The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
50 views

Do intrusions cause huge network traffic [closed]

I've noticed many times with different cloud providers rackspase and windows azure a huge sudden spike in outgoing traffic 200 GB - 600 GB within 1-4 days !! knowing those machines draining network ...
0
votes
0answers
168 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
0
votes
0answers
32 views

What particularly tools are useful for IDS for a beginner-junior server admin?

I am trying to make sure that I have some intrusion detection tools in place but I'm only a beginner admin and also standing in pending the time a proper admin comes in. I was reading up on IDS and ...
3
votes
2answers
658 views

Someone is abusing my server but how do I stop the abuse? [duplicate]

I am beginner system admin on a bunch of virtualized web servers. Recently we got an e-mail that one of our servers is being used for 'brute force' attacks. The content of the e-mail was similar to ...
0
votes
1answer
700 views

How to detect my server is used as a port scanner? [duplicate]

My Web Server is running Ubuntu 12.04.2 LTS with all security updates installed. It is used as a Web Proxy server that handles incoming requests on HTTP/80 HTTPS/443 but also retrieves web content ...
-1
votes
2answers
94 views

How do I set up a troll raid defense system?

I have a website or perhaps an IRC server or whatever. The server keeps a list of all unique visitors (IP addresses). I have a panic button that, when activated, denies access to all visitors that ...
2
votes
2answers
5k views

Blocking apache access via user agent string

I've got a scripter who is using a proxy to attack a website I'm serving. I've noticed that they tend to access the site via software with a certain common user agent string (i.e. ...
0
votes
1answer
241 views

Have I Just Been Hacked? (Intrusion Alert, Known Hacker's Email is Marked as Recipient for an Email in Thunderbird) [closed]

I'm a product creator, and in attempt to track and stem my losses from piracy, I occasionally visit a bulletin board dedicated to piracy and piracy-for-profit; my products are regularly pirated and ...
0
votes
1answer
563 views

How Does Cisco IPS Work?

How does it work? Does it typically have predefined patterns of trusted or malicious activity? Is it actually a category of firewall techniques? I am more curious about Cisco than I am about other ...
1
vote
1answer
238 views

Intrusion detection

I've got a security project regarding the intrusion detection and prevention. I've been googling about it but didn't land up on something substantial. I'm supposed to submit an abstract as of now, I'd ...