Article Cryptography fundamentals, part three - Hashing Hashing A hash value, also called a message digest, is a number generated from a string of text. As per the hash definition, no two different texts…
Article Cryptography Fundamentals, Part 4 – PKI PKI PKI (public key infrastructure) is a hybrid of symmetric and asymmetric encryption. The handshake uses asymmetric encryption to exchange the…
Article Cryptography Fundamentals, Part 5 – Certificate Authentication Certificate Authentication Here's how to verify that the certificate is from the original sender with GnuPG. [download]Download the Cryptography…
Article Legality of Electronic Signatures in the EU and the US 1. Introduction Electronic signatures were used for the first time in 1861 when agreements were signed by telegraphy using Morse code. In 1869, the…
Article OWASP ProActive Controls: Part 2 of 2 In the first part of this series, we covered the Top 5 OWASP ProActive Controls and learned how they can prove to be of great use in securing…
Article Biometrics: Today’s Choice for the Future of Authentication The options currently available for user authentication fall within three categories: authentication through something that the user knows, such as…
Article HTML5 Security: Cross Domain Messaging In this article, we will discuss HTML5 Web Messaging (or Cross Domain Messaging) attack vectors and security implementations. Why is it important to…
Article Equation Group APT and TAO NSA: Two Hacking Arsenals Too Similar The Equation Group In February 2014, the team of experts from Kaspersky Lab announced the discovery of a hacking group operating since 2001 that…
Article n00bs CTF Labs by Infosec Institute n00bs CTF (Capture the Flag) Labs is a web application presented by Infosec Institute. It has 15 mini Capture the Flag challenges intended for…
Article DDoS on UPNP Devices Denial of service (DOS) attack is an attempt to make a machine or a network resource unavailable to its users. It basically consists of methods to…
Article Digital footprints and privacy concerns "It is too difficult to give exact statistics on the amount of data people leave, but confirmed every time we perform an online action, we are…
Article n00bs CTF Labs - Solutions! Congratulations to our winners and a big shout out to everyone who participated in the n00bs Capture the Flag Challenge! Check out the winning…
Article Understanding Web Caching Quite often we see Web pages that include images and other files loading faster than we expect. If you are wondering how that happens, Web caching…
Article Cyber Security Risk in Supply Chain Management: Part 1 Introduction Cyber security is generally thought of as various types of security devices like firewalls, Web Application Firewall (WAF), IDS/IPS,…
Article The FREAK Vulnerability: From Discovery to Mitigation A few weeks ago, security experts discovered a new major security SSL/TLS vulnerability, dubbed FREAK, that for more than a decade left users of…
Article Cyber Security Risks in Supply Chain Management – Part 2 In Part 1 of this article series, I discussed various risks involved in supply chain management with the latest example of a malicious adware named…
Article iOS Application Security Part 39 - Sensitive information in memory In this article, we will look at analyzing the memory contents of an iOS application. iOS applications may store sensitive information like…
Article Packet crafting: a serious crime! Packet crafting is the art of creating a packet according to various requirements to carry out attacks and to exploit vulnerabilities in a network.…
Article Introduction to GSM security The Global System for Mobile Communication or GSM is a wireless communication that uses digital technology and is widely deployed across the globe…
Article Understanding iOS Security: Part 1 Apple uses iOS (operating system) to power many of its mobile devices such as iPhone, iPad and so on. From the beginning, security has been placed…
Article Wi-Fi Security: Securing Yourself against Practical Wireless Attacks While the access points in organizations are usually under the protection of organization-wide security policies, home routers are less likely to be…
Article Cracking a Wi-Fi WPA2 Password, Thanks to Amazon In a pen tester's life, sooner or later you are cracking a password. This activity depends on the type of password and available hardware. Today I…
Article Ethical Hacking Dual Certification Interested in an online course for hacking? A dual training CEH boot camp?[pkadzone zone="main_top"] Our most popular information security and…
Article Digital Dark Age: Information Explosion and Data Risks "Old formats of documents that we've created or presentations may not be readable by the latest version of the software because backwards…
