The major distributed denial-of-service (DDoS) attack which targeted Dyn shook a lot of people, especially experts in IT security. Dyn is well known for offering domain name services (DNS), and the attack crippled most parts of the internet. In simple terms, a DNS provider has the same role of air traffic controller, that is, the provider routes internet traffic. The DDoS … [Read more...] about Healthcare IT Security and The Internet of Things
security
Top 5 Vulnerabilities In APIs
A vulnerability in the context of software applications is a violation of the defined security policies. Modern web apps are centered on the idea of keeping the workflow logic in the client side and its interaction with the server using APIs (application programming interface). Developers try to make the APIs as stateless as possible, in accordance with the REST principles. … [Read more...] about Top 5 Vulnerabilities In APIs
Recent Cloud Outages Underline The Need For Infrastructure Diversity
Towards the end of February, AWS suffered a serious S3 outage. S3 is a file storage service intimately connected to other Amazon services. Many websites use S3 to store static assets like images and scripts. When S3 became unavailable, the sites that depended on those assets stopped working ” including Amazon's Status Page, which used S3 to store its icons. It's unfortunate … [Read more...] about Recent Cloud Outages Underline The Need For Infrastructure Diversity
How to Secure Your Cloud-based Applications From Cyber Security Attacks
We think our customers' data and business information is safe if we store everything in the cloud. This is true to some extent and this kind of shift has also made businesses from small to big save a lot of money by reducing their IT expenses, access scalable tools, and reduction of on-site load of their IT infrastructure. According to CSA (Cloud Security Alliance), nearly 70% … [Read more...] about How to Secure Your Cloud-based Applications From Cyber Security Attacks
Revised DFS Cyber Regulation is Out
New York States Department of Financial Services (DFS) has just released its revised first-in-nation proposed cybersecurity regulation. In formulating the revised proposal, DFS took into account the more than 150 comments it received with regard to its original proposal, which was released in September 2016. Although the new proposal maintains many of the requirements of the … [Read more...] about Revised DFS Cyber Regulation is Out