Securing Apache, Part 5: HTTP Message Architecture
In the last four articles in this series, we have discussed SQL injection, XSS, CSRF, XST and XSHM attacks, and security solutions. This article focuses on attacks exploiting the HTTP message architecture in…
Aircrack-ng: Wi-Fi Troubleshooting, Auditing and Cracking Made Easy
Wi-Fi technology has today become almost ubiquitous for wireless local area networks at offices, restaurants, homes, airports, hotels, etc. However, with increased Wi-Fi usage and awareness, hackers (or, rather, crackers) are exploiting the…
Secure Upload Methods in PHP
Here’s how to deal with file upload attacks against sites developed in PHP, and how to write more secure code to prevent these attacks. In most Web applications, developers provide upload file functionality…
Securing Apache, Part 4: Cross-site Tracing (XST) & Cross-site History Manipulation (XSHM)
This series of articles addresses the Web security concerns of information security experts, systems administrators and all those who want to jump-start their careers in this domain. This time we will delve deeper…
Securing Apache, Part 3: Cross-Site Request Forgery Attacks (XSRF)
Intended for information security experts, systems administrators, and all those concerned about Web security, this third article in the series moves on from SQL injection and XSS to how to secure Web applications…
Metasploit: The Exploit Framework for Penetration Testers
Today, the Metasploit Framework is considered the single most useful auditing tool that is freely available to security professionals and penetration testers. It has a wide array of commercial-grade exploits, an extensive exploit-development…
Securing Apache, Part 2: XSS Injections
In the previous article in this series, we started our journey to a secured Apache by dissecting its internals. We then looked at various attacks against Web applications via injection flaws, beginning with…
Securing Apache, Part 1: The Basics
Targeted at readers with Web security concerns, information security experts, systems administrators and all those who want to jump-start their careers in Web security, this series of articles intends to cover the strengthening…
Balancing Traffic Across Data Centres Using LVS
In the previous article in this series (‘Data Centre Redundancy’, page 56, April 2009) we got an overview of the architecture associated with data centre redundancy. An important aspect of this is to make sure that the traffic is evenly distributed across all the data centres in order to fully utilise the available capacity. In this concluding article, we will discuss the use of LVS (Linux Virtual Server) to load balance the traffic across data centres.
The Art of Guard, Part 2: SELinux Modes and Policies
Let’s explore SELinux modes, and learn a few commands that will help in understanding SELinux policies better.
May 22, 2013
amitsaha — Thank you for your kind comments everyone. I am glad it's been of help.
I am excited to announce my book:...
May 22, 2013
zero client — SUNDE desktop computing solutions are very much cost effective with environmental
concern. With SUNDE, your work place can turn out to...
May 22, 2013
tabsong — pretty nice
May 21, 2013
JKR — More efficient? Probably. More readable? Definitely not.
May 21, 2013
Prashanth Joshi — The author assumes that the first article being introductory in nature is for the beginners. So there is no question...
