Social engineering and phishing are often the primary means by which attackers infiltrate modern corporate networks. By using this non-technical method that relies heavily on human interaction, attackers try to trick employees into providing them with valuable information, or taking action needed for making a successful intrusion. This makes social engineering one of today’s [...]
In this blog post we will have a look at the OWASP Application Security Verification Standard (ASVS) levels. OWASP ASVS is a list of application security requirements or tests that can be used by architects, developers, testers, security professionals, and even consumers to define what a secure application is. If you are not familiar [...]
Application Security Verification Standard (ASVS) is a list of application security requirements or tests that can be used by architects, developers, testers, security professionals, and even consumers to define what a secure application is.In October 2015 version 3.0 of the standard was released, and the requirements set to define a secure application have been [...]
A security test can provide your organzation with multiple benefits. For example, it will uncover if your security countermeasures actually resist external threats, and how well they respond in case of an attack. Computer attacks are a risk for all kinds of companies, no matter what size they have. If you follow this checklist [...]
If you want to simulate a cyber attack and understand the consequences of vulnerabilities being exploited, you should perform a penetration test. Such a test will tell you whether it is possible to break into the company’s network and achieve specific goals. Make sure to check out the following list on how to choose [...]