User Shritam Bhowmick

15 votes

1 answer

5k views

What does the NSA's Recently Leaked "The Equation Group" Files do?

asked Aug 15, 2016 at 21:52

10 votes

2 answers

1k views

Techniques to detect & mitigate Crypto-ransomware?

asked Apr 22, 2016 at 8:02

4 votes

2 answers

6k views

What is a threat tree in threat modeling?

asked Sep 3, 2015 at 22:17

3 votes

2 answers

4k views

Setting up SFTP at Production Server is a Risk?

asked Apr 11, 2016 at 13:01

3 votes

2 answers

7k views

How is Insufficient Attack Protection a Definite Threat/Risk to an Organization?

asked Apr 12, 2017 at 5:43

2 votes

1 answer

514 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

asked Dec 30, 2015 at 21:07

2 votes

1 answer

186 views

Are Ad-hoc security testing beneficial to small business?

asked Sep 9, 2015 at 22:08

2 votes

1 answer

214 views

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

asked Nov 21, 2015 at 2:43

2 votes

1 answer

4k views

Mandatory to implement HTTPOnly if Java Secure Cookies are set to 'true'?

asked Apr 3, 2015 at 1:29

2 votes

1 answer

753 views

How to test for CSRF if there are many hidden fields with different values?

asked May 15, 2015 at 18:53

2 votes

2 answers

252 views

Prevent Web Login with Credentials Exposed

asked Aug 8, 2015 at 10:57

1 vote

1 answer

134 views

Security Assessment v/s Security Engagement Breakdown [closed]

asked Jun 30, 2015 at 23:16

1 vote

2 answers

2k views

How to set X-FRAME-OPTIONS where 3rd Party frame is required to be loaded?

asked Aug 25, 2015 at 14:25

1 vote

1 answer

143 views

Questions to confirm a good standpoint on web app security?

asked Mar 9, 2015 at 19:15

1 vote

0 answers

2k views

Sensitive Information Disclosure via plist on iOS, does this affect security at all?

asked Dec 10, 2015 at 15:51

1 vote

1 answer

2k views

Session Expiry due to weblogic.xml for mitigation of cookie hijacking? [closed]

asked Nov 4, 2015 at 18:27

1 vote

1 answer

121 views

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

asked Jan 30, 2016 at 16:49

1 vote

2 answers

117 views

How do we handle PDF securely from External to an Internal Network without having to deal with giving away the PDF's?

asked Oct 20, 2016 at 10:10

1 vote

0 answers

101 views

Will Gooligan or Gooligan-like near-future variants be capable of targeting Marshmallow users?

asked Dec 16, 2016 at 10:46

1 vote

2 answers

371 views

OpenSource API Security Testing Automation?

asked Apr 16, 2019 at 10:10

1 vote

0 answers

197 views

Application Security - Security Testing Log files?

asked Jul 5, 2019 at 13:20

1 vote

0 answers

119 views

Possibility of EMVCO 3DS Authentication Decoding [closed]

asked Feb 9, 2021 at 1:59

0 votes

2 answers

158 views

Do Cyber Range(s) detect Business Logic Security Failures?

asked Apr 26, 2017 at 2:55

0 votes

1 answer

319 views

Is creating secondary account on Black-Box Pentest Forbidden? [closed]

asked Mar 4, 2015 at 13:49

0 votes

2 answers

307 views

Performing a vulnerability assessment on Windows Tablets?

asked Jun 27, 2015 at 18:43

-1 votes

1 answer

349 views

What is one way to verify emails of compromised website if registrations are not validated?

asked Aug 19, 2015 at 4:50

-1 votes

2 answers

139 views

What could be a suitable solution to single factor authorization worksheet bank password circulation with no control?

asked Jan 1, 2016 at 13:32

Stack Exchange Network

27 Questions

What does the NSA's Recently Leaked "The Equation Group" Files do?

Techniques to detect & mitigate Crypto-ransomware?

What is a threat tree in threat modeling?

Setting up SFTP at Production Server is a Risk?

How is Insufficient Attack Protection a Definite Threat/Risk to an Organization?

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

Are Ad-hoc security testing beneficial to small business?

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

Mandatory to implement HTTPOnly if Java Secure Cookies are set to 'true'?

How to test for CSRF if there are many hidden fields with different values?

Prevent Web Login with Credentials Exposed

Security Assessment v/s Security Engagement Breakdown [closed]

How to set X-FRAME-OPTIONS where 3rd Party frame is required to be loaded?

Questions to confirm a good standpoint on web app security?

Sensitive Information Disclosure via plist on iOS, does this affect security at all?

Session Expiry due to weblogic.xml for mitigation of cookie hijacking? [closed]

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

How do we handle PDF securely from External to an Internal Network without having to deal with giving away the PDF's?

Will Gooligan or Gooligan-like near-future variants be capable of targeting Marshmallow users?

OpenSource API Security Testing Automation?

Application Security - Security Testing Log files?

Possibility of EMVCO 3DS Authentication Decoding [closed]

Do Cyber Range(s) detect Business Logic Security Failures?

Is creating secondary account on Black-Box Pentest Forbidden? [closed]

Performing a vulnerability assessment on Windows Tablets?

What is one way to verify emails of compromised website if registrations are not validated?

What could be a suitable solution to single factor authorization worksheet bank password circulation with no control?