2016/12/23 資安晨摘

資安趨勢：

1.自動化、安全分析和人工智能，從Gartner預測看網絡安全新規則 by freebuf_Alpha_h4ck


漏洞分析：

1.Bottle HTTP 頭注入漏洞探究 by phithon

2.WeCenter 3.1.9 Stored XSS Vulnerability by evi1m0

3.又一場黑掉飛機的大戲？IOActive研究員聲稱可入侵松下機載娛樂系統 by freebuf_clouds

4.Pentest-Report cURL 08.2016 by Cure53_Dr.-Ing. Mario Heiderich

5.Joomla 權限提升漏洞（CVE-2016-9838）分析 by 知道創宇404安全實驗室_p0wd3r

6.Android Telephony拒絕服務漏洞（CVE-2016-6763）分析 by MS509_heeeeen


惡意軟體分析：

1.Alice: A Lightweight, Compact, No-Nonsense ATM Malware by Trend Micro_David Sancho and Numaan Huq


檢測方法：

1.iOS Application Security Review Methodology by Aura Information Security_Claudio Contin

閹割過的中文版：iOS安全審計入門 by freebuf_latiaojun


學習資源：

1.awesome-ml-for-cybersecurity


工具：

1.backdoor-apk

2.Digital Forensics Platform: Autopsy