Book Image

Security with Go

By : John Daniel Leon, Gaekwad
Book Image

Security with Go

By: John Daniel Leon, Gaekwad

Overview of this book

Go is becoming more and more popular as a language for security experts. Its wide use in server and cloud environments, its speed and ease of use, and its evident capabilities for data analysis, have made it a prime choice for developers who need to think about security. Security with Go is the first Golang security book, and it is useful for both blue team and red team applications. With this book, you will learn how to write secure software, monitor your systems, secure your data, attack systems, and extract information. Defensive topics include cryptography, forensics, packet capturing, and building secure web applications. Offensive topics include brute force, port scanning, packet injection, web scraping, social engineering, and post exploitation techniques.
Table of Contents (15 chapters)

Sandboxing

One related technique that is not demonstrated in this chapter, but is worth mentioning, is sandboxing. Sandboxing serves a different purpose from a honeypot, but they both make an effort to create an environment that looks legitimate, but is actually tightly controlled and monitored. An example of sandboxing is the creation of a virtual machine with no network connectivity, which logs all file changes and attempted network connections to see if anything suspicious happens.

Sometimes, a sandbox environment can be detected by looking at the number of CPUs and the RAM. If the malicious application detects a system with a small amount of resources, say 1 CPU and 1 GB RAM, then it is likely not to be a modern desktop machine and may be a sandbox. Malicious software writers have learned to fingerprint sandbox environments and program the application to bypass any malicious...