Penetration testing (pentesting) or offensive security is performed by the so-called red teams. A breach and attack simulation (BAS) platform is intended to automate some aspects of penetration testing. These systems are de designed to inject threat indicators on to…
Biometric authentication is any authentication method that is based on human biometrics. Biomterics is part of the type 3 “something you are” of the primary authentication factors. Physiological Biometric Methods Physiological biometric methods featured on this post: Biometric Factor Error…
This post features federation identity management or identity federation definitions. Federation Roles The identity provider holds all of the identities and generate a token for known users. The relying party (RP) consumes the tokens, and could be a service provider.…
Software development teams should follow some guidelines and practices in order to create safe software. When developing software, you should beware of leaving backdoors or maintenance hooks. Secure Software Development Frameworks You can read more about secure software development frameworks…
Supply chain security is the part of supply chain management that focuses on the risk management of external suppliers, vendors, logistics and transportation. Its goal is to identify, analyze and mitigate the risks inherent in working with other organizations as…
A cryptographic analytic attack or cryptanalytic attack is an algebraic manipulation that attempts to reduce the complexity of a cryptographic algorithm. Analytic attacks focus on the logic of the algorithm itself. Cryptanalytic Attack Techniques Cryptanalytic attack techniques featured on this…
This post features cryptographic attacks. List of Cryptographic Attacks Cryptographic attacks featured on this post: Analytic An analytic attack is an algebraic manipulation that attempts to reduce the complexity of a cryptographic algorithm. Analytic attacks focus on the logic of…
This post introduces to OT or ICS communication protocols. List of ICS Communication Protocols ICS communication protocols featured on this post: Distributed Network Protocol 3 (DNP3) You can read more about DNP3 on this post. Modbus Modbus is older than…
Data security can be also referred as data protection. This post is about data security platforms. Data governance List of Data Security Platforms Data security platforms featured on this post: Microsoft Purview Microsoft Purview is a proprietary solution to manage…
In the context of IT security, a product compliance list (EPL) is a list of IT products that have been assessed and validated by a third-party considering that it meets all the necessary products. These parties are usually generally trusted…