Tag: security

DES

RC4

Block ciphers using Electronic Code Book (ECB) mode

AES

Contract Negotiations

Testing phase only

Coding Phase only

All the phases of SDLC

vulnerability expliots

malware uploads on user driven sites

internal attacks

all of these

1

2

3

4

Defect Prevention

DAR

Design

Threat Modelling

We should first ask the user to supply some details like personal details or ask a hint question. If the credentials supplied are correct, display the old password

We should first ask the user to supply some details like personal details or ask a hint question. If the credentials supplied are correct and the account is not disabled, display the old password

We should first ask the user to supply some details like personal details or ask a hint question. If the credentials supplied are correct and the account is not disabled, then we should send a mail to the users authorized mail id with a link which will t

We should first ask the user to supply some details like personal details or ask a hint question. If the credentials supplied are correct and the account is not disabled, display the new password

setSSL()

setCookieSSL()

setCookieSecure()

setSecure()

Persistent cookie information is transmitted thru HTTP

Persistent cookie does not expire when the browser is hard closed.

Persistent cookie are created on harddisk and hence they are readable as a file

No security issue in using Persistent cookie

User ID Time stamp Source IP Error codes, if any Priority

User ID , password Time stamp Source IP Error codes, if any Priority

User ID , password Time stamp Source IP Error codes, if any Priority , URL accessed

User ID Time stamp Source IP Error codes, if any Priority , URL accessed, method used, http protocol version, browser type, the referrer page, the response code

Vulnerabilities detected on xyz server

Effort slippage

Number of non negligible risks in the application

Total exceptions not handled correctly