About my blog & me

Tags 2000 • 6-step process for Certification • Access Control in Physical Security & in Information Security • Access Control in Telecommunication • Access Control Polices • Access Control System • Access Policy • Access to Network Operating Systems Software and Facilities • Active Fingerprinting • Adequate Security • ADSL Details • Advanced Level Registry and Code Security • Advanced Search Techniques • Analysis of Email Headers • Analysis with standard Unix tools • Anomaly-based Detection • Anonymous Proxies • Anonymous Surfing • Ant viruses • Anti Spyware • Application Level Protection • Application Level Vulnerability Assessment • Approaches To Risk Assessment • Architecture of a Work Flow Management System(WFMS) • Area disaster - cover the whole area/vicinity • Art of Googling • Aspects of Security • Assess Business Requirements • Assets Protection & Approving Security Changes • Attacking the System • Audit Objectives • Auditing Steps • Auditing Tools • Automated Vulnerability Scanning • Basic Keyword searching • Basic of Security - Ethical Hacking University • Basic Search Techniques • Basics of Security • Biometrics • Bots • Brute force Attack • BS7799 / ISO 1799 • Buffer Overflow • Buffer Overflow Attack • Building a Business Continuity Plan • Building the Backup/recovery solution • Business Continuity and Disaster • Business Continuity Planning • Catching Criminals • Chain of custody - handling evidence • Chinese wall • Classification of Access Policies • Closed Circuit Television • Compliance accreditation and certification • Compliance Auditing • Components • Computer Networking • Configuration of Router • Control Objective and Controls In ISO 27001 • Coroner's Toolkit • Crime Profiling Crime Scene Management • Crime scene Management and data recovery • Cryptography • Cyber crime • Cyber Forensics • Cyber Laws • Cyber Terrorism • Cyber Threats • Daemon-Banner grabbing • Data Backup • Data Classification • Data Communication • Data Encryption and Filtering • DBMS • Default password • Defense in Depth (DID) • Define: Backdoor • Deleted file recovery • Denial of Service Attacks • Denial of Service(DoS) Testing • DES • Desktop & Server Security • Detect Security Breaches • Detecting Forged Emails • Detection Methodologies • Detection of MAC Spoofing • Determining Value of Assets • Developing a Rootkit • Developing and Adopting Policies • Dictionary based attack • Different types of NAT • Digital Certificate • Digital Evidence • Digital Signature • Discretionary Access Control(DAC) • Distorting Proxies • Documentation • DOS Attacks • DOS Vs DDOS Attack • Dread • Duplication • e-Governance Impediments in Implementing e-Governance Projects from Legal Perspective • E-Mail Security • Electronic Fingerprint • Elements of a good Business Continuity Plan • Elite Proxies • Email Forging • Email Hacking • Email Tracking • Encrypt The Traffic • Escalation of Privileges • Essential Services provided by Access Control Systems • Establish Effective Security Configurations • ethical hacking • Ethical hacking university • Evading Firewall Rules • Evidence Collection And Prevention • Exploitation • Exploiting Services for Know Vulnerabilities • Files used by Backdoor • Finding an IP Address • Fingerprinting • Fire protection • Firewall Application • Firewall Security • Flood Attack • Footprinting Fingerprinting • Forensic Analysis of Unix Systems • Forms of Cyber Terrorism • Free Proxy servers • Full Cone NAT • Hackers Vs Crackers • Hacking MAC Address • Handshake Protocols • Hardware and Software Backup and Recovery • Hash Function • High interaction honey pots (Honey net) • High Level Attack • Honey Pots • Host Based Vulnerability Assessment • How do we secure VoIP? Secure The Devices • How does Email work? • How to avoid a Trojan Infection • ICMP Scanning • Identification of Assets • Identify the IT requirements • Identity Management • Impact of a sound Security Management System • Implement the solution • Improvement in ISO 27001 over BS 7799 • Information Classification Procedure • Information Gathering • Information Security Auditing • Information Security Management System • Information Technology Act • Input Validation Attack • Internal ISMS Audit • Internet Applications • Internet Security • Interpretation of Common Log Files • Introduction to Wi-Fi LAN Security • Intrusion Detection • Intrusion Detection System(IDS) • Intrusion Prevention System • IP Blocking & Deception • IP Tracking using Email • ISMS Implementation • ISMS Improvement • ISO 27001 • Keep the solution up-to-date • Kerberos • Key logger Attack • Kind of Risk • LAN Security • Land attack • Latest Advancement • Latest Security trends • Listening and Handshaking • Live System Data Gathering (Windows) • Local site disasters • Logging • Logic Bombs • Low Interaction Honey pots (Honeyed) • Maintain Software • Malicious Code Analysis • Malwares • Man in the Middle Attack. (MITM) • Management Review of the ISMS • Managing Security Awareness • Mandatory Access Control(MAC) • Marketing ISO 27001 to Senior Management • MD-5 • Microsoft Outlook Security • Mobile Security • Mobile Threats • Monitoring Security of the Networks • Multiuse Tool • N/W Segregation • NAPT Services • Natural Disaster • Need • Network Address Translation • Network Based & Host Based Intrusion Detection Systems • Network Based Vulnerability Assessment • Network Control - Policies • Network Ctrl - Hardware / Software • Network Data Standards and Data Access • Network Scanners • Network Surveying • Non Technical Attack (Social engineering Attack) • Non-Discretionary Access Control • OCTAVE • On the basis of the cause of origin • Operating System • Operator search • Other VPN Threats • Packet Filter • Packet Filtering & Packet Scrubbing • Passive Fingerprinting • Password cracking or Brute Forcing • Password Cracking/ Enumeration • Password Protection • Penetration Testing • Phishing Techniques • Phrase search • Physical Security • Ping of Death • PKCS • Planning & Organization • Popular methodologies for Risk Assessment • Port Filtering • Port Restricted cone NAT • Port Scanning • Port Scanning and Services Identification • Ports and Services • Preliminary Response • Preparing for Certification • Pretexting Techniques • Previous Check • Principles of Risk Management • Production Honey Pots • Prosecution of Cyber Crimes under Indian Cyber Laws (IT Act • Protection From Facilities From Theft • Protocols used by Backdoor • Proxies Servers • Proxy Gateways • Qualitative and Quantitative Risk Assessment • Range search • Registries • Research Honey Pots • Respond intelligently to incidents • Restricted cone NAT • Return On Investment • RFC1483 • Risk Analysis • Risk Assessment • Risks Involved • Role of Auditors • Role of Security Guards • Role-based Access Control • Router Security • RSA • Safeguard Selection • sandee • sandeep kamble • Scanning • Scanning Tools • Secure Environment • Securing the Routers • Securing Wireless Network • Security Audting And Cyber Laws • Security awareness usually fails • Security Evaluations • Security Frameworks • Security Management Practices • Security Policies • Security Risk Analysis • Security Trends • Select products to match the design of the solution • Selection and Implementation of Controls • sercurity reseacher • Services Provided by Router • Setting up a LAN Network • Signature-based Detection • Site disaster - encompass the whole building • SKCS • Smurf attack • Sniffing Attack • Sniffing Tools • Social Engineering Vulnerability Assessment and Penetration Testing • Software Communications • Spam • Spamming? Methods of Prevention • Spy ware • Spyware Protection • SQL injection Attack • Stack-Based Overflows • Stage of Risk Assessment • Standards and International Organization for Standardization • Stateful protocol analysis based • Steganography • Stride • Symmetric NAT • System Administration • Tear drop attack • Temporal Constraints • Terminologies • The Big Three : CIA • Threat Modeling • Threats of LAN • Threats on Assets • Tools used for Vulnerability Tests • Tracing a Message • Training and Awareness • Transparent Proxies • Trojan • Trouble Shooting • Types of attacks • Types Of Cryptography • Types of Disasters • Types of Firewall • Types of Hackers • Types of Intrusion Detection Systems • Types of IPS • Types Of Spyware • Vandalism • Various Data Backup Strategies • Video Monitoring • Virtual Private Network Security • VIRUS • VoIP Security Scenario • VPN Security Issues • VPN Step by Step Security Framework • VPN Tools and related threats • Vulnerabilities in Windows • Vulnerability Assessment Vs Risk Assessment • WHY? ISO 27001 Certification • Windows Security • WinPcap Tool • Wired Equivalent Privacy • Wireless Intrusion Detection System • Wireless LAN • Working of a Firewall • Worm • XSS Attack