Posted inSecurity Tools
Free Firewall from Checkpoint
Checkpoint is getting into the Free Antivirus game by offering its ZoneAlarm antivirus software as a free consumer product for the first time, adding the company's no-cost firewall to the…
Posted inIdentity & Access PCI DSS Compliance
Dual Control or Segregation of Duties?
Many information security professionals, event at the senior level roles, are still getting the internal control mechanisms such as Dual Control and Segregation of duties wrong. I often see that…
Posted inApplication Security
Why we need Web application Security
In the initial days, attacks were focused on the network and operating system vulnerabilities. We have seen many such attacks resulting in network unavailability, information disclosure, denial of service etc...…
Posted inCloud Security
Cloud Service brokerage
Many organizations source cloud services from different vendors which introduces various challenges to business including, but not limited to, billing, payments, access management etc... I am keen on understanding how…
The rat race of vulnerability management
Patch management is one among the major IT Security concerns most of the organizations are worried about. It is practically not possible to have a 100% of the IT infrastructure…
Posted inData Protection PCI DSS Compliance
Global Payments breach.initial review
Security breaches are become a common thing these days. They hit the front page only when the size or importance of the breach become huge. The recent security breach at…
Posted inIdentity & Access PCI DSS Compliance
PCI DSS compliance and Password policy
Usernames and passwords is still the major method of authenticating users to the systems. It would be difficult to find someone without a user name and password in the workplace.…
Posted inSecurity Tools
Primos SQL Injection tool
Primos is web application security testing tool which is capable of performing discovery and exploiting the SQL injection vulnerabilities. This works with MS SQL Server only and can enumerate databases,…
Posted inCloud Security PCI DSS Compliance
Cloud solutions & PCI DSS Compliance
Businesses are increasing its dependence on cloud computing solutions. PCI DSS compliance is often a concern for many organizations when considering cloud or virtualized solutions. As mentioned in one of…
Posted inCloud Security Tutorials
Google data center security
Found this interesting video in Youtube. It talks about the Google efforts on enforcing security across its data centres. The key security measures' they are following include: Strong physical security…