October 2008
Database Links Security
by Roshen Chandran, CISSP
Database links (DBLinks in Oracle) are a technique for one database to connect to a remote database and execute queries. The originating database uses an account in the remote destination database to connect. This connection thus uses a username and password of an account in the destination database. The connection has the privileges of the account that’s used in the destination database.… more →
Defeating Encryption in Some Thick Clients
by Madhumita Iyer
While testing thick client applications we sometimes encounter the client encrypting pieces of the request. At such times, many of our variable manipulation attacks are foiled. To overcome this barrier, there are several techniques. Here’s one of the methods we tried for a recent thick client application test.… more →
SAP Baseline Security Audit
by Rajesh Gopinath, GCIH
A SAP Baseline Security Audit tells enterprises how their SAP security posture stacks up against industry best practices. The Baseline Security Audit is the first step in a comprehensive security audit program and is ideal for generating a quick win early. This article outlines the areas covered under the SAP Baseline Security Audit we perform.… more →
Quiz: Specifying life time for a webpage
We have often come across the message “Webpage has expired” when attempting to access a recently accessed page. This message comes as a result of the web server specifying an expiration time for the webpage when it is stored on the browser’s cache. How does a web server specify the life time for a page to the browser’s cache?
- Using the Expires header
- Using the Max-age directive along with Expires header
- Setting the Must-Revalidate header in the response
- All of the above