BestHub
Sign in
Tagged articles

network security

375 articles · Page 3 of 4
Programmer DD
Programmer DD
Apr 23, 2022 · Information Security

How SSH Secures Remote Access: Ports, Handshakes, and Key Authentication Explained

This article explains the SSH protocol, covering its default port, the step‑by‑step handshake process—including connection establishment, version and algorithm negotiation, key exchange, and user authentication methods—while also describing common clients like PuTTY and OpenSSH and the role of symmetric and asymmetric encryption.

EncryptionOpenSSHPutty
0 likes · 11 min read
How SSH Secures Remote Access: Ports, Handshakes, and Key Authentication Explained
Architecture Digest
Architecture Digest
Apr 23, 2022 · Information Security

SSL VPN Technology Overview and Configuration Guide

This article provides a comprehensive overview of SSL VPN technology, detailing its advantages over IPSec, core functions such as virtual gateways, web proxy, file sharing, port forwarding, network extension, endpoint security, logging, authentication methods, typical application scenarios, and step‑by‑step configuration procedures.

Endpoint SecuritySSL VPNVirtual Gateway
0 likes · 9 min read
SSL VPN Technology Overview and Configuration Guide
IT Architects Alliance
IT Architects Alliance
Apr 19, 2022 · Information Security

How Zero Trust Redefines Enterprise Security: Architecture, Implementation, and Real‑World Practices

This article provides a comprehensive analysis of Zero Trust security, explaining its core principles, SDP‑based architecture, various implementation models—including user‑to‑resource and service‑to‑service schemes—deployment options, practical use cases, and guidance for successful enterprise adoption.

SDPaccess controlenterprise architecture
0 likes · 16 min read
How Zero Trust Redefines Enterprise Security: Architecture, Implementation, and Real‑World Practices
Top Architect
Top Architect
Apr 18, 2022 · Information Security

Zero Trust Architecture: Concepts, Implementation Schemes, Deployment Practices, and Practical Experience

This article provides a comprehensive overview of zero‑trust security, explaining its core principles, architectural models such as SDP, various implementation approaches (application‑layer proxy, traffic‑layer proxy, hybrid), deployment patterns for office and multi‑branch environments, practical rollout experience, and how zero‑trust integrates with existing security products.

SDPSecurity Deploymentaccess control
0 likes · 15 min read
Zero Trust Architecture: Concepts, Implementation Schemes, Deployment Practices, and Practical Experience
IT Services Circle
IT Services Circle
Apr 10, 2022 · Information Security

Building a Simple Python Port Scanner in 20 Lines

This tutorial explains how to create a lightweight Python port scanner using only standard libraries, covering required imports, command‑line host input, a full‑range port loop with socket connections, result handling, and runtime measurement, all within a concise 20‑line script.

Pythonnetwork securityport scanning
0 likes · 4 min read
Building a Simple Python Port Scanner in 20 Lines
MaGe Linux Operations
MaGe Linux Operations
Feb 13, 2022 · Information Security

Unlock Secure Remote LANs with Tailscale and WireGuard

This article introduces Tailscale, a WireGuard‑based virtual networking tool, explains its key security features, shows how to install and configure it on various platforms, and outlines practical use cases such as file transfer, remote development, and network proxying.

Remote AccessTailscaleVPN
0 likes · 11 min read
Unlock Secure Remote LANs with Tailscale and WireGuard
Cloud Native Technology Community
Cloud Native Technology Community
Jan 26, 2022 · Cloud Native

Unlocking Edge Cloud: Kube-OVN’s Security Groups, VIP, Live Migration & Smart NIC Offload

This article details how the Kube-OVN community extended the CNI for edge cloud scenarios by adding security‑group based access control, high‑availability virtual IP support, live‑migration‑friendly networking, and smart‑NIC hardware offload, including implementation steps, CRD designs, and relevant pull‑request references.

Edge ComputingKube-OVNLive Migration
0 likes · 10 min read
Unlocking Edge Cloud: Kube-OVN’s Security Groups, VIP, Live Migration & Smart NIC Offload
Cloud Native Technology Community
Cloud Native Technology Community
Jan 24, 2022 · Cloud Native

Building a Unified Cross‑Cluster Network Plane with Kube‑OVN for TiDB Deployment

The article explains how Kube‑OVN can create a flexible, efficient, and secure cross‑Kubernetes‑cluster network plane to meet user demands such as high availability, multi‑cloud separation, disaster‑recovery, and hybrid‑cloud compliance, and demonstrates its use with TiDB, MySQL, and WordPress workloads.

Cross-Cluster NetworkingKube-OVNKubernetes
0 likes · 8 min read
Building a Unified Cross‑Cluster Network Plane with Kube‑OVN for TiDB Deployment
Tencent Cloud Developer
Tencent Cloud Developer
Nov 29, 2021 · Information Security

DNSPod's GM DoH: China's First DNS over HTTPS with National Cryptographic Algorithms

DNSPod’s GM DoH, the first Chinese DNS‑over‑HTTPS service to employ national SM2 cryptographic algorithms and certificates, upgrades the traditional TLS handshake by encrypting the pre‑master secret with SM2 keys, thereby filling a critical gap in China’s secure networking infrastructure and enhancing national network security.

DNS InfrastructureDNS over HTTPSDNSPod
0 likes · 8 min read
DNSPod's GM DoH: China's First DNS over HTTPS with National Cryptographic Algorithms
Architects' Tech Alliance
Architects' Tech Alliance
Nov 25, 2021 · Information Security

Future Network Architecture: Precise Connection, Compute Network, and Inherent Security

This article examines the evolving requirements of future networks, proposing a precise‑connection architecture, flexible plug‑in forwarding, compute‑network integration, and inherent security mechanisms to support diverse quality‑of‑service demands across layers, while outlining control‑plane and data‑plane designs for scalable deployment.

architectural designcompute networkfuture network
0 likes · 11 min read
Future Network Architecture: Precise Connection, Compute Network, and Inherent Security
Liangxu Linux
Liangxu Linux
Nov 21, 2021 · Operations

Enforcing Per‑IP Rate Limiting on a TCP Port with iptables

This guide explains how to protect a shared development TCP port—used as a sidecar proxy for a Unix Domain Socket—by applying per‑IP rate limiting with iptables' hashlimit module, including full command examples, parameter details, and practical calculations.

iptablesnetwork securitysocat
0 likes · 6 min read
Enforcing Per‑IP Rate Limiting on a TCP Port with iptables
Architects' Tech Alliance
Architects' Tech Alliance
Nov 13, 2021 · Information Security

Understanding Firewalls: Definition, Principles, Architecture, and Functions

This article explains firewalls by defining their purpose, describing how they monitor and filter network traffic, outlining their architecture—including screening routers and proxy servers—and listing their key security functions such as access control, traffic filtering, logging, and attack detection.

access controlfirewallinformation security
0 likes · 7 min read
Understanding Firewalls: Definition, Principles, Architecture, and Functions
Douyu Streaming
Douyu Streaming
Oct 29, 2021 · Information Security

Understanding SSL/TLS and DTLS: From Cryptographic Basics to WebRTC Security

This article explains the security risks of early Internet protocols, the evolution of SSL/TLS and DTLS, fundamental cryptographic concepts such as symmetric and asymmetric encryption, hashing, MACs, digital signatures, AES modes and padding, and how these technologies are applied in TLS handshakes, DTLS, and WebRTC.

AESDTLSSSL
0 likes · 27 min read
Understanding SSL/TLS and DTLS: From Cryptographic Basics to WebRTC Security
Selected Java Interview Questions
Selected Java Interview Questions
Oct 13, 2021 · Information Security

Understanding HTTP and HTTPS: Protocol Basics, Man‑in‑the‑Middle Attacks, and Secure Communication

This article explains the fundamentals of the HTTP protocol, illustrates how plain‑text communication enables man‑in‑the‑middle attacks, and describes how symmetric and asymmetric encryption, SSL/TLS handshakes, and CA certificate chains are used in HTTPS to secure web traffic.

EncryptionHTTPSMan-in-the-Middle
0 likes · 8 min read
Understanding HTTP and HTTPS: Protocol Basics, Man‑in‑the‑Middle Attacks, and Secure Communication
Architects' Tech Alliance
Architects' Tech Alliance
Oct 11, 2021 · Information Security

How AI‑Powered Firewalls Outperform Traditional NGFWs in Detecting Advanced Threats

The article examines why conventional next‑generation firewalls (NGFW) struggle with sophisticated, unknown attacks, and explains how Huawei’s AI firewall leverages cloud‑trained and on‑premise unsupervised learning models, dedicated hardware, and encrypted‑traffic analysis to automatically detect and mitigate advanced threats across the attack chain.

AI firewallCloud securityMachine Learning
0 likes · 9 min read
How AI‑Powered Firewalls Outperform Traditional NGFWs in Detecting Advanced Threats
Architects' Tech Alliance
Architects' Tech Alliance
Sep 26, 2021 · Fundamentals

IPv6 Evolution for Government External Networks: Benefits, Challenges, and Technical Overview

The article explains how IPv6 addresses the address shortage, security, and scalability challenges of government external networks, outlines IPv6 advantages such as abundant address space, extensibility, and higher security, and describes the emerging IPv6+ ecosystem with SRv6, network slicing, and AI-driven operations.

Address ExhaustionIPv6IPv6+
0 likes · 12 min read
IPv6 Evolution for Government External Networks: Benefits, Challenges, and Technical Overview
Liangxu Linux
Liangxu Linux
Sep 20, 2021 · Information Security

Mastering iptables: Tables, Chains, Rules and Practical Commands

This guide explains the architecture of iptables—including tables, chains and rules—covers common targets, shows how to list, flush, persist and modify rules, and provides complete examples for SSH, HTTP, NAT port forwarding and source‑IP restrictions on Linux firewalls.

LinuxNATfirewall
0 likes · 16 min read
Mastering iptables: Tables, Chains, Rules and Practical Commands
MaGe Linux Operations
MaGe Linux Operations
Sep 9, 2021 · Information Security

Can You Crack WiFi Passwords with Python? A Step‑by‑Step Guide

This tutorial walks through building both command‑line and Tkinter‑based Python tools that scan nearby Wi‑Fi networks, read password dictionaries, and perform brute‑force attacks using the pywifi library, while also showing how to package the script as an executable and discussing potential multithreading improvements.

PythonTkinterWiFi
0 likes · 14 min read
Can You Crack WiFi Passwords with Python? A Step‑by‑Step Guide
NetEase Smart Enterprise Tech+
NetEase Smart Enterprise Tech+
Aug 24, 2021 · Information Security

How NetEase Cloud IM SDK Prevents DNS Hijacking with HttpDNS High‑Availability

This article explains the DNS hijacking threat, shares a real incident affecting NetEase Cloud IM, and details a comprehensive high‑availability architecture—including HttpDNS, laddered HTTP requests, caching strategies, and SNI handling—that protects the SDK from DNS attacks and ensures reliable service.

CacheDNS hijackingHTTPDNS
0 likes · 13 min read
How NetEase Cloud IM SDK Prevents DNS Hijacking with HttpDNS High‑Availability
Ops Development Stories
Ops Development Stories
Aug 18, 2021 · Information Security

How to Extract IPs from PCAP and Perform Common Network Attacks with Scapy

This guide demonstrates how to use Python's Scapy library to extract IP addresses from PCAP files, sniff usernames and passwords from mail traffic, discover live hosts via SYN packets, launch MAC address table flooding attacks, and conduct ARP spoofing for man‑in‑the‑middle attacks, providing complete code examples.

ARP spoofingMAC FloodMITM
0 likes · 7 min read
How to Extract IPs from PCAP and Perform Common Network Attacks with Scapy
Architects' Tech Alliance
Architects' Tech Alliance
Jul 30, 2021 · Fundamentals

White-Box Switches: Development, Architecture, and Future Trends

The article provides a comprehensive overview of white‑box switches, covering their rapid evolution over the past three decades, open‑source ecosystems, hardware‑software decoupling, programmable networking, hardware acceleration, security challenges, and emerging trends shaping future network architectures.

Network ProgrammabilityOpen NetworkingSDN
0 likes · 13 min read
White-Box Switches: Development, Architecture, and Future Trends
Byte Quality Assurance Team
Byte Quality Assurance Team
Jul 28, 2021 · Information Security

Understanding iptables: Chains, Tables, Rules, and Common Commands

This article provides a comprehensive guide to iptables, covering its underlying netfilter architecture, the five built‑in chains and tables, rule syntax, common match and target options, and practical command examples for adding, deleting, querying, and managing firewall rules on Linux systems.

Command LineLinuxfirewall
0 likes · 15 min read
Understanding iptables: Chains, Tables, Rules, and Common Commands
Python Crawling & Data Mining
Python Crawling & Data Mining
Jul 28, 2021 · Information Security

Essential Network Security Tools: A Comprehensive Beginner's Guide

This article presents a curated list of network security utilities—including anti‑malware, scanners, encryption, IDS, port scanners, exploit frameworks, monitoring, proxies, wireless, rootkit detectors, and packet sniffers—each with brief descriptions and download links for aspiring security practitioners.

Penetration TestingSecurity toolsintrusion-detection
0 likes · 17 min read
Essential Network Security Tools: A Comprehensive Beginner's Guide
Architects' Tech Alliance
Architects' Tech Alliance
Jul 12, 2021 · Industry Insights

How AI and Automation Are Shaping the Next Network Era – Key Insights

The 2020 Global Network Trends Report analyzes how large‑scale automation, intent‑based networking, AI‑driven assurance, multi‑cloud connectivity, wireless evolution, and shifting security roles are reshaping enterprise networks, highlighting adoption statistics, technical challenges, and strategic recommendations for IT leaders.

AI AssuranceIntent-based NetworkingMulti-Cloud Networking
0 likes · 14 min read
How AI and Automation Are Shaping the Next Network Era – Key Insights
Baidu Geek Talk
Baidu Geek Talk
Jun 23, 2021 · Information Security

Black-Gray Industry Attack Detection Based on Community Encoding Using Graph Embedding

The paper introduces a community‑encoding, GraphSAGE‑based detection framework that embeds whole user‑account, IP, device, and phone‑number graphs—both homogeneous and heterogeneous—to identify previously unseen black‑gray industry attacks, achieving about 95% IP‑risk accuracy via an asynchronous near‑real‑time system, though computational and automation challenges persist.

GraphSAGEblack-gray-industrycommunity-detection
0 likes · 12 min read
Black-Gray Industry Attack Detection Based on Community Encoding Using Graph Embedding
MaGe Linux Operations
MaGe Linux Operations
Jun 8, 2021 · Fundamentals

Essential Networking Q&A: From OSI Layers to VPN and Beyond

This article provides concise explanations of core networking concepts, covering everything from basic link definitions, OSI model layers, and backbone networks to LANs, nodes, routers, point‑to‑point links, FTP, subnet masks, UTP cable limits, data encapsulation, network topologies, VPN, NAT, TCP/IP layers, routing protocols, security measures, and many other fundamental topics essential for understanding computer networks.

NetworkingOSI modelTCP/IP
0 likes · 31 min read
Essential Networking Q&A: From OSI Layers to VPN and Beyond
Efficient Ops
Efficient Ops
May 24, 2021 · Information Security

Mastering Full‑Traffic Analysis for Security Drills in Mid‑Size Enterprises

This article explains how mid‑size enterprises can inventory their network assets, understand complex zone structures, and apply full‑traffic network analysis and tracing techniques—such as SPAN, tunneling, and real‑time monitoring—to improve the effectiveness of security drills.

NTATraffic analysisfull traffic monitoring
0 likes · 11 min read
Mastering Full‑Traffic Analysis for Security Drills in Mid‑Size Enterprises
macrozheng
macrozheng
May 15, 2021 · Information Security

Can Your Company Spy on WeChat Chats? Protocol Analysis Reveals the Truth

This article examines whether a company can monitor WeChat conversations on its network by dissecting the web and mobile versions' protocols, demonstrating how tools like Fiddler and Wireshark can decrypt web chats while mobile traffic remains secure through private protocols and embedded server keys.

FiddlerMMTLSTLS
0 likes · 9 min read
Can Your Company Spy on WeChat Chats? Protocol Analysis Reveals the Truth
Liangxu Linux
Liangxu Linux
May 5, 2021 · Information Security

Mastering Common TCP/IP Attacks: From IP Spoofing to DDoS and MITM

This guide reviews the most frequent TCP/IP attacks—including IP spoofing, SYN flooding, UDP flooding, TCP reset hijacking, man‑in‑the‑middle, and DDoS—explains their underlying protocols, demonstrates practical exploitation with Python/Scapy and Netcat, and outlines mitigation techniques and cryptographic fundamentals.

DDoSEncryptionMITM
0 likes · 27 min read
Mastering Common TCP/IP Attacks: From IP Spoofing to DDoS and MITM
21CTO
21CTO
Apr 26, 2021 · Information Security

Remembering Dan Kaminsky: The Hacker Who Secured the Internet

The article commemorates Dan Kaminsky, the renowned information‑security researcher who uncovered the critical DNS vulnerability in 2008, outlines his career, explains the impact of his discovery and coordinated patch, and dispels rumors surrounding his death.

DNS vulnerabilityDan Kaminskyinformation security
0 likes · 5 min read
Remembering Dan Kaminsky: The Hacker Who Secured the Internet
dbaplus Community
dbaplus Community
Apr 25, 2021 · Information Security

Essential MySQL Security Practices: From Storage to Data Encryption

Learn comprehensive MySQL security strategies covering storage RAID configurations, network whitelisting, OS hardening, account management, privilege restrictions, audit logging, regular backups, data encryption, and disaster recovery to protect enterprise data against breaches and ensure stable, high‑performance operations.

Database SecurityMySQLaccess control
0 likes · 13 min read
Essential MySQL Security Practices: From Storage to Data Encryption
Open Source Linux
Open Source Linux
Apr 25, 2021 · Information Security

Understanding Remote-Control Trojans: Concepts, Deployment, Communication, and APT Threats

This comprehensive guide explains remote‑control trojans—covering their basic concepts, classifications, infection methods, communication techniques, typical functionalities, their role in APT attacks, and practical detection strategies—providing security professionals with essential knowledge to defend against these sophisticated threats.

APTMalware AnalysisRemote Access
0 likes · 24 min read
Understanding Remote-Control Trojans: Concepts, Deployment, Communication, and APT Threats
Efficient Ops
Efficient Ops
Apr 12, 2021 · Information Security

Understanding TCP/IP Layers and Common Network Attacks: ARP, DoS, DNS

This article explains how increasing network attacks exploit vulnerabilities across TCP/IP layers, detailing ARP spoofing, DoS techniques, and DNS hijacking, while outlining detection methods and defensive measures to protect information security.

ARP AttackDNS AttackDoS attack
0 likes · 9 min read
Understanding TCP/IP Layers and Common Network Attacks: ARP, DoS, DNS
Top Architect
Top Architect
Apr 4, 2021 · Information Security

Understanding HTTP Vulnerabilities and How HTTPS Secures Communication

This article explains the inherent insecurity of plain HTTP, illustrates man‑in‑the‑middle attacks, shows why simple symmetric encryption is insufficient, and details how HTTPS (SSL/TLS) with asymmetric key exchange and CA verification protects data transmission.

CAEncryptionHTTPS
0 likes · 10 min read
Understanding HTTP Vulnerabilities and How HTTPS Secures Communication
Tencent Cloud Developer
Tencent Cloud Developer
Mar 29, 2021 · Information Security

What Is Zero Trust? Benefits, Technologies, and Deployment Guide

This article explains the Zero Trust security model, its advantages over traditional perimeter defenses, core technologies such as SDP, IAM, and micro‑segmentation, implementation principles, essential components, real‑world deployment scenarios, future trends, and Tencent's practical contributions to the industry.

IAMSDPcybersecurity
0 likes · 16 min read
What Is Zero Trust? Benefits, Technologies, and Deployment Guide
Architecture Digest
Architecture Digest
Feb 8, 2021 · Information Security

Understanding HTTP, Its Vulnerabilities, and How HTTPS Secures Communication

This article explains the fundamentals of the HTTP protocol, illustrates its susceptibility to man‑in‑the‑middle attacks, discusses mitigation techniques using symmetric and asymmetric encryption, and describes how HTTPS with TLS and a CA certification system protects data integrity and confidentiality.

CAEncryptionHTTPS
0 likes · 10 min read
Understanding HTTP, Its Vulnerabilities, and How HTTPS Secures Communication
Sohu Tech Products
Sohu Tech Products
Jan 20, 2021 · Artificial Intelligence

Graph Algorithm Design and Optimization for Detecting Black‑Market Users in Virtual Networks

This article presents a comprehensive study on using graph representation learning, particularly GraphSAGE and its optimizations, to identify and mitigate black‑market accounts in virtual networks, covering background, algorithm design, handling isolated nodes and heterogeneity, and evaluation results.

Graph AlgorithmsGraphSAGEblack market detection
0 likes · 13 min read
Graph Algorithm Design and Optimization for Detecting Black‑Market Users in Virtual Networks
Open Source Tech Hub
Open Source Tech Hub
Jan 17, 2021 · Fundamentals

Master Secure Copy (scp): Syntax, Options, and Real-World Examples

This guide explains how the scp command works as a secure copy tool built on SSH, covering its basic syntax, three main copy scenarios, essential options for encryption, compression, bandwidth control, and practical examples for transferring files and directories between local and remote hosts.

linux commandnetwork securityscp
0 likes · 8 min read
Master Secure Copy (scp): Syntax, Options, and Real-World Examples
Java Interview Crash Guide
Java Interview Crash Guide
Jan 1, 2021 · Information Security

How HTTPS Secures Your Web Traffic: Deep Dive into Protocols, Certificates, and Risks

This article explains how HTTPS secures web communication by combining asymmetric certificate verification with symmetric data encryption, details the role of Certificate Authorities, illustrates the handshake process, and clarifies common misconceptions about its safety and vulnerability to packet capture.

EncryptionHTTPSMan-in-the-Middle
0 likes · 11 min read
How HTTPS Secures Your Web Traffic: Deep Dive into Protocols, Certificates, and Risks
ITPUB
ITPUB
Dec 14, 2020 · Information Security

Master SSH: Remote Login, Port Forwarding, and Secure Tunneling Explained

This guide introduces SSH, explains its encryption-based login mechanism, demonstrates common commands for remote access, local and remote port forwarding, dynamic tunneling, and highlights security risks such as man‑in‑the‑middle attacks, providing practical examples for Linux environments.

LinuxRemote Loginnetwork security
0 likes · 13 min read
Master SSH: Remote Login, Port Forwarding, and Secure Tunneling Explained
Huolala Tech
Huolala Tech
Dec 14, 2020 · Information Security

Passive OS Fingerprinting: Detect Humans vs Bots with SYN Header Analysis

This article explains a passive method that captures SYN packet IP headers in user space, extracts OS‑specific features to build a fingerprint database, and uses the results to improve human‑machine detection while discussing implementation details on Linux kernels and typical network architectures.

LinuxOS fingerprintingSYN packet
0 likes · 5 min read
Passive OS Fingerprinting: Detect Humans vs Bots with SYN Header Analysis
Full-Stack Internet Architecture
Full-Stack Internet Architecture
Dec 8, 2020 · Information Security

Understanding HTTPS: How Secure Communication Is Achieved Over HTTP

This article explains why plain HTTP is insecure, outlines the four fundamental principles of secure communication, and details how HTTPS uses symmetric encryption, asymmetric encryption, digital certificates, and digital signatures to establish confidentiality, integrity, authentication, and non-repudiation for web traffic.

Digital CertificateEncryptionHTTPS
0 likes · 13 min read
Understanding HTTPS: How Secure Communication Is Achieved Over HTTP
Top Architect
Top Architect
Dec 1, 2020 · Information Security

SSH Overview: Concepts, Basic Commands, Port Forwarding, and Remote Operations

This article introduces SSH, explains its encryption-based login mechanism, demonstrates basic command syntax, shows practical examples of remote login, local/remote/dynamic port forwarding, remote command execution, and discusses common security concerns such as man‑in‑the‑middle attacks.

Command LineLinuxRemote Login
0 likes · 13 min read
SSH Overview: Concepts, Basic Commands, Port Forwarding, and Remote Operations
JD Cloud Developers
JD Cloud Developers
Nov 13, 2020 · Information Security

How to Secure Major Events: Offensive & Defensive Strategies Revealed

This article presents the complete PPT from Zhu Yanyong’s CSDN live session, detailing offensive and defensive practices for ensuring network security during large‑scale events, covering threat modeling, DDoS mitigation, WAF deployment, incident response, and post‑event analysis.

CSDNSecurity Operationsmajor events
0 likes · 3 min read
How to Secure Major Events: Offensive & Defensive Strategies Revealed
Liangxu Linux
Liangxu Linux
Oct 19, 2020 · Information Security

Exploiting Linux’s DelayedACKLost Counter to Infer TCP Sequence Numbers

An imaginative tale reveals how two covert agents exploit the Linux kernel’s DelayedACKLost counter via /proc/net/netstat, using it to infer TCP sequence numbers and perform a side‑channel hijack, while illustrating the underlying delayed ACK mechanism, related kernel functions, and the security implications of this hidden metric.

Delayed ACKLinuxSide-channel
0 likes · 8 min read
Exploiting Linux’s DelayedACKLost Counter to Infer TCP Sequence Numbers
Tencent Cloud Developer
Tencent Cloud Developer
Oct 12, 2020 · Information Security

Understanding DDoS Attacks: Principles, Case Studies, and Protection Solutions

The article explains DDoS attack fundamentals, illustrates escalating real‑world incidents and their mitigation, and compares Tencent Cloud’s free, high‑defense package, and high‑defense IP solutions, guiding readers on selecting appropriate protection based on attack history, bandwidth needs, and budget constraints.

Cloud ProtectionDDoSDistributed Denial of Service
0 likes · 9 min read
Understanding DDoS Attacks: Principles, Case Studies, and Protection Solutions
Python Crawling & Data Mining
Python Crawling & Data Mining
Oct 6, 2020 · Information Security

How to Reveal Hidden Wi‑Fi Networks Using Python and Scapy

Learn to uncover concealed Wi‑Fi networks by capturing router signals with a wireless adapter, using Ubuntu’s airodump-ng and Python’s Scapy library to monitor packets, identify hidden SSIDs, and display them when a client connects, complete with step‑by‑step setup and screenshots.

PythonScapyUbuntu
0 likes · 6 min read
How to Reveal Hidden Wi‑Fi Networks Using Python and Scapy
Liangxu Linux
Liangxu Linux
Sep 20, 2020 · Operations

Mastering SSH: Remote Login, Port Forwarding, and Advanced Usage

This guide explains what SSH is, its login mechanism, basic command syntax, and demonstrates remote login, local and remote port forwarding, dynamic forwarding, and common SSH operations with practical examples and troubleshooting tips for Linux environments.

Command LineLinuxRemote Login
0 likes · 14 min read
Mastering SSH: Remote Login, Port Forwarding, and Advanced Usage
DataFunTalk
DataFunTalk
Sep 15, 2020 · Information Security

Optimizing Regular Expression Engines for High‑Performance Deep Packet Inspection

This article presents a series of algorithmic innovations—including efficient NFA construction, reduced epsilon‑transitions, prefix/suffix optimizations, fast NFA‑to‑DFA conversion, space‑compressed automata, hybrid finite automata, and large‑scale regex matching techniques—designed to improve regular‑expression matching speed and memory usage in deep packet inspection systems.

DFANFAalgorithm optimization
0 likes · 27 min read
Optimizing Regular Expression Engines for High‑Performance Deep Packet Inspection
Liangxu Linux
Liangxu Linux
Aug 26, 2020 · Information Security

Can the US Shut Down .cn Domains? Inside DNS Root Servers and Their Defenses

The article explains how the DNS system works, why there are only 13 logical root servers, how anycast and global mirrors keep the system resilient, and evaluates the realistic risk of a nation‑state like the United States tampering with root zone data, especially for Chinese .cn domains.

AnycastDNSICANN
0 likes · 22 min read
Can the US Shut Down .cn Domains? Inside DNS Root Servers and Their Defenses
21CTO
21CTO
Aug 23, 2020 · Fundamentals

Can the US Really Shut Down .cn Sites? Inside DNS Root Server Mechanics

This article explains how DNS works, why there are only 13 logical root servers, how root mirrors and anycast keep the system resilient, the historical control of root zones, and why the United States cannot easily block Chinese domains despite its dominance in root server ownership.

AnycastDNSDomain Name System
0 likes · 21 min read
Can the US Really Shut Down .cn Sites? Inside DNS Root Server Mechanics
ITPUB
ITPUB
Aug 22, 2020 · Fundamentals

Can the US Pull the Plug on .cn Domains? A Deep Dive into DNS Root Servers

The article explains how DNS works, why there are only 13 logical root servers, how anycast and mirror servers provide resilience, recounts historical cases of domain shutdowns, examines US control over root zones, and discusses mitigation strategies for protecting national domains.

AnycastDNSInternet Governance
0 likes · 24 min read
Can the US Pull the Plug on .cn Domains? A Deep Dive into DNS Root Servers
Programmer DD
Programmer DD
Jul 3, 2020 · Information Security

Why HTTPS Matters: Understanding Symmetric & Asymmetric Encryption

This article explains why HTTPS is essential, compares symmetric and asymmetric encryption, illustrates how encryption keys are securely exchanged, and outlines the three core reasons HTTPS reliably protects data from eavesdropping and man‑in‑the‑middle attacks.

EncryptionHTTPSTLS
0 likes · 5 min read
Why HTTPS Matters: Understanding Symmetric & Asymmetric Encryption
Selected Java Interview Questions
Selected Java Interview Questions
Jun 16, 2020 · Information Security

Understanding the Principles and Security Mechanisms of HTTPS

This article explains why HTTPS is considered secure, details its underlying cryptographic processes—including certificate verification, asymmetric and symmetric encryption, and the role of Certificate Authorities—while also addressing common misconceptions such as man‑in‑the‑middle attacks and packet capture.

EncryptionHTTPSMan-in-the-Middle
0 likes · 10 min read
Understanding the Principles and Security Mechanisms of HTTPS
TAL Education Technology
TAL Education Technology
Jun 4, 2020 · Information Security

Data Security Governance: Motivation, Technical Objectives, Classification, and Management Practices

The article explains why data security governance is essential for rapidly growing businesses, outlines technical goals across the data lifecycle, describes data classification and labeling methods, and details approval processes, network security zones, and management controls to protect data throughout its lifecycle.

Data SecurityGovernanceclassification
0 likes · 10 min read
Data Security Governance: Motivation, Technical Objectives, Classification, and Management Practices
Open Source Linux
Open Source Linux
May 14, 2020 · Information Security

Master iptables: Essential Command Syntax and Practical Examples

This article breaks down the fundamental iptables command syntax, explains each option and parameter, provides practical examples for adding, inserting, listing, deleting, and managing firewall rules, and covers common modules, backup, and restoration techniques for effective Linux network security.

LinuxNATSNAT
0 likes · 13 min read
Master iptables: Essential Command Syntax and Practical Examples
ITPUB
ITPUB
Mar 27, 2020 · Information Security

Was GitHub Hacked? Inside the Suspected MITM Attack on GitHub

In late March, users in China reported errors accessing GitHub Pages and the main site, prompting investigations that suggest a possible man‑in‑the‑middle attack affecting GitHub’s services, with evidence such as a suspicious certificate issued to a QQ email, network hijacking on port 443, and similar disruptions across major Chinese ISPs, while the issue resolved by mid‑afternoon.

ChinaGitHubMan-in-the-Middle
0 likes · 5 min read
Was GitHub Hacked? Inside the Suspected MITM Attack on GitHub
ITPUB
ITPUB
Mar 26, 2020 · Information Security

How to Quickly Identify Open Ports on Linux Using Nmap, Netcat, and Bash

This guide explains multiple practical methods for discovering which ports are open on a Linux system, covering Nmap scans, Netcat probing, and Bash pseudo‑device checks, complete with command examples, option details, and output interpretation.

Linuxbashnetcat
0 likes · 8 min read
How to Quickly Identify Open Ports on Linux Using Nmap, Netcat, and Bash
Efficient Ops
Efficient Ops
Feb 3, 2020 · Information Security

Mastering Linux iptables: From Theory to Real-World Service Mesh Deployments

This article explains the fundamentals of Linux iptables—including its role with netfilter, rule ordering, tables and chains—then walks through packet‑processing flows and three practical scenarios such as Envoy traffic hijacking, massive long‑connection handling, and bastion‑host security.

LinuxService Meshfirewall
0 likes · 16 min read
Mastering Linux iptables: From Theory to Real-World Service Mesh Deployments
Architects' Tech Alliance
Architects' Tech Alliance
Nov 25, 2019 · Cloud Computing

Key Capabilities and Emerging Trends of Multi‑Cloud and Hybrid Cloud Management

The article explains why enterprises adopt multi‑cloud strategies, outlines essential multi‑cloud management functions, discusses cloud‑network collaboration and security measures, and highlights future trends such as deep cloud‑network integration, data‑layer unification, consistent management, and edge‑cloud adoption.

Cloud Managementcloud trendshybrid cloud
0 likes · 10 min read
Key Capabilities and Emerging Trends of Multi‑Cloud and Hybrid Cloud Management
Architects Research Society
Architects Research Society
Nov 10, 2019 · Cloud Computing

Understanding Azure Virtual Networks (VNet): Concepts, Best Practices, and Connectivity Options

Azure Virtual Network (VNet) is a private network in Azure that provides scalable, isolated address spaces, subnets, and region or subscription scopes, with best‑practice design guidelines, internet connectivity, inter‑resource communication, on‑premises integration via VPN or ExpressRoute, traffic filtering, routing options, and quota limits.

AzureCloud NetworkingVNet
0 likes · 10 min read
Understanding Azure Virtual Networks (VNet): Concepts, Best Practices, and Connectivity Options
Python Programming Learning Circle
Python Programming Learning Circle
Nov 3, 2019 · Fundamentals

From Packet Switching to a Global Threat: Leonard Kleinrock’s 50‑Year Internet Reflection

On the internet’s 50th anniversary, UCLA professor Leonard Kleinrock recounts the pioneering packet‑switching breakthrough, the first ARPANET transmission, and warns that the original open, ethical ethos has been eclipsed by commercialization, security threats, and the urgent need for collective responsibility.

ARPANETInternet HistoryKleinrock
0 likes · 8 min read
From Packet Switching to a Global Threat: Leonard Kleinrock’s 50‑Year Internet Reflection
MaGe Linux Operations
MaGe Linux Operations
Sep 9, 2019 · Information Security

Demystifying HTTPS: How Secure HTTP Protects Your Data

This article explains what HTTPS is, why it adds encryption to HTTP, how SSL/TLS, symmetric and asymmetric cryptography, certificates, and handshakes work together to ensure confidentiality, integrity, and authenticity, and discusses the performance impact of HTTPS connections.

EncryptionHTTPSTLS
0 likes · 11 min read
Demystifying HTTPS: How Secure HTTP Protects Your Data
360 Tech Engineering
360 Tech Engineering
Aug 19, 2019 · Information Security

Highlights of the 7th Internet Security Conference: Global Collaboration and Emerging Cybersecurity Challenges

The 7th Internet Security Conference in Beijing gathered international experts to discuss the merging of cyberspace and physical space, the heightened impact of 5G and industrial IoT on cyber attacks, and collaborative strategies among China, Israel, Russia, and Singapore to build a comprehensive security ecosystem.

5GInternational Cooperationconference
0 likes · 8 min read
Highlights of the 7th Internet Security Conference: Global Collaboration and Emerging Cybersecurity Challenges
Architects Research Society
Architects Research Society
Aug 15, 2019 · Information Security

Understanding IDS, IPS, and UTM: Differences and Deployment Considerations

The article explains the fundamental differences between intrusion detection systems (IDS), intrusion prevention systems (IPS), and unified threat management (UTM) devices, covering their detection methods, placement strategies, operational trade‑offs, and maintenance requirements to help security professionals choose and manage the appropriate solution.

IDSIPSUTM
0 likes · 9 min read
Understanding IDS, IPS, and UTM: Differences and Deployment Considerations
HomeTech
HomeTech
Jul 31, 2019 · Information Security

Enterprise Intrusion Detection System Architecture and Feature Overview

This document outlines the background, challenges, and a comprehensive enterprise intrusion detection solution that combines host‑based and network‑based monitoring, automated CVE and GitHub leak collection, a modular agent‑middle‑display architecture, and future plans for multi‑dimensional threat modeling to enhance preventive security capabilities.

CVE collectionSOCasset visualization
0 likes · 10 min read
Enterprise Intrusion Detection System Architecture and Feature Overview
macrozheng
macrozheng
Jun 6, 2019 · Operations

Master Linux Firewall: firewalld and iptables Commands Explained

This guide walks you through using Linux's two main firewall tools—firewalld for CentOS 7+ and iptables for older versions—covering installation, service control, rule management, port handling, and useful commands with clear examples and screenshots.

Linuxfirewalldiptables
0 likes · 4 min read
Master Linux Firewall: firewalld and iptables Commands Explained