Web Security Planning
Your Guide to Web Security Planning

Image source: www.orderspcrepa.com
Security measure 1:
Every directory should contain an index file by renaming the default page you wish to be shown to index. Ensure that all the internal links are updated to that page also.
Security measure 2:
Create an empty index file. When arriving at the directory, a blank page will be displayed, but you will [...]

It is highly recommended to avoid running all messaging components under a single server structure unless it is designed as a small departmental Exchange Server. The use of NTLM authentication in the web browser omits the need for the user to enter name and password which is a domain controller that has to be [...]

Apr
5

One can define any policy for whatever kind of security. It will depend on the administrator and IT manager on what type of policies should be defined. The policies can either be for the whole company or it can be for different sections of the company. The type of policies that are very popular nowadays [...]

Apr
1

Phishing aggressors are persistently altering their strategies. Because phishing is such a moving target, you will need a life cycle plan of action to treat them. Phishers exploit the vulnerability of the latest software, user interfaces, servers, identity management methods and customer awareness. Phishing attacks can not be treated with just a click of a [...]

Mar
25

The attempt to increase awareness about how trouble-free it is for a professional hacker to exploit a vulnerable web application does not seem to be going too far. The “We’ll see when I get hacked” mentality was very common to hackers and still lingering among site owners who ultimately jeopardize losing big chunks of money [...]

The deeper examination which can be made when new stories of the most recent hacks attacks are published is that the website which belong to the huge names and corporations are hacked in precisely the same way as those websites owned by small business. This without a doubt shows how lack of security measure is [...]

Study of different cases which detail XSS intrusions explains us how the changing web technology is nowhere close to making web applications more secure. A detailed web search will make known many stories of large-scale corporation web sites being hacked using XSS exploits, and the reports of such cases always show the same recurring costs [...]

Without much going into complexity of technical details, one must be attentive of the various cases which have shown that XSS can have serious consequences when inserted on a vulnerable web application. Lot site owners think no more of XSS on the web pages that it cannot be used to steal sensitive data from a [...]

Mar
5
Hacking
Larry in General

A very good example of XSS is when a malicious user executes a script in a valid shopping site URL then a user will be forwarded to a bogus but identical page. The malicious page would run a script and will capture the cookie of the user browsing the shopping site, and that cookie returns [...]

Cross Site Scripting or called XSS is one of the most common application-layer web intrusions. XSS mostly targets scripts embedded in a site which are executed on the client-side, which is in the user’s side, rather than on the server-side. XSS in itself is a menace which is brought by the internet security weak point [...]