<?xml version="1.0" encoding="iso-8859-1"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:content="http://purl.org/rss/1.0/modules/content/">

<channel>
<title>Security - Web Developer Tutorials</title>
<link>http://www.devshed.com</link>
<!-- PubSubHubbub Discovery -->
<link rel="hub"  href="http://devshednet.superfeedr.com/" xmlns="http://www.w3.org/2005/Atom" />
<link rel="self" href="http://www.devshed.com/rss-feeds-21.xml" xmlns="http://www.w3.org/2005/Atom" />
<!-- End Of PubSubHubbub Discovery -->
<atom:link href="http://www.devshed.com/rss-feeds-21.xml" rel="self"/>
<description>Security Tutorials at Dev Shed.  DevShed is a community focused on both beginner and advanced tutorials in Java, C, PHP, Python, MySQL and Ruby-on-rails...amongst others.</description>
<language>en-us</language>
<lastBuildDate>Wed, 19 Jun 2013 00:28:57 -0400</lastBuildDate>
<pubDate>Wed, 19 Jun 2013 00:28:57 -0400</pubDate>
<item><title>Secure Your Business for Data Privacy Day</title>
<pubDate>Mon, 28 Jan 2013 15:02:15 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Secure-Your-Business-for-Data-Privacy-Day-60038/</link>
		<description><![CDATA[Today is Data Privacy Day, a global celebration that commemorates the 1981 signing of the first legally binding international treaty dealing with privacy and data protection. It's a great day to evaluate your firm's data security, and consider what you and your co-workers can do to further safeguard your sensitive data.]]></description>
		<content:encoded><![CDATA[I'd like to tip my hat to Dwight Silverman, whose blog not only alerted me to Data Privacy Day, but who also offers some excellent advice as to what individuals can do to further secure their private data. You'll find a lot of good material in that article, covering passwords, social media activity, credit reports, and more. Even if you think you're familiar with this information, I'd suggest reading Silverman's piece, as it links to some very useful resources. One of these resources, in fact, is StaySafeOnline.org. It's powered by the National Cyber Security Alliance, a not-for-profit whose s...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Secure-Your-Business-for-Data-Privacy-Day-60038/</guid>
</item>
<item><title>Google Testing Security Fob Password Alternative</title>
<pubDate>Mon, 21 Jan 2013 17:53:32 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Google-Testing-Security-Fob-Password-Alternative-25825/</link>
		<description><![CDATA[After seeing and hearing about too many successful incidents of hacking and identity theft, one does not need to be a paranoid systems administrator to think passwords might no longer offer strong enough security. Google agrees with this sentiment, and the search giant is testing a device that could replace those pesky passwords with something more hacker-proof.]]></description>
		<content:encoded><![CDATA[Appearing no bigger than your typical thumb drive, it's called a YubiKey. The device, a cryptographic card, was developed by start-up company Yubico. To use the fob, one simply slides it into a computer's USB port. In the pilot project, all it took to log into Google with the fob in place was a click of the mouse. In a paper written for IEEE Security and Privacy Magazine, Google Vice President of Security Eric Grosse and Google engineer Mayank Upadhyay discussed this as one of the possible options for logging into websites in the future. As with any potential new standard, it's a question of g...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Google-Testing-Security-Fob-Password-Alternative-25825/</guid>
</item>
<item><title>Security News Highlights Concerns</title>
<pubDate>Mon, 10 Dec 2012 18:12:32 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Security-News-Highlights-Concerns-78051/</link>
		<description><![CDATA[These days, running an insecure system can leave your company facing much worse consequences than an offline website. You could face lawsuits. A recent article on a security breach at a large insurance company brings that issue into focus. Keep reading to see how Nationwide is trying to do the right thing.]]></description>
		<content:encoded><![CDATA[Anthony Gonsalves covered the Nationwide Mutual Insurance company story for CSO Online. The insurance firm admitted that it suffered a security breach on October 3 in which hackers stole data on more than one million of their customers. The data stolen included names, Social Security numbers, driver's license numbers, and birth dates. In other words, it was prime material for committing identity theft. This kind of cybercrime represents a huge concern for any company that holds personally identifiable data in databases - or in other words, just about any company. Securing your customers' and e...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Security-News-Highlights-Concerns-78051/</guid>
</item>
<item><title>Going to Extremes for Data Security</title>
<pubDate>Mon, 26 Nov 2012 17:38:30 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Going-to-Extremes-for-Data-Security-79265/</link>
		<description><![CDATA[Should you worry less or more if your business takes its data to the cloud? That depends on the infrastructure of the data center “cloud” in question. We can learn a lot about how to do it right from Minkels and Deltalis, whose special project is a finalist for the DatacenterDynamics Awards 2012 category “Most Extreme Datacenter Deployment.”]]></description>
		<content:encoded><![CDATA[If you've never heard of the DatacenterDynamics Awards, don't feel too bad; they seem to be little known outside the datacenter industry, though within it they carry the cachet of the Oscars. Now in their sixth year, the award ceremony will be held on December 13 at the Lancaster London Hotel. Six hundred industry attendees are expected for this black tie gala affair that recognizes  innovation, leadership and 'out of the box' thinking in the data center industry across the EMEA region,  according to DatacenterDynamics's website. So what did Minkels do that was so  outside the box  in creating...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Going-to-Extremes-for-Data-Security-79265/</guid>
</item>
<item><title>Skipfish Website Vulnerability Scanner</title>
<pubDate>Wed, 23 Mar 2011 11:00:06 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Skipfish-Website-Vulnerability-Scanner/</link>
		<description><![CDATA[Security is by far the most important aspect that any webmaster should consider for long term website success. A lot of open source and commercial tools are available to scan your website for vulnerabilities. If you are looking for an efficient, powerful, fast and free tool, then you might need to give “Skipfish” a try.]]></description>
		<content:encoded><![CDATA[Skipfish is a web application security scanner contributed, developed and maintained by the Google security engineering team headed by Michael Zalewski, a Google Inc. employee. This tutorial is written primarily for beginners who are looking to expand their knowledge of website security, vulnerability detection and prevention using Skipfish. System Requirements and Required Library Installation This tutorial teaches you how to install and run Skipfish inside an Ubuntu local environment. With this, it is possible to scan both localhost and remote web server URL. The methods and commands in this...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Skipfish-Website-Vulnerability-Scanner/</guid>
</item>
<item><title>Critical Microsoft Visual Studio Security Patch Tuesday</title>
<pubDate>Sat, 25 Jul 2009 01:06:48 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Critical-Microsoft-Visual-Studio-Security-Patch-Tuesday-0723209/</link>
		<description><![CDATA[Microsoft is releasing a security patch for Visual Studio and another  moderate  rated patch for IE for almost all versions.  The patches are must-haves for developers that use Visual Studio and any internet explorer users.]]></description>
		<content:encoded><![CDATA[Here comes another critical patch from Microsoft.  What it fixes is anyone's guess, but it affects almost all versions of Windows and .NET Visual Studio back to 2003.  Developers are encouraged to register their guess, but make your guesses after you apply the patch. Speculation is that the Internet Explorer patch is going to be for IE6, IE7 and IE8 and that it patches something to do with the Video Active-X hacker hole it left open for years.  Now, with the boon of sites that use video and the competition for putting video in either Silverlight or Flash, Microsoft must be a little worried abo...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Critical-Microsoft-Visual-Studio-Security-Patch-Tuesday-0723209/</guid>
</item>
<item><title>US Faces Tech Security Expert Deficit</title>
<pubDate>Thu, 23 Jul 2009 02:14:08 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/US-Faces-Tech-Security-Expert-Deficit-10294/</link>
		<description><![CDATA[Recent attacks against the United States IT security infrastructure has officials worried that, over the next decade, qualified cyber-security personnel will be at a premium; and a shortage.  The question is: how does the USA plan to lure and keep top tech talent to secure and protect the national information infrastructure?]]></description>
		<content:encoded><![CDATA[There's a definite digital-divide starting, but it's not between the rich and the poor; it's between the IT Security expert haves and have-nots...and it's spreading from private companies all the way to the US Government. Recent studies of the country's top IT management shows that a whopping 35%+ of CIOs, CTOs and CSOs are either dissatisfied or highly dissatisfied with their current personnel and are looking to upgrade their cyber-security positions despite the recession and high-cost of high-end talent. The United States has put out an APB for qualified, high-end security experts specializi...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/US-Faces-Tech-Security-Expert-Deficit-10294/</guid>
</item>
<item><title>LAN Reconnaissance</title>
<pubDate>Thu, 13 Nov 2008 10:00:46 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/LAN-Reconnaissance/</link>
		<description><![CDATA[If you're trying to keep your LAN secure, sometimes it helps to think like a cracker. This article shows you how to scout out a LAN, and how malicious hackers get around security. It is excerpted from chapter four of Security Power Tools, written by Bryan Burns et. al. (O'Reilly, 2007; ISBN: 0596009631). Copyright © 2007 O'Reilly Media, Inc. All rights reserved. Used with permission from the publisher. Available from booksellers or direct from O'Reilly Media.]]></description>
		<content:encoded><![CDATA[This chapter covers LAN reconnaissance; specifically, it covers capturing packets and scoping out the LAN environment using ettercap-ng, p0f, and dsniff. When investigating a LAN, your goals can sometimes be at odds with each other. Are you trying to be quick? Is stealth a factor? Sometimes going for speed can compromise your intentions (whatever they may be). The nature of the LAN itself poses some questions as well. What physical access to the LAN do you have? Is the LAN switched? What kind of monitoring is present? What are the repercussions of being discovered?  Topics that are discussed i...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/LAN-Reconnaissance/</guid>
</item>
<item><title>An Epilogue to Cryptography</title>
<pubDate>Mon, 30 Jul 2007 10:00:47 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/An-Epilogue-to-Cryptography/</link>
		<description><![CDATA[This is the last part of a three-part series covering encryption and decryption, with a focus on the algorithms used. If you have missed either the first or second part, I encourage you to check them out before reading this part.]]></description>
		<content:encoded><![CDATA[Throughout this multi-part series we examined the coding of few individual encryption and decryption algorithms. Please keep in mind that none of them were ultimately secure. With the quantum leaps that technologies and computer resources have made nowadays, their decryption would be quite easy even without knowing the password at all. This makes breaking the encryption a simple matter. However, they do provide enough security for an average Joe or a casual computer user.  Here's my personal advice: I'd recommend the use of professional encryption algorithms for everyday and office/work purpos...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/An-Epilogue-to-Cryptography/</guid>
</item>
<item><title>A Sequel to Cryptography</title>
<pubDate>Tue, 24 Jul 2007 10:00:48 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/A-Sequel-to-Cryptography/</link>
		<description><![CDATA[This is the second part of a series covering cryptography algorithms. If by any chance you have missed its first part, I urge you to check it out right now. It is called  quot;An Introduction to Cryptography. quot; In order to understand this article, it is crucial to grasp the concepts explained in that part.]]></description>
		<content:encoded><![CDATA[I have promised that in this article I will continue showing you real-world encryption algorithms and more specifically that we are going to XOR. Throughout this part we will find out what exactly is XOR, how to implement it into an encryption algorithm, and ultimately a few techniques for breaking XOR-based encryptions. Does that sound provocative? Let's move on to the serious stuff. We have algorithms to understand and code, so there's definitely no time to waste. Grab your coffee or energy drink, and let's have fun! All About XOR Before we move on, allow me to give you a warning: Keep in mi...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/A-Sequel-to-Cryptography/</guid>
</item>
<item><title>An Introduction to Cryptography</title>
<pubDate>Mon, 23 Jul 2007 10:00:47 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/An-Introduction-to-Cryptography/</link>
		<description><![CDATA[In the last few decades the science and study of cryptography has earned an outstanding reputation due to its insane applicability and efficiency. Cryptography is the science of message secrecy. Its importance is easily explicable -- it is used everywhere: online purchasing, secured money transfers, cellular phones, broadcast of TV channels, emails, confidential data, and so forth.  Our life would be quite different without cryptography.]]></description>
		<content:encoded><![CDATA[This is the first article of a multi-part series. It serves the purpose of introducing you to cryptography. I cannot promise an easy ride through this journey, but it will be a comprehensible and amazing one. As much as we'll get into this, we'll realize how complex cryptography can be. But that shouldn't scare you away. I start by assuming that the reader has no experience with cryptography but has a bit of coding experience.  If that doesn't describe you, it's not a problem per se. You can skip the code parts and still understand the rest of the series. So let's move on - we have no time to ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/An-Introduction-to-Cryptography/</guid>
</item>
<item><title>Security Overview</title>
<pubDate>Thu, 30 Jun 2005 10:00:00 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Security-Overview/</link>
		<description><![CDATA[When we talk about “security” we know what we want, but describing it and making it happen can be different matters altogether. Network security has a natural conflict with network connectivity. The more an autonomous system opens itself up, the more risk it takes on. This, in turn, requires that more effort be applied to security enforcement tasks. This article is chapter eight of the book, Cisco: A Beginner's Guide, third edition, by Anthony Velte and Toby Velte (McGraw-Hill/Osborne, 2004, ISBN: 0072256354).]]></description>
		<content:encoded><![CDATA[The concept of network security may seem somewhat of a moving target-or several moving targets. When we talk about  security  we know what we want, but describing it and making it happen can be different matters altogether. Network security has a natural conflict with network connectivity. The more an autonomous system opens itself up, the more risk it takes on. This, in turn, requires that more effort be applied to security enforcement tasks. On top of that, add departmental budget constraints (and the personnel cuts that many companies have seen in recent years) and even reasonable security ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Security-Overview/</guid>
</item>
<item><title>Network Security Assessment</title>
<pubDate>Thu, 19 May 2005 10:00:01 -0400</pubDate>
<link>http://www.devshed.com/c/a/Security/Network-Security-Assessment/</link>
		<description><![CDATA[If you want to run a business with  a website, security must be high on 
your list of important matters to get right up front. In this article, you will 
learn about Internet-based network security assessment and penetration testing, 
which can help you determine your website's risk of being successfully attacked 
-- and what to do to fix any problems. It is taken from chapter one of the 
book Network Security Assessment by Chris McNab 
(O'Reilly, 2004; ISBN: 059600611X).]]></description>
		<content:encoded><![CDATA[This chapter discusses at a high level the rationale behind Internet-based network security assessment and penetration testing. To retain complete control over your networks and data, you must take a proactive approach to security, an approach that starts with assessment to identify and categorize your risks. Network security assessment is an integral part of any security life cycle.The Business Benefits From a commercial standpoint, assurance of network security is a business enabler. As a security consultant at the time of writing, I am helping a particular client in the retail sector to dep...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Network-Security-Assessment/</guid>
</item>
<item><title>Firewalls</title>
<pubDate>Wed, 30 Mar 2005 10:00:01 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Firewalls/</link>
		<description><![CDATA[If you have ever wondered how to configure and run a secure open source firewall, look no further.  This book excerpt is from chapter three of Open Source Security Tools by Tony Howlett, ISBN 0321194438, copyright 2004. All rights reserved. It is reprinted with permission from Addison-Wesley Professional.]]></description>
		<content:encoded><![CDATA[So now that you have a fairly secure operating system and know a few basic tricks, let's get into using some more complex security tools. This chapter describes how to configure and run a secure open source firewall. If you already have a firewall, you may still want to read this chapter if you need a refresher or primer on how firewalls function. This will come in handy in later chapters that discuss port scanners and vulnerability scanners. A firewall is a device that acts as the first line of first defense against any incoming attacks or misuses of your network. It can deflect or blunt many...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Firewalls/</guid>
</item>
<item><title>What’s behind the curtain? Part II</title>
<pubDate>Mon, 28 Feb 2005 10:00:01 -0500</pubDate>
<link>http://www.devshed.com/c/a/Security/Whats-behind-the-curtain-Part-II/</link>
		<description><![CDATA[In this second of a three-part series covering threats to computer security, we focus on attacks that are more specifically directed against a particular person or company.]]></description>
		<content:encoded><![CDATA[Internet usage entails many risks. You surf the Internet to do your work and you end up with a system with degraded performance and an unexpected behavior. Congratulations! No, you did not win the lottery; you have just been hacked!  In the first part of  What's behind the curtain  article I explained the threats associated with malicious code (viruses, Trojan horses, worms, backdoors, logic bombs and mobile code). As I mentioned in the first part, my target is to briefly list all possible attacks you may face when using the Internet; therefore I will continue my attempt to record the rest of ...]]></content:encoded>
<category>Security</category>
<guid isPermaLink="true">http://www.devshed.com/c/a/Security/Whats-behind-the-curtain-Part-II/</guid>
</item>
</channel>
</rss>
