New answers tagged

1

It is important to remember that unlike many other protocols and methods for interconnection, SWIFT transactions are meant to run in a completely isolated environment (i.e. only over established, protected links between banks). Trusting the efficacy of the connection security might be a bad decision (failure of defense in depth), but at this point the ...


1

Among other things Swift is a cooperative organization of financial institutions who agree to using the same standardized messaging system for financial transactions. As such they publicly promote the use of ISO 20022 as their primary standard for messaging between financial institutions. That said each member may implement this standard using a very wide ...


-2

Honestly do not know if it is malicious or not, but it is used in TOR browser to prevent scripts, and I've seen it work within the TOR browser when booted into Tails OS and it doesn't appear to do anything but prevent scripts from running. I would definitely watch what you click though, as I did notice an advertisement/link for the "speed up my pc" junk ...


0

The SaaS offerors are not likely to agree to let you pen test their services. They might agree to independent testing but the testing frameworks are not likely to be comparable. So you will be hard-pressed to compare the findings by one to that of another. Unless you are soliciting $1B in business, perhaps FedRAMP certification is the best you can hope for. ...


3

In a SaaS model, you will likely not be able to perform code audits. This is because as stated, it is Software as a Service. Not software where you would be able to download the software itself, let alone the source code for the software. That task would be done at the discretion of the software vendor, and or provider. Please see "5 Problems with SaaS ...


1

I can think of following scenarios: Safety against SQL injection and login related attacks if your software has user accounts The accuracy and robustness of your access control if your software has users



Top 50 recent answers are included