Hot answers tagged

5 votes
Accepted

How do I measure compliance to Information security policies?

A good information security policy should very clearly state a number of things. At least the following: The reason why it was implemented its goals its scope its boundaries (the things it does not ...
  • 7,913
3 votes

What are some metrics to be used to evaluate SaaS security?

In a SaaS model, you will likely not be able to perform code audits. This is because as stated, it is Software as a Service. Not software where you would be able to download the software itself, let ...
  • 8,682
2 votes
Accepted

"Triage an incident"

Yes, it's not got a distinct meaning in information security - from dictionary.com: the determination of priorities for action So, deal with the most critical problems first, working down the list ...
  • 27.2k
2 votes

Malware Threat Hunting in Airport Systems - KPIs/Metrics to Track

You can't really know whether an attack is imminent. All you can do is try to identify what the security posture of the systems is, and what resources, processes, and procedures you have in place in ...
  • 132k
1 vote
Accepted

CVSS Temporal guidance

If i calculated all right with the official calculator you are using CVSSv3.0, there is CVSSv3.1 available whichs gives minimal different temporal values (I calculated my values with CVSSv3.1): base: ...
  • 170
1 vote

Gather system metrics securely from infected VM

I opted for Cuckoo to automatize running the software on the guest machine and wrote a custom auxiliary analysis script to collect those metrics every second. The way to collect data is thus as secure ...
1 vote

Why can't a Tor node simultaneously be a guard and an exit node?

Because guard relays (also called entry relays) can never be exit relays. If you use a proxy or VPN, you have some anonymity, but also a single point of failure. If someone compromises the machine ...
  • 4,793
1 vote

What are some metrics to be used to evaluate SaaS security?

I can think of following scenarios: Safety against SQL injection and login related attacks if your software has user accounts The accuracy and robustness of your access control if your software has ...
  • 3,191
1 vote

why don't we measure the strength of crypto against the cost it would take to crack it?

There can never be a straightforward calculation for this. For example if you look at the LogJam attack and rainbow tables it is quite clear that there is a clear trade-off and breakdown in the ...
1 vote

How to estimate the cost of an application vulnerability?

I know this is old, but I still found it on Google while searching, so here is my opinion: Today there's multiple bug bounty programs, in which, for obvious reasons, they need to measure the weight of ...

Only top scored, non community-wiki answers of a minimum length are eligible