January 2006
PHP Security - Securing the environment
by Nilesh Chaudhari, CISSP
We are starting a new in-depth article series where we will be covering practical suggestions on improving security in applications and securely coding in various programming languages. In this first article we will cover the environment around PHP.… more →
Implementing Password Recovery
by Deepu Thomas Philip
Password recovery is a process which becomes necessary when a genuine application user is unable to authenticate due to lost or forgotten passwords. We look at the various challenges in a secure password recovery implementation.… more →
Two Factor Authentication
by Anoop Mangla
Passwords, which are so widely used by applications to authenticate users, are just so easy to be guessed, cracked, stolen or compromised. However, teamed with a second factor, they can reduce the chances of an attacker significantly… more →
Quiz: Best Practices in Dot Net applications
Which of the following is/are best practices for logout in .net applications?
- Using
FormsAuthentication.SignOutmethod - Set the
requireSSLattribute for theAuthCookie - Set the
HttpOnlycookies attribute for theAuthCookie - Implement Short Timeout for the
AuthCookie - All of the above
Review: Programming .NET Components, 2nd Edition
by Juval Lowy
Its component based approach is one reason Microsoft .NET is so widely used - and there are a number of books on this topic. But none explain the concepts in such easy and clear language as Juval Lowy’s Programming .Net Components. Now in its second edition, this book has earned the reputation of a classic.… more →