itSpice















  Security

Security trends for 2010 : Be watchful

Author: pirumandal
Security of IT infrastructure means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification or destruction. The next year, 2010 will be the year of constant change. Also, adoption of cloud computing, social media, 3G/4G, web based apps and virtualization technologies will require more security concerns due to emergence of new [...]


Security in Cloud Computing

Author: Richard Alessandro
Many businesses today are familiar with the benefits cloud computing offers over a traditional in house IT departments. But as the popularity of this new alternative expands, questions regarding its security are being raised. Is cloud computing as secure as having your data network in house?
Data in Cloud Computing is Centralized
Unlike [...]


Top 10 tips to secure your Joomla site

Author: joomla

Proper Hosting Environment A properly configured server is highly recommended for your joomla website. Host your site on a server that runs PHP in CGI mode with su_php. This means that PHP runs under your own account user instead of the global Apache user and you don’t need to set insecure global permissions like [...]


Web 2.0 Security Testing – Approach Note

Author: Somnath Guha Neogi
Introduction:
Web 2.0 can be defined as the evolving trend of www technologies and web design that aim to enhance creativity, communications, secure information sharing, collaboration and functionality of the web1. 0. In contrast to the static nature of Web 1.0, Web 2.0 systems rely heavily upon user generated content. In fact, Web [...]


How Does Password Encryption Actually Work? Illustration With a Typical Example

By Niraj K Singh
Let’s start from thinking about which all places do we actually need to put encryption into action and how do we implement them? Except the possible encryption done at the Database end, there are two popular approaches of implementing encryption – One, which is done at the client side (the one we [...]


SQL Injection Protection in PHP With PDO

By Loukas Kalenderidis
Database abstraction layers like PHP’s Portable Data Objects (PDO) are not a new concept, but a lot of developers don’t seem to realise the security benefit they’re getting for free by using them – inherent protection against SQL injection.
SQL injection is the buffer overflow of the web application world – it’s been around [...]


SQL Injection and Prevention Techniques

What is SQL Injection?
SQL injection is a technique that exploits a security vulnerability occurring in the database layer of a web application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is [...]


How to Install SSL – SSL Certificate Tips

By Allen Howard
Who needs an SSL certificate?
If you are going to be accepting or processing secure information from your website, such as credit card payments online, or other sensitive information, you will need an SSL certificate. SSL stands for Secure Socket Layer. Data shared between users’ computers and the server are encrypted for safety.
There are [...]


What is an SSL and an SSL Certificate?

By Uzi Levitovitch
The internet is a virtual world without any borders. You can live in Munich and buy sweeties in Seoul staying at home. It is very comfortable and entertaining, but do you feel enough confidence buying with a credit card? What are the odds of getting your private information stolen and your bank account [...]