cnbird
cnbird_个人页
cnbird
文章
4017
问答
3
视频
0
个人介绍
阿里云安全专家，主要负责阿里云云产品安全。
擅长的技术
-
发表了文章 2015-04-20
ProcDOT visual malware analysis
http://www.procdot.com/
-
发表了文章 2015-04-20
威胁情报 应急响应 以及 恶意软件分析资料
https://digital-forensics.sans.org/community/summits http://cert.
-
发表了文章 2015-04-18
The Delicate Art of Remote Checks – A Glance Into MS15-034 - See more at: http://blog.beyondtrust.co
http://blog.beyondtrust.com/the-delicate-art-of-remote-checks-a-glance-into-ms15-034 ...
-
发表了文章 2015-04-16
WebLogic SSRF And XSS (CVE-2014-4241, CVE-2014-4210, CVE-2014-4242)
http://blog.gdssecurity.com/labs/2015/3/30/weblogic-ssrf-and-xss-cve-2014-4241-cve-2014-4210-cve-2014-4.
-
发表了文章 2015-04-16
CuckooDroid Book
http://cuckoo-droid.readthedocs.org/en/latest/
-
发表了文章 2015-04-13
Detecting Kippo SSH honeypots, bypassing patches, and all that jazz.
http://morris.guru/detecting-kippo-ssh-honeypots/ Background I have a lot of honeypots configured around the Internet.
-
发表了文章 2015-04-13
opensource threat Intelligence
https://www.youtube.com/watch?v=JxJaCIzzFzg
-
发表了文章 2015-04-13
Linux Cgroup
https://www.kernel.org/doc/Documentation/cgroups/
-
发表了文章 2015-04-12
Mandiant发布的恶意软件报告(恶意软件已经转移到了WMI和powershell)
https://cansecwest.com/csw15archive.html https://cansecwest.
-
发表了文章 2015-04-11
How To Defeat Advanced Malware. New Tools for Protection and Forensics
http://www.concise-courses.com/learn/about-endpoint-protection/ ...
-
发表了文章 2015-04-11
iOS Application Security
http://www.securitytube-training.com/online-courses/securitytube-ios-security-expert/index.
-
发表了文章 2015-04-11
Caching Tutorial for Web Authors and Webmasters
https://www.mnot.net/cache_docs/
-
发表了文章 2015-04-11
pci-dss最新发布渗透测试指南
https://www.pcisecuritystandards.org/documents/Penetration_Testing_Guidance_March_2015.
-
发表了文章 2015-04-11
malware分析相关
https://www.fireeye.com/blog/threat-research/2015/04/analysis_of_kriptovo.
-
发表了文章 2015-04-11
HookFinder: Identifying and Understanding Malware Hooking Behaviors(包括构建自动化分析malware的tools)
http://bitblaze.cs.berkeley.edu/hookfinder.html https://iseclab.
-
发表了文章 2015-04-06
How Google Tackles Security(google安全怎么做的强烈推荐)
http://www.cso.com.au/whitepaper/370196/how-google-tackles-security-webcast/?type=other&arg=0&l...
-
发表了文章 2015-04-05
Blackhat上没有讲的SAP手机安全如何黑掉世界500强CEO手机
https://www.youtube.com/watch?v=2-c3luyS6Ms
-
发表了文章 2015-04-05
Enhanced Mitigation Experience Toolkit
http://support.microsoft.com/en-us/kb/2458544
-
发表了文章 2015-03-27
SANS critical control(强烈推荐互联网公司参考)
https://www.sans.org/critical-security-controls/
-
发表了文章 2015-03-24
dtrace动态分析
DTrace: Dynamic Tracing in Oracle Solaris, Mac OS X and FreeBSD http://www.
-
发表了文章 2015-03-21
windows pentest经验
端口转发 https://technet.microsoft.com/en-us/library/cc731068%28v=ws.
-
发表了文章 2015-03-19
GFI Sandbox™ (formerly CWSandbox)
http://www.toolswatch.org/2011/04/gfi-sandbox%E2%84%A2-formerly-cwsandbox-the-malware-analysis-tool-v3-2-released/ http://www.
-
发表了文章 2015-03-18
large-scale analysis of malware downloaders
http://www.christian-rossow.de/publications/downloaders-dimva12.
-
发表了文章 2015-03-10
memory dump analysis anthology volume 7 online
http://www.patterndiagnostics.com/training-reference-products#MDAAV7 ...
-
发表了文章 2015-03-09
owasp testing guide 2014 中文
http://kennel209.gitbooks.io/owasp-testing-guide-v4/content/zh/ ...
-
发表了文章 2015-03-03
不错的安全培训(在线)
https://mile2.com/mile2-online-estore/training-videos.
-
发表了文章 2015-03-03
11 Steps Attackers Took to Crack Target
http://www.cio.com/article/2600345/security0/11-steps-attackers-took-to-crack-target.
-
发表了文章 2015-03-01
Who's Using Cyberthreat Intelligence and How?
https://www.sans.org/webcasts/cyberthreat-intelligence-how-1-definitions-tools-standards-99052 https://www.
-
发表了文章 2015-02-28
docker malware分析
https://remnux.org/docs/containers/run-apps/
-
发表了文章 2015-02-28
sans webcast
https://www.sans.org/webcasts/archive/2015 http://digital-forensics.
-
发表了文章 2015-02-28
windows event logs分析
登陆日志 4624 谁从哪里登陆，什么时间登陆 4627 管理员 5140 从哪里发起了共享连接 计划任务 106 - jobname,who,time 200 - st...
-
发表了文章 2015-02-27
Deepsec 2014 - Memory Forensics And Security Analytics - Detecting Unknown Malware
http://www.securitytube.net/video/12541
-
发表了文章 2015-02-26
Docker Secure Deployment Guidelines
https://github.com/GDSSecurity/Docker-Secure-Deployment-Guidelines Docker Secure Deployment G...
-
发表了文章 2015-02-26
JetLeak Vulnerability: Remote Leakage Of Shared Buffers In Jetty Web Server [CVE-2015-2080]
http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.
-
发表了文章 2015-02-26
Fundamental Computer Investigation Guide for Windows
https://technet.microsoft.com/en-us/library/cc162846.aspx
-
发表了文章 2015-02-26
Oracle Forensics t00ls
logminer verity data block examiner cadfile listener.
-
发表了文章 2015-02-25
FINDING UNKNOWN MALWARE
http://www.securitytube.net/video/12402 http://www.
-
发表了文章 2015-02-25
Security Considerations for AppLocker
https://technet.microsoft.com/en-us/library/ee844118(WS.
-
发表了文章 2015-02-25
INFRASTRUCTURE TRACKING WITH PASSIVE MONITORING AND ACTIVE PROBING
https://www.youtube.com/watch?v=yJl4TTdnVpw
-
发表了文章 2015-02-24
Virus Bulletin malware分析杂志以及paper
https://www.virusbtn.com/virusbulletin/archive/index https://www.
-
发表了文章 2015-02-17
malware分析视频
https://www.youtube.com/user/virusbtn
-
发表了文章 2015-02-17
Security Analytics: Detecting Advanced Threats and Fraud
https://www.brighttalk.com/webcast/574/136917
-
发表了文章 2015-02-16
犯罪心理学
http://open.163.com/movie/2011/9/A/B/M8CCJHF2G_M8CCM0SAB.
-
发表了文章 2015-02-16
track your activties
https://disconnect.me/ https://github.com/mozilla/lightbeam https://www.
-
发表了文章 2015-02-16
opensource sandbox
mandingo https://code.google.com/p/mandingo/w/list
-
发表了文章 2015-02-16
Practically Exploiting MS15-014 and MS15-011
If you’re reading this then you’ve probably seen all the media coverage over the last couple of days surrounding MS15-011 and MS15-014.
-
发表了文章 2015-02-16
2015年关注的技术书籍
http://www.springer.com/computer/security+and+cryptology?SGWID=8-40160-66-653429-0&sba=INCLUDE...
-
发表了文章 2015-02-16
collective intelligence framework
http://www.securitytube.net/video/12388 https://code.
-
发表了文章 2015-02-16
opensource dpi
http://www.networksecuritytoolkit.org/nst/index.
-
发表了文章 2015-02-16
opensecuritytraining video
https://www.youtube.com/user/OpenSecurityTraining/playlists https://www.
暂无更多信息
-
发表了文章
2018-02-06
Microsoft BuleHat 2018 Videos and Slides
-
发表了文章
2018-02-05
From Serialized to Shell :: Auditing Google Web Toolkit
-
发表了文章
2018-02-01
Microsoft Ignite Videos
-
发表了文章
2018-02-01
AWS Reinvent 2017 Security Sessions
-
发表了文章
2018-01-28
Google Patent
-
发表了文章
2018-01-28
GOOGLE CLOUD PLATFORM 安全性
-
发表了文章
2018-01-21
OBIEE Pentest
-
发表了文章
2018-01-20
分布式系统
-
发表了文章
2017-12-06
MTCS Certification Scheme
-
发表了文章
2017-12-03
Attack OGC WFS Implementation
-
发表了文章
2017-11-20
Alictf 2015决赛题目设计和解题思路
-
发表了文章
2017-11-12
Lync server 2013 部署开发常用工具下载
-
发表了文章
2017-08-23
Big Data Secuity Solution
-
发表了文章
2017-08-11
Google漏洞过滤规则研究
-
发表了文章
2017-08-10
INTEL Processor Trace for vulnerability discovery
-
发表了文章
2017-08-04
AWS自动化合规slide
-
发表了文章
2017-08-04
Secure Multi-party Computation
-
发表了文章
2017-08-01
Harvesting the Low-hanging Fruits: Defending Against Automated Large-Scale Cyber-Intrusions by Focus
-
发表了文章
2017-07-29
Blackhat 2017&Defcon 25学习笔记
-
发表了文章
2017-07-25
MapReduce技术的初步了解与学习
滑动查看更多
-
回答了问题
2015-02-02
【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！
Re【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！ 支持王挺，我是来支持王挺的赞0 踩0 评论0 -
提交了问题
2014-04-30
ECS可以做负载均衡吗
-
回答了问题
2014-04-30
ECS可以做负载均衡吗
ReECS可以做负载均衡吗 好的我去试试赞0 踩0 评论0
滑动查看更多
暂无更多信息