Article Risks and Cyber Threats to the Healthcare Industry Introduction Every day, our digital identity is menaced by several cyber threats that are becoming even more sophisticated. Every year, data…
Article Defense-in-Depth: Layered Protection and Data Security Application vulnerability is caused when a developer fails to sanitize the input from user and blindly uses it as an input for further data…
Article Parameterized SQL query over dynamic SQL query What is a parameterized SQL query? It is used for better performance, high efficiency and prevention of SQL injection vulnerability. Before going…
Article Dockerizing a Sample GUI Application: Case Study The goal for this article is a sprint from never using Docker to using it to deploy a GUI application that only has a console deployment pattern for…
Article The essentials of an acceptable use policy What is an acceptable use policy? An Acceptable Use Policy (henceforward mentioned as "AUP") is agreement between two or more parties to a computer…
Article To Reduce Risk, De-emphasize “C” and Focus on “G” By their nature, business endeavors involve various elements of risk. These elements may include technological, commercial, legal, financial, and…
Article Exploiting and verifying shellshock: CVE-2014-6271 The Bash Bug vulnerability (CVE-2014-6271) A new critical vulnerability, remotely exploitable, dubbed "Bash Bug", is threatening billions of…
Article Steganalysis: your X-Ray vision through hidden data Steganography is often mistaken with cryptography, but they are very different in their operations. The major similarity between them is they were…
Article Troll Challenge Just found an interesting vulnerable machine named Troll. It sounds like the machine will troll the attacker. We booted up the machine in Virtual…
Article SAML, OAuth, OpenID Introduction In this article, we are going to see what are federation, single sign-on, and three federated identity standards, namely Security…
Article The importance of an effective VPN remote access policy With the number of employees telecommuting, traveling often or working remotely on the rise, the conventional corporate security model is undergoing…
Article Why email puts your business data at risk, and what to do about it In spite of the abundant availability of enterprise software designed to help businesses be more productive, cost-effective, and security conscious,…
Article Shellshock [CVE-2014-6271]: Another Attack Vector - Bluffing IPS/IDS Sensors With Python Crafted Pkts While a lot of online websites and blogs are explaining the vulnerability damage, providing PoC scripts and repetitive information, here we will…
Article Windows Resource Protection In this article, we will learn about a not-so-well known but a very useful security feature in Windows: Windows Resource Protection. This feature…
Article Mobile Developer Salary The world of mobile is taking over desktop applications, and mobile development and people who understand mobile design and architecture are in…
Article IT Security Policies Should Include a Physical Security Policy We live in a world that's becoming ever more dependent on the various digital products at our disposal. From the average man on the street making…
Article Pricing Policies in the Cyber Criminal Underground Introduction Underground markets are places on the Internet where criminal gangs offer a wide range of illegal products and services. Black markets…
Article Flick Challenge Here is another interesting challenge we are going to solve. The vulnerable machine name is Flick. As usual, we started the game by hosting the…
Article Sharkfest 2013 The sharkfest challenge was organized by Wireshark University. There are seven challenges related to the trace files analysis. In each challenge,…
Article Microsoft DirectAccess In this article we will learn about a very famous security product of Microsoft known as Microsoft Direct Access. It is a product built over an old…
Article Sharkfest 2013: Part II In the first part of our article we solved the first three challenges, so in this article we will continue with rest of the challenges. CHALLENGE…
Article Evolution of 3D Printing Technology Raises Security Concerns Introduction Also known as the term additive manufacturing (AM), 3D printing is a process for making a three-dimensional object of almost any shape…
Article The Importance of an Online Encryption Policy within an Organization Benjamin Franklin once said, "If you fail to plan, you plan to fail." This quote summarizes the importance of online encryption policy and hands-on…
Article Information Security of Nanorobots 1. Introduction The year is 2045. A 31-year-old woman is brought to the hospital complainingof headaches and fever. The doctors identify a species…
