News (157)
Firm offers new tools for database security
Security software developer Guardium is expected to formally announce Monday a new suite of integrated security applications for databases, a market that's gaining traction in the current regulatory environment. Read more »
Oracle 10g release two arrives
This month should see the release of the a more secure version of Oracle's grid database. Read more »
Microsoft readies revamped database, security software
Microsoft says it's set to release near-final versions of its key database server and other business-oriented software. Read more »
Security guru wants access to bug databases
Security expert Ross Anderson has called for empirical research to be conducted into whether open source or closed source software is more secure, and into the impact that development practices such as extreme programming (XP) have on code quality. Read more »
Oracle patches 45 security vulnerabilities
In its latest quarterly patch cycle, Oracle has released 45 fixes for various security flaws. Read more »
Oracle sews up multiple security holes
As part of its quarterly patch cycle, Oracle on Tuesday released fixes for a long list of security vulnerabilities in many of its products. Read more »
Oracle defends security record
Oracle has shrugged off criticisms of its recent security record, saying that one of the company's biggest security concerns is that its customers are so used to being secure that they are not used to applying patches. Read more »
Oracle plugs 65 security holes
As part of its quarterly patch cycle, Oracle on Tuesday in the US released fixes for 65 security vulnerabilities that affect many of its products. Read more »
Oracle no longer a 'bastion of security': Gartner
Analyst group Gartner has warned administrators to be "more aggressive" when protecting their Oracle applications because they are not getting enough help from the database giant. Read more »
Most Oracle database admins don't apply patches?
Around 70 percent of Oracle database professionals say they have never applied a security patch, according to database security firm Sentrigo. Read more »
Features (239)
SQL Server: Design for security from the start
Security in the development of a SQL Server database must be a priority right from the start, beginning with the design process. Familiarise yourself with these guidelines before you start your next project and you will prepare a more secure database application. Read more »
Six steps to secure sensitive data in MySQL
If you're using MySQL, there are some easy things you can do to secure your systems and significantly reduce the risk of unauthorised access to your sensitive data. Read more »
Secure SQL Server: Installing for security
Securing SQL Server is vital to the design of any database system. Learn how to install SQL securely, protect data, and ensure its validity. Read more »
Grant Web servers secure database access
Allowing Web clients to access a database is a delicate matter that should not be attempted lightly or without careful consideration. Read more »
Web application security frameworks (WASF), Part 2: Database lookup
Often, you will want parts of your Web application to be exclusive to certain users. This access distinction requires the use of Web application security frameworks. Continuing our series on Web app security, we explore the database lookup framework. Read more »
Designing secure intranet applications
During the design phase, engineering and security teams must work together to ensure intranet applications meet the established security standards. Read more »
Web application security frameworks (WASF), Part 1: Introduction
Often you will want parts of your Web application to be exclusive to certain users. This access distinction requires the use of Web application security frameworks. This first article in the series introduces you to the three most often used methods. Read more »
Follow these steps to secure your data layer
A secure data layer is essential for a truly secure application. Learn how to nurture a secure environment for the pivotal Data tier of your application with the correct tools. Read more »
Bulletproof persistent cookies to increase security
Web browser cookies can enhance the user experience by providing additional functionality and ease of use. However, from an administration point of view, cookies are a security concern. Encrypt your cookies with this simple technique. Read more »
Five steps to designing a secure system with TCB
Security must be a factor in system design from the beginning. It starts with defining the trusted computing base (TCB). Follow these steps to achieve a secure system. Read more »
Blog (8)
The 2008 Trends and Threats to Internet security
-- I recently came across the IBM Internet Security Systems X-Force 2008 Mid-Year Trend Statistics report, which outlines issues affecting internet security, including application vulnerabilities, phishing, malware and spam. Read more »
Google destroys Security Through Obscurity
-- Google Labs' new Code Search makes it easier for hackers to find database
username and password details by entering strings that are commonly used
within configuration files. Read more »
Lets Shindig!
-- At this year's Google Developer Day in Sydney, Dan Peterson and John Hjelmstad talked about Apache Shindig, an open source implementation of OpenSocial and gadgets. Read more »
Oracle's Agile PLM gains popularity
-- I recently spoke to Oracle about their Agile Product Lifecycle Management (PLM) solution, an integrated tool for managing information about a product throughout its lifecycle. Read more »
Salesforce's new AIR toolkit
-- Following the announcement that Salesforce will provide a free toolkit for Adobe Flex and AIR development on its Force.com platform, I spoke to the company’s Doug Farber, the Vice President of Operations, Asia Pacific about its functionality and other issues surrounding the toolkit. Read more »
Is public domain software open-source?
-- When writing earlier this week about Adobe's sponsoring of the SQLite project, I ran into a complicated issue: is software released into the public domain also open-source software? Read more »
Google Gears screenshots
-- Here is a bit of eye candy of the new Google Gears installation and sample code. Read more »
Attack Modeling vs Threat Modeling
-- Traditional Threat Modeling from an adversarial approach is actually Attack Modeling. So what is Threat Modeling then and how does it differ from Attack Modeling? Read more »
Filter Tags
News and features
- Latest
- Popular
- Features
- Most Discussed
-
The punching and counterpunching continued in the ongoing web browser development bout. Each time one browser closes a feature gap, a new feature appears in one of the others -- how we ever put up with the years of browser stagnation, I'll never know. Read more »
-
Since its release in May last year, Gears has supported only Internet Explorer and Firefox browsers. With the addition of Safari into the Gears fold, it closes the loop of major browsers to support Gears Read more »
-
MyPerfect.com.au has potentialVictorian Web start-up My Perfect has a strong story and rationale for why it will succeed. But it has to overcome some challenges and design flaws first. Read more »
-
Gosling: How Java handles multi-core
2008/08/19 12:13:05
-
.NET multi-core support yet to arrive
2008/08/19 12:15:29
-
Seinfeld, Wiimotes and Woz -- Club Builder
2008/08/26 18:09:05
What's on?
-
Club Builder: Seinfeld, Wiimotes and Woz
On this episode of Club Builder: Jerry Seinfeld is the new face of Vista, we learn how to make a cheap whiteboard, and Woz talks about Steve Jobs.
