<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; Neil Archibald</title>
	<atom:link href="http://blogs.cisco.com/author/NeilArchibald/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Mon, 17 Jun 2013 23:53:54 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Announcing Cisco Wearable IPS</title>
		<link>http://blogs.cisco.com/security/announcing-cisco-wearable-ips/</link>
		<comments>http://blogs.cisco.com/security/announcing-cisco-wearable-ips/#comments</comments>
		<pubDate>Mon, 01 Apr 2013 10:01:42 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[IPS]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[wearable computing]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=108134</guid>
		<description><![CDATA[Today, Cisco announces the development of the Cisco Wearable IPS (CWI), a security device for Generation Y. This fashionable security device will liven up any insecure outfit. It can be worn around the neck or strapped to a belt, and provides a single gateway to the Internet or wireless network of your choice.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/announcing-cisco-wearable-ips/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Adding Data Segment Cross References in IDA</title>
		<link>http://blogs.cisco.com/security/adding-data-segment-cross-references-in-ida/</link>
		<comments>http://blogs.cisco.com/security/adding-data-segment-cross-references-in-ida/#comments</comments>
		<pubDate>Mon, 22 Oct 2012 14:44:00 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=88228</guid>
		<description><![CDATA[Recently I was working on reverse engineering a 16-bit MS-DOS binary to better understand a network transport protocol used for modem communication in some software I was looking at. I was using the IDA Pro tool for this purpose.

However, to my dismay, after looking at the string table and finding a string that seemed relevant to the particular section of code which I was interested in, I noticed that none of the strings in the string table contained cross reference information, and I was therefore unable to easily jump to the instructions in which it was used.

Upon further analysis, I determined that the reason the cross reference information for the strings in the table was not populated is because the strings resided in the data segment and referenced using the ds segment register.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/adding-data-segment-cross-references-in-ida/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Injecting the Python Interpreter Via GDB</title>
		<link>http://blogs.cisco.com/security/injecting-the-python-interpreter-via-gdb/</link>
		<comments>http://blogs.cisco.com/security/injecting-the-python-interpreter-via-gdb/#comments</comments>
		<pubDate>Tue, 09 Oct 2012 19:22:08 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[application sandbox]]></category>
		<category><![CDATA[python]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=86333</guid>
		<description><![CDATA[The focus of this article is the use of Python Interpreter to assess the security posture of an application sandbox.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/injecting-the-python-interpreter-via-gdb/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Debugger Inception – The Scriptable Debugger Within The Debugger</title>
		<link>http://blogs.cisco.com/security/debugger-inception-%e2%80%93-the-scriptable-debugger-within-the-debugger/</link>
		<comments>http://blogs.cisco.com/security/debugger-inception-%e2%80%93-the-scriptable-debugger-within-the-debugger/#comments</comments>
		<pubDate>Mon, 12 Mar 2012 21:52:07 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[debuggers]]></category>
		<category><![CDATA[reverse engineering]]></category>
		<category><![CDATA[security research]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=63301</guid>
		<description><![CDATA[I recently began working on a toolset to aid with analyzing binary protocols and I decided to use it as [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/debugger-inception-%e2%80%93-the-scriptable-debugger-within-the-debugger/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The .KID Top Level Domain</title>
		<link>http://blogs.cisco.com/security/the-kid-top-level-domain/</link>
		<comments>http://blogs.cisco.com/security/the-kid-top-level-domain/#comments</comments>
		<pubDate>Mon, 12 Dec 2011 19:55:22 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Parental Controls]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[top level domain]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=54330</guid>
		<description><![CDATA[In response to the recent push to move websites that contain adult content into the .xxx sponsored top level domain (sTLD) in order to easily classify them this post discusses the merits of creating a ".kid" sTLD that will be reserved for websites that host content that is considered and approved to be "safe" for children surfing the Internet.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/the-kid-top-level-domain/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Custom Signature Writing Guide for Cisco IPS</title>
		<link>http://blogs.cisco.com/security/custom_signature_writing_for_cisco_ips/</link>
		<comments>http://blogs.cisco.com/security/custom_signature_writing_for_cisco_ips/#comments</comments>
		<pubDate>Wed, 17 Aug 2011 01:48:19 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[IDS]]></category>
		<category><![CDATA[IPS]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[signature]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=39986</guid>
		<description><![CDATA[A collaboration of four senior members of the Cisco IPS signature team recently culminated in the public release of a guide on writing custom signatures for Cisco IPS, the #1 IPS platform of the Internet. The idea behind this move is to give our customers an easier way to develop their own signatures, allowing them to more easily discover and block unwanted traffic in their networks. At the same time it helps in understanding existing signatures written by members of the IPS signature team.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/custom_signature_writing_for_cisco_ips/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Extracting EXE Drop Malware</title>
		<link>http://blogs.cisco.com/security/extracting-exe-drop-malware/</link>
		<comments>http://blogs.cisco.com/security/extracting-exe-drop-malware/#comments</comments>
		<pubDate>Wed, 27 Jul 2011 17:48:00 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security research]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=38237</guid>
		<description><![CDATA[In the last few years there has been a major shift in the vulnerability landscape from a focus on attacking network-based server applications to attacking client applications using malicious file formats. Due to this shift there has been a variety of new techniques developed by attackers for more reliable control post-exploitation.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/extracting-exe-drop-malware/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Exploring Heap-Based Buffer Overflows with the Application Verifier</title>
		<link>http://blogs.cisco.com/security/exploring_heap-based_buffer_overflows_with_the_application_verifier/</link>
		<comments>http://blogs.cisco.com/security/exploring_heap-based_buffer_overflows_with_the_application_verifier/#comments</comments>
		<pubDate>Mon, 29 Mar 2010 20:00:00 +0000</pubDate>
		<dc:creator>Neil Archibald</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/video_chat_building_a_profitable_small_business_practice</guid>
		<description><![CDATA[Isolating the root cause of a heap-based buffer overflow can be tricky at best. Thankfully, Microsoft provides a great tool [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/exploring_heap-based_buffer_overflows_with_the_application_verifier/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
