Celor interesati de subiectul securitate le recomand urmatorul link: http://www.nextgenss.com/research/papers/

Sau direct:

13/09/06	Inter-Protocol Communication
12/09/06	Low Cost Attacks on Smart Cards - The Electromagnetic Side-Channel
16/11/05	Database Servers on Windows XP and the Unintended Consequences of Simple File Sharing
08/11/05	Securing PL/SQL Applications with DBMS_ASSERT
30/09/05	Buffer Underruns, DEP, ASLR and Improving the Exploitation Prevention Mechanisms (XPMs) on the Windows Platform
30/09/05	Data-Mining With SQL Injection and Inference
19/09/05	Writing Small Shellcode
22/08/05	The Pharming Guide: Understanding & Preventing DNS Related Attacks by Phishers
26/04/05	Stopping Automated Attack Tools
21/03/05	Anti Brute Force Resource Metering
28/01/05	Security Best Practice: Host Naming & URL Conventions
22/12/04	Blind Exploitation of Stack Overflow Vulnerabilities
01/11/04	Second-Order Code Injection Attacks
22/09/04	The Phishing Guide: Understanding & Preventing Phishing Attacks
05/07/04	Hackproofing MySQL
05/04/04	Mail Non-Delivery Notice Attacks
04/02/04	Passive Information Gathering - The Analysis of Leaked Network Security Information
08/09/03	Defeating the Stack Based Buffer Overflow Prevention Mechanism of Microsoft Windows 2003 Server
10/07/03	Variations in Exploit methods between Linux and Windows
09/05/03	Writing Secure ASP Scripts
21/03/03	New Attack Vectors and a Vulnerability Dissection of MS03-007
14/01/03	Quantum Cryptography - A Study Into Present Technologies and Future Applications (Appendix)
03/09/02	Threat Profiling Microsoft SQL Server (A Guide to Security Auditing)
08/07/02	Microsoft SQL Server Passwords (Cracking the password hashes)
24/06/02	Violating Database Security Measures
18/06/02	(more) Advanced SQL Injection
05/06/02	Non-stack Based Exploitation of Buffer Overrun Vulnerabilities on Windows NT / 2000 / XP
28/02/02	Assessing IIS Configuration Remotely (Low Level IIS Application Assessment)
06/02/02	Hackproofing Oracle Application Server (A Guide to Securing Oracle 9)
31/01/02	Advanced SQL Injection in SQL Server Applications
09/01/02	Email spoofing and CDONTS.NEWMAIL (Protecting Microsoft Active Server Pages Applications)
08/01/02	Creating Arbitrary Shellcode in Unicode Expanded Strings (The "Venetian" Exploit)
20/12/01	Hackproofing Lotus Domino Web Server

---

Cristian Andrei Lefter, SQL Server MVP
MCT, MCSA, MCDBA, MCAD, MCSD .NET,
MCTS, MCITP - Database Administrator SQL Server 2005
http://sqlserver.ro