Tech Notes

Hardening the TCP/IP stack to SYN attacks in Linux

2012-02-05T18:52:00.001+05:30

Friends, Although I am having limited experience in Linux so thought of publishing Solaris Tuning Parameters First. While got lots ofrequest for Linux so compliling the hardning parameters of Linux First. Please feel free to add your comments if some thing I missed in this part. Linux operating systems, has implemented a SYN cookies mechanism which can be enabled in the following

Hardening the TCP/IP stack to SYN attacks in Windows

2012-01-19T10:17:00.001+05:30

All of us know how problematic protection against SYN denial of service attacks can be. Several methods, more or less effective, are usually used. In almost every case proper filtering of packets is a viable solution. In addition to creating packet filters, the modification of the TCP/IP stack of a given operating system can be performed by an administrator. While SYN attacks may not be

Understand Data Loss Prevention System for Deployment

2011-12-06T21:46:00.000+05:30

First of all please make a note that DLP is about risk reduction, not threat elimination. It's important to know what kinds of policies can be defined and what enforcement options are available before beginning a deployment. Later, the proper workflow needs to be in place to handle policy violations. While human resources and legal teams are rarely involved in a virus infection, they may be

Design a right Firewall Topology for your Network

2011-11-18T00:45:00.001+05:30

With network security becoming such a hot topic, you may have come under the microscope about your firewall and network security configuration. You may have even been assigned to implement or reassess a firewall design. In either case, you need to be familiar with the most common firewall configurations and how they can increase security. In this article, I will introduce you to some

Different type of cyber crimes and their investigation.

2011-09-15T19:26:00.001+05:30

1. Hacking Hacking in simple terms means illegal intrusion into a computer system without the permission of the computer owner/user. Evidences to be secured: HDD, Mails with Header, Network Logs Investigation Mechanism: IP Tracing, Location Tracing Mac address Verification and figure printing 2. Phishing It is technique of pulling out confidential information from the bank/financial

Syslog and Auditing Utilities

2011-07-24T14:16:00.000+05:30

Recently during audit we identified very less system events in centralised syslog server. Investigating further found that syslog configuration was currect in all the 100 servers. But then what's wrong. we are getting only the logs of syslog daemon login not for other. Found the basics was wrong amoung them. Although log forwarding was configure but what should be logged was not defined.

VM Sprawl a burning issue !

2011-06-26T12:24:00.001+05:30

Server virtualization has been extremely successful. It has reduced physical server counts, increased business flexibility and made DR planning simpler. But server virtualization has also brought its own set of challenges, one of which is virtual machine (VM) sprawl. VM sprawl is the ‘weed-like’ growth in VMs that, similar to ‘NT server sprawl’ a decade ago, has become a management problem for IT

Network based Client Less DLP vs Endpoint Agent Based DLP

2011-05-17T13:50:00.000+05:30

Although my blog posting on how to enable ssh in Cisco devices is highest hit and while questions to blogger was on DLP. In the era of Swami Nityanand scandle, wiki leaks DLP solution is attracting lots of attention. People and teck guru are confused on solutions. The most common and interesting question which I am getting from readers is which DLP solution is better, Network Based Client Less

Why IPv6 ...?

2011-04-06T19:56:00.001+05:30

The next Gen Internet Protocol to build better, flexible networks and new applications. It's now a mature, stable protocol defined by IETF RFC 2460 in Dec 1998. It's look more like IPC/SPX protocol of Novell for me. I am trying to collect pros and cons to move on to next Gen IP. Study conducted by NIST, RTI International and NTIA says that IPV6 is expected to return $10 for each dollar invested

Understand the Computer Browser Service

2011-03-18T09:54:00.000+05:30

To collect and display all computers and other resources on the network, Windows NT uses the Computer Browser service. For example, opening Network Neighborhood displays the list of computers, shared folders, and printers; the Computer Browser service manages this list. Every time Windows NT is booted, this service also starts. Computer Browser is responsible for two closely related services:

First Blog of 2011 from the ashes of Old Archive of 2002

2011-02-25T11:29:00.000+05:30

I started using my old dairies as a rough note book. Somehow a small note (Could be extract from some article in books) immediately got my attention. Although note was captured by me on 23rd Jan 2002 but somehow it was not in my mind. It's quite interesting article which says If you plan and want to get something done give it to very busy person. (Golden lesson to be a good manager). Ya it is

Automate the Autopopulate document Properties in Cells of Excel Sheet

2010-11-16T21:37:00.000+05:30

Most of the time we usually forget to update some of the document properties in the excel sheet which are linked with the document prperties like file name and file version if you are using the automated version control system. Here is the tip to automate that Open Excel sheet --> Press Alt + F11--> Insert New Module --> Paste Below Mentioned function Module1 -------------------------------

Encrypted Phone Calls & Skype Security

2010-09-21T08:14:00.000+05:30

After hearing so many fuss and concern about the blackberry encryption and government agencies concern. This entire episode reminded me one of the risk assessments of 2008 on usage of Skye in corporate network. Although at that time I was biased and already told by superiors that and RA should give enough reasons to stop the Skye Access from corporate network because of some of the

We Crib, We Cry but Why? (Part 2)

2010-09-19T07:53:00.000+05:30

In 2009 when I wrote about my experience with BSNL and RTI influence on problem correction it was much appreciated. Since 2008 I am struggling with my PF (Provident Fund Consolidation issue). Filed an RTI in 2009 and at last got a reply in 2010 almost after a year. But there is some action happened and even though I got some good and some bad replies from different regional PF Departments.

Speed up Linux Disk I/O

2010-09-18T14:30:00.001+05:30

Although I have limited experience in Linux but my Linux exposure taught me that windows 7 bit edition is faster than Linux. To contradict my statement one Linux geek in Sydney told me that I should fine tune my disk access parameters to get the better disk I/O in hard disk. To my surprise he was right. Although I am not sure this issue is there with all hardware and all version of

Grilling the grl’s

2010-09-16T09:25:00.003+05:30

We talked about the grl’s (Green Resource Locators) but how these green resource locators are going to work. That’s a subject in this concept shaping article. Currently data centre infrastructure efficiency is measured as Power Usage Effectiveness most of us know as (PUE of Data-Centres). PUE is a metric of efficiency of data center’s physical infrastructure, whose major elements are Power and

Cloud Computing new era in IT Transformation

2010-09-13T11:47:00.004+05:30

In every 5 years recession teaches us something and technology transformation become inevitable. I am very fortunate that I witnessed Y2K bug rectification boon, Dot Com burst, ERP Menace, now the technology consolidation in Just 12 Years. Started career from centralised computing era; now designing a solutions to go back on centralised computing in distributed way. What does it means? Yes I am

Is really after HIPAA now HITECH act is bothering healthcare professional

2010-09-13T11:43:00.002+05:30

Nothing to bother about it first of all some let’s identifies some of the good points of HITECH Act. Under HITECH Act Medicare and Medicaid bonus payout scheme, a physician who can demonstrate “Meaningful Use” of an EMR (Electronic Medical Records) in 2011 would be eligible to receive US$ 18,000 from Medicare for the first year and US$44,000 total through 2015. These incentives will be reduced

Why things are cyclic in this universe ?

2010-07-09T11:09:00.000+05:30

Recently I was reading a book by Paul Davies called "The Mind of God". Their is one chapter titled "Can Universe Create itself ?". Although auther is professor of Philosophy and a scientist but I am just a technecition still thought that let's note how I corelate the topic with myself.

Disabling a Camera and Video recorders from Blackberry Bold

2010-04-26T14:44:00.000+05:30

Since from last few days we were struggling to disable the BBB Camera feature. searched lot's of forum and discussion board. Most of forum is talking about using a enterprise service. But what if your organization BB enterprise management team will work like a Gov agencies. When it’s too beurocatic that it will take 3-4 months to have this feature disabled via enterprise server. But still being a

10 Steps to Achive Successful DLP Implementation

2010-02-25T08:53:00.000+05:30

DLP Implementation is having usually 9-12 process steps. Some of the process steps are sequential and some of them can be completed in parallel. They are as:- 1) Identification of what type of solution do we require? (1-3 Months based on the enterprise size and their partners agreement) There are many different types of products on the market that promise to solve DLP such as hard

Absolutely Brilliant Interview Answers of Job Hopper !!!

2010-01-24T08:50:00.000+05:30

Some time back one of my friend forwarded this mail to me. I was quite impressed with answers and though documented over here. Although one of my HR Manager Told me that "Don't fall in love with company where your working, don't fall in love with superior with whom you are working, fall in love with work which your doing" after 6 years of that learning when I got this mail forward I was thinking

Why Valve replacement give big bucks to Doctors then to Mechanics

2010-01-10T18:45:00.000+05:30

A mechanic was removing the cylinder heads from the motor of a car when he spotted the famous heart surgeon in his shop, who was standing off tothe side, waiting for the service manager to come to take a look at his car .The mechanic shouted across the garage," Hello Doctor!! Please come over here for a minute."The famous surgeon, a bit surprised, walked over to the mechanic.The mechanic

Resume, CV and Biodata (What is best suited for you)

2009-12-02T05:36:00.000+05:30

People use the words RESUME, C.V., and BIO-DATA interchangeably for the document highlighting skills, education, and experience that a candidate submits when applying for a job. On the surface level, all the three mean the same. However, there are intricate differences. I was initiall quite confused earlier. But after knowing the difference as given below my life was quite easy.RESUMEResume Is a

In search of Perfection

2009-11-01T21:25:00.000+05:30