Tallinn, ESTONIA — Given the number of times that the terms "cyber war" and "cyber warfare" show up in the media, one would think that policymakers have settled on a working definition. Yet, defining cyber warfare is a hard problem, military and computer-security experts told attendees at the Cooperative Cyber Defence Center of Excellence (CCD COE) Conference on Cyber Warfare. Under one lexicon, current attacks affecting the Internet are either reflection attacks, so named because the conflict mirrors a conflict in the real world, or espionage, said Mikko Hyppönen, chief research officer for antivirus firm F-Secure. True cyber warfare is rare, he said. "The vast amount of practical work being done in data security is not fighting cyber warfare, but fighting cybercrime," Hyppönen said. "When we go to cyber warfare, the definition of what we are talking about gets really muddled." Even after the attacks on networks of former Soviet states of Estonia and Georgia in 2007 and 2008, respectively, policymakers and technologists still disagree over the degree to which such incidents constitute cyber warfare. Earlier this year, one security researcher labeled the incidents little more than Internet censorship. Yet, the Estonian government feels differently. Paraphrasing Prussian military philosopher Carl von Clausewitz, Johannes Kert, an advisor to the Minister of Defence for Estonia, said that the political motivations are what matter. "It's the continuation of 'politics by other means,'" Kert said. "The traditional mindset is that only hooligans and criminals are using Internet attacks. But we see the last couple of years, especially in Eastern Europe, massive cyber attacks whose motivation is political." Still, another expert stressed that true cyber warfare should not be defined by the means — that the attack took place in cyberspace — but the ends. Amit Sharma, deputy director and scientist at the Ministry of Defence in India, argued that cyber warfare needs to have a doctrine similar to nuclear deterrence. "More people are putting the emphasis on the means," said Sharma, who is currently pursuing research at the United Kingdom's Defence Academy. "But (the question is) do they have the means to create a strategic paralytic effect (as the end result)?" It's no wonder, then, that the CCD COE intends to create a lexicon of definitions as quickly as possible, according to Kenneth Geers, a scientist with the group and the conference organizer. "These definition and concepts are amazingly challenging in cyberspace," Geers said. "And they are going to require very focused attention."
Coming to terms with cyber warfare
MSFT, Adobe and Apple patch together
Three major software companies issued updates this week, with Microsoft fixing 31 vulnerabilities in its operating system and applications, Adobe patching more than a dozen issues in its document reader software, and Apple closing over 50 serious security holes in its Safari browser. With ten patches, Microsoft fixed more than two dozen flaws, including ten vulnerabilities voided by a trio of patches. The flaws are rated Critical by Microsoft only for Office 2000 and rated Important for other versions of the productivity program. Perhaps the most serious vulnerabilities fixed by the software giant are seven security issues in the company's flagship browser, Internet Explorer 8, said Andrew Storms, director of security operations for network protection firm nCircle. "Topping this month's moderately large release cycle from Microsoft is the critical IE update that affects even Microsoft's latest and most secure browser, IE 8," Storms said in a statement sent to SecurityFocus. "Client side, browser based vulnerabilities continue to top the charts for threats, so every user should put this patch at the top of their 'install immediately' list." In its first quarterly patch, Adobe shuttered 13 security holes in Adobe Acrobat and Reader. The quarterly patch, which Adobe announced last month, is scheduled to fall on the same day as Microsoft's Patch Tuesday. Some of the flaws could allow an attacker to run code on the vulnerable system, while others appear to only be denial-of-service issues. Adobe still needs to work out the kinks in its quarterly patch process, Storms said. "While the scheduled release cycle for Adobe updates is a big improvement in helping enterprise security teams effectively manage resources, today's security bulletins are still missing information," Storms said in a statement. "Security managers need Adobe to step up and provide mitigation steps and more detail on both the bugs and the patches." Apple rounded out the patch parade with an update, released on Monday, that fixed more than 50 flaws in its latest browser, Safari 4.
Data shows Grumblar still threatens
The drive-by-download threat, Grumblar, continues to cause widespread infection, through the number of Web sites compromised with the malicious code appears to have declined since late May, according to Web security firm Websense. The multi-stage threat, which first compromises Web sites to install malicious code that is then used to infect visitors' PCs, rocketed eight-fold in mid-May, according to an update posted to Websense's research blog on Friday. Attackers use stolen FTP credentials to embed the first stage of the attack on legitimate Web sites. Gary Warner, a professor of digital forensics at the University of Alabama, document an investigation he and his students performed on a compromised Facebook group. The group, which boasted 40,000 members, contained a link to a malicious site that attempted to infect visitors with Grumblar. "Their (site's transfer) logs indicated that the malicious content was uploaded to their server by a visitor from the Ukraine, who had logged in using their webmaster's correct userid and password," wrote Warner. "It wasn't a poorly chosen password, and it wasn't brute forced. They logged in successfully on the first try, indicating that their webmaster probably had a keylogger running on his home computer. In other words, the webmaster's FTP password was known to the criminals." The attacks, dubbed "Grumblar" for the name of the site in China to which visitors were originally redirected, was first detected in March, spiked in mid-May, and has since declined. A malicious PDF file uploaded to victim's systems by Grumblar contains the phrase, "Boris likes horilka," according to Warner's blog. Horilka is the Ukrainian word for vodka. The software steals FTP credentials, sends spam, installs fake antivirus software, hijacks Google search queries, and disables security software.
Tips Menghentikan Proses Dari DOS Prompt
Untuk menghentikan proses (aplikasi dan service) yang sedang berjalan pada Windows saya yakin Anda sering melakukannya dari Windows Task Manager.
Selain cara tersebut, ada cara lain yang dapat Anda lakukan yaitu dengan melalui DOS Prompt. Caranya adalah sebagai berikut:
- Masuk ke dos prompt dengan mengetikkan cmd dari menu Start - Run.
- Tulis tasklist dan tekan enter, maka akan tampil daftar proses yang sedang berjalan seperti gambar di bawah ini:
- Cari nama proses yang ingin Anda stop, lalu cari nomer PID-nya.
- Misalnya Anda ingin menghentikan program Firefox, maka tulis: tskill 1844, lalu tekan enter.
- Selesai
Backup dan Restore Driver Dengan Double Driver
Double Driver adalah software gratis yang dapat Anda gunakan untuk backup dan restore driver pada komputer Anda. Backup driver sangat berguna jika suatu saat Anda perlu menginstall ulang Windows dan mungkin Anda tidak mempunyai CD drivernya.
Untuk menggunakan Double Driver caranya cukup mudah. Setelah Anda menjalankan Double Driver, klik tombol Scan. Pada proses ini Double Driver akan membuat daftar driver apa saja yang terinstall pada komputer Anda. Setelah proses scan selesai Anda bisa melakukan backup dengan mengklik tombol Backup.
Pada jendela Backup Driver ada beberapa pilihan:
- Destination, folder tempat Anda akan menyimpan file backup
- Drivers, pilihan untuk membackup semua driver atau hanya membackup driver yang dipilih aja.
- Output, file backup dalam bentuk folder, folder yang di-compress atau dalam bentuk file self extract
Mengendalikan Proses Rakus CPU di Linux
Kalau kita memakai laptop yang memiliki CPU multi core, lalu ada proses yang menghabiskan CPU, ada cara agar suhu CPU kita tidak melejit: memaksa CPU bekerja pada clock yang lebih rendah. Tapi bagaimana agar proses lain yang kadang perlu CPU bekerja secepat mungkin tidak ikut direm? Kita bisa gunakan kombinasi schedtool dan cpufrequtils.
Read More..# proses dipaksa hanya berjalan di CPU1, -a 0x1 untuk memaksa ke CPU0
$ sudo schedtool -a 0x2 PID_proses_rakus
# atur governor clock CPU1 ke userspace
$ sudo cpufreq-set -c 1 -g userspace
# paksa clock CPU1 maks 1.2GHz
$ sudo cpufreq-set -c 1 -u 1.2g
sumber : andika-lives-here.blogspot.com
Continuing Broken rsync
Why does it matter? Because we still need old, same parts from previous iso to prevent rsync redownload them again. But how to force rsync to know that old part was already downloaded? By putting them into the same iso of course.$ ls -lah|grep nanggar
-rwxrwxrwx 1 root root 675M 2009-05-04 02:20 nanggar-alternate-i386.iso
-rwxrwxrwx 1 root root 675M 2009-05-04 03:26 nanggar-cdlive-i386.iso
-rwxrwxrwx 1 root root 334M 2009-05-20 18:22 .nanggar-cdlive-i386.iso.ThN6oe
$ dd if=nanggar-cdlive-i386.iso of=2nd-part bs=1M skip=334
$ mv nanggar-cdlive-i386.iso nanggar-cdlive-i386.iso.prev
$ mv .nanggar-cdlive-i386.iso.ThN6oe nanggar-cdlive-i386.iso
$ cat 2nd-part >> nanggar-cdlive-i386.iso
$ rsync -avP cdimage.blankonlinux.or.id::cdimage/livecd-harian/current/nanggar-cdlive-i386.iso .
Old iso consists of two parts: O1 and O2. New iso consists of two parts: N1 and N2. N1 has been downloaded into dotfile, while N2 is to be checked against O2, and we only need N2 vs O2 difference. So we need to create temporary iso, which consists of N1 (=dotfile) and O2, to enable rsync delta algorithm.
source: andika-lives-here.blogspot.com Read More..
Ternyata Kadang Masih Perlu Image Floppy
Untuk membuat berkas image floppy berukuran 1.44MB:
Lalu agar bisa diisi, di-mount loopback saja:$ mkfs.msdos -C floppy0.img 1440
Baru salin-salin berkas:sudo mount -o loop,uid=1000 floppy0.img /mnt/floppy
Jangan lupa dilepas kaitnya sebelum dipakai:$ cp /path/to/source/file /mnt/floppy
Daftarkan di VirtualBox:$ sudo umount /mnt/floppy
$ VBoxManage openmedium floppy floppy0.img
Sumber:
Create mount and copy floppy disks images under linux Read More..
Red Hat Linux Administration: A Beginner's Guide
Red Hat Linux Administration: A Beginner's Guide
Perfect for systems and network administrators migrating from Windows NT to Linux, or experimenting with bringing Linux into their network topology. Even novice users will find plenty of helpful information on administering the open source operating system including installation, initial configuration, using the bash command shell, managing files, managing software, and granting rights to users.
Perfect for systems and network administrators migrating from Windows NT to Linux, or experimenting with bringing Linux into their network topology. Even novice users will find plenty of helpful information on administering the open source operating system-including installation, initial configuration, using the bash command shell, managing files, managing software, and granting rights to users.
password: www.warezwitch.com
Download
Tutorial
Kami ada beberapa Tutorial CorelDraw berbahasa indonesia, diantaranya:
Tutorial Photoshop:
- Membuat 3D Background Abstrak - tutorial bagaimana cara membuat Background Abstrak 3D
- Membuat Effect Bias Pelangi - anda ingin tahu bagai mana cara membuat effect bias?
- AdobePhotoshop CS Portable - ini bagi teman2 yang ingin mempunyai photoshop secara portable tanpa menginstall
..:: Tutorial CorelDraw ::.. (Maaf kami baru punya 2 tutorial)
- Membuat Butiran Air - baru!! coba lihat bagaimana kita dapat membuat sendiri gambar butiran2 air yang meleleh
- Membuat Bercak Noda dengan SmudgeBrush - bagi anda yang ingin membuat bercak atau cipratan noda, silahkan di lihat..
- CorelDraw 11 Portable Githu Loh ... - ini juga versi portable coreldraw, jika ingin jalankan coreldraw tanpa install.... silahkan di download
Tutorial Flash:
- Tutorial Flash menggunakan Masking - tutorial beginner yang memberikan pengajaran cara membuat masking
- Membuat Navigasi Sederhana - ini jika anda mau membuat navigasi dengan menggunakan animasi flash
- Membuat Digital Clock di Flash - membuat jam digital dari flash?
- Membuat Trail Mouse - membuat trail mouse, boleh saja
- Macromedia Flash 8 portable Pro - ini juga versi portable flash, jika ingin jalankan flash tanpa install.... silahkan di download
Kami akan mencoba untuk terus menambah Tutorial CorelDraw spesial dengan bahasa indonesia... tunggu saja :)
--// Terima Artikel
Kami menerima submit Artikel CorelDraw
Jika ada teman-teman yang jago CorelDraw dan ingin tutorialnya di publikasikan di sini, silahkan kirimkan artikel mu dalam bentuk Microsoft Word ke : black.scorpio.night[at]gmail.com (Kami akan cantumkan sumbernya)
Terimakasih :)
iklan baris
Sumber dari situs Ilmu Website dalam kategori coreldraw dengan judul Tutorial CorelDraw
