Tagged Questions
3
votes
4answers
294 views
Database hardening techniques
So as I understand it database hardening is a process in which you remove the vulnerabilities that result from lax con-figuration options. This can sometimes compensate for exploitable vendor bugs.
...
0
votes
1answer
113 views
Can TLS Compression be enabled on 3rd party CDN sites that have no authentication?
In this answer, @Thomas Pornin talks about remediating the CRIME attack and says:
(It is a shame to have to remove SSL compression, because it is very
useful to lower bandwidth requirements, ...
148
votes
3answers
32k views
CRIME - How to beat the BEAST successor?
With the advent of CRIME, BEASTs successor, what is possible protection is available for an individual and / or system owner in order to protect themselves and their users against this new attack on ...
3
votes
2answers
449 views
How to use attack trees and attack graphs
I am trying to understand how attack trees\graphs can be used in the security process. I read a lot of papers presenting the topic and how this reppresentation can be useful, but I really don't ...
