2022 Developer Survey is open! Take survey.
user avatar
user avatar
user avatar
Shritam Bhowmick
  • Member for 7 years, 4 months
  • Last seen more than a month ago
15 votes
1 answer
5k views

What does the NSA's Recently Leaked "The Equation Group" Files do?

10 votes
2 answers
1k views

Techniques to detect & mitigate Crypto-ransomware?

4 votes
2 answers
5k views

What is a threat tree in threat modeling?

3 votes
2 answers
4k views

Setting up SFTP at Production Server is a Risk?

3 votes
2 answers
6k views

How is Insufficient Attack Protection a Definite Threat/Risk to an Organization?

2 votes
1 answer
495 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

2 votes
1 answer
177 views

Are Ad-hoc security testing beneficial to small business?

2 votes
1 answer
203 views

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

2 votes
1 answer
4k views

Mandatory to implement HTTPOnly if Java Secure Cookies are set to 'true'?

2 votes
1 answer
721 views

How to test for CSRF if there are many hidden fields with different values?

2 votes
2 answers
239 views

Prevent Web Login with Credentials Exposed

1 vote
1 answer
129 views

Security Assessment v/s Security Engagement Breakdown [closed]

1 vote
2 answers
2k views

How to set X-FRAME-OPTIONS where 3rd Party frame is required to be loaded?

1 vote
1 answer
138 views

Questions to confirm a good standpoint on web app security?

1 vote
0 answers
1k views

Sensitive Information Disclosure via plist on iOS, does this affect security at all?

1 vote
1 answer
2k views

Session Expiry due to weblogic.xml for mitigation of cookie hijacking? [closed]

1 vote
1 answer
112 views

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

1 vote
2 answers
103 views

How do we handle PDF securely from External to an Internal Network without having to deal with giving away the PDF's?

1 vote
0 answers
97 views

Will Gooligan or Gooligan-like near-future variants be capable of targeting Marshmallow users?

1 vote
2 answers
342 views

OpenSource API Security Testing Automation?

1 vote
0 answers
173 views

Application Security - Security Testing Log files?

1 vote
0 answers
102 views

Possibility of EMVCO 3DS Authentication Decoding [closed]

0 votes
2 answers
151 views

Do Cyber Range(s) detect Business Logic Security Failures?

0 votes
1 answer
315 views

Is creating secondary account on Black-Box Pentest Forbidden? [closed]

0 votes
2 answers
299 views

Performing a vulnerability assessment on Windows Tablets?

-1 votes
1 answer
345 views

What is one way to verify emails of compromised website if registrations are not validated?

-1 votes
2 answers
134 views

What could be a suitable solution to single factor authorization worksheet bank password circulation with no control?