apps3c.blogspot.com

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: October 2009

http://smartsecurity.blogspot.com/2009_10_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Thursday, October 08, 2009. Application security should be addressed in initial SDLC stages. IT applications are akin to the organization's blood vessels because they carry critical information and execute key processes. However, due to a peripheral approach to security, application security is often neglected. If you estimate risk correctly from the beginning, it will also help you to save on costs. According to an industry statistic,...

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: Getting Hands Dirty with Ettercap Tool

http://smartsecurity.blogspot.com/2010/06/getting-hands-dirty-with-ettercap-tool.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Monday, June 28, 2010. Getting Hands Dirty with Ettercap Tool. Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols (even ciphered ones) and includes many feature for network and host analysis. Subscribe to: Post Comments (Atom). View my complete profile. ACE Team at Micr...

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: March 2010

http://smartsecurity.blogspot.com/2010_03_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Wednesday, March 10, 2010. About the 'Rugged' Initiative. As most of the readers on my blog would be knowing, the Security experts in February launched a new effort to ensure software is written from the ground up with security in mind - a philosophy and message they're aiming at people outside of the security industry. The Indian IT industry spends so much on training costs, as more than 70% of fresh graduates are not employable/productiv...

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: What do you say? Yes / No / Don't Care

http://smartsecurity.blogspot.com/2011/09/what-do-you-say-yes-no-dont-care.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Wednesday, September 28, 2011. What do you say? Yes / No / Don't Care. Subscribe to: Post Comments (Atom). He is involved in Application Security Consulting and establishing App Security across SDLC. He also conducts security workshops for the developer community. Besides interest in App Security, he likes Performance Testing and tuning of web applications. View my complete profile. AppSec: SearchSecurity.IN TechTarget. What do you say?

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: March 2011

http://smartsecurity.blogspot.com/2011_03_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Thursday, March 17, 2011. IRCTC - India's Rail Ticket Booking Website which is sought to be a secure platform for the citizens booking their tickets has few simple security configurations missing. An example is the auto-complete not set to off on their payments page - a practice which most of the secure web applications follow for sensitive pages right from login page. Below is a snapshot. Links to this post. Tuesday, March 15, 2011. How T...

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: August 2009

http://smartsecurity.blogspot.com/2009_08_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Friday, August 28, 2009. No Built-In Response.HTMLEncode in Java. Why doesn't Java have a built-in HTMLEncode function? With security vulnerabilities like Cross-Site Scripting (XSS) luring around since so many years, I am wondering why hasn't Java yet come up with its own function for Encoding chars which are malicious. I believe 'Sun' . sorry.'Oracle' should think of having this simple thing built-in. Links to this post.

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: January 2010

http://smartsecurity.blogspot.com/2010_01_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Tuesday, January 26, 2010. Plenty of (IN)Secure Broadband Routers. For the Wireless Routers still exists in most parts of the country. The Mumbai terror attacks did bring in a concern for people using Wireless Networks and not have secured them. However, time and again I have been still snooping into the so-called. Wireless Networks because the routers admin password is still set to default. Crazy! 3 things that I see from this point:.

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: OTP adoption from India to the US?

http://smartsecurity.blogspot.com/2010/11/otp-adoption-from-india-to-us.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Monday, November 01, 2010. OTP adoption from India to the US? One Time Password (OTP) is a password that is valid for only one login session. It is a popular authentication mechanism in India. It is essentially in use with Banking and Stock Broking Apps to do a two-factor authentication. SMSes on your registered mobile phone is been predominantly used as a medium to accomplish this second factor of authentication. It would be also nice if ...

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: July 2009

http://smartsecurity.blogspot.com/2009_07_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Friday, July 31, 2009. Dev Tools for Security Testing. I have been realizing that even the development tools can be good for initial security testing! Let me explain what I mean by this. Simple Steps in a Typical Scenario:. 1 My dev teams says they have performed the validation both at the client-side and server-side code to ensure application security. However, this needs to be checked. 2 So, if I pass valid values at the application clie...

smartsecurity.blogspot.com

Smart Security by Dharmesh M Mehta: September 2011

http://smartsecurity.blogspot.com/2011_09_01_archive.html

Smart Security by Dharmesh M Mehta. An Application Security Blog. Wednesday, September 28, 2011. What do you say? Yes / No / Don't Care. Links to this post. Subscribe to: Posts (Atom). He is involved in Application Security Consulting and establishing App Security across SDLC. He also conducts security workshops for the developer community. Besides interest in App Security, he likes Performance Testing and tuning of web applications. View my complete profile. AppSec: SearchSecurity.IN TechTarget.