Contents

1. Tools – Steganos Security Suite 6
   Carlos Ruiz
   The author presents SSS 6, a complete security package with different security tools for protecting your PC combining encryption with steganography.
   
2. Tools – WS-DNS-BFX
   Daniel de
   The author describes how WS-DNS_BFX works and what kind of advantages you can have thanks to using it.
   
3. Constructing a hooking-oriented size disassembler for malware analysis
   Ruben Santamarta
   How you can fight the malicious code? To achieve this essential objective we have to analyse in detail the inner works of malware using reverse engineering. Ruben Santamarta prompts how to use Structure Exception Handling to create a size disassembler.
   
4. Snort_inline as a solution
   Pierpaolo Palazzoli,
   From this article you will learn how Snort_inline works, what are the basics of Intriusion Prevention Systems and how to tune Snort_inline configuration. authors also present the ways to add a dedicated device which is best suited for the environment we want to protect.
   
5. Can one fool application-layer fingerprinting
   Piotr Sobolewski
   Numerous tools exists and allow us to determine what service runs on some given port and what software provides it. Let's try to understand how they work and check than if it's possible (easy) to trick them.
   
6. IE plugins: BHOs and toolbars
   Gilbert Nzeka
   The author presents online advertisement industry strategies. One of the problem advertisers face is: how can they increase the ROI by targeting more users? The answer - by developing toolbars and other types of Internet Explorer plugins which enable them to spy and sometimes to control the navigation of users.
   
7. Security violation and policy nforcement with IDS and firewall
   Arrigo Triulzi,
   In this article we discuss how to detect security violation of a firewall policy using a Network Intrusion Detection System (NIDS) comparing in real time traffic on the outside with traffic on the inside and alerting if it's contradicting the rules. Arrigio Triulzi and Antonio Merola show how NIDS can be used in the specific case of firewall failure.
   
8. An interview with Dr. Gary McGraw
   Our expert on IT security situation, careless private users, vulnerabilieties in the systems and hackers community.
   
9. Books reviews
   Krystian Długosz, Krystyna Wal,
   Reviews of books: 19 Deadly Sins of Software Security, Fundamentals in Computer Security, Linux Server Security, Network Security Bible.
   
10. Column – Spammers fortune
    Konstantin Klyagin
    King for a day, spammer for a lifetime... Konst column on protection against SPAM and outsourcing role.
    

CD / DVD