As it is rightly said by Mr. Peter Drucker – What gets measured gets improved. Thinking about security, it is important to ask ourselves, are we measuring the security risks of our organization? Or rather are we measuring them enough? If done correctly, it would build a good perspective on the entire process of managing…
It is important to implement a robust Vulnerability Management (VM) program with an aim to keep the IT infrastructure of the organization protected from existing and emerging security threats. The program should not only look at identifying security vulnerabilities, but it must also establish a process for planning and controlling the risks effectively within desired…
Introduction to XML XML (Extensible Mark-up Language) is used to create user-defined tags, unlike HTML which consists of pre-defined tags. It is designed to describe data and focus on what data is. In the example below, XML is used to define Email information using tags like, <to>, <from>, <heading>, <body> <?xml version=’1.0’ encoding=’UTF-8’?> <note> <to>John</to>…
This blog highlights different insecure coding practices seen in JAVA EE applications. It includes most of the OWASP Top 10 Vulnerabilities, giving their root causes and mitigation techniques. 1. Authentication Insecure Coding Practices Secure Coding Practices Concatenated SQL queries for login validation. In most cases it is seen that user credentials, as retrieved from…
Cross site scripting attack is one of the high-rated web attacks. In this blog, we will focus on the root cause of this attack in ASP.NET based applications. And why some existing controls fail to prevent this attack? To understand the subject we will take the case of a search feature. Here the application accepts search keywords…
Frameworks like Apache Cordova enables software programmers to build hybrid applications for mobile devices. The applications can be built using CSS3, HTML5, and JavaScript, that is then wrapped inside a thin native container that provides access to native platform features. This facilitates programmers to create cross-platform mobile applications that work on multiple devices. Though it is easier and cost effective to build such applications,…
A chatbot is an automated service that operates with rules and artificial intelligence to interact with users using a chat interface. Here are few examples of a chatbot: Weather bot: gives the weather information Grocery bot: helps in making decision for grocery items News bot: gives news updates There are two types of chatbots: Chatbots that…
It is a commonly seen practice to perform security testing of applications during the QA stage, after developing their code. In all such cases however as security bugs get uncovered at the later stage of development, a great amount of rework gets involved before the application release. There by causing issues like delays, unverified security-fixes,…
