# cybersecurity ## Posts - [What Exactly Is a Qubit, and What Is It Made Of?](https://allatone.site/what-exactly-is-a-qubit-and-what-is-it-made-of/): ➡️What Exactly Is a Qubit, and What Is It Made Of? - [Authentication Is More Than Login](https://allatone.site/authentication-is-more-than-login/): Authentication is not just about allowing users to log in. - [Mapping Security Events to MITRE ATT&CK](https://allatone.site/mapping-security-events-to-mitre-attck/): Raw security events provide data. - [Building an AI Triage Layer for Security Operations](https://allatone.site/building-an-ai-triage-layer-for-security-operations/): One of the biggest challenges in modern SOC environments is alert fatigue. - [Turning Security Events into Actionable Incidents](https://allatone.site/turning-security-events-into-actionable-incidents/): One of the key objectives of this project has been moving beyond simple event collection and building a workflow that helps analysts focus on what matters most. - [The Most Valuable Part Wasn't the Code](https://allatone.site/the-most-valuable-part-wasnt-the-code/): The most valuable part of building my AI-SOC platform wasn't Elasticsearch. - [The Vision Behind AI-SOC with Human review](https://allatone.site/the-vision-behind-ai-soc-with-human-review/): Building security tools is relatively easy. - [Building an AI-Powered SOC Platform From Scratch](https://allatone.site/building-an-ai-powered-soc-platform-from-scratch-2/): Over the last phase of development, I transformed the SECOPS Platform from a basic incident dashboard into an AI-enhanced security investigation pipeline capable of ingesting, enriching, correlating, and investigating security incidents automatically. - [Building an AI-Powered SOC Platform From Scratch](https://allatone.site/building-an-ai-powered-soc-platform-from-scratch/): Over the last phase of development, I transformed the SECOPS Platform from a basic incident dashboard into an AI-enhanced security investigation pipeline capable of ingesting, enriching, correlating, and investigating security incidents automatically. - [Building and debugging a custom AI-driven SOC platform from the ground up using Elasticsearch, FastAPI, Python detection pipelines, and a live investigation dashboard.](https://allatone.site/building-and-debugging-a-custom-ai-driven-soc-platform-from-the-ground-up-using-elasticsearch-fastapi-python-detection-pipelines-and-a-live-investigation-dashboard/): I’ve been building and debugging a custom AI-driven SOC platform from the ground up using Elasticsearch, FastAPI, Python detection pipelines, and a live investigation dashboard. - [ELK Stack Setup (Windows + Winlogbeat + Kibana)](https://allatone.site/elk-stack-setup-windows-winlogbeat-kibana/): Add visualization (e.g. - [When Your Detection Fails… But It’s Actually Correct-Building a Fault-Tolerant SOC API](https://allatone.site/when-your-detection-fails-but-its-actually-correct-building-a-fault-tolerant-soc-api/): I built a brute-force detection system based on Windows Event ID 4625 (failed logins). - [Modern Adversarial Attacks in Deep Learning: Methods, Trends, and Challenges](https://allatone.site/modern-adversarial-attacks-in-deep-learning-methods-trends-and-challenges/): Adversarial examples are carefully perturbed inputs designed to mislead machine learning models while remaining nearly indistinguishable to humans. - [Securing Data Science Systems: Why Small Changes Can Have Big Consequences](https://allatone.site/securing-data-science-systems-why-small-changes-can-have-big-consequences/): Data science and artificial intelligence are transforming how we conduct research and make decisions. - [Adversarial Perturbation (Python)](https://allatone.site/adversarial-perturbation-python/): “Here, we added a very small perturbation to the image. - [Adversarial Weakness Analysis (AWA)](https://allatone.site/adversarial-weakness-analysis-awa/): Simple definition: Adversarial Weakness Analysis is the process of identifying and analyzing how AI and machine learning systems can be fooled by small, intentional changes in input data, and how to make them more robust against such attacks. - [Building a Mini SOC Dashboard from Scratch (Node.js + Nginx + Elasticsearch)](https://allatone.site/building-a-mini-soc-dashboard-from-scratch-node-js-nginx-elasticsearch/): Over the past few days, I built a lightweight SOC (Security Operations Center) dashboard from scratch — and honestly, it was a great hands-on experience dealing with real-world debugging, networking issues, and system integration. - [Building an SOC & Incident Response Platform](https://allatone.site/building-an-soc-incident-response-platform/): Over the past few days, I designed and implemented a custom Security Operations Center (SOC) platform integrating Elasticsearch, FastAPI, automated detection pipelines, and dynamic incident investigation workflows. - [Building a SOC Dashboard from Scratch](https://allatone.site/building-a-soc-dashboard-from-scratch/): But what made this valuable wasn’t the final result; it was the problems along the way. - [From Local Lab to a Public SOC API](https://allatone.site/from-local-lab-to-a-public-soc-api/): I just deployed my first SOC (Security Operations Center) backend to a live VPS and exposed it via a domain. - [Building a Real-Time SOC Platform from Scratch (Detection → Alerting → Visualization)](https://allatone.site/building-a-real-time-soc-platform-from-scratch-detection-%e2%86%92-alerting-%e2%86%92-visualization/): I’ve been working on designing a lightweight SOC (Security Operations Center) platform that simulates real-world detection, alerting, and monitoring workflows. - [Building Smart Detection for a SOC System (Time-Based Threat Detection)](https://allatone.site/building-smart-detection-for-a-soc-system-time-based-threat-detection/): After implementing basic brute-force detection and multi-channel alerting (Telegram + Email), I took the next step toward building a more realistic SOC system: Smart Detection. - [Building Real-Time Email Alerts for a SOC System (Elastic Stack + Node.js)](https://allatone.site/building-real-time-email-alerts-for-a-soc-system-elastic-stack-node-js/): In a modern Security Operations Center (SOC), detecting threats is not enough — timely notification is critical. - [Building Real-Time Telegram Alerts for a SOC Dashboard (Elastic Stack + Node.js)](https://allatone.site/building-real-time-telegram-alerts-for-a-soc-dashboard-elastic-stack-node-js/): In modern Security Operations Centers (SOC), detecting threats is only half the battle — real-time alerting is what truly enables fast response. - [Building a Real-Time SOC Dashboard with Elastic Stack, Node.js, and Chart.js](https://allatone.site/building-a-real-time-soc-dashboard-with-elastic-stack-node-js-and-chart-js/): In modern cybersecurity operations, detecting and visualizing suspicious activities in real time is critical. - [Building a Real SOC Dashboard with Elasticsearch & Node.js](https://allatone.site/building-a-real-soc-dashboard-with-elasticsearch-node-js/): After successfully implementing log collection and visualization using Kibana, the next phase of my project focused on building a custom real-time SOC dashboard. - [Building a Log Analysis Dashboard with Elasticsearch & Kibana](https://allatone.site/building-a-log-analysis-dashboard-with-elasticsearch-kibana/): In this phase of the project, I focused on collecting, visualizing, and understanding Windows security logs using the Elastic Stack (Elasticsearch, Kibana, and Winlogbeat). - [Building a Home SASE Lab with EVE-NG](https://allatone.site/building-a-home-sase-lab-with-eve-ng/): This setup provides a powerful and flexible environment for hands-on practice in networking and cybersecurity. - [Building a Node.js Log Analysis & Detection Server](https://allatone.site/building-a-node-js-log-analysis-detection-server/): I’ve been working on a hands-on project to simulate a basic Security Operations Center (SOC) environment using real log data. - [IBM Cloud Object Storage](https://allatone.site/ibm-cloud-object-storage/): IBM Cloud® Object Storage is a highly scalable and resilient object storage service on IBM Cloud, helping to ensure security, compliance, data availability, and performance. - [Why IBM Cloudant?(part 2)](https://allatone.site/why-ibm-cloudantpart-2/): Built on CouchDB technology with compatible API and replication protocols, IBM Cloudant supports flexible, schema-free JSON document storage, which is ideal for applications that require rapid, iterative development and dynamic data structures. - [IBM Cloudant(part 1)](https://allatone.site/ibm-cloudantpart-1/): Built on CouchDB technology with compatible API and replication protocols, IBM Cloudant supports flexible, schema-free JSON document storage, which is ideal for applications that require rapid, iterative development and dynamic data structures. - [Intro to IBM Cloud Security and Compliance Center](https://allatone.site/intro-to-ibm-cloud-security-and-compliance-center/): In this video, Tim Brantner explains how you can manage risk and compliance, ensure data protection, and infuse security and privacy for your cloud developers - with as much automation and standardization as possible - with IBM Cloud Security and Compliance Center (SCC). - [Lab: Exploiting XXE to retrieve data by repurposing a local DTD](https://allatone.site/lab-exploiting-xxe-to-retrieve-data-by-repurposing-a-local-dtd/): This lab has a "Check stock" feature that parses XML input but does not display the result. - [Lab: Clobbering DOM attributes to bypass HTML filters](https://allatone.site/lab-clobbering-dom-attributes-to-bypass-html-filters/): This lab uses the HTML Janitor library, which is vulnerable to DOM clobbering. - [IBM Cybersecurity Products](https://allatone.site/ibm-cybersecurity-products/): Detects cyber threats in real time. - [Lab: Exploiting DOM clobbering to enable XSS](https://allatone.site/lab-exploiting-dom-clobbering-to-enable-xss/): This lab contains a DOM-clobbering vulnerability. The comment functionality allows "safe" HTML. - [IBM Analytics Platforms](https://allatone.site/ibm-analytics-platforms/): A Business Intelligence (BI) and reporting platform. - [API testing](https://allatone.site/api-testing/): APIs (Application Programming Interfaces) enable software systems and applications to communicate and share data. - [Reflected DOM XSS Vulnerability Assessment (as a presentation)](https://allatone.site/reflected-dom-xss-vulnerability-assessment-as-a-presentation/) - [Lab: Reflected XSS protected by CSP, with CSP bypass](https://allatone.site/lab-reflected-xss-protected-by-csp-with-csp-bypass/): This lab uses CSP and contains a reflected XSS vulnerability. - [IBM Cloud Security and Compliance Center(as a presentation)](https://allatone.site/ibm-cloud-security-and-compliance-centeras-a-presentation/) - [Lab: Reflected XSS in a JavaScript URL with some characters blocked](https://allatone.site/lab-reflected-xss-in-a-javascript-url-with-some-characters-blocked/): This lab reflects your input in a JavaScript URL, but all is not as it seems. - [Lab: Indirect prompt injection](https://allatone.site/lab-indirect-prompt-injection/): This lab is vulnerable to indirect prompt injection. The user carlos frequently uses the live chat to ask about the Lightweight "l33t" Leather Jacket product. - [Lab: Reflected XSS with event handlers and href attributes blocked](https://allatone.site/lab-reflected-xss-with-event-handlers-and-href-attributes-blocked/): This lab contains a reflected XSS vulnerability with some whitelisted tags, but all events and anchor href attributes are blocked. - [Lab: Reflected XSS with AngularJS sandbox escape and CSP](https://allatone.site/lab-reflected-xss-with-angularjs-sandbox-escape-and-csp/): This lab uses CSP and AngularJS. - [Lab: Exploiting vulnerabilities in LLM APIs](https://allatone.site/lab-exploiting-vulnerabilities-in-llm-apis/): This lab contains an OS command injection vulnerability that can be exploited via its APIs. You can call these APIs via the LLM. - [Web LLM attacks](https://allatone.site/web-llm-attacks/): Organizations are rushing to integrate Large Language Models (LLMs) to improve their online customer experience. - [Lab: Reflected XSS with AngularJS sandbox escape without strings](https://allatone.site/lab-reflected-xss-with-angularjs-sandbox-escape-without-strings/): This lab uses AngularJS in an unusual way, where the $eval function is not available, and you will be unable to use any strings in AngularJS. - [reflected DOM vulnerability](https://allatone.site/reflected-dom-vulnerability/): Reflected DOM vulnerabilities occur when the server-side application processes data from a request and echoes the data in the response. - [Latest Security Threats](https://allatone.site/latest-security-threats/): — Compromising third-party software or services to infiltrate target organizations (e.g., SolarWinds, MOVEit Transfer breaches). - [Perform tasks in security tools (vulnerability management)](https://allatone.site/perform-tasks-in-security-tools-vulnerability-management/): By systematically executing these tasks, you’ll maintain an effective vulnerability-management lifecycle that reduces your organization’s attack surface and supports risk-based decision-making. - [ITIL process to manage Alerts, incidents](https://allatone.site/itil-process-to-manage-alerts-incidents/): Alert Management is the process of identifying, prioritizing, and escalating alerts to ensure that critical issues are addressed quickly. - [New attack (Conversation Overflow) to bypass AI security](https://allatone.site/new-attack-conversation-overflow-to-bypass-ai-security/): Conversation Overflow is a new attack technique discovered to bypass AI security. - [5 Essential Tools to Level-up your web Testing](https://allatone.site/5-essential-tools-to-level-up-your-web-testing/) - [Threat Technique: How AI Tools Are Being Manipulated to Create Malware](https://allatone.site/threat-technique-how-ai-tools-are-being-manipulated-to-create-malware/): As artificial intelligence (AI) continues to revolutionize industries worldwide, its capabilities are being harnessed in unexpected—and sometimes dangerous—ways. - [AI Tools Used for Coding Malware](https://allatone.site/ai-tools-used-for-coding-malware/): Advancements in artificial intelligence (AI) have transformed various aspects of technology—from automating mundane tasks to generating creative content. - [Hardware of IBM quantum processors](https://allatone.site/hardware-of-ibm-quantum-processors/): IBM has pioneered the development of quantum hardware that leverages superconducting circuit technology. - [Common Cloud Security Framework and Standards](https://allatone.site/common-cloud-security-framework-and-standards/): Cloud security frameworks and standards provide guidelines, best practices, and best-use principles for securing cloud environments. - [Create a Windows virtual machine with the Azure](https://allatone.site/create-a-windows-virtual-machine-with-the-azure/): Create a VM with az vm create. The following example creates a VM named myVM. This example uses azureuser for an administrative user name. - [NIST Cybersecurity Framework](https://allatone.site/nist-cybersecurity-framework/): guidance for how private sector organizations in the US can assess and improve their ability to prevent, detect, and respond to cyberattacks. - [Cloud Security in First Step](https://allatone.site/cloud-security-in-first-step/): diving into more complex topics. - [Quantum cybersecurity and Artificial Intelligence (AI)](https://allatone.site/quantum-cybersecurity-and-artificial-intelligence-ai/): Shor's Algorithm: Quantum computers, if sufficiently powerful, can run Shor's algorithm, which can efficiently factor large numbers. - [Post-Quantum Security](https://allatone.site/post-quantum-security/): Post-quantum security refers to the field of cryptography that develops algorithms and protocols designed to be secure against the capabilities of quantum computers. - [The Supersingular Isogeny Diffie-Hellman (SIDH) protocol](https://allatone.site/the-supersingular-isogeny-diffie-hellman-sidh-protocol-4/): The Supersingular Isogeny Diffie-Hellman (SIDH) protocol is a post-quantum key exchange mechanism based on the mathematical properties of supersingular elliptic curves and isogenies. - [The Supersingular Isogeny Diffie-Hellman (SIDH) protocol](https://allatone.site/the-supersingular-isogeny-diffie-hellman-sidh-protocol-3/): The Supersingular Isogeny Diffie-Hellman (SIDH) protocol is a post-quantum key exchange mechanism based on the mathematical properties of supersingular elliptic curves and isogenies. - [The Supersingular Isogeny Diffie-Hellman (SIDH) protocol](https://allatone.site/the-supersingular-isogeny-diffie-hellman-sidh-protocol-2/): The Supersingular Isogeny Diffie-Hellman (SIDH) protocol is a post-quantum key exchange mechanism based on the mathematical properties of supersingular elliptic curves and isogenies. - [The Supersingular Isogeny Diffie-Hellman (SIDH) protocol](https://allatone.site/the-supersingular-isogeny-diffie-hellman-sidh-protocol/): The Supersingular Isogeny Diffie-Hellman (SIDH) protocol is a post-quantum key exchange mechanism based on the mathematical properties of supersingular elliptic curves and isogenies. - [Using Supersingular Isogeny-Based Cryptography to Secure Data Transmission in the IoT](https://allatone.site/using-supersingular-isogeny-based-cryptography-to-secure-data-transmission-in-the-iot/): The Internet of Things (IoT) consists of interconnected devices that communicate and share data with each other. - [Super singular isogeny-Based Cryptography (Key Concepts for Beginners)](https://allatone.site/super-singular-isogeny-based-cryptography-key-concepts-for-beginners/): Definition: Elliptic curves are geometric objects that can be represented by equations of the form y^2 = x^3 + ax + b, where a and b are constants. - [Super singular Isogeny-Based Cryptography for Applications](https://allatone.site/super-singular-isogeny-based-cryptography-for-applications/): Super singular isogeny-based cryptography is a promising area of research for post-quantum cryptography, with applications in various fields. - [Supersingular Isogeny-Based Cryptography](https://allatone.site/supersingular-isogeny-based-cryptography/): Supersingular isogeny-based cryptography is a branch of post-quantum cryptography that utilizes the mathematical structure of supersingular elliptic curves and their isogenies (morphisms between elliptic curves that preserve the group structure) to create cryptographic primitives. - [Quantum Key Distribution (QKD)](https://allatone.site/quantum-key-distribution-qkd/): Quantum Key Distribution (QKD) is a method used to securely share cryptographic keys between two parties, known as Alice and Bob, by leveraging the principles of quantum mechanics. - [Hash-based signatures](https://allatone.site/hash-based-signatures/): Hash-based signatures are a type of digital signature scheme that relies on the security of hash functions rather than on number-theoretic problems like factorization or the discrete logarithm problem. - [Multivariate cryptography](https://allatone.site/multivariate-cryptography/): Multivariate cryptography is a field of cryptography that uses multivariate polynomial equations over finite fields to create cryptographic primitives like encryption schemes, digital signatures, and key exchange protocols. - [Code-based cryptography](https://allatone.site/code-based-cryptography/): Code-based cryptography is a branch of cryptographic techniques that relies on the principles of coding theory, particularly error-correcting codes, for secure communication. - [Lattice-based cryptography](https://allatone.site/lattice-based-cryptography/): Lattice-based cryptography is a form of public key cryptography that is based on the mathematical structure of lattices. - [Key Lattice-Based Cryptographic Schemes](https://allatone.site/key-lattice-based-cryptographic-schemes/): Description: NTRU is an encryption scheme designed by Jean-Jacques Quisquater and his team. - [Post-Quantum Cryptographic Techniques](https://allatone.site/post-quantum-cryptographic-techniques/): Post-quantum cryptography refers to cryptographic algorithms believed to be secure against the potential capabilities of quantum computers. - [Lattice-based cryptography](https://allatone.site/lattice-based-cryptography-2/): Lattice-based cryptography is a form of public key cryptography that is based on the mathematical structure of lattices. - [Cryptographic systems](https://allatone.site/cryptographic-systems/): Cryptographic systems are frameworks that use mathematical techniques to secure information and communications from adversaries. - [Shor's algorithm](https://allatone.site/shors-algorithm/): Shor's algorithm is a quantum computing algorithm that efficiently factors large integers, specifically those that would take classical computers an impractically long time to factor using known algorithms like the general number field sieve. - [The future of quantum cybersecurity](https://allatone.site/the-future-of-quantum-cybersecurity/): The future of quantum cybersecurity is poised to introduce profound changes in how we approach data security and privacy. - [Post-Quantum Cryptography (PQC)](https://allatone.site/post-quantum-cryptography-pqc/): Post-quantum cryptography (PQC) refers to the development of cryptographic techniques that are resistant to attacks by quantum computers. - [Quantum Cybersecurity: Trends and Insights](https://allatone.site/quantum-cybersecurity-trends-and-insights/): One of the key trends in Quantum Cybersecurity is the development of quantum-safe encryption algorithms. - [Enhancing Cybersecurity in the Quantum Era](https://allatone.site/enhancing-cybersecurity-in-the-quantum-era/): In the rapidly evolving landscape of cybersecurity, the looming advent of quantum computing technology is poised to usher in a new era of both unprecedented opportunities and formidable challenges. - [Safeguarding Data: Future of Quantum Cybersecurity](https://allatone.site/safeguarding-data-future-of-quantum-cybersecurity/): In today's digital age, cybersecurity is more critical than ever. - [The Future of Cybersecurity in a Quantum World](https://allatone.site/the-future-of-cybersecurity-in-a-quantum-world/): The emergence of quantum computing represents both an opportunity and a significant threat in the world of cybersecurity. - [Navigating the Future of Cybersecurity in a Quantum World](https://allatone.site/navigating-the-future-of-cybersecurity-in-a-quantum-world/): As technology advances, quantum computing emerges as a double-edged sword in the realm of cybersecurity. ## Pages - [My account](https://allatone.site/my-account/) - [Checkout](https://allatone.site/checkout/) - [Cart](https://allatone.site/cart/) - [Shop](https://allatone.site/shop/) - [cybersecurity](https://allatone.site/512-2/) - [Threats](https://allatone.site/quantum-threats/): Delving into how quantum computing reshapes cybersecurity, from emerging threats to innovative defenses. - [Blog](https://allatone.site/blog/): ➡️What Exactly Is a Qubit, and What Is It Made Of? - [Home](https://allatone.site/): Modern cybersecurity protects digital systems, networks, and data from threats such as hacking, malware, phishing, and data breaches. ## Optional - [Agent (MCP protocol)](websites-agents.hostinger.com/allatone.site/mcp) [comment]: # (Generated by Hostinger Tools Plugin)