security

Solaris JMS Client connect to Weblogic 11g t3s security problem

When I try to connect Weblogic t3s protocol in Solaris Server, it shows this error: java.lang.IllegalStateException: Not enough cryptography available to enable a cipher suite! at com.certicom.tls.interfaceimpl.TLSSystem.resetCipherSuiteSupport(Unknown Source) at com.certicom.tls.interfaceimpl.TLSSystem.setCertificateSup...

USB token with certificate

Hi all! Someone could explain me how the USB token works? I have to implement that secure layer in a java application, but i don't know very well how it works! I know only the mecanism of a normal token key generator! Thanks a lot! ...

.NET ContentInfo taking too long to process

The following code using ContentInfo(System.Security.Cryptography.Pkcs.ContentInfo) is really taking a long time to execute. Is there anything I can do to speed it up? byte[] fileContents = File.ReadAllBytes(fileName ); var contentInfo = new ContentInfo(fileContents); var signedCms = new SignedCms(contentInfo); signedCms.Decode(fileCo...

How do I handle application security? using ActionFilterAttribute and/or SiteMap authorization..?

Hi, i created the following ActionFilterAttribute to check if a user is granted access to a page. I also created two custom Exceptions to handle different scenarios: NotLoggedInException and InsufficientPrivilegeException. ActionFilterAttribute Public Class ValidateAuthentication : Inherits ActionFilterAttribute Private _page As B...

Searching for a masters thesis topic

Hello! I am a student at an university and I have to write my master thesis (information technology / computer science). I have experience with programming (Objctive-C, PHP, web development, Java, C/C++, JSP, J2ME) and SQL databases like MySQL, PostgreSQL, Apache Derby. I am currently interested in two topics: visualization and/or secu...

WCF TLS cipher suite

Hi, I have a requirement to specify the cipher suite to be used for transport level security on a wsHttpBinding in WCF. I have problems finding what kind of cipher is used by default on TLS by WCF in the first place, let alone set it. This question is due to operation in an environment where most systems are build on Java, which appar...

Restrict native code functionality from Java

Hello all, I have a java application which uses JNI in some parts to do some work. It follows the usual loading of DLL and then calling native methods of DLL. Is there any way we can restrict what native methods can do from the java application? For example, can we restrict DLLs not to open any files or not to open any sockets even if i...

Network Intrusion Detection System in Java..!!

i am planning to implement a NIDS (netw intrusion detection system) in d java programming language on a very small basis... well after searching i found 2 libraries for it.. 1) Jpcap 2) jNetPcap which one should i use..and y..? which is more preferrable to use...? ...

Getting security information for remote registry keys?

According to the documentation for API function GetNamedSecurityInfo, it can get information from the following objects: Local or remote files or directories on an NTFS file system Local or remote printers Local or remote Windows services Network shares Registry keys Semaphores, events, mutexes, and waitable timers File-mapping objects...

How to connect WebLogic jdbc data source to Oracle Database over SSL (and authenticate using certificate)?

WL=WebLogic 10.3 database=Oracle Version 10.2.0.2.0 - Production I have the database and WL up. I can create a new WL JDBC data source that successfully authenticates to the database, but how to do this using SSL? I've followed the following documentations: How-To Configure and Use Oracle JDBC Driver SSL with Oracle WebLogic Server S...

jquery ajax - security question...

is the following safe? index.html <div id="loader">loading...</div> <div onclick="foo()">click me</div> <div id="change"></div> <script> function foo(){ jQuery.ajax({ url: 'get.html', success: function(txt){ var x = $('#loader').html(txt) x=...

WMI Access Denied on XP

Our application uses bunch of WMI calls. When using guest account connecting to local WMI server fails with ACCESS_DENIED, this works fine with user account and above. How to access WMI server under guest account? I added guest account to allow full access using WMIMGMT.MSC but still I am getting access denied errors. Any suggetions? ...

IIS7, web.config to allow only static file handler in directory /uploads of website

Hi, If it's possible which I think so, How do I modify my web.config to make a sub directory static -- files inside will only processed as static file, even if its name is "aspx" or something else? Thanks. ...

SVN Server Security Scanning Tool

We plan to migrate our SVN server from LAN to Internet. We need to convince our management, that our setup is secure enough. Is there any SVN server security scanning tool, to check on the security level of our SVN server? Thanks. We are using Windows. ...

How can i write open_basedir like this -> open_basedir = 'var/home/*/'

As you know. You have to write open_basedir = '/var/home' etc I want to write like this: open_basedir = '/var/home/*/' Which i want is php should restrict every directory which is in home directory, for every different directories. Short question: How can i write open_basedir like this: open_basedir = 'var/home/*/'? Thank you very mu...

Securing a string before exec()ing it

Hi I have a PHP app which takes a user-inputted $imageurl and does the following: exec('convert "'.$url.'" -thumbnail 80x500 "images/out.jpg"'); Now obviously I have to take some precautions with this to stop users from executing arbitrary code. For example, if the user sets $url to";rm -rf *;" is no good at all. So for starters I h...

Installing an application on a Windows system in a secured environment

One of the main advantages of web applications I often hear is that the deployment process is quick and painless, and that it even works in the most sealed off operating systems, as long as a browser is installed. I wonder if it is possible to make a lightweight installer for a thin client desktop application (for example written in C++)...

What is being encrypted when I use a salted CRYPT_MD5 to encrypt my password?

Using md5 on a string always produces an alpha-numeric encrypted result, ie: no symbols. However, when I using the php crypt() function, specifically the CRYPT_MD5 (and it is on, I've checked) with a salt, the supposed md5 hash it returns does not look like an md5 hash. For example: if I md5 the string 'password', I get: $pass = md5(...

Wipe Free space on hard disk drive using C#

I have been tasked to overwrite all the free space on a few laptops 3 times. I know there are some alternatives but I like to know how things work and if I can to do it myself with C#. 1) yes, I know there are plenty of freeware applications that will do this 2) no, we don't need to conform to any specific government standard Where d...

Reusing ASP.Net URL

Can I reuse a bookmarked url [GET Method ;Framework ASP.Net Db Oracle] after logging off?? ...