HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 27 guests and 1 member online
EH-Net Donations

Enter Amount:
$
Google Ads
ChicagoCon 2008s
chicagocon2008s_125x200.jpg
ChicagoCon 2008s
EH-Net News Feeds
Latest Additions
Book Recommendations



 
Advertisement

You are here: Home arrow Forum arrow General Discussions and Related Certificationsarrow Ethical Hackingarrow Countermeasures to Client Side Attacks
Ethical Hacker Community Forums
July 05, 2008, 08:19:21 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Podcasts and slide decks from ChicagoCon 2008s talks coming soon! Visit www.chicagocon.com.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
« previous next »
  Print  
Author Topic: Countermeasures to Client Side Attacks  (Read 1562 times)
0 Members and 1 Guest are viewing this topic.
KrisTeason
Jr. Member
**
Offline Offline

Posts: 53


View Profile
« on: May 04, 2008, 12:05:50 AM »
Hello,

I was doing a research paper on client-side attacks and needed to include a few more counter measures. I know there's alot of security people that use this forum. Anyone willing to throw out some useful countermeasures my way. Thanks in advance!
Logged
ChrisG
Hero Member
*****
Offline Offline

Posts: 924


View Profile WWW
« Reply #1 on: May 04, 2008, 09:46:30 AM »
care to put what you have already?

but i'll give you one for free. noscript in firefox.
Logged
...tests i took go here...

http://carnal0wnage.blogspot.com/
KrisTeason
Jr. Member
**
Offline Offline

Posts: 53


View Profile
« Reply #2 on: May 04, 2008, 11:28:56 AM »
Yeah, I had a few.
- Keep AntiVirus/Firewall/IDS Software up-to-date
- Keep your OS up-to-date
- Keep your software versions up-to-date
- Refrain from opening mail from untrusted/unknown sources
Logged
ChrisG
Hero Member
*****
Offline Offline

Posts: 924


View Profile WWW
« Reply #3 on: May 04, 2008, 01:43:44 PM »
you'll also want to mention a locked down group policy forcing least privilege across the domain.

in there you can do things like setting browser zone and office macro settings to the appropriate level for the organization and ideally not let the user lower those settings.
Logged
...tests i took go here...

http://carnal0wnage.blogspot.com/
KrisTeason
Jr. Member
**
Offline Offline

Posts: 53


View Profile
« Reply #4 on: May 05, 2008, 12:50:03 AM »
Ight, thanks for the reply Chris, good to get info from a respected member of this forum.
Logged
shawal
Jr. Member
**
Offline Offline

Posts: 86


View Profile
« Reply #5 on: May 05, 2008, 08:32:58 AM »
awarness, one of the most important vectors of the client side attacks is social engineering, training users, and admins and briefing them on these kind of attacks is one counter measure also Smiley
Logged
RHCE, GIAC GCIH.
ChrisG
Hero Member
*****
Offline Offline

Posts: 924


View Profile WWW
« Reply #6 on: May 05, 2008, 08:14:59 PM »
Quote from: KrisTeason on May 05, 2008, 12:50:03 AM
Ight, thanks for the reply Chris, good to get info from a respected member of this forum.

oh well hopefully one of those guys will reply soon.
Logged
...tests i took go here...

http://carnal0wnage.blogspot.com/
rok
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #7 on: May 06, 2008, 01:10:31 AM »
oh well hopefully one of those guys will reply soon.


lol... Grin
Logged
Bogwitch
Newbie
*
Offline Offline

Posts: 48

Senno Ekto Gamat


View Profile
« Reply #8 on: May 06, 2008, 04:23:29 PM »
It is worth remembering in order to minimise the impact of a client side attack, it is advised to run with least privilege. I have lost count of the number of times I have seen admins surfing the Internet, reading email etc. with full domain admin access...
Logged
CISSP, C|EH, C|HFI
Pages: [1]   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.4 | SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.034 seconds with 22 queries.
 
BackTrack2 VM w/ MSF3

Get it here NOW!

Polls
Best for daily desktop use:
 
Support EH-Net
chicagocon2008s_125x200.jpg
ChicagoCon 2008s

Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

chicagocon2008s_125x200.jpg
ChicagoCon 2008s
 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.