Infrastructure Security: Page
-
API security maturity model to assess API security posture
As API use proliferates, attackers are targeting them to exploit networks and data. This six-domain API security maturity model can assess weaknesses and vulnerabilities.
By Packt Publishing, Kyle Johnson • Oct. 2, 2024 -
What is Android System WebView and should you uninstall it?
Android System WebView is a system component for the Android operating system (OS) that enables Android apps to display web content directly inside an application.
By Ben Lutkevich, Madelyn Bacon, Gavin Wright • Oct. 2, 2024 -
Opinion // Omdia Analysts' Perspectives
Research reveals strategies to improve cloud-native security
As organizations focus on the cloud to deliver and scale applications, security teams struggle to keep up. Recent research points to how teams can effectively manage cloud security risk.
By Melinda Marks • Oct. 1, 2024 -
What is WPA3 (Wi-Fi Protected Access 3)?
WPA3, also known as Wi-Fi Protected Access 3, is the third iteration of a security certification standard developed by the Wi-Fi Alliance. WPA3 is the latest updated implementation of WPA2, which has been in use since 2004.
By Alexander Gillis, Gavin Wright • Sept. 30, 2024 -
Expert Advice
How to use tcpreplay to replay network packet files
The suite of tools that comprise tcpreplay offers administrators a variety of network security options. Learn some of the benefits of this free utility.
By Damon Garn • Sept. 24, 2024 -
Expert Advice // Intro to DNS security
DNS security best practices to implement now
DNS is a key component in any enterprise network. Auditing DNS servers and encrypting DNS traffic are just two of the steps to take to protect your organization's DNS deployment.
By Damon Garn • Sept. 19, 2024 -
Expert Advice
How to prevent vendor email compromise attacks
Vendor email compromise is one of the latest email attacks to hit headlines. Learn how to prevent becoming a victim to this potentially expensive scheme.
By Amanda Scheldt • Sept. 11, 2024 -
What is network detection and response (NDR)?
Network detection and response (NDR) technology continuously scrutinizes network traffic to identify suspicious activity and potentially disrupt an attack.
By Michael Levan • Sept. 6, 2024 -
Expert Advice // API security guide: Risks, attacks and testing
Top API risks and how to mitigate them
While APIs play an essential role in most modern business strategies, they can also introduce serious security threats. Learn some of the top API risks and how to mitigate them.
By John Burke • Sept. 6, 2024 -
Expert Advice
How to use Tor -- and whether you should -- in your enterprise
The Tor browser has sparked discussion and dissension since its debut. Does the software, which promises anonymous and secure web access, have a role to play in the enterprise?
By Damon Garn • Aug. 27, 2024 -
What is an endpoint protection platform (EPP)?
An endpoint protection platform (EPP) is a security technology that safeguards endpoint devices.
By Sean Kerner • Aug. 16, 2024 -
The 5 different types of firewalls explained
The firewall remains a core fixture in network security. But, with five types of firewalls, three firewall deployment models and multiple placement options, things can get confusing.
By Amy DeCarlo • Aug. 15, 2024 -
Nvidia AI security architect discusses top threats to LLMs
Richard Harang, Nvidia's principal AI and ML security architect, said two of the biggest pain points for LLMs right now are insecure plugins and indirect prompt injections.
By Alexander Culafi • Aug. 7, 2024 -
Expert Advice
12 types of endpoint security
With the rise of remote work, mobile devices and IoT, the traditional security perimeter extends beyond corporate networks, making endpoint security crucial for organizations.
By Sean Kerner • Aug. 7, 2024 -
Opinion // Omdia Analysts' Perspectives
Highlights from CloudNativeSecurityCon 2024
This year's Cloud Native Computing Foundation CloudNativeSecurityCon highlighted cloud-native security issues to its many attendees who don't hold security-focused roles.
By Melinda Marks • Aug. 6, 2024 -
Expert Advice // All about DDoS attacks
How to protect against cloud DDoS attacks
Cloud DDoS protection enables companies to detect and mitigate DDoS attacks before they cause significant downtime, infrastructure issues and potential business losses.
By Dave Shackleford • Aug. 6, 2024 -
What is endpoint security? How does it work?
Endpoint security is the protection of endpoint devices against cybersecurity threats.
By Sean Kerner • Aug. 2, 2024 -
Expert Advice // Intro to DNS security
6 types of DNS attacks and how to prevent them
DNS servers are vulnerable to a variety of attacks, but there are steps you can take to secure them from danger.
By Ravi Das • July 29, 2024 -
What is SSH (Secure Shell) and How Does It Work?
SSH (Secure Shell or Secure Socket Shell) is a network protocol that gives users -- particularly systems administrators -- a secure way to access a computer over an unsecured network.
By Peter Loshin, Alexander Gillis, Michael Cobb • July 29, 2024 -
Expert Advice
How to use PuTTY for SSH key-based authentication
This tutorial on the open source PuTTY SSH client covers how to install it, its basic use and step-by-step instructions for configuring key-based authentication.
By Damon Garn • July 25, 2024 -
Video
WPA2 vs. WPA3
Wireless security has evolved from WEP to WPA protocols and play a pivotal role in safeguarding against cyberattacks.
By Sabrina Polin • July 23, 2024 -
Expert Advice
Where to place a firewall in an enterprise network
Firewalls are a foundational element of a strong security posture, and their positioning affects both enterprise performance and cyberdefense.
By Amy DeCarlo • July 22, 2024 -
Expert Advice // Port security, scans, attacks and vulnerabilities
How to protect port 139 from SMB attacks
Keeping port 139 open is perfectly normal -- but only for good reason. Without the proper protections, it can present a major security risk.
By Michael Cobb • July 19, 2024 -
Expert Advice // API security guide: Risks, attacks and testing
How API attacks work, plus 5 common types
A growing number of API attacks put enterprises at risk of serious data breaches. Learn how these attacks work, and explore some API security best practices.
By Rob Shapland • July 8, 2024 -
Expert Advice // Email authentication with SPF, DKIM and DMARC
SPF, DKIM and DMARC: What are they and how do they work together?
Internet protocols for email authentication -- SPF, DKIM and DMARC -- coordinate defense against spammers, phishing and other spoofed email problems.
By Peter Loshin • June 26, 2024