Annual Rate of Occurrence
In the context of risk management, the annual rate of occurrence is an estimate of the repetitions of the realization of a risk, over the period of a year. The relationship between ARO, SLE and ALE is:
ALE = SLE * ARO
Single Loss Expectancy
In the context of risk management, the single loss expectancy is an estimate of the monetary damage to an organization from a specific instance of realization of a risk.
Security Links Cheatsheet
Security-oriented Linux Distributions
Scanning Tools
- McAfee ShareScan for SMB/CIFS Shares.
- SoftPerfect NetworkScanner for IP reachability and a handful of well-known ports.
- Search engines: shodan.io, censys.io.
Knowledge & Practice
- VulnHub
- Penetration Testing Practice Labs, Vulnerable Apps and Systems
- Wargames
- CTF365
- PenTester Lab
- The Matasano Crypto Challenges: a set of crypto challenges with solutions in mainstream programming languages.
- 7 Free InfoSec Training Resources For IT Pros
- Hack This Site
- OWASP WebGoat
- Damn Vulnerable Web Application
- 10 Easy Ways to Increase Your Application Security Knowledge
Security Job Boards
Security Job Tips
- The Top 10 Highest Paying Jobs in Information Security, Part 1 and Part 2.
- Landing a Hands-On Security Gig, Part 1 and Part 2.
Certifications
How to run Firefox 3.6 on Ubuntu 15.04
These instructions will allow you to run the ancient 3.6 version of Firefox on a recent Ubuntu installation, namely 15.04, but it could apply to versions of Debian, Ubuntu and Linux Mint released close to 15.04.
Amazon Web Services Security
- Secure Server Deployments in Hostile Territory Part 1 and Part 2.
- AWS Security Best Practices
- Intro to Security by Design
Example queries on the Sakila MySQL database
Sakila is a sample database provided by MySQL, meant to be used in tests and documentation examples. This page lists some example queries against that database.
Get a non-normalized selection of actors and films in which they played:
SELECT actor.first_name,
actor.last_name,
film.title
FROM actor, film, film_actor
WHERE film_actor.actor_id = actor.actor_id
AND film_actor.film_id = film.film_id;
Get the same result with double INNER JOIN
:
SELECT actor.first_name, actor.last_name, film.title
FROM film_actor
INNER JOIN actor ON film_actor.actor_id = actor.actor_id
INNER JOIN film ON film_actor.film_id = film.film_id;
Show privileges for all users in MySQL
Example script:
mysql --silent \
--skip-column-names \
--user mysqldumper \
--execute 'SELECT User, Host from mysql.user' | \
while read User Host; do
mysql --user mysqldumper --execute "SHOW GRANTS FOR '$User'@'$Host'";
echo "===========================";
done
The mysqldumper
user only requires read permissions on the databases.