Experten aus dem binsec-Universum
The current version 3.2.1 and the newer version 4.0 of the security standard PCI DSS require penetration tests to be performed. The PCI standard establishes detailed requirements a penetration test needs to comply with. In PCI DSS 3.2.1, the requirement is regulated in…
In order to be included in the register of reimbursable digital health applications (DiGa), the fast-track procedure at the BfArM must be completed. With the Digital Supply and Care Modernization Act (DVPMG), the corresponding guideline included the requirement that company…
Breaking into foreign IT systems in the role of an attacker can be very captivating. As a penetration tester, however, you should never lose sight of the actual goal: identifying all entry points and vulnerabilities in a target system. The list of vulnerabilities can become very long and confusing. To tell a customer which vulnerabilities should be addressed…
The recent hacker attack on the University of Gießen has made many people aware that the threat posed by attackers from the Internet is continuously growing. In order to to learn from such security incidents, IT forensic scientists are required to investigate the 7 W questions…
Shameless rip-offs aimed at newly founded companies are on the rise. In 2013, when we founded binsec, we received a payment request that was supposed to motivate us to pay for an entry in a register. When we founded binsec group GmbH in October 2019 the notary had already warned us that…
It is worth mentioning that automated methods are much faster in performing the security analysis.
Every semester, thousands of computer science students successfully complete their degrees - all too often with little or no knowledge of secure software development. No wonder that long-known vulnerabilities such as cross-site scripting (XSS) are still not a thing of the…
As a lecturer, I encounter many students who, while writing their thesis, suffer from bewilderment and time problems. The root of all evil is usually a superficial preparation that has led to an unscientific approach. How would…
As a lecturer for “Penetration Testing”, I know only too well the decisive motivation behind my students’ decision to take this elective. It is all about “hacking”. For many an exciting topic from an early age - the hacking of…
I studied physics, business informatics and security management. I sat in a few very good lectures and in many average ones - and now and then in a catastrophic lecture. The low point was reached once when, in a lecture on “Networks”, the…