960 reputation
2620
bio website
location
age 34
visits member for 3 years, 11 months
seen Jan 28 at 15:08

I work in the field of information security, specialized in secure software-development.


Feb
25
awarded  Famous Question
Jan
15
accepted Is the separation of data from different applications via Oracle schemas considered secure?
Jan
12
asked Is the separation of data from different applications via Oracle schemas considered secure?
Oct
7
awarded  Popular Question
Sep
24
awarded  Autobiographer
Jul
31
awarded  Popular Question
Jul
2
awarded  Curious
Apr
23
awarded  Nice Question
Apr
19
awarded  Yearling
Apr
19
awarded  Popular Question
Feb
26
awarded  Famous Question
Feb
25
awarded  Nice Question
Nov
21
awarded  Notable Question
Nov
15
accepted Which security standards define the time of inactivity before locking the screen
Nov
14
asked Which security standards define the time of inactivity before locking the screen
Nov
5
awarded  Popular Question
Sep
15
comment How important is CAPTCHA on registration pages?
@Viashal Chawla: An attacker in this scenario can easily simulate everything the browser does. This means he can use a valid session and also include the hidden form fields in his requests to the server. Therefore this does not offer additional protection. To avoid automation you need a challenge that is not easily solvable by a computer, like a difficult CAPTCHA.
Sep
13
awarded  Critic
Sep
13
comment How important is CAPTCHA on registration pages?
The second part of your answer is wrong in this context. A token in a hidden form field can easily be read by an automated script and does not protect against these kind of attacks. The only benefit is that the attacker needs one more request to get the token initially each time.
Sep
11
accepted Which cloud providers can be used for the simulation of DDoS attacks?