Application security
Application security
In one of the previous articles, we have seen how developers implement Shared Preferences in Android applications. We have also seen how one can compromise t
August 5, 2014
SrinivasApplication security
In today's world, over 70% of all attacks carried out over are done so at the web application level, so we need to implement security at multiple levels, as
July 18, 2014
Nikhil KumarApplication security
In this article, we will look at the techniques being used by Android developers to detect if a device on which the app is running is rooted or not. There ar
July 2, 2014
SrinivasApplication security
OWASP Practice is a virtual environment to help people who want to begin their journey into web application security. Lots of material including videos are a
June 11, 2014
Interference SecurityApplication security
In this series of articles so far, we have discussed various techniques to identify and exploit vulnerabilities in Android applications. In the previous arti
May 28, 2014
SrinivasApplication security
In the previous article, we have seen how to debug Java applications using a little tool called JDB. In this article, we will apply the same logic to exploit
May 23, 2014
SrinivasApplication security
Introduction In the last couple of years there has been a boom in cloud computing, but mainly just the term is new, as we've been using cloud services for ye
May 21, 2014
Dejan LukanApplication security
According to recent research, the amount of mobile phone users is larger than PC users. At the same time, the number of people who own Android phones is incr
May 20, 2014
Mohit RawatApplication security
In our last part of this series (Android Application Security Testing Guide: Part 1), we discussed static analysis of Android APK files on the security backg
May 16, 2014
Shubham MittalApplication security
Are you a Backtrack/Kali freak? Ever thought of having a similar distribution in your arsenal dedicated for Android Security? "Android Tamer" is the solution
May 14, 2014
SrinivasLearn how to secure systems with 11 courses from Infosec Skills instructor and #1 best-selling author Ted Harrington.
- Hack your system
- Establish your threat model
- Spend wisely
- And more
In this series
- New Page Test 4
- New Page test3
- New Page test2
- New Test Page
- DevSecOps: Moving from “shift left” to “born left”
- What’s new in the OWASP Top 10 for 2023?
- DevSecOps: Continuous Integration Continuous Delivery (CI-CD) tools
- Introduction to DevSecOps and its evolution and statistics
- MongoDB (part 3): How to secure data
- MongoDB (part 2): How to manage data using CRUD operations
- MongoDB (part 1): How to design a schemaless, NoSQL database
- Understanding the DevSecOps Pipeline
- API Security: How to take a layered approach to protect your data
- How to find the perfect security partner for your company
- Security gives your company a competitive advantage
- 3 major flaws of the black-box approach to security testing
- Can bug bounty programs replace dedicated security testing?
- The 7 steps of ethical hacking
- Laravel authorization best practices and tips
- Learn how to do application security right in your organization
- How to use authorization in Laravel: Gates, policies, roles and permissions
- Is your company testing security often enough?
- Authentication vs. authorization: Which one should you use, and when?
- Why your company should prioritize security vulnerabilities by severity
- There’s no such thing as “done” with application security
- Understanding hackers: The insider threat
- Understanding hackers: The 5 primary types of external attackers
- Want to improve the security of your application? Think like a hacker
- 5 problems with securing applications
- Why you should build security into your system, rather than bolt it on
- Why a skills shortage is one of the biggest security challenges for companies
- How should your company think about investing in security?
- How to carry out a watering hole attack: Examples and video walkthrough
- How cross-site scripting attacks work: Examples and video walkthrough
- How SQL injection attacks work: Examples and video walkthrough
- Securing the Kubernetes cluster
- How to run a software composition analysis tool
- How to run a SAST (static application security test): tips & tools
- How to run an interactive application security test (IAST): Tips & tools
- How to run a dynamic application security test (DAST): Tips & tools
- Introduction to Kubernetes security
- Key findings from ESG’s Modern Application Development Security report
- Microsoft’s Project OneFuzz Framework with Azure: Overview and concerns
- Software maturity models for AppSec initiatives
- Best free and open source SQL injection tools [updated 2021]
- Pysa 101: Overview of Facebook’s open-source Python code analysis tool
- Improving web application security with purple teams
- Open-source application security flaws: What you should know and how to spot them
- Android app security: Over 12,000 popular Android apps contain undocumented backdoors
- 13 common web app vulnerabilities not included in the OWASP Top 10