Experten aus dem binsec-Universum
Some standards can surprise you, even positively. The Austrian ÖNORM A7700 defines security requirements for web applications. Although the A7700 is largely unknown in Germany, it is still worth taking a look at the standard of the Republic of Austria.
In the approach during a pentest - or actually in the amount and details of the information base made available to the penetration tester - three variants can be distinguished: whitebox, graybox and blackbox pentesting.
Secure coding will take place in calendar weeks 31 and 32, i.e. the first two weeks in August. In terms of concept, this lecture has always been a purely online event without any physial presence, i.e. there is no typical exam, but I evaluate the practical work.
In addition to an ISO 27001 certification, regular penetration tests of sports betting portals must be carried out for the sports betting licence by the Darmstadt regional council. The pen tests must be carried out according to the OWASP Testing Guide or the OWSAP Testing Guide…
The best Linux for beginners is Debian GNU/Linux. It is, in my opinion, the best Linux for beginners who want to learn as well as experts. It is a stable Linux distribution on which well-known other distributions such as Ubuntu or Kali Linux are based on, still Debian is not a…
The costs of a penetration test depend on the time spent and the daily rate of the penetration tester.
A penetration test is basically a structured attack on a company's IT infrastructure. During this, a penetration tester uses the same tools and techniques that a hacker uses in his attack. However, the objective differs between a malicious hacker and a professional penetration…
Penetration tests are mandatory for operators of critical infrastructures. In the BSI law under paragraph "8a Security in the information technology of critical infrastructures", companies are obliged to take appropriate organizational and technical measures to protect their…
The Content Security Program of the Motion Picture Association (MPA) specifies security requirements in three areas in its Content Security Best Practices Common Guidelines (Version 4.10 of February 8, 2022):
The "minimum security requirements for decentralized portals and registration authorities" for "internet-based vehicle registration (i-Kfz)" from the german Federal Motor Transport Authority (KBA) are extremely extensive. In addition to the architecture of the i-Kfz system, its…