Hi all, a few days ago Whatsapp announced that end-to-end encryption is finally available on iOS and Android (only if you have the latest version of Whatsapp installed). That’s great news! It’s worth pointing out it’s been a while that users have been asking for this feature, and other applications have been providing it with…
Hi there, recently, data leaks and various security incidents have been constantly part of daily news and scandals. From an end-user point of view, it looks like storing confidential data in the cloud is a serious risk, especially when dealing with sensitive and strategic data. Why? Thanks to the confession of Edward Snowden, we now know for sure…
Hi there, a couple of weeks ago I’ve attended CyberTech 2014, one of the most exciting industrial conferences for security experts. If you have read this blog before, you probably know that I’m pretty interested in encryption (see ClouDedup). That’s why my attention was first caught by the solutions proposed by Secure Islands and Vaultive.…
Hi there, in my previous post I presented ClouDedup, our solution for deduplication over encrypted data. I’m now gonna talk about how ClouDedup can be successfully deployed in order to address a very common use case: Backup. Doing regular backups is a strongly recommended practice, even though it happens very often that people don’t know how important a…
Hi there, in this post I will have the pleasure to introduce our proposed solution for secure block-level deduplication. We presented this work at IEEE CloudCom 2013 (here you can find the slides). Before going into detail, let me explain what deduplication is all about and why we need it. It’s well known that the user…
Hi there, in the previous post on ZMap we gave an overview on this new tool for high speed Internet scanning. In this post we will go into detail by showing remarkable findings and results achieved thanks to ZMap. The first finding we will talk about concerns SSH and HTTPS keys. ZMap’s creators found out…
Hi there, we are proud to announce that PenTest Magazine published our article titled “Detecting attacks and threats in elastic cloud infrastructures: the case of side-channel attacks”. You can download it here after a free registration. In this article we investigated the issue of detecting attacks and threats in elastic cloud infrastructures and gave further…
Cloud Computing is a disruptive technology which brought enormous benefits. However, even if the benefits are countless, there are several security challenges, such as elasticity and multi-tenancy, which require an innovative approach. Indeed, traditional security tools are not suitable for Cloud Computing, since infrastructures can be very dynamic. Therefore, automation is the only answer to…
One of the major obstacles to Elastic Detector adoption is the step where infrastructure API credentials are asked. Security guys do not easily give their keys to strangers. We fully understand that, so we have proposed two solutions: Virtual appliance, such as an AMI on the AWS marketplace. We provide VMware (vmdk) and KVM versions…
To scan a host using OpenVAS, you will have to go through a configuration phase that can be done in two different ways, depending on your specific need: Using the Greenbone web interface Using the OpenVAS Management Protocol (OMP) OMP for automation From the moment you have to handle a large number of machines and…
