Tagged Questions
3
votes
2answers
104 views
Security Scanning for Desktop Applications
Our company develops Windows desktop applications. We offer off the shelf solutions - not custom development. A potential new customer wants to add a section to our standard contract that requires ...
1
vote
1answer
118 views
How does a PCI QSA audit a company?
Corporate setups are often complex with data centers in multiple locations, complex ACL's and networks setup between them.
How does a PCI auditor actually audit the systems ?
How does he get to know ...
1
vote
2answers
193 views
Our company needs to conduct an audit of a large ASP.NET solution that was developed for us by a development company. [closed]
What professional standards and practices are recommended for guiding such an effort?
5
votes
2answers
332 views
Established Security Design Patterns?
In software engineering, a design pattern is a general reusable solution to a commonly occurring problem within a given context in software design. Wikipedia lists many different design patterns for ...
1
vote
1answer
389 views
Windows Session Recording Software
I'm trying to monitor connections and actions made by administrators (or any user connecting) to a server through TSE (i'm simplifying).
I've heard about a software which can record a video of any ...
5
votes
2answers
234 views
Advice for writing my first application security review
I wish to write a security review for a specific windows server/client application that runs on a closed LAN or WAN (between 1 and 200+ users across multiple sites); it's not a web-application. The ...
