Application security

Security in Public API’s – How [Updated 2019]

Far too often we will download an API (Application Programming Interface) from Programmable Web, or download an SDK like the Facebook SDK and not worry about

Book Excerpt: Web Application Security, A Beginner's Guide [Updated 2019]

Web Application Security: A Beginner’s Guide provides IT professionals with an actionable, rock-solid foundation in Web application security--from a complete

Top 5 Web Application Security Scanners of 2018

Top 5 Web Application Security Scanners of 2018

Intro to Web Application Security Scanners Web application plays an important role in an organization and possesses a great impact and gateway to organizatio

Hacking WolframAlpha - The Anatomy

Hacking WolframAlpha - The Anatomy

Preview Sharing source code with peers is one thing; sharing secrets over a public medium is another. The all-seeing eye of Google has no mercy, and once the

What is an XXE attack?

What is an XXE attack?

XXE (XML External Entity attack) is now increasingly being found and reported in major web applications such as Facebook, PayPal, etc. For instance, a quick

Top 10 solutions to protect against DDoS attacks and increase security

Top 10 solutions to protect against DDoS attacks and increase security

According to statistics, 33% of businesses fall victim to DDoS attacks. It is almost impossible to predict such attacks. Some of them can be powerful and rea

Layer Seven DDoS Attacks

Layer Seven DDoS Attacks

What is Layer 7? The process of sending and receiving data from one host to another, data encapsulation, is possible due to the existence of a seven layer pr

2017 OWASP A8 Update: Insecure Deserialization

2017 OWASP A8 Update: Insecure Deserialization

Introduction 2017 saw a new addition to the Open Web Application Security Project’s (OWASP) Top Ten list of web application vulnerabilities — insecure deseri

2017 OWASP A7 Update: Cross-Site Scripting

2017 OWASP A7 Update: Cross-Site Scripting

Introduction For the past 15 years, the Open Web Application Security Project (OWASP) has helped organizations develop, purchase, and maintain trusted applic

2017 OWASP A3 Update: Sensitive Data Exposure

2017 OWASP A3 Update: Sensitive Data Exposure

Introduction Si vis pacem, para bellum! This classic Latin quote by Vegetius translates to "If you want peace, prepare for war." As far as aphorisms goes, th