Security Ninja

Windows Resource Protection

In this article, we will learn about a not-so-well known but a very useful security feature in Windows: Windows Resource Protection. This feature can help a

SAML, OAuth, OpenID

Introduction In this article, we are going to see what are federation, single sign-on, and three federated identity standards, namely Security Assertion and

Want to Limit PCI DSS Scope? Use Tokenization

Every organization should follow a proactive rather than a reactive approach to protect against threats, risks and vulnerabilities, to which if their IT infr

Microsoft NAP (Network Access Protection)

In this article we will learn about one of the most important features introduced by Microsoft from the perspective of network access protection (NAP). We wi

File integrity monitoring (FIM) and PCI-DSS

In this article, we will learn about the requirement of file integrity monitoring in PCI-DSS (Payment Card Industry Data Security Standard). If we talk about

Data loss prevention (DLP) strategy guide

In this article, we'll learn about the concept of data loss prevention: why it is needed, what are the different types of DLP and its modes of operations, wh

Network Time Protocol (NTP): Threats and countermeasures

In this article I am going to illustrate how NTP is vulnerable to attacks like replay-delay attacks, MITM, and a very recent attack termed as NTP DDoS (which

PCI-DSS 3.0 - Key Drivers

Every organization should follow a proactive rather than a reactive approach to protect against threats, risks, and vulnerabilities to which if their IT infr