This page was last modified: May 7, 2008 10:29 AM

This is a compilation of some interesting articles and documents that explain some potential security flaws and in some cases the way to prevent or avoid them (hopefully). This list is by far not complete and not intended for end users but for developers. In some cases contain hard to understand articles that requires previous knowledge like network protocols and standarts, cryptography, math and number theory not available in this compilation. Although only serves as an introduction and not intended to be a full reference, feel free to submit candidate links containing useful information you might be aware of to halplus at cashoncell.com for inclusion. They will serve not only to other developers but to anyone interested into building safe systems. The most up to date list can be obtained at http://aircash.sourceforge.net/security_documents_compilation.html

Cryptography

1. Side-Channel Attacks on Symmetric Encryption Schemes
2. Integrity protection and error propagation (Wikipedia)
3. Cryptanalysis of MD5 and SHA: Time for a New Standard
4. Padding in RSA and Small exponents
5. RSA-encrypted messages using the PKCS #1 v1
6. RSA Branch Prediction Analysis
7. Handbook of applied Cryptography (see chapter 8 - Public-Key Encryption available for free)
8. RSA Timing Attacks Whitepaper
9. Blowfish known attack on reduced rounds version

Database security(requires expansion)

1. Secure MySQL Database Design

Potential Web applications security issues

• Account Lockdown
  1. Description, examples and countermeasures against account lockdown attacks
• XSS
  1. XSS FAQ
  2. Malicious HTML Tags Embedded in Client Web Requests
  3. Cross Site Scripting Info
  4. XSS (Cross Site Scripting) Cheat Sheet
  5. Alternate ways to evade filters
  6. Klein, A., DOM Based XSS Injection
     
• SSI
  1. Server Side Includes (SSI) injection
  2. Server-Side Includes (SSI) Injection from OWASP
  3. SSI Examples
• XST
  1. XST Whitepaper
• CSRF
  1. Cross Site Request Forgery according to OWASP
  2. The Cross-Site Request Forgery (CSRF/XSRF) FAQ
• Path Traversal
  1. Path Traversal explanation from the Web Application Security Consortium
  2. How to protect against path traversal attacks
  3. Another document about protecting against Path Traversal (similar to the previous)
• Session fixation
  1. Interesting article about session fixation
  2. A short warning about SF
• HTML injection
  1. How dangerous is HTML injection
  2. Apache Commons String escape Utils
  3. Record of HTML Injection in BEA WebLogic Server Console
• SQL injection
  1. SQL Injection Explanation
  2. SQL Injection Walkthrough
  3. Protecting against SQL injection with Java
• Argument Injection or Modification
  1. Argument Injection or Modification from OWASP (very little on the WEB)
• Command injection
  1. Command Injection according to OWASP (with references)
• Others
  1. Cache Poisoning
  2. Cross User Defacement

Java security

1. Twelve rules for developing more secure Java code - Part 1
2. Twelve rules for developing more secure Java code - Part 2
3. Twelve rules for developing more secure Java code - Part 3
4. Document about Java Virtual Machines security by Last Stage of Delirium Research Group (locally mirrored)
5. Applet Security FAQ
6. SecureRandom
7. Securing Apache Tomcat

.net security

Others(but important)

• Captchas
• Regulation of operation
  1. Asymmetric resource consumption
  2. Improper Resource Shutdown or Release
  3. Failure to Clear Heap Memory Before Release
• Policies
  1. Password Aging with Long Expiration
  2. Password storage policies ( the code showed there assumes the database user with same privileges for user creation and for password verification and probably causes asymmetric resource consumption for the 1000 iteration number causing CPU starvation by simply submitting a password for verification too much times. Can likely cause resources drain even providing no user and/or password however is useful for the salting and timing part )
  3. Does Secrecy Help Protect Personal Information?
  4. Authentication and Expiration
  5. Essay about Two-Factor Authentication from Bruce Schneier
  6. Risks of Relying on Cryptography
  7. How liable vendors should be

Electronic emanations

1. Countermeasures against electromagnetic emanations
2. Unofficial TEMPEST Information Page
3. Wikipedia Entry on TEMPEST