An endpoint, in the context of a computer network, is a remote computing device that communicates back and forth with a network to which it is connected. Examples of endpoints are: In a more extended definition of endpoint, it may include…
Digital signature types accepted by Public Administrations of Spain: XAdES XAdES-BES XAdES-EPES XAdES-T XAdES-C CAdES PAdES XAdES is used to sign small files (up to 4 MB). CAdES is used to sign big files (more than 4 MB). PAdES is used to…
Application Security Testing (AST) is the process of checking an application in order to identify potencial vulnerabilities and set points for security improvements. They are different to code testing solutions, as AST focus on security, not other aspects like performance…
El Esquema Nacional de Seguridad (ENS) es un marco de trabajo promulgado por el Gobierno de España y que establece una serie de medidas relacionadas con la seguridad de la información. El ENS es de obligado cumplimiento para las administraciones…
This post summarizes the roles involved in managing data in IT systems. These roles are based on USA’s NIST SP 800-18 Rev. 1 “Guide for Developing Security Plans for Federal Information Systems” or European Union’s General Data Protection Regulation (GDPR).…
Code repositories are applications to store software source code. It adds functionality like control version, team chat, etc. Git Git is an open source version control system (CVS) that provides code repositories. As many code repositories as a services are…
Please follow this link, where it is very well explained how to normalize a database: External references “Database Normalization“; Essential SQL; 2021-05-08.
NoSQL databases refer to any database types that are not only relational. “NoSQL” stands for “not only SQL”. Relational database is the most popular database type nowadays. Structure Query Language (SQL) is a language to manage data in a relational…
This post offers a list of popular web search engines. According to Statcounter, as of 2020 Google dominate search engine market with a 82% in desktop computers and 95% on mobile phones. Some initiatives like the lobby FairSearch try to…
This post explains what is a DLL side-loading attack in the context of IT security. What is a DLL Side-loading Attack? A Dynamic Linked Library (DLL) is a file that is used on Windows systems to group functions. By…