SecWiki周刊（第97期)

SecWiki周刊（第97期）

2016/01/04-2016/01/10

安全资讯

[文档] 美国《网络威慑战略》文件解读
http://mp.weixin.qq.com/s?__biz=MzAwMDE3MzgxMQ==&mid=402252399&idx=1&sn=0f46e400bd5de2c0971e69d1484e4eaf&scene=23&srcid=0105djentwteILuGVqfnzcgS#rd

[会议] 点融（DSRC）安全沙龙第二季——互联网安全风控
http://www.huodongxing.com/go/dianrongsec2

安全技术

[书籍] Security Concepts online book
http://www.subspacefield.org/security/security_concepts/index.html

[编程技术] 让思路更清晰——我是怎样使用思维导图的
https://blog.coding.net/blog/coding-mindmap

[数据挖掘] 使用 Elasticsearch 实现博客站内搜索
https://imququ.com/post/elasticsearch.html

[恶意分析] 某僵尸网络被控端恶意样本分析
http://blogs.360.cn/blog/%e6%9f%90%e5%83%b5%e5%b0%b8%e7%bd%91%e7%bb%9c%e8%a2%ab%e6%8e%a7%e7%ab%af%e6%81%b6%e6%84%8f%e6%a0%b7%e6%9c%ac%e5%88%86%e6%9e%90/

[会议] Botconf 2015总结
http://drops.wooyun.org/papers/11652

[设备安全] SCADA StrangeLove Default/Hardcoded Passwords List
https://github.com/scadastrangelove/SCADAPASS/blob/master/scadapass.csv

[运维安全] My Favorite Threat Intel Tweets of 2015
http://www.cyintanalysis.com/my-favorite-threat-intel-tweets-of-2015/

[数据挖掘] [译] 实时股票预测的开源参考结构
http://mp.weixin.qq.com/s?__biz=MjM5MTQzNzU2NA==&mid=401656388&idx=1&sn=abaae997ed2f8d4fc2261f821ce06a9a&scene=23&srcid=0106S0HrVrJByefRWlce9GF4#rd

[恶意分析] APT_CyberCriminal_Campagin
https://github.com/gasgas4/APT_CyberCriminal_Campagin

[编程技术] 如何设计一个安全的账户系统
http://blog.coderzh.com/2016/01/03/security-design/

[恶意分析] Let's Encrypt Now Being Abused By Malvertisers
http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/

[Web安全] Blade:A webshell tool with customized WAF bypass payloads
https://github.com/wonderqs/Blade

[比赛] Mellivora is a CTF engine written in PHP
https://github.com/Nakiami/mellivora

[比赛] sans-holiday-hack-challenge-2015-writeup
https://cedricvb.be/post/sans-holiday-hack-challenge-2015-writeup/

[其它] Cheat Sheets to help you in configuring your systems
http://www.malwarearchaeology.com/cheat-sheets

[论文] public database for security research
https://github.com/secdr/research-database

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第97期)