Fun With Unmanaged Switches + Port Security
I’ve just passed a year of my job working at a smallish non-profit, and one part that I really am enjoying is passing on knowledge to the front-line staff. This week, there was an interesting case, and I had to explain to my colleagues what was happening and why. So, I did a little demo, and […]
Author information
The post Fun With Unmanaged Switches + Port Security appeared first on Packet Pushers Podcast and was written by Matthew Mengel.
Healthy Paranoia Show 13: To CISSP, Or Not To CISSP
Welcome to another lofty episode of Healthy Paranoia where we take on the profound problem of security certifications, specifically the Certified Information Systems Security Professional (CISSP). Joining Mrs. Y and Greg Ferro is an illustrious cast of infosec luminaries, including; well-known security analyst Wendy Nather, Novainfosec.com founder Grecs, IPv6 fanatic Joe Klein, and the enigmatic […]
Author information
The post Healthy Paranoia Show 13: To CISSP, Or Not To CISSP appeared first on Packet Pushers Podcast and was written by Mrs. Y.
Mrs. Y’s Rules for Security Bloggers
Recently Greg Ferro published an e-book for bloggers, “Arse First Method of Technical Blogging.” It has some great suggestions (although I’m not sure what an arse is), but after reading it, I realized it really doesn’t apply to security blogging. Without further ado, here are some of my tips for good infosec blog posts. 1. […]
Author information
The post Mrs. Y’s Rules for Security Bloggers appeared first on Packet Pushers Podcast and was written by Mrs. Y.
Interop: Firewalls, Booth Babes and Unicorn Poop
Now that I’ve returned from the whirlwind that was Interop Las Vegas, I thought I’d share some thoughts about my experience as a speaker and attendee. First the good: The UBM staff was awesome and I appreciated the chance to pontificate on one of my favorite subjects, firewalls. Thanks to some quick thinking by the […]
Author information
The post Interop: Firewalls, Booth Babes and Unicorn Poop appeared first on Packet Pushers Podcast and was written by Mrs. Y.
Healthy Paranoia Show 12: The Saga of Terry Childs
Announcing the latest episode of Healthy Paranoia from Mrs. Y featuring the case of Terry Childs, the infamous former Network Administrator arrested for refusing to provide passwords for San Francisco’s FiberWAN system to management. She’s joined by Jeana Pieralde, Chief Security Officer for the City and County of San Francisco, along with two members of the […]
Author information
The post Healthy Paranoia Show 12: The Saga of Terry Childs appeared first on Packet Pushers Podcast and was written by Mrs. Y.
Machine Fragile
Yesterday, a “breaking news” tweet at 1:07 PM EDT from the Associated Press reported that two explosions had occurred at the White House and President Obama had been injured. The news immediately sent the Dow Jones Industrial Average down 143 points, as this graph at the London Telegraph shows. There’s also a lovely animated display […]
Author information
The post Machine Fragile appeared first on Packet Pushers Podcast and was written by Russ White.
It Works and It Should Be Better
You say, “It works – don’t fix it.” I hear, “It works – don’t touch it.” I’m also thinking that if you don’t touch it, then it’s never upgraded or changed. Is a static, unchanged network the best you can do to support your business ? Are you happy with just doing more of the same […]
Author information
The post It Works and It Should Be Better appeared first on Packet Pushers Podcast and was written by Greg Ferro.
Healthy Paranoia Show 11: Bro – the Outer Limits of IDS
Join Mrs. Y, Taylor Banks and esteemed Nerd Captain Ivan Pepelnjak for another exciting episode of Healthy Paranoia! In this installment, we discover the day the security industry stood still for Bro IDS with expert and project contributor Liam Randall. Just a few of the fun facts you’ll learn include: The real meaning of “bromance.” […]
Author information
The post Healthy Paranoia Show 11: Bro – the Outer Limits of IDS appeared first on Packet Pushers Podcast and was written by Mrs. Y.
A Small Yellow Wooden Door: Thinking Practically About SDN
As I do most days, I took a walk in the woods at the back of my garden after a hearty dinner. I was quite surprised to come across a small wooden yellow door I’d never seen before, set into the trunk of a tree I’d never noticed until today. I opened the door and squeezed […]
Author information
The post A Small Yellow Wooden Door: Thinking Practically About SDN appeared first on Packet Pushers Podcast and was written by Steven Iveson.
Firewalls: Expensive, Broken Routers
In a previous post on IPS, I made a fairly negative comment on the value that you get from enterprise firewalls in the modern environment. At the time, I said that I was just going leave that comment hanging and see what happened. Well, precisely no one challenged me on it, which means either everybody […]
Author information
The post Firewalls: Expensive, Broken Routers appeared first on Packet Pushers Podcast and was written by Neil Anderson.
Surprised by Spam
I attended my first in person meeting of the ISOC Advisory Council this last week — I’m a newly minted co-chair, and already haven’t been participating as much as I should (just like I don’t blog here as much as I should, a situation I’m undertaking to resolve!). We had a long discussion on the […]
Author information
The post Surprised by Spam appeared first on Packet Pushers Podcast and was written by Russ White.
Healthy Paranoia Show 10: Beware the Shmoo
Darkness falls across the land, The hacker hour is close at hand. Creatures crawl in search of 0-days To terrorize your enterprise. And whosoever shall be found, Without the soul for clamping down, Must stand and face the nerds of hell, And rot inside a clear text shell. The foulest stench is in the air, […]
Author information
The post Healthy Paranoia Show 10: Beware the Shmoo appeared first on Packet Pushers Podcast and was written by Mrs. Y.
NetCitadel and Software Defined Security
It’s been an exciting couple of weeks in the security realm, with a number of innovative startups appearing. That’s refreshing because recently most “innovation” in the security space has been something involving a new way of marketing a signature or reputation based system – and that’s just a bit rubbish, and not a little tiresome. Most […]
Author information
The post NetCitadel and Software Defined Security appeared first on Packet Pushers Podcast and was written by Neil Anderson.
Symmetric and Asymmetric Algorithms – Basic Differences
Symmetric uses only one key for both encryption and decryption. Sender and receiver share the same shared secret to transfer data securely. Algorithms include DES, 3DES, AES, IDEA, RC2/4/5/6, and Blowfish. Also referred to as "secret key" encryption.
DES - 56bit keys
3DES - 112bit and 168bit keys
AES - 128bit, 192bit, and 256bit keys
IDEA (International Data Encryption Alogrithm) - 128bit keys
RC2 - 40bit and 64bit keys
RC4 - 1bit to 256bit keys
RC5 - 0bit to 2040bit keys
RC6 - 128bit, 192bit, and 256bit keys
Blowfish - 32bit to 448bit keys
Asymmetric uses one key for encryption and another key for decryption referred to as public key infrastructure encryption. Key lengths generally ranging from 512 to 4096bits.
Example of asymmetric encryption RSA,EIGamal, Eliptical Curves, and Diffie Hellman