List of “2014”

  • TSUBAME Training in Indonesia and Laos Training
    TSUBAME Training in Indonesia and Laos
    Hi there! This is Tetsuya Mizuno from Watch and Warning group. Today, I would like to introduce one of our activities: technical training through TSUBAME project. TSUBAME, headed by JPCERT/CC, is a project using a packet monitoring system which deploys sensors in multiple countries to detect wide-ranging malicious activities on the Internet (without collecting any sensitive data). The project is operated as one of the working groups of APCERT, and...

    Read more

  • The Heartbleed bug - How Japanese Organizations confront the issue - Vulnerability
    The Heartbleed bug - How Japanese Organizations confront the issue -
    Hi. This is Misaki Kimura from Watch and Warning Group. Ever since the extremely critical vulnerability in recent versions of OpenSSL (known as "Heartbleed") was made public, it has been wreaking havoc across the internet. According to Netcraft, a research firm which monitors websites and certificates worldwide, more than half a million websites were affected. Such said, with no exceptions, websites in Japan were also affected, and we have been...

    Read more

  • APCERT Annual General Meeting and TSUBAME Workshop by JPCERT/CC
    APCERT Annual General Meeting and TSUBAME Workshop by JPCERT/CC
    Hello everyone! This is Yuka from the Global Coordination Division and APCERT Secretariat. Today I would like to tell you about the biggest event of APCERT, the 11th Annual General Meeting (AGM) and Conference - 2014 which was held from 18th to 21st March in Taipei. 21 Operational Member teams participated in this reunion as well as some delegates from invited parties. TWNCERT was a host of this event, and...

    Read more

  • Presenting HTML5 security at OWASP AppSec APAC 2014
    Presenting HTML5 security at OWASP AppSec APAC 2014
    Hi. This is Yoshinori Matsumoto from Watch and Warning Group. After JPCERT/CC’s publication of a technical research report on HTML5 last October, our group has been working intensively to raise awareness on security issues of web applications utilizing HTML5. We have been given opportunities to speak at various security conferences on this topic, and one of them was my colleague’s presentation at "CODE BLUE" introduced on this blog earlier. This...

    Read more

  • Source Port Randomization for Caching DNS Servers Requested, yet again. Vulnerability
    Source Port Randomization for Caching DNS Servers Requested, yet again.
    Hello, this is Moto Kawasaki, a new member of Global Coordination Division. Alerts from JPRS and JPCERT/CC On April 14th 2014, JPRS (Japan Registry Services Co., Ltd.) and JPCERT/CC concurrently published the alerts on DNS cache poisoning attack. Alert from JPRS http://jprs.jp/tech/security/2014-04-15-portrandomization.html (Japanese version) Alert from JPCERT/CC https://www.jpcert.or.jp/english/at/2014/at140016.html (English version) https://www.jpcert.or.jp/at/2014/at140016.html (Japanese version) Now I'd like to elaborate on the key points and share my views on the case by...

    Read more

  • APCERT DAY at APRICOT and  Open Resolver Check Site Launched by JPCERT/CC Event
    APCERT DAY at APRICOT and Open Resolver Check Site Launched by JPCERT/CC
    Hello, I am Yukako (Yuka) Uchida from APCERT Secretariat. I am a new Liaison Officer of the Global Coordination Division since last December. From 18th to 28th February, APRICOT 2014 (https://2014.apricot.net/) had been held in Petaling Jaya, Malaysia. APRICOT, which stands for Asia Pacific Regional Internet Conference on Operational Technologies, is an annual meeting for internet engineers in the region. They have kindly offered APCERT a one-day slot on 26...

    Read more

  • JPCERT/CC at “CODE BLUE”
    JPCERT/CC at “CODE BLUE”
    Hi. This is You Nakatsuru (“Tsuru”) – a “just married” Information Security Analyst from Analysis Center. Today, I would like to introduce JPCERT/CC’s presentations at “CODE BLUE”, a new international information security conference originating in Japan which was held on February 17 and 18. The conference attracted many computer security experts – more than 400 attendees from about 10 different countries. The conference covered a wide range of topics discussing...

    Read more

  • ICS SECURITY CONFERENCE 2014
    ICS SECURITY CONFERENCE 2014
    Hello, I am Hidekazu Yamada at ICS Response Group of JPCERT/CC. In this entry today, I would like to look back on “ICS Security Conference 2014” which was held early last month, along with some presentation highlights. My presentation summary on the result of the ICS Asset owners’ survey will also be covered. Event Overview The conference took place on Wednesday, 5 February 2014 at Kokuyo Hall in Shinagawa, Tokyo....

    Read more