October 2005
Security Architecture for Multi-Tier Applications
by Shaheem Motlekar, GCIH, BS7799 LA
The advent of the Internet has seen the introduction of multi-tier applications. Nowadays, multi-tier applications have become the norm for building enterprise software. The most common breakdown of a tiered application would be – Presentation, Business Logic and Data. Although there are other possibilities, we shall consider this breakdown for today’s discussion.… more →
Code Obfuscation Part 3 - Hiding Control Flows
by Sonali Gupta, SANS, GCIH
In the last two issues we introduced code obfuscation and went in-depth into data structure obfuscation. In this issue we look at control obfuscation, a class of obfuscation techniques that targets the control flow in a program… more →
Implementing SSL
by Shalini Gupta
In the September issue of Palisade we discussed how SSL works, what it actually protects against and what it does not. After understanding this, let’s look at how to implement SSL.… more →
Quiz: Detecting frauds from log files
Which logging mechanism is best to trace back to the culprit in case of an application fraud, for example, when a fraudster may have illegally transferred money from somebody else’s account to his own account?
- Web-Server error logs
- Application logs
- W3C logs
- System logs