Token Manipulation Attacks – Part 2 (Process of Impersonation)
In the previous blog-post, we learned about the Tokens and Privileges which are assigned to the user by the system. […]
Category: Compliance, Regulations & Governance
RBI Guidelines for Tokenization
Tokenization RBI Guidelines Tokenization RBI Guidelines RBI Releases Guidelines on Tokenization for Card Transactions Reserve Bank of India has issued […]
Threat Hunting for Masquerading Windows Processes
An important aspect of effective threat hunting is to understand what is normal in an environment. If a threat hunter […]
Canary – An Open Source Decoy
Before we start to configure our decoys and put it in our production environment, let’s take a look at what […]
Penetration Testing as per PCI DSS version 3.2
As per PCI DSS v3.2, Requirement 11.3 addresses penetration testing activity for organizations following PCI DSS compliance. The requirement is […]
ISO 27001:2013 Draft – Differences From The Earlier Standard – Part I
The new draft of ISO 27001 standard has been made more objective, logical in flow and precise, eliminating the elaborated […]
Software Project Governance – Using SDLC Metrics
Software Project Governance – Using SDLC Metrics Software project costs generally form 40% of the total IT budget in most […]
Security Review of Microsoft DirectAccess Implementation
This article presents the key risks with DirectAccess and how to audit them. Let’s begin by first understanding the DirectAccess […]
ATM Application Whitelisting Security Assessment
During a recent engagement, we were asked to test the security level of an application white-listing solution deployed on the […]
Changes proposed to Indian IT Act
By, K K Mookhey At long last there is news that changes will definitely be made to the Indian IT […]