You are here: silicon.com > Resources > White Papers > Security > Intrusion - Tampering > Firewalls

Firewalls White Papers

Firewire Blocker: A Software Defense Against Firewire-Based Physical Security Attacks on Windows Systems

Tags:
firewalls

Overview This paper presents a software solution to Firewire-based physical security attacks on Microsoft Windows operating systems. In this first proof-of-concept, the FirewireBlocker service is running with SYSTEM privileges in order to be able to enable/disable hardware. While users can normally not interface with service, risk for privilege escalation remains. For example, if users with normal user rights have write access on the executable, they could replace it with a malign piece of software which would then be started with SYSTEM privileges. Future versions should establish the principle of least privilege. Further research is required to identify the fewest required privileges the FirewireBlocker service has to run with in order to be able to serve its purpose.

Further White Paper Details
Publisher	Vienna University	File Format	PDF
Date Published	August 2009
Format	White Papers
Topics	Firewalls, Network Security, Security Management

Did you find this white paper useful?

Balancing Security Against Productivity

What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...

Publisher:
Novell

Security: New strides in preventing intrusions.

Need help eliminating risk in your IT environment? This ForwardView webshow describes how security appliances, which incorporate an array of security functions, can help you ward off security breaches without...

Publisher:
IBM

IntelÂ® CentrinoÂ® 2 with vProÂ™ Technology and IntelÂ® CoreÂ™2 Processor with vProÂ™ Technology

This whitepaper explores how the latest notebook and desktop PCs with Intel® vPro™ technology build on proven capabilities to enable greater proactive security, enhanced maintenance, and improved remote management both...

Publisher:
Intel

PCI DSS Compliance in the UNIX/Linux Datacenter Environment

This document explains how BeyondTrust PowerBroker supports the Payment Card Industry Data Security Standard (PCI DSS) by limiting and tracking authorization to execute commands and programs that access servers and...

Publisher:
BeyondTrust

Tags:
application security tools

IOS Tips and Tricks

There are a number of things you can do with Cisco's IOS to make your life easier. This white paper presents some ways that IOS commands can help streamline your...

Publisher:
Global Knowledge

Tags:
tcp - ip

A Shatter Attack: How it works

It's not just privilege-escalation attacks you can do through this. Chris Paget, a freelance security researcher, has published a whitepaper demonstrating what he calls a 'Shatter Attack', which allows a user to elevate his or her privileges and...

Channel:
Security Strategy

Linux flaws aid hack attack

The technique is known as a privilege escalation. Using the September flaw, the attacker gained owner privileges on Klecker. The flaw - in a part of the kernel that manages memory - allows only users that already have access to the system to raise...

Channel:
Operating Systems

Second hack-my-Mac compo goes ballistic

Assuming it is genuine, it represents an as-yet-unknown local privilege escalation that would allow any local user to gain root-level access," he said. A privilege escalation flaw could let a malicious user with such access gain full control over a...

IE exploit could unleash email virus

It also recommending changing the IE settings to disable Active Scripting. Microsoft said in a security advisory posted on its website: "We have seen examples of proof-of-concept code but we are not aware of attacks that try to use the reported...

"Highly critical" Mac OS X kernel hole unearthed

In addition to being used to compromise a computer, the flaw could be exploited by malicious local users to gain escalated privileges to the system, the security company said. The proof-of-concept code exploits a security hole in the way Apple's...

Apple's Mac OS 'lagging behind Vista on security'

In June, Dai Zovi reported on a new local privilege escalation vulnerability researchers had discovered that gives local root access on Mac OS X Tiger and Leopard. Apple's Mac OS X security page makes reference to offering sandboxing, Library...

Featured White Papers

The Value of Location Intelligence in the Communications Industry

Public Services are under pressure, the challenge is to do more with less. How do you improve citizen satisfaction, increase cost efficiencies and improve service delivery? The power of location intelligence is helping many local authorities and government departments make more informed decisions and derive greater value from current location-based information and data. Read this whitepaper to see how you can take advantage of location intelligence.

Publisher:
Pitney Bowes

Best Practices for Translating Customer Satisfaction into Revenue

Today's support organisations are focused on two top-level metrics: financial results and customer satisfaction. For most, it's easy to track financial performance, but customer satisfaction is akin to speaking a foreign language. How do you quantify customer satisfaction? Download the Best Practices for Benchmarking Customer Satisfaction to get industry research the Association of Support Professionals (ASP) on how to measure and leverage customer satisfaction.

Publisher:
Citrix Online

HP print solutions and 3M

the objective for 3M was to optimize office printing infrastructure at 3Mlocations worldwide Reduce total cost and environmental footprint. Some of the business benefits acheived by switching to HP print soultions, More than $3 million in savings in first two years and Per page costs reduced by up to 90 percent.