Email Alerts
-
SQL injection: Developers fight back
SQL injection attacks are a popular threat against application security. Anurag Agarwal provides 10 steps developers can use to secure their Web applications against SQL injection. Tip
-
Myth-busting Web application buffer overflows
If someone managed to exploit a buffer overflow in a Web application, it would result in a critical situation. But the chance of that happening to a custom Web application is slim. Focus instead on cross-site scripting and SQL injection vulnerabiliti... Tip
-
Identity management tool minimizes threat of insider attacks
IBM has introduced a new component to its Identity Management Services that monitors employees' online behavior and flags suspicious activity. Article
-
Threat modeling key to pro-active security
The best way to ensure software is secure is to build security into the software development life cycle, industry experts say. Design-time threat modeling is pivotal, but it needs to be constrained by an understanding of the business risks involved.... Article
-
Defining and preventing buffer overflows
Kurt Seifried describes buffer-over flow attacks and how you can guard against them. Tip
-
HTTP response splitting is [still] mostly harmful
Recently, several anti- HTTP response splitting strategies has been suggested and/or put to use by various individuals and vendors. Unfortunately, they don't follow recommended guidelines. Amit Klein sets the record straight and details what techniqu... News
-
SAP application security learning guide
If you're like most IT professionals, security is at the forefront of your concerns. Learn best practices for SAP security and applications security in this learning guide from SearchSAP.com and SearchAppSecurity.com. Learning Guide
-
Effects of domain hijacking can linger
Malicious hackers who are able to hijack an organization's Web domain may be able to steal traffic from the legitimate Web site long after the domain has been restored to its owner, according to a recent report from the Web Application Security Conso... News
-
White Papers: How to protect against SQL injection and other application attacks
SQL injection is just one exploit that can be used against Web applications -- there are many lurking out there. Fortunately, there are steps you can take now to prevent SQL injection and other attacks on your applications. These two white papers des... Resource Guide
-
How to Break Web Software: Functional and Security Testing of Web Applications and Web Services -- C
Web application security is dependent on proper coding and session management, and Web application developers must take it upon themselves to code state information so they can enforce rules about page access and session management. This chapter cont... Tip