Aggregator

腾讯代码安全检查Xcheck

腾讯代码安全检查Xcheck
4 years 8 months ago
Xcheck是一个由腾讯公司CSIG质量部代码安全检查团队自研的静态应用安全测试(SAST，Static application security testing)工具，致力于挖掘代码中隐藏的安全风险，提升代码安全质量。

腾讯代码安全检查Xcheck

腾讯代码安全检查Xcheck
4 years 8 months ago
Xcheck是一个由腾讯公司CSIG质量部代码安全检查团队自研的静态应用安全测试(SAST，Static application security testing)工具，致力于挖掘代码中隐藏的安全风险，提升代码安全质量。

Machine Learning Attack Series: Perturbations to misclassify existing images

Embrace The Red
4 years 8 months ago
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts. Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out The previous post covered some neat smart fuzzing techniques to improve generation of fake husky images. The goal of this post is to take an existing image of the plush bunny below, modify it and have the model identify it as a husky.

Maximizing Qname Minimization: A New Chapter in DNS Protocol Evolution

Verisign Security Blog
4 years 8 months ago

Data privacy and security experts tell us that applying the “need to know” principle enhances privacy and security, because it reduces the amount of information potentially disclosed to a service provider — or to other parties — to the minimum the service provider requires to perform a service.  This principle is at the heart of […]

The post Maximizing Qname Minimization: A New Chapter in DNS Protocol Evolution appeared first on Verisign Blog.

Matt Thomas

ARL(资产侦察灯塔系统)-源码搭建 - Zhengjim

zhengjim
4 years 8 months ago
freebuf能力中心开源了一套资产扫描系统(https://github.com/TophantTechnology/ARL)，提供docker版，但并无源码搭建的文档(无完整文档)。于是在星光哥及小明哥指导下完成源码搭建，在这里记录一下。 环境 centos7.6 2h4g 搭建过程 首先从gi
Zhengjim

Managed ad