May 2005
Datamonitor Survey on Software Security Testing
by Sangita Pakala, GCIH
In late 2004, Paladion commissioned Datamonitor to study the security testing trends among 68 ISVs. Here we present the results of the survey and share the white paper with you.… more →
Steganalysis
by Sonali Gupta, SANS GCIH
Steganalysis is the technology that attempts to defeat steganography—by detecting the hidden information and extracting or destroying it. Let us look at these interesting techniques that extract/destroys the hidden data from the Stego-object (the modified medium with the hidden information). … more →
Security Reverse Proxy
by Sam Varughese, CISSP
Web applications vulnerabilities are increasingly being used by attackers to compromise systems on the internet. This has created demand for a mechanism to secure web application without rewriting the whole application. In this article, we see how a security reverse proxy can be used to provide reasonable security for web applications in an organization.… more →
Quiz: Masking Web Server Banners
How should I mask my web server’s banners to get enhanced security?
- Edit the server’s source code or the binary to change the default string
- Edit configuration files or install a plug-in to mask the banner of your server
- Never mind, obscuring banners doesn’t enhance security!
Review: Technical Info
One of our favourite websites on application security, Technical Info hosts a large collection of papers by Gunter Ollman. Here’s an introduction to the website.… more →