"Native Client is an open-source research technology for running x86
native code in web applications, with the goal of maintaining the
browser neutrality, OS portability, and safety that people expect from
web apps. We've released this project at an early, research stage to
get feedback from the security and broader open-source communities. We
believe that Native Client technology will someday help web developers
to create richer and more dynamic browser-based applications."

http://google-code-updates.blogspot.com/2008/12/native-client-technology-for-running.html
Google Chromeとこのnative clientってやつの組み合わせを将来の標準なランタイム環境にするのを目指しているのか．
JAVAや.NETに取って代わろうとしているように思える．
Google恐るべし．
Native Client: A Sandbox for Portable, Untrusted x86 Native Code
http://nativeclient.googlecode.com/svn/trunk/nacl/googleclient/native_client/documentation/nacl_paper.pdf

Psychtoolbox

なんとタイムリーな記事．今週頭にたまたまインストールしたtoolboxをSteveが褒めていた．
http://blogs.mathworks.com/steve/2008/12/09/online-resources-psychophysics-colour-engineering/
彼はColour Engineering Toolbox もおすすめしていました．
http://www.digitalcolour.org/toolbox.htm

sapytoっていうSAPペネトレーションテストのフレームワーク

sapyto is the first SAP Penetration Testing Framework. Fully developed at CYBSEC-Labs, sapyto provides support to information security professionals in SAP platform discovery, investigation and exploitation activities.

http://www.cybsec.com/EN/research/sapyto.php
ダウンロードするのに情報を登録する必要があります．

sVirt 0.20

http://www.selinuxproject.org/page/SVirt

2008-12-13

■

sec-summary その他・新しい発見・sec-summary再掲載・研究ネタ・CFP

W3C publishes OWL 2 "last call" drafts

1. Structural Specification and Functional-Style Syntax
http://www.w3.org/TR/2008/WD-owl2-syntax-20081202/
2. Direct Semantics
http://www.w3.org/TR/2008/WD-owl2-semantics-20081202/
3. RDF-Based Semantics
http://www.w3.org/TR/2008/WD-owl2-rdf-based-semantics-20081202/
4. Conformance and Test Cases
http://www.w3.org/TR/2008/WD-owl2-test-20081202/
5. Mapping to RDF Graphs
http://www.w3.org/TR/2008/WD-owl2-mapping-to-rdf-20081202/
6. XML Serialization
http://www.w3.org/TR/2008/WD-owl2-xml-serialization-20081202/
7. Profiles
http://www.w3.org/TR/2008/WD-owl2-profiles-20081202/
8. Quick Reference Guide
http://www.w3.org/TR/2008/WD-owl2-quick-reference-20081202/
9. New Features and Rationale
http://www.w3.org/TR/2008/WD-owl2-new-features-20081202/
10. Manchester Syntax
http://www.w3.org/TR/2008/WD-owl2-manchester-syntax-20081202/
11. rdf:text: A Datatype for Internationalized Text
http://www.w3.org/TR/2008/WD-rdf-text-20081202/

「IE」のぜい弱性を突く新たなゼロディ攻撃が出現，SANSが警告

「Google Chrome」が正式版に

MSがIE 7の脆弱性を確認、アドバイザリーを公開

2008年12月 Microsoft セキュリティ情報 (緊急 6件含) に関する注意喚起

Kaspersky on remote control

ブラウザのセキュリティハンドブック

JPCERT/CC REPORT 2008-12-10

Breaking Google Gears' Cross-Origin Communication Model

hakin9の新しい記事

慶応大・武田教授が語る内部犯行対策

量子力学と量子暗号のかんたんなお話 by Kuniaki Igarashi

IAS-2009 Fifth International Conference on Information Assurance and Security (IAS09)

Black Hat Japan 2008のアーカイブ

1st Workshop on Knowledge Management with Web 3.0 (KM-WEB3 2009)

Internet Security and Operations Intelligence 6(ISOI6)

SELinux Reference Policy

Native Client

Psychtoolbox

sapytoっていうSAPペネトレーションテストのフレームワーク

sVirt 0.20

W3C publishes OWL 2 "last call" drafts