Owasp 2018 federated confidence
Download as PPTX, PDF0 likes129 views
VirusTotal is a free online service owned by Google that analyzes files and URLs. It identifies viruses, malware, and other malicious content by using antivirus engines and website scanners contributed by different security vendors. While the service is useful for detecting threats, it is important to be aware that any files uploaded are scanned and potentially collected by VirusTotal and its parent company Google. Proper precautions should be taken regarding what personal or sensitive files are uploaded to the service.
Owasp 2018 federated confidence
- 2. I AGREE I TOOK THE CONTENT OF THE “TERMS OF SERVICE” OF THE LEADING ONLINE SERVICES THAT WE USE ON A DAILY BASIS (INCLUDING FACEBOOK, SNAPCHAT, INSTAGRAM, TINDER ETC.) Designer: Dima Yarovinsky Institution: Bezalel Academy for Art and Design City, Country: Jerusalem, Israel Course: Infographics Teacher: Roni Levit
- 5. VIRUSTOTAL – TO SERVE AND PROTECT … AND COLLECT, BUT THIS IS NOT THEIR FAULT VIRUSTOTAL, A SUBSIDIARY OF GOOGLE, IS A FREE ONLINE SERVICE THAT ANALYZES FILES AND URLS ENABLING THE IDENTIFICATION OF VIRUSES, WORMS, TROJANS AND OTHER KINDS OF MALICIOUS CONTENT DETECTED BY ANTIVIRUS ENGINES AND WEBSITE SCANNERS VT SCANS WHAT YOU GIVE IT TO WORK WITH, WE BELIEVE SERVICES AS GDRIVE DOESN’T USE VT POR ANALYZING STORED FILES
- 7. VT – HUNTING DOWNLOADERSrule pdf_contains_action_link { meta: author = "Eduardo Chavarro" last_updated = "2018-02-08" tlp = "white" description = "A pdf that contains a link, working as an downloader" strings: $magic = { 25 50 44 46 } $s_link_tag = "/Subtype /Link" ascii wide nocase $s_action_tag = "Type /Action" ascii wide nocase $s_uri_tag = //URI .{14,}/ ascii wide nocase condition: $magic at 0 and all of ($s*) }
- 8. VT – VOYEUR TOTAL Files Name ------ ---- 2 Adult 5 books 2 cert 2 Contracts 2 cryptocoin 23 CV 29 Downloaders 3 email_forms 2 FINANCIAL 1 goverment 2 Medical 1 Pappers 3 possible_portal 3 productsheet 3 secrets 5 user_pwd 9 Vouchers
- 9. • DO NOT UPLOAD TO VT (OR ANYWHERE) IF THESE FILE AREN’T YOURS. • ASK YOUR HOSTING PROVIDER IF THEY USE VT PLUGINS AND WHAT KIND OF INFORMATION WILL BE UPLOADED (*.*?). • IF YOU SET A VT PLUGIN WITHIN YOUR COMPANY, ASK FOR PERMISSION AND VERIFY WINCH FOLDERS CAN BE MANAGED. • DON’T TRUST, ALWAYS CONFIRM.