May 2007
Mobile Banking Architecture
by Suraj Sankaran
This two-part series on mobile banking security will help Bank security officers and auditors understand the security threats in Mobile banking. Here, I will present two popular mobile banking architectures and dive into the exchange of messages between the components. Next month, we will look at the threats inherent in this architecture and how to mitigate them.… more →
Wi-Fi Protected Access
by Balaji V
Wired Equivalent Privacy (WEP), the previous security mechanism for wireless LANs can today be broken in about 2 minutes. So wireless equipment vendors provided improved security mechanisms in their products. But these enhanced security mechanisms were proprietary and did not work with one another. So the Wi-Fi Alliance introduced Wi-Fi Protected Access – it has become an effective standard implemented across multi-vendor devices.… more →
Quiz: CAPTCHAs
Which of these is not a recommended best practice for implementing CAPTCHAs?
- Have a fixed set of images with dynamic filenames
- Send the CAPTCHA to the client with a random token
- Invalidate the token after one use
- None of the above