2,578 reputation
315
bio website
location Tulsa, OK
age
visits member for 2 years, 8 months
seen 5 hours ago

15 years enterprise IT / Infosec experience and counting...


May
18
answered Separate web and app server windows authentication
May
18
answered What is risk of having memcache in public interface?
May
16
comment What can I do as a user to minimize the risk of online banking?
To further Andre's (sorry, don't know how to make the special e) point on the first bullet, technology has emerged that allows infosec personal to either A.) Block Tor users from accessing their websites or B.) Limit the functionality of a Tor user while they are logged into a website. The reasoning is that a typical user does not use Tor, however, nefarious types who want to remain anonymous are more likely to use Tor.
May
15
comment Monitoring Active Directory Domain Administrator Activities
There are companies that offer Advanced Threat Analytics (hint, hint) solutions that may fit your needs. Unfortunately, I cannot recommend a specific vendor.
May
13
awarded  Mortarboard
May
13
answered Choosing security scenario for WCF service/client hosted by IIS
May
13
revised Security benefits to have IP-filter in HttpModule instead of Page-Load in asp.net pipeline?
added image.
May
13
comment Security benefits to have IP-filter in HttpModule instead of Page-Load in asp.net pipeline?
FWIW, IP address restrictions can be placed on one page specifically.
May
13
awarded  Good Answer
May
13
answered Security benefits to have IP-filter in HttpModule instead of Page-Load in asp.net pipeline?
May
12
awarded  Nice Answer
May
12
answered Is a website published in an obscure directory comparably secure to being placed behind a login?
May
12
revised What are security risks of connecting to my home vpn from my work?
grammar
May
12
comment Safety of exposing an internal web application to the internet using a reverse proxy in the DMZ
So would it be out of the question to have this site behind a VPN portal, or restrict access to allowed network segments?
May
12
comment Safety of exposing an internal web application to the internet using a reverse proxy in the DMZ
+1 for the Skeletor avatar. Will the users of this system be predefined? In other words, will this application be used by random internet clients, or will it primarily be used by other businesses?
May
12
answered What are security risks of connecting to my home vpn from my work?
May
8
revised Most secure location of database
image attribution
May
8
revised Most secure location of database
grammar. reworded to make things more clear.
May
7
answered Most secure location of database
May
6
comment Bring your own phone to a (new) job: Consequences?
I've drawn a couple conclusions myself. Chances are that older people have been working for their employer for decades and so there is more trust. Older people may also be less likely to have apps installed, or use the camera/video recorder. I know several older folks who own smartphones but use them like a standard cell phone. Likewise, younger folks may be more likely to use a multitude of apps from banking to snapchat - and likewise are more likely to engage in promiscuous behavior which could be embarrassing or damaging if discovered by an employer. Just a theory.