<?xml version="1.0" encoding="iso-8859-1"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:content="http://purl.org/rss/1.0/modules/content/">

<channel>
<title>Security - Web Developer Tutorials</title>
<link>http://www.devshed.com</link>
<!-- PubSubHubbub Discovery -->
<link rel="hub"  href="http://devshednet.superfeedr.com/" xmlns="http://www.w3.org/2005/Atom" />
<link rel="self" href="http://www.devshed.com/rss-feeds-21.xml" xmlns="http://www.w3.org/2005/Atom" />
<!-- End Of PubSubHubbub Discovery -->
<atom:link href="http://www.devshed.com/rss-feeds-21.xml" rel="self"/>
<description>Security Tutorials at Dev Shed.  DevShed is a community focused on both beginner and advanced tutorials in Java, C, PHP, Python, MySQL and Ruby-on-rails...amongst others.</description>
<language>en-us</language>
<lastBuildDate>Wed, 15 Feb 2012 07:07:06 -0500</lastBuildDate>
<pubDate>Wed, 15 Feb 2012 07:07:06 -0500</pubDate>
<item><title>Skipfish Website Vulnerability Scanner</title>
<pubDate>Wed, 23 Mar 2011 10:00:06 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Skipfish-Website-Vulnerability-Scanner/</link>
		<description><![CDATA[Security is by far the most important aspect that any webmaster should consider for long term website success. A lot of open source and commercial tools are available to scan your website for vulnerabilities. If you are looking for an efficient, powerful, fast and free tool, then you might need to give “Skipfish” a try.]]></description>
		<content:encoded><![CDATA[Skipfish is a web application security scanner contributed, developed and maintained by the Google security engineering team headed by Michael Zalewski, a Google Inc. employee. This tutorial is written primarily for beginners who are looking to expand their knowledge of website security, vulnerability detection and prevention using Skipfish. System Requirements and Required Library Installation This tutorial teaches you how to install and run Skipfish inside an Ubuntu local environment. With this, it is possible to scan both localhost and remote web server URL. The methods and commands in this...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Skipfish-Website-Vulnerability-Scanner/</guid>
</item>
<item><title>Critical Microsoft Visual Studio Security Patch Tuesday</title>
<pubDate>Sat, 25 Jul 2009 00:06:48 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Critical-Microsoft-Visual-Studio-Security-Patch-Tuesday-0723209/</link>
		<description><![CDATA[Microsoft is releasing a security patch for Visual Studio and another  moderate  rated patch for IE for almost all versions.  The patches are must-haves for developers that use Visual Studio and any internet explorer users.]]></description>
		<content:encoded><![CDATA[Here comes another critical patch from Microsoft.  What it fixes is anyone's guess, but it affects almost all versions of Windows and .NET Visual Studio back to 2003.  Developers are encouraged to register their guess, but make your guesses after you apply the patch. Speculation is that the Internet Explorer patch is going to be for IE6, IE7 and IE8 and that it patches something to do with the Video Active-X hacker hole it left open for years.  Now, with the boon of sites that use video and the competition for putting video in either Silverlight or Flash, Microsoft must be a little worried abo...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Critical-Microsoft-Visual-Studio-Security-Patch-Tuesday-0723209/</guid>
</item>
<item><title>US Faces Tech Security Expert Deficit</title>
<pubDate>Thu, 23 Jul 2009 01:14:08 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/US-Faces-Tech-Security-Expert-Deficit-10294/</link>
		<description><![CDATA[Recent attacks against the United States IT security infrastructure has officials worried that, over the next decade, qualified cyber-security personnel will be at a premium; and a shortage.  The question is: how does the USA plan to lure and keep top tech talent to secure and protect the national information infrastructure?]]></description>
		<content:encoded><![CDATA[There's a definite digital-divide starting, but it's not between the rich and the poor; it's between the IT Security expert haves and have-nots...and it's spreading from private companies all the way to the US Government. Recent studies of the country's top IT management shows that a whopping 35%+ of CIOs, CTOs and CSOs are either dissatisfied or highly dissatisfied with their current personnel and are looking to upgrade their cyber-security positions despite the recession and high-cost of high-end talent. The United States has put out an APB for qualified, high-end security experts specializi...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/US-Faces-Tech-Security-Expert-Deficit-10294/</guid>
</item>
<item><title>LAN Reconnaissance</title>
<pubDate>Thu, 13 Nov 2008 09:00:46 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/LAN-Reconnaissance/</link>
		<description><![CDATA[If you're trying to keep your LAN secure, sometimes it helps to think like a cracker. This article shows you how to scout out a LAN, and how malicious hackers get around security. It is excerpted from chapter four of Security Power Tools, written by Bryan Burns et. al. (O'Reilly, 2007; ISBN: 0596009631). Copyright © 2007 O'Reilly Media, Inc. All rights reserved. Used with permission from the publisher. Available from booksellers or direct from O'Reilly Media.]]></description>
		<content:encoded><![CDATA[This chapter covers LAN reconnaissance; specifically, it covers capturing packets and scoping out the LAN environment using ettercap-ng, p0f, and dsniff. When investigating a LAN, your goals can sometimes be at odds with each other. Are you trying to be quick? Is stealth a factor? Sometimes going for speed can compromise your intentions (whatever they may be). The nature of the LAN itself poses some questions as well. What physical access to the LAN do you have? Is the LAN switched? What kind of monitoring is present? What are the repercussions of being discovered?  Topics that are discussed i...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/LAN-Reconnaissance/</guid>
</item>
<item><title>An Epilogue to Cryptography</title>
<pubDate>Mon, 30 Jul 2007 09:00:47 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/An-Epilogue-to-Cryptography/</link>
		<description><![CDATA[This is the last part of a three-part series covering encryption and decryption, with a focus on the algorithms used. If you have missed either the first or second part, I encourage you to check them out before reading this part.]]></description>
		<content:encoded><![CDATA[Throughout this multi-part series we examined the coding of few individual encryption and decryption algorithms. Please keep in mind that none of them were ultimately secure. With the quantum leaps that technologies and computer resources have made nowadays, their decryption would be quite easy even without knowing the password at all. This makes breaking the encryption a simple matter. However, they do provide enough security for an average Joe or a casual computer user.  Here's my personal advice: I'd recommend the use of professional encryption algorithms for everyday and office/work purpos...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/An-Epilogue-to-Cryptography/</guid>
</item>
<item><title>A Sequel to Cryptography</title>
<pubDate>Tue, 24 Jul 2007 09:00:48 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/A-Sequel-to-Cryptography/</link>
		<description><![CDATA[This is the second part of a series covering cryptography algorithms. If by any chance you have missed its first part, I urge you to check it out right now. It is called  quot;An Introduction to Cryptography. quot; In order to understand this article, it is crucial to grasp the concepts explained in that part.]]></description>
		<content:encoded><![CDATA[I have promised that in this article I will continue showing you real-world encryption algorithms and more specifically that we are going to XOR. Throughout this part we will find out what exactly is XOR, how to implement it into an encryption algorithm, and ultimately a few techniques for breaking XOR-based encryptions. Does that sound provocative? Let's move on to the serious stuff. We have algorithms to understand and code, so there's definitely no time to waste. Grab your coffee or energy drink, and let's have fun! All About XOR Before we move on, allow me to give you a warning: Keep in mi...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/A-Sequel-to-Cryptography/</guid>
</item>
<item><title>An Introduction to Cryptography</title>
<pubDate>Mon, 23 Jul 2007 09:00:47 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/An-Introduction-to-Cryptography/</link>
		<description><![CDATA[In the last few decades the science and study of cryptography has earned an outstanding reputation due to its insane applicability and efficiency. Cryptography is the science of message secrecy. Its importance is easily explicable -- it is used everywhere: online purchasing, secured money transfers, cellular phones, broadcast of TV channels, emails, confidential data, and so forth.  Our life would be quite different without cryptography.]]></description>
		<content:encoded><![CDATA[This is the first article of a multi-part series. It serves the purpose of introducing you to cryptography. I cannot promise an easy ride through this journey, but it will be a comprehensible and amazing one. As much as we'll get into this, we'll realize how complex cryptography can be. But that shouldn't scare you away. I start by assuming that the reader has no experience with cryptography but has a bit of coding experience.  If that doesn't describe you, it's not a problem per se. You can skip the code parts and still understand the rest of the series. So let's move on - we have no time to ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/An-Introduction-to-Cryptography/</guid>
</item>
<item><title>Security Overview</title>
<pubDate>Thu, 30 Jun 2005 09:00:00 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Security-Overview/</link>
		<description><![CDATA[When we talk about “security” we know what we want, but describing it and making it happen can be different matters altogether. Network security has a natural conflict with network connectivity. The more an autonomous system opens itself up, the more risk it takes on. This, in turn, requires that more effort be applied to security enforcement tasks. This article is chapter eight of the book, Cisco: A Beginner's Guide, third edition, by Anthony Velte and Toby Velte (McGraw-Hill/Osborne, 2004, ISBN: 0072256354).]]></description>
		<content:encoded><![CDATA[The concept of network security may seem somewhat of a moving target-or several moving targets. When we talk about  security  we know what we want, but describing it and making it happen can be different matters altogether. Network security has a natural conflict with network connectivity. The more an autonomous system opens itself up, the more risk it takes on. This, in turn, requires that more effort be applied to security enforcement tasks. On top of that, add departmental budget constraints (and the personnel cuts that many companies have seen in recent years) and even reasonable security ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Security-Overview/</guid>
</item>
<item><title>Network Security Assessment</title>
<pubDate>Thu, 19 May 2005 09:00:01 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Network-Security-Assessment/</link>
		<description><![CDATA[If you want to run a business with  a website, security must be high on 
your list of important matters to get right up front. In this article, you will 
learn about Internet-based network security assessment and penetration testing, 
which can help you determine your website's risk of being successfully attacked 
-- and what to do to fix any problems. It is taken from chapter one of the 
book Network Security Assessment by Chris McNab 
(O'Reilly, 2004; ISBN: 059600611X).]]></description>
		<content:encoded><![CDATA[This chapter discusses at a high level the rationale behind Internet-based network security assessment and penetration testing. To retain complete control over your networks and data, you must take a proactive approach to security, an approach that starts with assessment to identify and categorize your risks. Network security assessment is an integral part of any security life cycle.The Business Benefits From a commercial standpoint, assurance of network security is a business enabler. As a security consultant at the time of writing, I am helping a particular client in the retail sector to dep...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Network-Security-Assessment/</guid>
</item>
<item><title>Firewalls</title>
<pubDate>Wed, 30 Mar 2005 09:00:01 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Firewalls/</link>
		<description><![CDATA[If you have ever wondered how to configure and run a secure open source firewall, look no further.  This book excerpt is from chapter three of Open Source Security Tools by Tony Howlett, ISBN 0321194438, copyright 2004. All rights reserved. It is reprinted with permission from Addison-Wesley Professional.]]></description>
		<content:encoded><![CDATA[So now that you have a fairly secure operating system and know a few basic tricks, let's get into using some more complex security tools. This chapter describes how to configure and run a secure open source firewall. If you already have a firewall, you may still want to read this chapter if you need a refresher or primer on how firewalls function. This will come in handy in later chapters that discuss port scanners and vulnerability scanners. A firewall is a device that acts as the first line of first defense against any incoming attacks or misuses of your network. It can deflect or blunt many...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Firewalls/</guid>
</item>
<item><title>What’s behind the curtain? Part II</title>
<pubDate>Mon, 28 Feb 2005 09:00:01 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Whats-behind-the-curtain-Part-II/</link>
		<description><![CDATA[In this second of a three-part series covering threats to computer security, we focus on attacks that are more specifically directed against a particular person or company.]]></description>
		<content:encoded><![CDATA[Internet usage entails many risks. You surf the Internet to do your work and you end up with a system with degraded performance and an unexpected behavior. Congratulations! No, you did not win the lottery; you have just been hacked!  In the first part of  What's behind the curtain  article I explained the threats associated with malicious code (viruses, Trojan horses, worms, backdoors, logic bombs and mobile code). As I mentioned in the first part, my target is to briefly list all possible attacks you may face when using the Internet; therefore I will continue my attempt to record the rest of ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Whats-behind-the-curtain-Part-II/</guid>
</item>
<item><title>What’s behind the curtain? Part I</title>
<pubDate>Mon, 21 Feb 2005 09:00:00 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Whats-behind-the-curtain-Part-I/</link>
		<description><![CDATA[It's no secret that any computer connected to the Internet faces a wide array of security threats. These days, however, a business needs to be connected to the Internet just to do business. What can you do? Keep reading to learn more about risks you take, and what you can do to protect yourself and your company.]]></description>
		<content:encoded><![CDATA[Introduction Everyone who uses the Internet has encountered at least one security violation. Sometimes these violations go unnoticed by the security-unaware user, and other times we may found out about them after they have caused severe damage to our information and systems. The best approach to solve the problem and avoid possible security violations is to know in advance what threatens our safety so we can protect our systems and information. As you will see later in this article, the lists of threats is endless. Every day, a new security attack comes to the surface and causes damage to many...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Whats-behind-the-curtain-Part-I/</guid>
</item>
<item><title>Vectors</title>
<pubDate>Wed, 02 Feb 2005 09:00:22 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Vectors/</link>
		<description><![CDATA[Many of us who use use security products on our computers religiously are bewildered to find that we still get infected with malware. How does this happen? No matter what we do, our computers are constantly in touch with the vectors that carry malicious software. Thomas Greene explains what this means, and what we can do about it.]]></description>
		<content:encoded><![CDATA[  NO DOUBT MOST OF US can sympathize with this Register reader: Hi Mr. Greene, I have just read your article on the severe Windows security hole and I still cannot for the life of me fathom ports-there are so many! I have been on line now for two years and have had to reformat my hard drive so many times due to viruses, etc., that I'm getting bored with it-lol! I have the latest antivirus software and a firewall up and running, but still I get problems. Any help will be so greatly appreciated; I'm not IT informed in any way-as u can tell! I can work my way round a PC with the basics. Any help ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Vectors/</guid>
</item>
<item><title>PKI: Looking at the Risks</title>
<pubDate>Mon, 24 Jan 2005 09:00:23 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/PKI-Looking-at-the-Risks/</link>
		<description><![CDATA[Public key infrastructure (PKI) is an excellent technology to help users certify that the people or companies they are corresponding with are who they say they are. It has proven itself invaluable in e-commerce among other areas. As with any technology, however, it is not without its own security risks. Eliana Stavrou discusses these risks, and ways to minimize them.]]></description>
		<content:encoded><![CDATA[To be fair to the readers, I believe that it is time to explain the possible risks and threats associated with Public Key Infrastructure (PKI). Until now, I have given you a lot of information on how to use PKI. (Editor's note: see Eliana Stavrou's articles on ASP Free). Although PKI is considered a must-have technology, it is not bullet-proof. Any security solution we have applied has its own problems; so does PKI. A silver bullet may not exist to solve all the security issues, but a combination of solutions along with the knowledge of their drawbacks gives us the vantage to close open holes ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/PKI-Looking-at-the-Risks/</guid>
</item>
<item><title>A Quick Look at Cross Site Scripting</title>
<pubDate>Tue, 04 Jan 2005 09:00:30 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/A-Quick-Look-at-Cross-Site-Scripting/</link>
		<description><![CDATA[We may not be able to completely bulletproof our websites, but we can at least try to anticipate possible attacks and secure against them. Here is one you might not have heard of: cross site scripting. With just a bit of JavaScript, a malicious attacker can use it to cause all sorts of problems. To find out more about what it is, and how to prevent your website from becoming a victim, keep reading.]]></description>
		<content:encoded><![CDATA[Introduction The question keeps spinning in our minds, just like a ball bouncing deeply inside the brain: is our website really secure? Surely, that's a very tough topic to answer. But one thing is true in all cases: there are not any websites  completely  safe from attacks. Given the uncontrolled and anonymous nature of the Internet, the concept of a bulletproof website is merely a pipe dream. More specifically, Web servers are inherently public machines, being accessible by many people around the world, and clearly exposed to several well-known attack techniques. The value of the information...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/A-Quick-Look-at-Cross-Site-Scripting/</guid>
</item>
</channel>
</rss>

