* Lots of resources at Web site of LURHQ Managed Security Services
I’m always happy to find new security resources on the Web for my students and readers, so I was particularly pleased to run across the excellent work posted on the research pages of LURHQ Managed Security Services while I was looking for information on DNS cache poisoning the other day.
The research area can be found here: https://www.lurhq.com/research.html
I found a very nice analysis of the situation by Joe Stewart of the LURHQ Threat Intelligence Group. Like almost all the articles, it is available in both HTML and PDF.
The abstract reads:
“The old problem of DNS cache poisoning has again reared its ugly head. While some would argue that the domain name system protocol is inherently vulnerable to this style of attack due to the weakness of 16-bit transaction IDs, we cannot ignore the immediate threat while waiting for something better to come along. There are new attacks, which make DNS cache poisoning trivial to execute against a large number of nameservers running today.”
There are 28 other professional articles in the Technical Research section alone, including analyses of specific malicious software and vulnerabilities and more general papers such as:
* A Firewall Log Analysis Primer.
* Crossing the Line: Ethics for the Security Professional.
* Intrusion Detection: In-Depth Analysis.
* Managed Security Services and the Incident Handling Process.
* Wormsign: Predicting the Next Outbreak.
The Advisories page includes 19 papers on important vulnerabilities and exploits: https://www.lurhq.com/advisories.html
The Industry Whitepapers section is the only section that requires registration, although these papers are also free. Topics include:
* Achieving GLBA Compliance with Managed Security Services.
* Achieving HIPAA Compliance with Managed Security Services.
* Allocating Threat Management Resources.
* An Introduction to Threat Intelligence Presentation.
* LURHQ Solution to MSBlast Worm.
* People, Process and Technology: The Foundation for Effective Incident Handling.
* Reducing Risk with Effective Threat Management.
* Threat Management in Action: SOC War Stories Webinar.
Congratulations to LUHRQ on providing such a useful collection of thoughtful writing.
