Popular Posts

Sunday, November 17, 2013

Database Security Vunerabilities

There are certain common and serious database vulnerabilities that most businesses that deals with data should know of. Cyber attack has been on the rise lately and especially on databases, this is due to the fact that databases usually contains valuable information. Some and probably the most important that hackers goes after are financial data and if they don't get that most of everything stored are intellectual property and corporate secrets that hackers can profit from.

The top on the list of the database vulnerabilities are deployment failures, when company are usually testing a software, they usually test to see if it is doing everything that it was designed to do, they never check to see if it is doing something that it was designed to do. Then there are the broken databases where most business don't keep their systems regularly patch leaving the database vulnerable.

There are a lot more of theses vulnerability that administrators need to keep in mind and look to best practices to make sure they are up to date some more of these vulnerabilities include data leaks when data is not encrypted with SSL or TLS, SQL Injections and Database inconsistencies.

http://www.zdnet.com/the-top-ten-most-common-database-security-vulnerabilities-7000017320/

Monday, November 11, 2013

Linux is more Secure than Windows

For small businesses or organizations that are lacking dedicated IT security staff using Linux can be very beneficial. There is a saying with windows users, "Security through obscurity". Leading us to believe that the software is basically secure because of it's complexity and closed nature. The idea goes if the hackers cannot see the code they will have a hard time cracking it but that has not been true especially looking at the number  of patches that they often sends out.

So why is Linux security basically better? When it comes to privileges, windows users by default gets admins access from the jump but with Linux you get the lowest level possible and then what you need will be added on. With that if there ever should be a virus it would then not be able to spread thus far to the root but stay local. There is also the social engineering factor where people are tricked to download malicious things on to their computer by means of social engineering, With Linux the user have to download, save, and exec the file.

Also Linux have a diversity of environments so it is difficult to just send out a virus to all of Linux unlike windows. Most users are using Windows so that's a hackers main point of attack. Most people can see and work on the Linux code so with that many eyes it is easier to catch any flaws and fix them quickly unlike windows where Vulnerabilities are not known until they can be fixed.

http://www.pcworld.com/article/202452/why_linux_is_more_secure_than_windows.html