security+ (2008 Edition) Exam
JK0 015 CompTIA E2C Security+ (2008 Edition) Exam Version 4.1 QUESTION NO: 1 Which of the following devices would be used to gain access to a secure network without affecting network connectivity? A. Router
S E C U R I T Y A S S E S S M E N T : B o m g a r B o x T M. Bomgar. Product Penetration Test. September 2010
S E C U R I T Y A S S E S S M E N T : B o m g a r B o x T M Bomgar Product Penetration Test September 2010 Table of Contents Introduction... 1 Executive Summary... 1 Bomgar Application Environment Overview...
Decryption. Palo Alto Networks. PAN-OS Administrator s Guide Version 6.0. Copyright 2007-2015 Palo Alto Networks
Decryption Palo Alto Networks PAN-OS Administrator s Guide Version 6.0 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara, CA 95054 www.paloaltonetworks.com/company/contact-us
Cleaning Encrypted Traffic
Optenet Documentation Cleaning Encrypted Traffic Troubleshooting Guide iii Version History Doc Version Product Date Summary of Changes V6 OST-6.4.300 01/02/2015 English editing Optenet Documentation
F-SECURE MESSAGING SECURITY GATEWAY
F-SECURE MESSAGING SECURITY GATEWAY DEFAULT SETUP GUIDE This guide describes how to set up and configure the F-Secure Messaging Security Gateway appliance in a basic e-mail server environment. AN EXAMPLE
Installation and Maintenance Guide Release 1.0
Installation and Maintenance Guide Release 1.0 NOTICE The information contained in this document is believed to be accurate in all respects but is not warranted by Mitel Networks Corporation (MITEL ).
User Identification and Authentication
User Identification and Authentication Vital Security 9.2 Copyright Copyright 1996-2008. Finjan Software Inc.and its affiliates and subsidiaries ( Finjan ). All rights reserved. All text and figures included
Inspection of Encrypted HTTPS Traffic
Technical Note Inspection of Encrypted HTTPS Traffic StoneGate version 5.0 SSL/TLS Inspection T e c h n i c a l N o t e I n s p e c t i o n o f E n c r y p t e d H T T P S T r a f f i c 1 Table of Contents
Security Advice for Instances in the HP Cloud
Security Advice for Instances in the HP Cloud Introduction: HPCS protects the infrastructure and management services offered to customers including instance provisioning. An instance refers to a virtual
Credit Card Security
Credit Card Security Created 16 Apr 2014 Revised 16 Apr 2014 Reviewed 16 Apr 2014 Purpose This policy is intended to ensure customer personal information, particularly credit card information and primary
Using Foundstone CookieDigger to Analyze Web Session Management
Using Foundstone CookieDigger to Analyze Web Session Management Foundstone Professional Services May 2005 Web Session Management Managing web sessions has become a critical component of secure coding techniques.
Release Notes. Contents. Release Purpose. Platform Compatibility. Licensing on the SRA Appliances and Virtual Appliance
Secure Remote Access Dell SonicWALL SRA 7.0.1.2 Contents Release Purpose... 1 Platform Compatibility... 1 Licensing on the SRA Appliances and Virtual Appliance... 1 Important Differences between the SRA
Lab Exercise SSL/TLS. Objective. Step 1: Open a Trace. Step 2: Inspect the Trace
Lab Exercise SSL/TLS Objective To observe SSL/TLS (Secure Sockets Layer / Transport Layer Security) in action. SSL/TLS is used to secure TCP connections, and it is widely used as part of the secure web:
Firewalls, Tunnels, and Network Intrusion Detection. Firewalls
Firewalls, Tunnels, and Network Intrusion Detection 1 Firewalls A firewall is an integrated collection of security measures designed to prevent unauthorized electronic access to a networked computer system.
Corporate and Payment Card Industry (PCI) compliance
Citrix GoToMyPC Corporate and Payment Card Industry (PCI) compliance GoToMyPC Corporate provides industryleading configurable security controls and centralized endpoint management that can be implemented
Check list for web developers
Check list for web developers Requirement Yes No Remarks 1. Input Validation 1.1) Have you done input validation for all the user inputs using white listing and/or sanitization? 1.2) Does the input validation
NETWORK ACCESS CONTROL AND CLOUD SECURITY. Tran Song Dat Phuc SeoulTech 2015
NETWORK ACCESS CONTROL AND CLOUD SECURITY Tran Song Dat Phuc SeoulTech 2015 Table of Contents Network Access Control (NAC) Network Access Enforcement Methods Extensible Authentication Protocol IEEE 802.1X
Importance of Web Application Firewall Technology for Protecting Web-based Resources
Importance of Web Application Firewall Technology for Protecting Web-based Resources By Andrew J. Hacker, CISSP, ISSAP Senior Security Analyst, ICSA Labs January 10, 2008 ICSA Labs 1000 Bent Creek Blvd.,
SSL Server Rating Guide
SSL Server Rating Guide version 2009j (20 May 2015) Copyright 2009-2015 Qualys SSL Labs (www.ssllabs.com) Abstract The Secure Sockets Layer (SSL) protocol is a standard for encrypted network communication.
Firewalls, Tunnels, and Network Intrusion Detection
Firewalls, Tunnels, and Network Intrusion Detection 1 Part 1: Firewall as a Technique to create a virtual security wall separating your organization from the wild west of the public internet 2 1 Firewalls
Implementing Cisco IOS Network Security
Implementing Cisco IOS Network Security IINS v3.0; 5 Days, Instructor-led Course Description Implementing Cisco Network Security (IINS) v3.0 is a 5-day instructor-led course focusing on security principles
SSL Inspection Step-by-Step Guide. June 6, 2016
SSL Inspection Step-by-Step Guide June 6, 2016 Key Drivers for Inspecting Outbound SSL Traffic Eliminate blind spots of SSL encrypted communication to/from the enterprise Maintaining information s communication
User Documentation Web Traffic Security. University of Stavanger
User Documentation Web Traffic Security University of Stavanger Table of content User Documentation... 1 Web Traffic Security... 1 University of Stavanger... 1 UiS Web Traffic Security... 3 Background...
Management, Logging and Troubleshooting
CHAPTER 15 This chapter describes the following: SNMP Configuration System Logging SNMP Configuration Cisco NAC Guest Server supports management applications monitoring the system over SNMP (Simple Network
LogRhythm and PCI Compliance
LogRhythm and PCI Compliance The Payment Card Industry (PCI) Data Security Standard (DSS) was developed to encourage and enhance cardholder data security and facilitate the broad adoption of consistent
IDENTITY & ACCESS. Privileged Identity Management. controlling access without compromising convenience
IDENTITY & ACCESS Privileged Identity Management controlling access without compromising convenience Introduction According to a recent Ponemon Institute study, mistakes made by people Privilege abuse
Controlling Risk, Conserving Bandwidth, and Monitoring Productivity with Websense Web Security and Websense Content Gateway
Controlling Risk, Conserving Bandwidth, and Monitoring Productivity with Websense Web Security and Websense Content Gateway Websense Support Webinar January 2010 web security data security email security
IT Security Incident Management Policies and Practices
IT Security Incident Management Policies and Practices Information Technology Services Center (ITSC) of The Hong Kong University of Science and Technology Date: Feb 6, 2015 i Document Control Document
SSL: A False Sense of Security? How the Tenable Solution Restores SSL Effectiveness and Mitigates Related Threats
SSL: A False Sense of Security? How the Tenable Solution Restores SSL Effectiveness and Mitigates Related Threats White Paper Copyright 2002-2012 Tenable Network Security, Inc. Tenable Network Security,
Linux Network Security
Linux Network Security Course ID SEC220 Course Description This extremely popular class focuses on network security, and makes an excellent companion class to the GL550: Host Security course. Protocols
Quick Start Guide: Utilizing Nessus to Secure Microsoft Azure
Quick Start Guide: Utilizing Nessus to Secure Microsoft Azure Introduction Tenable Network Security is the first and only solution to offer security visibility, Azure cloud environment auditing, system
Computer and Network Security Policy
Coffeyville Community College Computer and Network Security Policy Created By: Jeremy Robertson Network Administrator Created on: 6/15/2012 Computer and Network Security Page 1 Introduction: The Coffeyville
PCI PA - DSS. Point ipos Implementation Guide. Version 1.01. VeriFone Vx820 using the Point ipos Payment Core
PCI PA - DSS Point ipos Implementation Guide VeriFone Vx820 using the Point ipos Payment Core Version 1.01 POINT TRANSACTION SYSTEMS AB Box 92031, 120 06 Stockholm, Tel. +46 8 566 287 00 www.point.se Page
2012 Data Breach Investigations Report
2012 Data Breach Investigations Report A study conducted by the Verizon RISK Team with cooperation from the Australian Federal Police, Dutch National High Tech Crime Unit, Irish Reporting & Information
Sync Security and Privacy Brief
Introduction Security and privacy are two of the leading issues for users when transferring important files. Keeping data on-premises makes business and IT leaders feel more secure, but comes with technical
F-Secure Messaging Security Gateway. Deployment Guide
F-Secure Messaging Security Gateway Deployment Guide TOC F-Secure Messaging Security Gateway Contents Chapter 1: Deploying F-Secure Messaging Security Gateway...3 1.1 The typical product deployment model...4
Data Collection and Analysis: Get End-to-End Security with Cisco Connected Analytics for Network Deployment
White Paper Data Collection and Analysis: Get End-to-End Security with Cisco Connected Analytics for Network Deployment Cisco Connected Analytics for Network Deployment (CAND) is Cisco hosted, subscription-based
Security+ Guide to Network Security Fundamentals, Fourth Edition. Chapter 6 Network Security
Security+ Guide to Network Security Fundamentals, Fourth Edition Chapter 6 Network Security Objectives List the different types of network security devices and explain how they can be used Define network
Chapter 7 Transport-Level Security
Cryptography and Network Security Chapter 7 Transport-Level Security Lectured by Nguyễn Đức Thái Outline Web Security Issues Security Socket Layer (SSL) Transport Layer Security (TLS) HTTPS Secure Shell
Ovation Security Center Data Sheet
Features Scans for vulnerabilities Discovers assets Deploys security patches transparently Allows only white-listed applications to run in workstations Provides virus protection for Ovation Windows workstations
How To Protect Your Network From Attack From Outside From Inside And Outside
IT 4823 Information Security Administration Firewalls and Intrusion Prevention October 7 Notice: This session is being recorded. Lecture slides prepared by Dr Lawrie Brown for Computer Security: Principles
SECURITY ADVISORY FROM PATTON ELECTRONICS
SECURITY ADVISORY FROM PATTON ELECTRONICS Potential Security Vulnerabilities Identified in Simple Network Management Protocol (SNMP) Revision 1.0 For Public Release March 7, 2002 Last Updated March 7,
Hang Seng HSBCnet Security. May 2016
Hang Seng HSBCnet Security May 2016 1 Security The Bank aims to provide you with a robust, reliable and secure online environment in which to do business. We seek to achieve this through the adoption of
Privileged. Account Management. Accounts Discovery, Password Protection & Management. Overview. Privileged. Accounts Discovery
Overview Password Manager Pro offers a complete solution to control, manage, monitor and audit the entire life-cycle of privileged access. In a single package it offers three solutions - privileged account
GFI White Paper PCI-DSS compliance and GFI Software products
White Paper PCI-DSS compliance and Software products The Payment Card Industry Data Standard () compliance is a set of specific security standards developed by the payment brands* to help promote the adoption
How NETGEAR ProSecure UTM Helps Small Businesses Meet PCI Requirements
How NETGEAR ProSecure UTM Helps Small Businesses Meet PCI Requirements I n t r o d u c t i o n The Payment Card Industry Data Security Standard (PCI DSS) was developed in 2004 by the PCI Security Standards
Websense Content Gateway HTTPS Configuration
Websense Content Gateway HTTPS Configuration web security data security email security Support Webinars 2010 Websense, Inc. All rights reserved. Webinar Presenter Title: Sr. Tech Support Specialist Cisco
An Open Source IPS. IIT Network Security Project Project Team: Mike Smith, Sean Durkin, Kaebin Tan
An Open Source IPS IIT Network Security Project Project Team: Mike Smith, Sean Durkin, Kaebin Tan Introduction IPS or Intrusion Prevention System Uses a NIDS or Network Intrusion Detection System Includes
Thick Client Application Security
Thick Client Application Security Arindam Mandal (arindam.mandal@paladion.net) (http://www.paladion.net) January 2005 This paper discusses the critical vulnerabilities and corresponding risks in a two
Cyber Essentials PLUS. Common Test Specification
Cyber Essentials PLUS Common Test Specification Page 1 Version Control Version Date Description Released by 1.0 07/08/14 Initial Common Test Specification release SR Smith 1.1 19/08/14 Updated Scope SR
Payment Card Industry (PCI) Data Security Standard. Summary of Changes from PCI DSS Version 2.0 to 3.0
Payment Card Industry (PCI) Data Security Standard Summary of s from Version 2.0 to 3.0 November 2013 Introduction This document provides a summary of changes from v2.0 to v3.0. Table 1 provides an overview
Comprehensive Malware Detection with SecurityCenter Continuous View and Nessus. February 3, 2015 (Revision 4)
Comprehensive Malware Detection with SecurityCenter Continuous View and Nessus February 3, 2015 (Revision 4) Table of Contents Overview... 3 Malware, Botnet Detection, and Anti-Virus Auditing... 3 Malware
Ovation Security Center Data Sheet
Features Scans for vulnerabilities Discovers assets Deploys security patches easily Allows only white-listed applications in workstations to run Provides virus protection for Ovation Windows stations Aggregates,
Connection Broker Managing User Connections to Workstations and Blades, OpenStack Clouds, VDI, and more. Security Review
Connection Broker Managing User Connections to Workstations and Blades, OpenStack Clouds, VDI, and more Security Review Version 8.1 March 31, 2016 Contacting Leostream Leostream Corporation http://www.leostream.com
PCI PA - DSS. Point BKX Implementation Guide. Version 2.01. Atos Xenta, Atos Xenteo and Atos Yomani using the Point BKX Payment Core
PCI PA - DSS Point BKX Implementation Guide Atos Xenta, Atos Xenteo and Atos Yomani using the Point BKX Payment Core Version 2.01 POINT TRANSACTION SYSTEMS AB Box 92031, 120 06 Stockholm, Tel. +46 8 566
Release Notes. Contents. Release Purpose. Platform Compatibility. Windows XP and Internet Explorer 8 Update
Secure Remote Access Dell SonicWALL SRA 7.5.0.9 Contents Release Purpose...1 Platform Compatibility...1 Licensing on the Dell SonicWALL SRA Appliances and Virtual Appliance...2 Important Differences between
Software Version 1.0 ConnectKey TM Share to Cloud April 2013. Xerox ConnectKey Share to Cloud User / Administrator s Guide
Software Version 1.0 ConnectKey TM Share to Cloud April 2013 Xerox ConnectKey Share to Cloud User / Administrator s Guide 2013 Xerox Corporation. All rights reserved. Xerox, Xerox and Design, and Xerox
Proto Balance SSL TLS Off-Loading, Load Balancing. User Manual - SSL. http://www.protonet.co.za/
Proto Balance SSL TLS Off-Loading, Load Balancing http://www.protonet.co.za/ User Manual - SSL Copyright c 2003-2010 Shine The Way 238 CC. All rights reserved. March 13, 2010 Contents 1. Introduction........................................................................
Global Partner Management Notice
Global Partner Management Notice Subject: Critical Vulnerabilities Identified to Alert Payment System Participants of Data Compromise Trends Dated: May 4, 2009 Announcement: To support compliance with
MultiSite Manager. Setup Guide
MultiSite Manager Setup Guide Contents 1. Introduction... 2 How MultiSite Manager works... 2 How MultiSite Manager is implemented... 2 2. MultiSite Manager requirements... 3 Operating System requirements...
CS 356 Lecture 19 and 20 Firewalls and Intrusion Prevention. Spring 2013
CS 356 Lecture 19 and 20 Firewalls and Intrusion Prevention Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access
Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0
Security Guide BlackBerry Enterprise Service 12 for ios, Android, and Windows Phone Version 12.0 Published: 2015-02-06 SWD-20150206130210406 Contents About this guide... 6 What is BES12?... 7 Key features
Appendix A: Configuring Firewalls for a VPN Server Running Windows Server 2003
http://technet.microsoft.com/en-us/library/cc757501(ws.10).aspx Appendix A: Configuring Firewalls for a VPN Server Running Windows Server 2003 Updated: October 7, 2005 Applies To: Windows Server 2003 with
Network Security Essentials Chapter 5
Network Security Essentials Chapter 5 Fourth Edition by William Stallings Lecture slides by Lawrie Brown Chapter 5 Transport-Level Security Use your mentality Wake up to reality From the song, "I've Got
Configuration Guide. SafeNet Authentication Service. SAS Agent for Microsoft Outlook Web Access 1.06
SafeNet Authentication Service Configuration Guide 1.06 Technical Manual Template Release 1.0, PN: 000-000000-000, Rev. A, March 2013, Copyright 2013 SafeNet, Inc. All rights reserved. 1 Document Information
The Trivial Cisco IP Phones Compromise
Security analysis of the implications of deploying Cisco Systems SIP-based IP Phones model 7960 Ofir Arkin Founder The Sys-Security Group ofir@sys-security.com http://www.sys-security.com September 2002
Internet Security and Acceleration Server 2000 with Service Pack 1 Audit. An analysis by Foundstone, Inc.
Internet Security and Acceleration Server 2000 with Service Pack 1 Audit An analysis by Foundstone, Inc. Internet Security and Acceleration Server 2000 with Service Pack 1 Audit This paper presents an
Presented by Evan Sylvester, CISSP
Presented by Evan Sylvester, CISSP Who Am I? Evan Sylvester FAST Information Security Officer MBA, Texas State University BBA in Management Information Systems at the University of Texas Certified Information
PCI PA - DSS. Point XSA Implementation Guide. Atos Worldline Banksys XENTA SA. Version 1.00
PCI PA - DSS Point XSA Implementation Guide Atos Worldline Banksys XENTA SA Version 1.00 POINT TRANSACTION SYSTEMS AB Box 92031, 120 06 Stockholm, Tel. +46 8 566 287 00 www.point.se Page number 2 (16)
April 11, 2011. (Revision 2)
Passive Vulnerability Scanning Overview April 11, 2011 (Revision 2) Copyright 2011. Tenable Network Security, Inc. All rights reserved. Tenable Network Security and Nessus are registered trademarks of
Use Shrew Soft VPN Client to connect with IPSec VPN Server on RV130 and RV130W
Article ID: 5037 Use Shrew Soft VPN Client to connect with IPSec VPN Server on RV130 and RV130W Objective IPSec VPN (Virtual Private Network) enables you to securely obtain remote resources by establishing
Securing Privileges in the Cloud. A Clear View of Challenges, Solutions and Business Benefits
A Clear View of Challenges, Solutions and Business Benefits Introduction Cloud environments are widely adopted because of the powerful, flexible infrastructure and efficient use of resources they provide
ACCESS RIGHTS MANAGEMENT Securing Assets for the Financial Services Sector
ACCESS RIGHTS MANAGEMENT Securing Assets for the Financial Services Sector V.2 Final Draft May 1, 2014 financial_nccoe@nist.gov This revision incorporates comments from the public. Page Use case 1 Comments
Penetration Test Report
Penetration Test Report MegaCorp One August 10 th, 2013 Offensive Security Services, LLC 19706 One Norman Blvd. Suite B #253 Cornelius, NC 28031 United States of America Tel: 1-402-608-1337 Fax: 1-704-625-3787
CS5008: Internet Computing
CS5008: Internet Computing Lecture 22: Internet Security A. O Riordan, 2009, latest revision 2015 Internet Security When a computer connects to the Internet and begins communicating with others, it is
Web Security School Final Exam
Web Security School Final Exam By Michael Cobb 1.) Which of the following services is not required to run a Windows server solely configured to run IIS and publish a Web site on the Internet? a. IIS Admin