Blog

When an attacker attempts to write more data into a web application’s memory than it can handle, it is an example of:

Your new job was impressed that you had some exposure to CIS/STIG/OWASP frameworks.  Your new boss asks what the security cheat sheets recommend on their project which uses AJAX for their client-side JavaScript, with regard to the use of .innertext, .innerHTML, and eval() within their code.

Your network consists of 200 computers.  You must determine which machines are secure and which are not.  Which type of tool should you use?

Multiple vulnerabilities were discussed regarding Internet of Things.   Default credentials were even shown in Week 14 for IoT home security cameras.  According to the source information provided, what is the default password if I’m setting up a DynaColor home security camera?

If a piece of software is no longer supported by its vendor, and has passed “end of life”, what is the STIG finding?

While all the following are basically true, which is the LEAST concerning to us as we attempt to implement IoT security?

Surveillance of a system is challenging.  All of the following are true EXCEPT which one:

Your CIO asks you to create a device that is intentionally insecure to catch and log potential attacks.  She is referring to a:

Which security step is most closely related to and most beneficial during the development phase of a software development lifecycle?

Which application-testing technique is most likely to uncover improper input handling?