Attacks/Breaches
10/28/2013
02:28 PM
Connect Directly
Twitter
Twitter
RSS
E-Mail
100%
0%

Slide Show: 10 Free Network Defense Tools

Affordably protect the perimeter and beyond with these handy network security utilities and toolkits
Previous
1 of 10
Next


Keep the bad guys' success at breaking through some security defenses from turning into a full-blown network incursion. Nova helps confuse and confound attackers doing network reconnaissance by configuring many different fake virtual servers "running" on the network using Honeyd and then uses a machine-learning traffic analyzer to monitor honeypts.

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 10
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
sleath066
50%
50%
sleath066,
User Rank: Apprentice
11/30/2013 | 4:30:07 AM
re: Slide Show: 10 Free Network Defense Tools
agreed. Could someone do something about that?
acces
50%
50%
acces,
User Rank: Apprentice
10/30/2013 | 1:17:18 AM
re: Slide Show: 10 Free Network Defense Tools
A url would be nice ... how about telling us what platforms are available for each tool. Come on, be a bit more user friendly please ...
whydoesitmatterjustmakeoneup
50%
50%
whydoesitmatterjustmakeoneup,
User Rank: Apprentice
10/29/2013 | 3:40:42 PM
re: Slide Show: 10 Free Network Defense Tools
I agree the screen is very busy but descriptions are in the upper right hand corner, at least on my browser, Chrome.
Patches
50%
50%
Patches,
User Rank: Apprentice
10/29/2013 | 1:53:23 PM
re: Slide Show: 10 Free Network Defense Tools
Is there supposed to be an article of some kind to go along with this slideshow? I mean, there's not even descriptions that go along with any of these tools...
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3586
Published: 2015-04-21
The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

CVE-2014-5361
Published: 2015-04-21
Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) start, (2) stop, or (3) restart services via a request to remote/serverServices.aspx.

CVE-2014-5370
Published: 2015-04-21
Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. (dot dot) in the QUERY_STRING to cfchart.cfchart.

CVE-2014-8111
Published: 2015-04-21
Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

CVE-2014-8125
Published: 2015-04-21
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.