SEARCH RESULTS
 
Showing 1-10 of 39 records
 
Expand article

"Crawling" Toward SDL

2008-03-06 22:13:00 by sdl in The Security Development Lifecycle
 
...Visual Studio 2005 SP1. The SP1 piece of this is important because some of the important defenses I discuss below were first made available in that version. Lets look at some of the tools you can use to get crawling toward SDL today Detailed awareness of your architecture and its attack surface Threat Modeling Even if you are past the design...
 
Tags: sdl, security, perform security analysis, application security, application, applications security, security issues, issues, non-microsoft sdl engagements
 
 
 
 
Expand article

Trusted path

The Article has images
2008-04-04 21:18:17 by Editor in Security x.0
...visual channel is the best way to go We believe that our visual cryptogram can provide a trusted path from a bank to the customer in the way which is both secure and simple for consumers We chose the visual channel for the following reasons The image can contain encrypted data Most end user terminals can display images: from ATMs to Train...
 
Tags: path, security, security protocol, strong security protocols, protocols, user, user terminals, common, attack vectors
 
 
 
 
Expand article

How do you present your security proposition?

The Article has images
2008-04-04 21:18:18 by Editor in Security x.0
...visual delivery style, making great use of images to amplify delivered messages. Could this style improve the chances of communicating effectively security to business I am sure most will agree on which of the following presentation slides is most likely to bore the audience to death So, why not make your presentation a bit more colourful?...
 
Tags: security, web application security, security professionals, effectively security, presentation, presentation slides, visual, visual delivery style, security vendor
 
 
 
 
Expand article

2FA is dead

The Article has images
2008-04-29 09:19:31 by Editor in Security x.0
...visual cryptograms . Cronto's visual signing products are designed to give strong security assurances, while being acceptable to customers. Unlike CAP, as transaction details are encoded in a visual cryptogram, the user does not have to re-enter them into the trusted device, increasing speed, reducing errors and mitigating security problems....
 
Tags: real bank site, bank site, browser, browser attacks, bank, bank details, browser attack, 2fa, transaction
 
 
 
 
Expand article

A Review of Hakin9 IT Security Magazine

The Article has images
2008-05-26 05:12:53 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Visual materials The surplus of visual materials is perhaps what won me as a reader from the first moment. In fact, the issues are so rich on visual material illustrating the topic covered in such details, that you can actually take entire sniffing, and javascript obfuscation sessions offline with you, and never ever have to picture the...
 
Tags: magazine, content, review, hardcode technical content, quality magazine, javascript obfuscation article, article, content quality, issue
 
 
 
 
Expand article

Server Launch : Security Highlights

The Article has images
2008-02-27 14:12:54 by jrjones in Jeff Jones Security Blog
...Visual Studio 2008 and SQL Server 2008. Click on the image to learn more general information and participate in the virtual launch I want to briefly salute some of the security improvement represented by these products. This is not a comprehensive list, and I will certainly dig into some of these in more detail later, but it should give you a...
 
Tags: security, incredible security record, windows, windows vista, sql server, security source code, windows server, network access protection, network access
 
 
 
 
Expand article

The most insecure banking/sales terminal

2008-07-14 13:27:20 by Editor in Security x.0
 
...visual transaction signing solution. Based on our unique Visual Cryptogram , the Cronto solution supports multiple end user options allowing the bank to choose what is right for their customers whilst maintaining consistency in their backend systems
 
Tags: address, address security, security, secure, security features, banks, banks agree, secure software, internet company
 
 
 
 
Expand article

Good hygiene and Banned APIs

2008-10-22 22:08:00 by sdl in The Security Development Lifecycle
 
...Visual Studio 2005 or later, you have a built-in way to check for these banned functions. To catch banned C runtime functions, you can compile with /W4 and then triage all C4996 warnings. In code reviews, you should always remove any code that disables the C4996 warnings - e.g.: #pragma warning(disable:4996). This is one simple way to ensure...
 
Tags: header file, header, code, code reviews, runtime functions, functions, apis, w4-c4996 warnings, c4996 warnings
 
 
 
 
Expand article

Digital Technology, Threatening Art and Culture One Form at A Time

2008-11-18 14:38:39 by Editor in IT Security - The IT Security Industry's Web Resource
 
...visual painting and sculpture any more that gets hung and revered on the walls of museumsmore and more people are looking for art thats interactive, conceptual, interested in the pop social experience, and blends a range of media. While traditionalists who hang paintings in museums might feel that these new art forms arent true art, new...
 
Tags: art, art forms, visual art, true art, performance art, digital art, digital, guerilla art, experience
 
 
 
 
Expand article

Recent Symantec and IBM vulnerabilities, giblets, banned APIs and the SDL