HSC - Presentations - Encrypting hostile Web content over HTTP

Network Security Consulting Agency Since 1989 - Specialized in Unix, Windows, TCP/IP and Internet

You are here: Home > Resources > Lectures > Encrypting hostile Web content over HTTP

Go to: HSC Trainings

Services

			Skills & Expertise
			Consulting
			ISO 27001 services
			Vulnerabilities monitoring
			Audit & Assessment
			Penetration tests
			Vunerability assessment (TSAR)
			Forensics
			ARJEL
			Training courses
			E-learning

Conferences

			Agenda
			Past events
			Tutorials

Resources

			Thematic index
			Tips
			Lectures
			Courses
			Articles
			Tools (download)
			Vulnerability watch

Company

			Hervé Schauer
			Team
			Job opportunities
			Credentials
			History
			Partnerships
			Associations

Press and
communication

			HSC Newsletter
			Press review
			Press releases
			Publications

Contacts

			How to reach us
			Specific inquiries
			Directions to our office
			Hotels near our office


		Encrypting hostile Web content over HTTP

Access to the content

Beginning of the presentation

PDF version [179 KB]

Adobe Flash version

Description

Context & Dates

Talk presented during the rump session of the SSTIC 2007, on 31 May 2007.

Author

Renaud Feil

Type

[

]

Abstract &
Table of content

Flyleaf
Souviens-toi l'été dernier... à Rennes
Quelle efficacité pour l'analyse de contenu Web ?
Les limites des outils d'analyse
Démonstration sur Firefox 2.0
Solutions

Related documents

Web

Web Servers and applications Security

Webef tool [Bruteforcer of web server files and directories -

]

Webshells, or how to open your network's doors ? [21 October 2010 -

]

JBoss AS: exploitation and reassure [11 June 2010 -

]

Webshells, or how to open your network's doors ? [16 March 2010 -

]

Webshells, real threat for information systems ? [1 December 2009 -

]

Security issue seen in enterprises web applications [27 November 2008 -

]

Application security [23 October 2008 -

]

Feedback from PHP applications assessment [21 November 2007 -

]

Evolution of Cross-Site Request Forgery Attacks [1 June 2007 -

]

Web 2.0 : more ergonomic... and less secure ? [22 May 2007 -

]

Configuring and using modsecurity2 [24 April 2007 -

]

Presentation of Apache ModSecurity module [14 June 2006 -

]

Database and ERP security [15 June 2005 -

]

SSL VPN connection multiplexing techniques [7 April 2005 -

]

PHP and security [27 November 2003 -

]

Web Services and Security [10 September 2003 -

]

HTTP/HTTPS authentication methods [10 March 2003 -

]

The cross-site scripting [27 February 2003 -

]

DBMS and security [1 April 2002 -

]

Apache and web servers security [1 February 2002 -

]

Implementing filtering on a reverse HTTP proxy using mod_eaccess [3 September 2001 -

]

Subweb tool [HTTP reverse proxy -

]

Babelweb tool [Automatic information retrieving from of a web server -

]

Universal CGI wrapper [5 August 2001 -

]

Why HTTPS is not web security [7 May 2001 -

]

Filtering URLs in a reverse proxy [5 May 2001 -

]

Hacking web servers [14 March 2001 -

]

Why a reverse proxy [13 February 2001 -

]

Apache as a reverse proxy [11 November 2000 -

]

Secure internet services (email, DNS, web) under Linux [26 September 2000 -

]

Secure internet services (email, DNS, web) under Linux [26 April 2000 -

]

Secure Internet services (email, DNS, web) under Linux [1 February 2000 -

]

Netscape [16 January 1996 -

]

	HTML (HyperText Markup Language)
	Symposia Pro de Grif [8 October 1996 - ] Les produits Internet d'Adobe [1 February 1996 - ]

HTTP (HyperText Transfer Protocol)

Webef tool [Bruteforcer of web server files and directories -

]

Webshells, real threat for information systems ? [1 December 2009 -

]

Évolution des attaques de type Cross Site Request Forgery [1 June 2007 -

]

Configuring and using modsecurity2 [24 April 2007 -

]

Presentation of Apache ModSecurity module [14 June 2006 -

]

Tunnels detection at network border [2 June 2006 -

]

Détection de tunnels aux limites du périmètre [2 June 2006 -

]

HTTP/HTTPS authentication methods [10 March 2003 -

]

Subweb tool [HTTP reverse proxy -

]

Prospects and drawbacks of the new HTTP versions [24 October 1996 -

]

HTTP/1.1 [6 June 1996 -

]

Using HTTP/1.1 for building a security proxy [19 March 1996 -

]

Intrusion Detection

Argus [19 February 2002 -

]

Advanced Intrusion Detection

Intrusion Prevention : New reinforcement tools for perimetric defense [16 June 2005 -

]

Generation of regular expressions from logged events [2 February 2005 -

]

Intrusion detection and network forensic [6 May 2004 -

]

Intrusion Detection [25 September 2002 -

]

Advanced Intrusion Detection Environment (AIDE) [9 January 2002 -

]

Follow-up on discovering the libnids [6 September 2001 -

]

Introduction to the libnids [13 April 2001 -

]

rkscan tool [Rootkit scanner for loadable kernel-module rootkits -

]

RKSCAN: Scanner for loadable kernel-module rootkits [25 October 2000 -

]

Presentation and detection of the ADORE rootkit [16 October 2000 -

]

IDSwakeup tool [Test of intrusion detection systems -

]

Round table on intrusion detection [8 June 2000 -

]

Technical method to evade intrusion detection system. [27 March 2000 -

]

Help to detect attack, intrusion and anomaly. [27 March 2000 -

]

Introduction to intrusion detection [26 January 2000 -

]

Presentation of some free software for intrusion detection [26 January 2000 -

]

Intrusion detection with Shadow [6 July 1999 -

]

Reverse proxy

Webshells, real threat for information systems ? [1 December 2009 -

]

Configuring and using modsecurity2 [24 April 2007 -

]

Presentation of Apache ModSecurity module [14 June 2006 -

]

Implementing filtering on a reverse HTTP proxy using mod_eaccess [3 September 2001 -

]

Filtering URLs in a reverse proxy [5 May 2001 -

]

Why a reverse proxy [13 February 2001 -

]

Apache as a reverse proxy [11 November 2000 -

]

Copyright