June 2005
Interview: What works in Training Security Testers
As software organizations figure out how to integrate security testing into the QA process, Palisade talked to Firosh Ummer to learn how he set up the internal training program for security testers at Paladion. With participants from the training program going on to test over 300 applications in the last 3 years, Firosh has been continuously refining the program to make it more effective.… more →
Cryptanalysis: Collision attack in Hashing
by Prashant Gawade
In general two types of attacks have been found prevalent in hashing -preimage attack and collision attack. In this article we look at some of the details of the collision attack including - which hashing algorithms are vulnerable and how difficult it is to perform these attacks. … more →
Encrypting data in Databases
by Priyali Vibhute, BS 7799 LA
Organizations take a lot of steps to protect their confidential data. Almost all security measures including encryption are considered only while transferring information on the wire not while storing it in the database. More often than not, it is stored as clear text in the database. In this article we see how database encrytion can enhance the security of our data. … more →
Quiz: Preventing Phishing attacks
Which is the best method to protect my customers from phishing attacks?
- Have strong authentication mechanisms like Hardware Tokens, E-mail Signing etc.
- Include personalized web pages to make it hard to impersonate the site
- Creating awareness among customers about phishing
Review: SQLSecurity.com
If you design applications that access MS SQL Server or are responsible for maintaining SQL Server, then SQLSecurity.com is the go-to site for you. Started in 1999 by Chip Andrews (the co-author of “SQL Server Security”), the site has grown in content answering your questions on securing SQL Server databases, and then some more. … more →