Your source to big data, power BI, ML, AI, iot and more

Threat Modelling and its role within Application Security

08/02/2018: The need for increased application security is dramatically changing the way software is built – for the better. By prioritising security during development, programmers are able to build applications that are less vulnerable to hacking and exploitation once deployed. In the age of the Global Data Protection Act, businesses need to be sure that their applications, and the data contained in them, are safe from hackers. Threat modelling – what it is Threat modelling is a structured process for identifying and quantifying security risks associated with your applications. The idea is to assess...

GDPR training course | understand data analytics & protection

GDPR Implications for Software & IT Professionals

22/01/2018: The new Global Data Protection Regulation (GDPR) promises to be the biggest change in corporate information security since the original Data Protection Act 1998 came into force. Under GDPR, businesses have new responsibilities when handling personal data – and face huge penalties for breaches. Most corporate data is now held digitally, so the responsibility for implementing GDPR safeguards has (in most organisations) fallen to the IT department. Importantly, GDPR affects every item of personal data – including those details held in hard copy paper files – so everyone has a role to play...

OWASP 2017: Implications for Software Developers

OWASP 2017 | AppSec skills and training Implications for Developers

15/01/2018: As 2018 gets under way, now is the perfect time to revisit the OWASP 2017 conference – and apply the best-practice guidelines discussed at the conference. Here are three key areas developers need to consider this year. An increased focus on mobile and embedded systems There have been two significant technology trends in recent years. First, mobile computing is (arguably) of greater importance than traditional desktop-based systems. Second, smart sensors are being deployed everywhere to create intelligent “Internet of Things” networks. As a result, both mobile and embedded systems are...

Secure Coding Course | 3 Android Security Vulnerabilities

10/01/2018: QuadRooter flaw Affecting handsets with Qaulcomm modem chipsets (80% of Android Phones), the QuadRooter vulnerability is introduced when a user downloads a malicious application on their Android device. Doing so would allow the device to be remotely taken control over by escalating the privileges of the installed app, and would also provide access to data and GPS location. The exploit was discovered by Israeli security firm Check Point, and is unusual in the way that each each phone maker had to provide their own individual patch the flaw. This further delayed the problem from being resolved,...

Secure Coding training Course | 3 Android Security Vulnerabilities

20/12/2017: QuadRooter flaw Affecting handsets with Qaulcomm modem chipsets (80% of Android Phones), the QuadRooter vulnerability is introduced when a user downloads a malicious application on their Android device. Doing so allows the device to be remotely taken control over by escalating the privileges of the installed app, and would also provide access to data and GPS location. The exploit was discovered by Israeli security firm Check Point, and is unusual in the way that each each phone maker had to provide their own individual patch to fix the flaw. This further delayed the problem from being...

Secure Coding Training | Anonymous

05/12/2017: Anonymous is an international group of hacktivists, publicised as a result of various online publicity stunts and distributed-denial-of-service (DDoS) attacks on a variety of governments and institutions. The group has a decentralised structure, with each of the members being loosely associated with each other, acting on ideas as opposed to directive from a central authority. With the growing prevalence of hacktivist groups like Anonymous, and other groups with even more malicious agendas, the necessity for developers to undergo secure coding training, which can be done through a secure...

Secure Code Course| Why secure coding is essential

29/11/2017: Secure coding is the practice of writing software in a way that prevents potential security vulnerabilities. Mostvulnerabilities come from a number of small common errors such as defects, bugs and logic flaws. Security vulnerabilities in different languages can result in a vast array of consequences for the developer and the users. The most targeted programming language for security exploits would be C. This is mainly due to the structure of the language when defining storage, with the most famous exploit being the buffer overflow exploit. This is when a process tries to store data beyond...

Secure Coding Training | The Increasing need for Secure Coding

29/11/2017: As cybercrime increases, so does the need for developers proficient in secure coding. The internet allows new pathways for cyber criminals to attack, posing a severe threat to businesses, consumers and the entire economy as a whole. In 2015, Cybercrime cost the UK Government approximately £27, showing the crucial need for developers with secure programming skills, which can be gained through secure code training. The heartbleed bug is one of the most well known examples of why secure coding is so important, leaving over half a million of the Internet’s secure web servers in the popular...

Application Security training courses | 4 Reasons to gain secure coding skills

03/10/2017: Traditionally Cyber security has been associated mainly with penetrating networks and infrastructure. Now a more subtle level of attack needs to be considered if we are to properly protect our corporate and client systems; Application level attack. As attackers become more sophisticated, Organisations must also look at whether their web applications (be it Java, .NET, PHP....) are coded with security in mind. If not, it is only a matter of time before they will be exposed. Developers can be quite protective about their applications and quality of code, but time and again we see "secure"...

BLOG

Filter