News (13)

Oracle plugs 65 security holes

As part of its quarterly patch cycle, Oracle on Tuesday in the US released fixes for 65 security vulnerabilities that affect many of its products. Read more »

Most Oracle database admins don't apply patches?

Around 70 percent of Oracle database professionals say they have never applied a security patch, according to database security firm Sentrigo. Read more »

Cisco patches security-monitoring system

Networking giant Cisco Systems has fixed several flaws in a security monitoring product meant to protect networks against attacks. Read more »

US Homeland Security still infected with Trojans?

The man in charge of IT security for the US Homeland Security department may lose his job after the revelations that his department's IT systems have misconfigured firewalls, suspicious botnet activity, trojans and virus infections. Read more »

Oracle plugs 101 security flaws

As part of its quarterly patch cycle, Oracle released fixes on Tuesday for 101 security vulnerabilities across its products. Read more »

Turn security rhetoric into action, Oracle warns

Every software developer likes to believe it is committed to application security -- but senior managers need to put their money where their mouths are to turn security rhetoric into action, a senior development manager at Oracle Corporation has told more than 200 delegates at the SECURECon security conference in Melbourne. Read more »

Oracle to push out 51 patches

Oracle plans to push out 51 fixes for flaws in its software, in a self-described "critical patch update" on Tuesday. Read more »

Salesforce staff speared by phishers

Salesforce.com has revealed few details about a security breach caused by a phishing attack against an employee that surrended internal customer database details. Read more »

Expert: Hold developers liable for flaws

Software developers should be held personally accountable for the security of the code they write, said Howard Schmidt, a former White House cybersecurity adviser. Read more »

Australia Post tests online identification service

Read more »

Features (49)

Master simple forms authentication in .NET

Using forms authentication, you can quickly build a simple, secure Web app. This walk-through shows you how to apply the strategy in your apps. Read more »

How to build secure ASP.NET applications

ASP.NET provides several ways to protect your Web-based app from attack. Here's an overview of authentication, authorisation, and role-based security. Read more »

Secure connections to PostgreSQL

The PostgreSQL database server is arguably one of the best SQL servers available, but it's not as easy for beginners to get a handle on it as with other SQL databases, such as MySQL. Read more »

Kerberos vulnerability hits Linux/UNIX versions

The Kerberos Administration daemon (kadmind), which is used in connection with Kerberos authentication, contains a buffer overflow vulnerability in many implementations, mostly affecting Linux/UNIX. Read more »

Cookieless data persistence is possible

Cookies are a common way to store retrievable user information, such as authentication data. But what if you need a non-cookie solution? Read more »

SQL Server: Design for security from the start

Security in the development of a SQL Server database must be a priority right from the start, beginning with the design process. Familiarise yourself with these guidelines before you start your next project and you will prepare a more secure database application. Read more »

Secure SQL Server: Installing for security

Securing SQL Server is vital to the design of any database system. Learn how to install SQL securely, protect data, and ensure its validity. Read more »

Designing secure intranet applications

During the design phase, engineering and security teams must work together to ensure intranet applications meet the established security standards. Read more »

Web application security frameworks (WASF), Part 1: Introduction

Often you will want parts of your Web application to be exclusive to certain users. This access distinction requires the use of Web application security frameworks. This first article in the series introduces you to the three most often used methods. Read more »

Five steps to designing a secure system with TCB

Security must be a factor in system design from the beginning. It starts with defining the trusted computing base (TCB). Follow these steps to achieve a secure system. Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?