853 reputation
1616
bio website
location
age 33
visits member for 3 years
seen Dec 5 '13 at 16:11

I work in the field of information security, specialized in secure software-development.


21h
awarded  Nice Question
Apr
19
awarded  Yearling
Apr
19
awarded  Popular Question
Feb
26
awarded  Famous Question
Feb
25
awarded  Nice Question
Nov
21
awarded  Notable Question
Nov
15
accepted Which security standards define the time of inactivity before locking the screen
Nov
14
asked Which security standards define the time of inactivity before locking the screen
Nov
5
awarded  Popular Question
Sep
15
comment How important is CAPTCHA on registration pages?
@Viashal Chawla: An attacker in this scenario can easily simulate everything the browser does. This means he can use a valid session and also include the hidden form fields in his requests to the server. Therefore this does not offer additional protection. To avoid automation you need a challenge that is not easily solvable by a computer, like a difficult CAPTCHA.
Sep
13
awarded  Critic
Sep
13
comment How important is CAPTCHA on registration pages?
The second part of your answer is wrong in this context. A token in a hidden form field can easily be read by an automated script and does not protect against these kind of attacks. The only benefit is that the attacker needs one more request to get the token initially each time.
Sep
11
accepted Which cloud providers can be used for the simulation of DDoS attacks?
Sep
11
accepted What are the key elements of a good security requirement?
Sep
11
asked Which cloud providers can be used for the simulation of DDoS attacks?
May
21
awarded  Notable Question
Apr
19
awarded  Yearling
Feb
26
awarded  Popular Question
Jan
16
awarded  Notable Question
Nov
20
awarded  Popular Question