April 2010
Web Services Security - The Basics
by Santosh Jadhav
Wiki defines Web services as “Application programming interfaces (API) or web APIs that can be accessed over a network, such as the Internet, and executed on a remote system hosting the requested services”. So putting this down in simpler words, it is a function of the application that can be made available for use for other developers to integrate it into their applications.… more →
Insight into Web Application Firewalls - Part 2
by Manish Chasta
In the previous article, we discussed about the basics of WAF, procedure to connect Apache with Tomcat and the installation part of ModSecurity. We took ModSecurity (an open source WAF) to understand the detailed aspects of the WAF. In this article, we look at the configuration part of a WAF. We will create some simple as well as complex rules to filter HTTP traffic. We would also discuss the use of Regular Expressions to create complex rules.… more →
Secure coding techniques in ASP.NET - Part 2
by Jaideep Jha
In continuation of the secure coding techniques in ASP.NET series we will be talking about another programmatic implementation of the anti-CSRF token, and protection against session fixation attacks.… more →