<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
		xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
>

<channel>
	<title>I Am Security &#187; Attack Vector</title>
	<atom:link href="http://www.iamit.org/blog/tag/attack-vector/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.iamit.org/blog</link>
	<description>Security news and research</description>
	<lastBuildDate>Wed, 25 Jan 2012 11:13:27 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
<cloud domain='www.iamit.org' port='80' path='/blog/?rsscloud=notify' registerProcedure='' protocol='http-post' />
	<copyright>Copyright &#xA9; I Am Security 2011 </copyright>
	<managingEditor>iamit@iamit.org (I Am Security)</managingEditor>
	<webMaster>iamit@iamit.org (I Am Security)</webMaster>
	<image>
		<url>http://www.iamit.org/blog/wp-content/plugins/podpress/images/powered_by_podpress.jpg</url>
		<title>I Am Security</title>
		<link>http://www.iamit.org/blog</link>
		<width>144</width>
		<height>144</height>
	</image>
	<itunes:subtitle></itunes:subtitle>
	<itunes:summary>Security news and research</itunes:summary>
	<itunes:keywords></itunes:keywords>
	<itunes:category text="Society &#38; Culture" />
	<itunes:author>I Am Security</itunes:author>
	<itunes:owner>
		<itunes:name>I Am Security</itunes:name>
		<itunes:email>iamit@iamit.org</itunes:email>
	</itunes:owner>
	<itunes:block>no</itunes:block>
	<itunes:explicit>no</itunes:explicit>
	<itunes:image href="http://www.iamit.org/blog/wp-content/plugins/podpress/images/powered_by_podpress_large.jpg" />
		<item>
		<title>The curious case of Dropbox security</title>
		<link>http://www.iamit.org/blog/2011/04/the-curious-case-of-dropbox-security/</link>
		<comments>http://www.iamit.org/blog/2011/04/the-curious-case-of-dropbox-security/#comments</comments>
		<pubDate>Wed, 13 Apr 2011 14:42:33 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cloud security]]></category>
		<category><![CDATA[Cloud storage]]></category>
		<category><![CDATA[Dropbox]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=593</guid>
		<description><![CDATA[After the disclosure of the host_id authentication issues that plagued the popular Dropbox service last week, a new issue came up with the fact that Dropbox can detect whether the files you are trying to upload to their cloud already &#8230; <a href="http://www.iamit.org/blog/2011/04/the-curious-case-of-dropbox-security/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2011/04/the-curious-case-of-dropbox-security/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Defense through Offense, and how APT fits there</title>
		<link>http://www.iamit.org/blog/2011/04/defense-through-offense-and-how-apt-fits-there/</link>
		<comments>http://www.iamit.org/blog/2011/04/defense-through-offense-and-how-apt-fits-there/#comments</comments>
		<pubDate>Sun, 03 Apr 2011 10:32:31 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[apt]]></category>
		<category><![CDATA[attack tools]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Information security]]></category>
		<category><![CDATA[penetration test]]></category>
		<category><![CDATA[red team]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[rsa]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[social network]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=577</guid>
		<description><![CDATA[I&#8217;m guessing that having &#8220;APT&#8221; in anything that goes outside for public consumption these days is mandatory, but this post actually has a good reason to do so. If you look back just one post in the past, we were &#8230; <a href="http://www.iamit.org/blog/2011/04/defense-through-offense-and-how-apt-fits-there/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2011/04/defense-through-offense-and-how-apt-fits-there/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>the art of not thinking about elephants</title>
		<link>http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/</link>
		<comments>http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/#comments</comments>
		<pubDate>Thu, 06 Jan 2011 08:24:43 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Security Research]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[exfiltration]]></category>
		<category><![CDATA[red team]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security policy]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=560</guid>
		<description><![CDATA[Approaching risk management should be done in the most holistic manner, this means that EVERY aspect of information flow should be taken into account. This article describes how a red-team test managed to exfiltrate data out of a closed/non-connected network using innovative thinking. <a href="http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Botnet Wars &#8211; industry Q&amp;A</title>
		<link>http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/</link>
		<comments>http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/#comments</comments>
		<pubDate>Mon, 25 Oct 2010 12:43:49 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[malweb]]></category>
		<category><![CDATA[press]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technical]]></category>
		<category><![CDATA[technology]]></category>
		<category><![CDATA[toolkit]]></category>
		<category><![CDATA[vulnerability]]></category>
		<category><![CDATA[web2.0]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/</guid>
		<description><![CDATA[I was approached recently by Bart Parys from Panda security in order to participate in an industry expert Q&#038;A about the botnet wars (apparently he did his homework as he got quite the lineup to participate in this, guessed he &#8230; <a href="http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Learning from stux, and connecting more dots in infosec</title>
		<link>http://www.iamit.org/blog/2010/10/learning-from-stux-and-connecting-more-dots-in-infosec/</link>
		<comments>http://www.iamit.org/blog/2010/10/learning-from-stux-and-connecting-more-dots-in-infosec/#comments</comments>
		<pubDate>Mon, 11 Oct 2010 12:00:46 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cyberwar]]></category>
		<category><![CDATA[cyberwarfare]]></category>
		<category><![CDATA[penetration test]]></category>
		<category><![CDATA[press]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[social network]]></category>
		<category><![CDATA[technology]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/2010/10/learning-from-stux-and-connecting-more-dots-in-infosec/</guid>
		<description><![CDATA[Learning from stuxnet on how we are exposed to similar attacks. Connecting the dots between technology, society, and the human factor when talking about cyberwarfare. <a href="http://www.iamit.org/blog/2010/10/learning-from-stux-and-connecting-more-dots-in-infosec/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/10/learning-from-stux-and-connecting-more-dots-in-infosec/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Tying up loose ends before Vegas (scammer closure)</title>
		<link>http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/</link>
		<comments>http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/#comments</comments>
		<pubDate>Mon, 26 Jul 2010 09:20:36 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[summary]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=501</guid>
		<description><![CDATA[Instead of updating the post in question (again), I figured I&#8217;ll post all the new info here and call this a wrap. So, we all know about the security scammer now, and the different ways he is working to defraud &#8230; <a href="http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Turkish hack and another case for IL-CERT</title>
		<link>http://www.iamit.org/blog/2010/07/the-turkish-hack-and-another-case-for-il-cert/</link>
		<comments>http://www.iamit.org/blog/2010/07/the-turkish-hack-and-another-case-for-il-cert/#comments</comments>
		<pubDate>Mon, 19 Jul 2010 05:44:25 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[CERT]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[press]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technology]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=499</guid>
		<description><![CDATA[You have been living under a rock if you haven&#8217;t heard of the Turkish hack a couple of days ago. Basically &#8211; a Turkish hacker forum that bolsters a strong anti-Israeli attitude has been practicing hacking and mostly defacing Israeli &#8230; <a href="http://www.iamit.org/blog/2010/07/the-turkish-hack-and-another-case-for-il-cert/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/07/the-turkish-hack-and-another-case-for-il-cert/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How [not to] scam security people</title>
		<link>http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/</link>
		<comments>http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/#comments</comments>
		<pubDate>Thu, 08 Jul 2010 06:48:52 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/</guid>
		<description><![CDATA[An analysis of a rogue security tool that tries to steal passwords and scam people out of their paypal money and accounts. <a href="http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/feed/</wfw:commentRss>
		<slash:comments>27</slash:comments>
		</item>
		<item>
		<title>The China/Google thing, accountants and other miscreants</title>
		<link>http://www.iamit.org/blog/2010/02/the-chinagoogle-thing-accountants-and-other-miscreants/</link>
		<comments>http://www.iamit.org/blog/2010/02/the-chinagoogle-thing-accountants-and-other-miscreants/#comments</comments>
		<pubDate>Fri, 05 Feb 2010 20:33:55 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cyberwarfare]]></category>
		<category><![CDATA[predictions]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security policy]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=400</guid>
		<description><![CDATA[Aha! Can&#8217;t believe I managed to avoid the unbelievable hype flood that swept across the interwebs in the last month. And to think that the last post (long overdue, I know&#8230; had REALLY good reasons for not being able to &#8230; <a href="http://www.iamit.org/blog/2010/02/the-chinagoogle-thing-accountants-and-other-miscreants/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/02/the-chinagoogle-thing-accountants-and-other-miscreants/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Malicious ads circa 2007</title>
		<link>http://www.iamit.org/blog/2009/09/malicious-ads-circa-2007/</link>
		<comments>http://www.iamit.org/blog/2009/09/malicious-ads-circa-2007/#comments</comments>
		<pubDate>Tue, 29 Sep 2009 12:11:29 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[advertisements]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[malweb]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[SEO]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=374</guid>
		<description><![CDATA[Malicious ads are plaguing the web? Not unless it's news from 2007... <a href="http://www.iamit.org/blog/2009/09/malicious-ads-circa-2007/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2009/09/malicious-ads-circa-2007/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

