Threat modeling resources - SearchSoftwareQuality.com


	Threat modeling


	Home > Software Quality Topics > Software Requirements > Threat modeling > Expert Technical Advice

Software Quality Topics:

EMAIL THIS

TOPICS HOME

BROWSE ALL SOFTWARE QUALITY TOPICS

SOFTWARE QUALITY INFO CENTERS

RESOURCE CENTERS

RSS FEEDS


Threat modeling



IN THIS TOPIC:	NEWS (18) , EXPERT TECHNICAL ADVICE (55) , REFERENCE & LEARNING (10) , WEBCASTS (2) , DOWNLOADS (1) , BEST WEB LINKS (54)

Display in sets of:


31 - 40 of 55 in Expert Technical Advice		<< Previous page 1 2 3 4 5 6 Next >>



THREAT MODELING EXPERTS



			Dan Cornell principal, Denim Group ASK A QUESTION


	How to protect your Web site against buffer overruns 04 May 2006 EXPERT ANSWER - Buffer overflow exploits can be a serious security threat. Application security activities expert Jeremiah Grossman explains how to prevent these attacks.


	SSL protects data in transit, but not apps 02 May 2006 EXPERT ANSWER - SSL is critical for protecting data in transit to the Web server, but security expert Brad Arkin says other security measures are required to protect the end points of the connection against other types of attacks.


	SQL injection: Developers fight back Submitted By: SearchSoftwareQuality.com \| 06 Apr 2006 TIP - SQL injection attacks are a popular threat against application security. Anurag Agarwal provides 10 steps developers can use to secure their Web applications against SQL injection.


	Myth-busting Web application buffer overflows Submitted By: SearchAppSecurity.com \| 10 Mar 2006 TIP - The chances of someone exploiting a buffer overflow in a custom Web application are slim. Focus instead on issues such as cross-site scripting and SQL injection vulnerabilities.


	Defining and preventing buffer overflows 06 Jan 2003 TIP - Kurt Seifried describes buffer-over flow attacks and how you can guard against them.


	How to Break Web Software: Functional and Security Testing of Web Applications and Web Services -- Chapter 4: State-Based Attacks Submitted By: Addison Wesley Professional \| 02 Feb 2006 TIP - Web application security is dependent on proper session management. This chapter contains a series of state-based attacks that will help determine if your application is secure.


	Securing Linux applications with compiler extensions Submitted By: SearchOpenSource.com \| 18 Jan 2006 TIP - PaX team developers Justin Korelc and Ed Tittel explain how to secure your environment using compiler extensions as a first-line defense when running unverified 3rd-party software.


	Anatomy of an XSS hack Submitted By: Web Informant \| 25 Apr 2003 TIP - Follow these steps to determine if your Web applications are vulnerable to XSS (cross-site scripting) attacks.


	RSS: The next malware target? 11 Jan 2006 TIP - In this tip, security expert Mike Chapple explains how RSS could be exploited, and offers steps for preventing these malware attacks.


	Exploiting Software: How to Break Code -- Chapter 7, Buffer Overflow Submitted By: Addison-Wesley Professional \| 11 Jan 2006 TIP - How does software break? How do attackers make software break on purpose? This book provides the answers.


31 - 40 of 55 in Expert Technical Advice		<< Previous page 1 2 3 4 5 6 Next >>

SEARCH

TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.


TechTarget Corporate Web Site \| Media Kits \| Reprints \| Site Map All Rights Reserved, Copyright 2006 - 2008, TechTarget \| Read our Privacy Policy