Tag: security

1) Keep it easy to understand 2) Secure default access 3) Defense in Depth 4) encapsulation 5) Highest privilege

1) Keep it easy to understand 2) Secure access 3) Defense in Depth 4) encapsulation 5) Highest privilege

1) Keep it simple and secure 2) Secure default access 3) Defense in Depth 4) Compartmentalization 5) Least privilege

1) Keep it easy to understand 2) Secure access 3) DMZ 4) encapsulation 5) Highest privilege

Passive Scanning

Social Engineering

Scanning

Fuzzing

Mandatory access control

Role Based Access Control

Discretionary Access Control

Biometric access control

Nessus

HP Web Inspect

TAM

SDL

Web cache poisoning

Account Harvesting

Eaves dropping

Cookie Poisoning

Xpath

XmlReader

SQL

xmlPlus

Digitally signed and stamped logs

Log file Read/write privilege is controlled by System administrator

Separate logs for system events

Transaction log for all application events

DMZ is the place where customers servers are deployed.

DMZ is an area where all the protocols are allowed to pass through.

semi trusted network zone that separates the untrusted internet from the companys trusted internal network

DMZ is cyber warfare terminology

SQL Injection

Cross site request forgery

Session fixation

session hijack

Client side only

server side only

Both client and server side

In the SQL procedure