AIONCLOUD Official Introduction


댓글

댓글 쓰기

이 블로그의 인기 게시물

The rise of SSL traffic and enterprise- level of SSL security

이미지
  Secure Sockets Layer (SSL) and Transport Layer Security (TLS) is unquestionably increasing rapidly. SSL and TLS is an encryption standard used to secure internet communication between network application and client. SSL uses a combination of public key and symmetric key encryption to secure a connection between network application and client, typically a web or mail server and client system over the internet. SSL provides encryption and authentication process when server and client send data between them. In order to keep sensitive data secure, SSL establishes an encrypted link and data become unreadable to other after SSL certificates were used. Most enterprises and organizations will continue to increase using SSL traffic due to growing data security. As IT compliance concerns, enterprises and organizations are utilizing more SSL traffic. Cybercriminals are using SSL encryption traffic to attack enterprise. Originally enterprises use SSL traffic to protect sensitive...
자세한 내용 보기

Are you vulnerable to OWASP Top 10?

이미지
  Have you hear about OWASP Top 10? OWASP stands for Open Web Application Security Project which is an organization to dedicate to develop and maintain applications. OWASP announces stop 10 security issues that we should concern as priority application threats. There are top 10 security issue of application as follows; 1. Injection Injection flaws such as SQL, OS, LDAP, Xpath or NoSQL occur when an application sends untrusted data to interpreter as part of a command or query. The attacker sends simple text-based attacks that exploit the syntax of interpreter and trick the interpreter into accessing protected data without authorization and executing unintended commands. Injection impact to loss data and deny the service. 2. Broken Authentication and Session Management As authentication and session management are often not implemented correctly, attacker impersonates users’ identities by exploiting password, keys and session ID. Once account is attacked successful, the...
자세한 내용 보기