Dictionary attack on Wordpress: Security and forensic analysis
The effective forensic investigation of a security attack on a web application relies on the fore... more The effective forensic investigation of a security attack on a web application relies on the forensic readiness of the web application system, supportive forensic tools, and skills of the forensic investigator. Web application forensic readiness incorporates evidence collection by enabling logging and the evidence protection for those log files through techniques such as permission settings in order to retain the integrity. Furthermore, a forensic investigator should have a good comprehension of web application functionality, web server architecture, and web application security issues. This paper focuses on a dictionary attack experiment against Wordpress (a web application) administered by a persona named Peter Quill (a fictitious character). The dictionary attack was able to successfully guess the seven-character password used for the persona's user account. A set of techniques and tools are critically analysed to determine whether they can be applicable to the experiment scenario. The techniques mostly focus on retrieving the log files from the web server, the application server, the database server, and the web application itself, while the tools deal with collecting, analysing, and presenting the log file data.
ICEIC : International Conference on Electronics, Informations and Communications, Jun 1, 2010
Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image c... more Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image capture and post-processing for encoded data analysis using programmable logic. The embedded Field Programmable Gate Array (FPGA) of Xilinx Spartan-3 Starter Kit Board was utilized for decoding a specific barcode input, the Code 128. The project used a CMOS camera to capture images and store data into the FPGA. The decoding logic is subdivided into different modules described using Very High Speed Integrated Circuit Hardware Description Language (VHSIC HDL or VHDL). The decoded results were displayed into a monitor screen in the form of characters based on the specific table for the Code 128 barcode.
Code 128 Barcode Reader Implemented on Field Programmable Gate Array
Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image c... more Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image capture and post-processing for encoded data analysis using programmable logic. The embedded Field Programmable Gate Array (FPGA) of Xilinx Spartan-3 Starter Kit Board was utilized for decoding a specific barcode input, the Code 128. The project used a CMOS camera to capture images and store data into the FPGA. The decoding logic is subdivided into different modules described using Very High Speed Integrated Circuit Hardware Description Language (VHSIC HDL or VHDL). The decoded results were displayed into a monitor screen in the form of characters based on the specific table for the Code 128 barcode.
Dictionary attack on Wordpress: Security and forensic analysis
The effective forensic investigation of a security attack on a web application relies on the fore... more The effective forensic investigation of a security attack on a web application relies on the forensic readiness of the web application system, supportive forensic tools, and skills of the forensic investigator. Web application forensic readiness incorporates evidence collection by enabling logging and the evidence protection for those log files through techniques such as permission settings in order to retain the integrity. Furthermore, a forensic investigator should have a good comprehension of web application functionality, web server architecture, and web application security issues. This paper focuses on a dictionary attack experiment against Wordpress (a web application) administered by a persona named Peter Quill (a fictitious character). The dictionary attack was able to successfully guess the seven-character password used for the persona's user account. A set of techniques and tools are critically analysed to determine whether they can be applicable to the experiment sce...
Dictionary attack on Wordpress: Security and forensic analysis
The effective forensic investigation of a security attack on a web application relies on the fore... more The effective forensic investigation of a security attack on a web application relies on the forensic readiness of the web application system, supportive forensic tools, and skills of the forensic investigator. Web application forensic readiness incorporates evidence collection by enabling logging and the evidence protection for those log files through techniques such as permission settings in order to retain the integrity. Furthermore, a forensic investigator should have a good comprehension of web application functionality, web server architecture, and web application security issues. This paper focuses on a dictionary attack experiment against Wordpress (a web application) administered by a persona named Peter Quill (a fictitious character). The dictionary attack was able to successfully guess the seven-character password used for the persona's user account. A set of techniques and tools are critically analysed to determine whether they can be applicable to the experiment scenario. The techniques mostly focus on retrieving the log files from the web server, the application server, the database server, and the web application itself, while the tools deal with collecting, analysing, and presenting the log file data.
ICEIC : International Conference on Electronics, Informations and Communications, Jun 1, 2010
Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image c... more Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image capture and post-processing for encoded data analysis using programmable logic. The embedded Field Programmable Gate Array (FPGA) of Xilinx Spartan-3 Starter Kit Board was utilized for decoding a specific barcode input, the Code 128. The project used a CMOS camera to capture images and store data into the FPGA. The decoding logic is subdivided into different modules described using Very High Speed Integrated Circuit Hardware Description Language (VHSIC HDL or VHDL). The decoded results were displayed into a monitor screen in the form of characters based on the specific table for the Code 128 barcode.
Code 128 Barcode Reader Implemented on Field Programmable Gate Array
Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image c... more Code 128 Barcode Reader Implemented on Field Programmable Gate Array is an application of image capture and post-processing for encoded data analysis using programmable logic. The embedded Field Programmable Gate Array (FPGA) of Xilinx Spartan-3 Starter Kit Board was utilized for decoding a specific barcode input, the Code 128. The project used a CMOS camera to capture images and store data into the FPGA. The decoding logic is subdivided into different modules described using Very High Speed Integrated Circuit Hardware Description Language (VHSIC HDL or VHDL). The decoded results were displayed into a monitor screen in the form of characters based on the specific table for the Code 128 barcode.
Dictionary attack on Wordpress: Security and forensic analysis
The effective forensic investigation of a security attack on a web application relies on the fore... more The effective forensic investigation of a security attack on a web application relies on the forensic readiness of the web application system, supportive forensic tools, and skills of the forensic investigator. Web application forensic readiness incorporates evidence collection by enabling logging and the evidence protection for those log files through techniques such as permission settings in order to retain the integrity. Furthermore, a forensic investigator should have a good comprehension of web application functionality, web server architecture, and web application security issues. This paper focuses on a dictionary attack experiment against Wordpress (a web application) administered by a persona named Peter Quill (a fictitious character). The dictionary attack was able to successfully guess the seven-character password used for the persona's user account. A set of techniques and tools are critically analysed to determine whether they can be applicable to the experiment sce...
Uploads
Papers by Franco Sioquim