<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Security on Benny Simmonds</title>
    <link>https://www.bencode.io/tags/security/</link>
    <description>Recent content in Security on Benny Simmonds</description>
    <generator>Hugo -- 0.149.1</generator>
    <language>en-us</language>
    <lastBuildDate>Thu, 01 Jul 2021 20:38:23 +0000</lastBuildDate>
    <atom:link href="https://www.bencode.io/tags/security/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Binary Similarity Analysis Technical Paper</title>
      <link>https://www.bencode.io/posts/binhunt/</link>
      <pubDate>Sat, 29 May 2021 22:46:47 +0000</pubDate>
      <guid>https://www.bencode.io/posts/binhunt/</guid>
      <description>&lt;p&gt;An academic paper I authored in May 2019, as part of studying &lt;em&gt;Reverse Engineering&lt;/em&gt; at UNSW.&lt;/p&gt;
&lt;h1 id=&#34;abstract&#34;&gt;Abstract&lt;/h1&gt;
&lt;p&gt;Extracting meaningful semantic differences between software binaries without source code is difficult. This is a challenging problem due to the overwhelming amount of syntactic noise that small changes can result in at the assembly level. Curiously when it comes to program semantics the &amp;ldquo;signal from the noise&amp;rdquo; can be distilled in a manner that is both static and processor agnostic, through the application of control flow and graph isomorphism analysis, symbolic execution and theorem proving. The graph isomorphism problem has no known polynomial time algorithm (i.e. is NP) making brute force approaches computationally infeasible. By blending various static analysis techniques and applying some generalisations, consider a novel approach to overcoming the computationally infeasibility of this problem domain with a view to binary difference analysis.&lt;/p&gt;</description>
    </item>
    <item>
      <title>SSO with Active Directory</title>
      <link>https://www.bencode.io/posts/2019-01-04-directory-services/</link>
      <pubDate>Fri, 04 Jan 2019 11:10:10 +0000</pubDate>
      <guid>https://www.bencode.io/posts/2019-01-04-directory-services/</guid>
      <description>&lt;p&gt;Providing SSO by integrating Linux (or FreeBSD) with a directory service, like Microsoft Active Directory (AD), is no where as daunting as it once was, and highlights some fascinating subsystems that enable users to be defined from a variety of data sources (such as LDAP) other than just the traditional &lt;code&gt;/etc/passwd&lt;/code&gt; file.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#initial-setup&#34;&gt;Initial setup&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#kerberos&#34;&gt;Kerberos&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#create-service-keytab-on-ad&#34;&gt;Create service keytab on AD&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#system-security-services-daemon-sssd&#34;&gt;System Security Services Daemon (sssd)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#name-service-switch-nss&#34;&gt;Name Service Switch (nss)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#pam-pluggable-authentication-module&#34;&gt;PAM (Pluggable Authentication Module)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#testing&#34;&gt;Testing&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#listing-users&#34;&gt;Listing Users&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#listing-groups&#34;&gt;Listing Groups&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#id&#34;&gt;id&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#troubleshooting&#34;&gt;Troubleshooting&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&#34;#samba-smbd-join-issues&#34;&gt;Samba (smbd) Join Issues&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#clock-synchronisation-issues&#34;&gt;Clock Synchronisation Issues&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#clearing-sssd-cache&#34;&gt;Clearing SSSD Cache&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href=&#34;#end-to-end-script-for-ansible&#34;&gt;End to end script (for Ansible)&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h1 id=&#34;initial-setup&#34;&gt;Initial setup&lt;/h1&gt;
&lt;p&gt;Update &lt;code&gt;/etc/resolv.conf&lt;/code&gt; to bind to the AD DNS server. This will enable &lt;code&gt;realmd&lt;/code&gt; to discover and join the active directory domain (i.e. kerberos realm).&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
