Tag Info

New answers tagged

3

The risk/issue is exactly the same and the mitigation as well. Regardless if it loads the database partially or completely into memory. There will be no way for you to tell which keys have been compromised and which haven't. So the only option would be to revoke them all, regardless if it's a Redis or SQL database. Most of the time the reason why people are ...


1

There are a few ways that you can detect if you are a victim of a MITM attack, where the attacker has the ability divert traffic and/or to create bogus certificates from a trusted CA. In the case where you are connecting to a host that you've previously connected to, certificate pinning can be used. With certificate pinning, your client stores the ...


2

Not really, no. First, some terms. You mention ARP spoofing; this is not something you can detect at the IP level. ARP is what tells you which MAC address to address your frames to in order to send them to a given IP; ARP spoofing means you think you're sending them to the right IP, but your device addresses them to the attacker at the MAC layer. This can, ...


0

If you want to separate or distinguish GET/POST actions, you should use AcceptVerbs attribute. For example, to force an action to only respond to POST requests, add the following attribute to it: [AcceptVerbs(HttpVerbs.Post)] And also add the following to the GET one [AcceptVerbs(HttpVerbs.Get)] By doing this, you can ensure that only desirable request ...


1

I use Prot-On, it is free app that allows decide who and when can access documents on Google Drive and track their usage at any time. For the moment, it is the best. http://www.prot-on.com


1

A better way to protect against cryptolocker is to set up a NAS, that will force versioning of files. With force, I mean that all Changes of files will be saved on the NAS, and the client has no way to affect this. Then you save all important data on this versioned NAS. If the cryptolocker encrypts your NAS, you simply tell the NAS to rollback the files ...


1

Since a virus infected PC has to download (encrypt) reupload the entire file, and repeat the process for every network drive, is is possible to detect this unusually high bandwidth event? Is there a way to respond to it (via QOS or something?) You're mistaken: the malware doesn't need to transfer the file. It uses asymmetrical encryption: the file is ...


0

The main thing that DDoS attackers are taking advantage of is a centralized resource that they can overwhelm with traffic. If you make the application so that it is highly distributed DDoS attacks are not effective. Exactly this has been done with DNS infrastructure and anycast. Google DNS for example is at 8.8.8.8 But they use anycast so the actual ...



Top 50 recent answers are included