Article Archive

All Article Lab Ebook

Penetration testing March 18, 2011 Jeremy Martin

Standards for Penetration Testing

The cost and quality of penetration tests vary wildly between different vendors. As a response to those differences, a group of security professionals have...

CISSP March 17, 2011 Kenneth Magee

CISSP Domain – Business Continuity and Disaster Recovery

You only have to turn on the TV and watch some of the footage of the destruction caused by the tsunami in Japan to realize the importance of business continuity...

CISA March 16, 2011 Kenneth Magee

CISA Domain 1 – The Process of Auditing Information Systems

First, Get a copy of the CISA Review Manual and a copy of the Q&A CD Second, Read one Domain then answer all the questions on the Q&A CD for that Domain...

CISA March 16, 2011 Kenneth Magee

The CISA Domains – An Overview

ISACA's 2011 CISA Exam material has been revised from six domains to five domains. Prior to 2011 Domain 6 was Business Continuity and Disaster Recovery. ...

Hacking March 14, 2011 Jack Koziol

Charlie Miller Reveals His Process for Security Research

As the first in an ongoing series of interviews, we got recent Pwn2Own winner Charlie Miller to answer a few questions and pull back the curtain a bit on the...

CISSP March 14, 2011 Kenneth Magee

CISSP Domain – Cryptography and Security

There are books upon books about cryptography and this article will not attempt to regurgitate all of the historical background about the subject. However,...

Hacking March 10, 2011 Stephen Bradshaw

Stack Based Buffer Overflow Tutorial, part 3 – Adding shellcode

This is the third article in a series of three on stack based buffer overflow. Before you read further, you will want to read the first and second articles. At...

Hacking March 10, 2011 Stephen Bradshaw

Stack Based Buffer Overflow Tutorial, part 2 – Exploiting the stack overflow

This is the second article in a series of three on stack based buffer overflow. Before you read further, you will want to read the first article. In that article...

Hacking March 10, 2011 Stephen Bradshaw

Stack Based Buffer Overflow Tutorial, part 1 – Introduction

Introduction This tutorial, in three parts, will cover the process of writing a simple stack based buffer overflow exploit based on a known vulnerability in...

CISSP March 4, 2011 Kenneth Magee

CISSP Domain – Telecommunications and Network Security

Telecommunications and Network Security is this week’s CISSP domain posting. The dreaded OSI model, there’s no way around it, PDNTSPA or Please Do Not Throw...