Sponsored White Papers, Webcasts, and Downloads
ZDNet Resources
- 90ò0of all statistics can be made to say anything... 50ò0of the time, aka my thoughts on the Verizon report
- 90ò0of all statistics can be made to say anything... 50ò0of the time, aka my thoughts on the Verizon reportHow many breaches from External...sources were facilitated by poor practices of inside sources? Weak passwords, poor surfing habits, poor security implementations, etc. External breaches only occur when an insider allows it to...
- Tags: Firewalls, SECURITY, NETWORKING, Network security, Verizon Communications Inc., WAF
- Discussion threads 2008-06-23
- Another bug your tools won't find and your WAF won't prevent
- Another bug your tools won't find and your WAF won't preventNothing is secureIt's always the simple things that work best.And do not even think this is limited MS, every system will fall prey to this or something like it.The only totally secure system, is one not connected to the network.But...
- Tags: PRODUCTIVITY, tool, WAF
- Discussion threads 2008-06-09
- PCI Compliance gets clarified and neutered (further)
- PCI Compliance gets clarified and neutered furtherStraw man argumentI think you are missing something, namely the first part of the section that you just quoted: [i]Having all custom application code reviewed for common vulnerabilities by an organization that specializes in application security[/i]I'll be the first to acknowledge that I know...
- Tags: PCI Standard, PCI, WAF, PCI compliance
- Discussion threads 2008-04-17
- PCI Compliance gets clarified and neutered (further)
- At one point, I thought that PCI certification was a great thing. Now I realize that it's not really about security at all... it's about money and responsibility and transferring ownership of risk. The PCI certification just got a clarification: "6.6 Ensure that all web-facing applications...
- Tags: Web, XSS, PCI, Web Application, TV, Attack, PCI Compliance, Web Application Firewalls, WAF, Security, Nathan McFeters
- Blog posts 2008-04-17
- Photos: Top 10 products with high 'wife-acceptance factor'
- "Wife-Acceptance Factor," or WAF, describes how female-friendly a given product is. But why fight it? Instead, use the WAF to your advantage: We examine a list of products she'll be begging you to buy.
- Tags: WAF
- Image galleries 2006-10-28
Additional Resources
- What's wrong with an exploit being sexy?
- First off, let me start by saying _dietrich has been following our blog for quite some time and is a consistent poster, providing good advice on how to use Linux securely, sometimes as an alternative to Windows technologies. I wouldn't have commented about this in a blog posting, except that...
- Tags: Exploit, ActiveX, Flaw, Dietrich, openSUSE, Microsoft Windows, ActiveX/COM/COM+/DCOM, Operating Systems, Middleware, Software, Software Development, Software/Web Development, Enterprise Software, Nathan McFeters
- Blog posts 2008-06-10
- News to know: iPhone 3G; MobileMe; Office 14; Home Server fix
- First, the non-Apple news. (Scroll down for major dose of WWDC 2008 links.) Mary Jo Foley: New proof: Office 14 slated for 2009 Are all Microsoft and Apple sync services created equal? SharePoint gets an open-source podcasting add-on Final...
- Tags: Apple iPhone, Microsoft Office, Server, Apple Inc., 3G, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, David Grober
- Blog posts 2008-06-10
- Another bug your tools won't find and your WAF won't prevent
- First off, I want to apologize to our readers for not being here as much last week. I had a rough week involving a random ear infection and the loss of an aunt to cancer, so it was not a week where I was very concerned about computer security or...
- Tags: Juniper Networks Inc., Blog, Bug, ActiveX, Tool, Productivity, ActiveX/COM/COM+/DCOM, Software Development, Software/Web Development, Nathan McFeters
- Blog posts 2008-06-09
- More bad news for McAfee, HackerSafe certification
- Dan Godin posted a great article that was picked up by The Register a couple days ago about continued challenges for McAfee's newly purchased HackerSafe division. I find the article interesting as HackerSafe uses a scanning tool that probes for web application security flaws... of course, tools are limited in...
- Tags: McAfee Inc., Security, Certification, Vulnerability, XSS, HackerSafe, Godin, Goodin, Nathan McFeters
- Blog posts 2008-05-01
- Developers at fault? SQL Injection attacks lead to wide-spread compromise of IIS servers
- There's been a lot of noise and violent thrashing over the last couple days regarding a flaw that was originally believed to be a flaw in Microsoft's IIS Internet Information Server, but has since been pointed out as simply a well thought out SQL Injection attack. For those of...
- Tags: Developer, Password, Web Application, Server, SQL, Site, SQL Injection, Microsoft IIS Server, Attack, Programming Languages, Security, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management, Nathan McFeters
- Blog posts 2008-04-28
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts