13 reputation
3
bio website
location
age
visits member for 1 year, 4 months
seen Mar 17 at 13:42

Aug
13
comment Is there an open source runtime enforcement tool?
Well we can consider it as web application firewall. I want to check the incoming requests if it contains any improper inputs. Therefore, I can block (or direct it to an error message page) the incoming request before it reaches the server. This tool should be between the user and the server. The filtering process should be in runtime, so I can have a more robust web application.
Aug
13
comment Is there an open source runtime enforcement tool?
Thanks for the response. I just checked ESAPI WAF, it might be very useful, however, the documentation is really insufficient. Do you have any idea if it can also provide the "body" part of a request.
Aug
13
asked Is there an open source runtime enforcement tool?
Mar
14
awarded  Supporter
Mar
13
awarded  Student
Mar
13
awarded  Scholar
Mar
13
accepted Does it make any difference of the order Hashing and Encrypting in terms of security?
Mar
13
comment Does it make any difference of the order Hashing and Encrypting in terms of security?
this answer is quite useful, thanks
Mar
13
comment Does it make any difference of the order Hashing and Encrypting in terms of security?
To be more specific, the password vault will parse the encrypted data from a XML file. Therefore, the XML file will be on the local disk, not on a certain database or online.
Mar
13
comment Does it make any difference of the order Hashing and Encrypting in terms of security?
Well, in the program I was planning to see, has there been any changes with the password by an attacker. That is why I am using a hash
Mar
13
asked Does it make any difference of the order Hashing and Encrypting in terms of security?