Explorations in Software, DevOps & Security
With biometric authentication, people identify themselves using their unique physical, biological traits. Things like a fingerprint, a retinal (eye) pattern or simply overall appearance are used to grant access to a resource.
The Principle of Least Privilege (PoLP) is an important an security concept. It is also known as the principle of minimal privilege or principle of least authority. It promotes restricting permissions to only the minimum level necessary for any given user in a system.
Access Control Lists (ACLs) are a common form of access control used in filesystems, applications, networking and databases. In spoken discussions, the common acronym for Access Control Lists (ACLs) is often read as “ackles”.
The CIA Triad is a model for analyzing information security using three major components: Confidentiality, Integrity and Availability.
These represent the major objectives (the “Holy Trinity”) of information security efforts. The CIA Triad is essentially a basic map for framing discussion on how threats may affect these three pillars and what measures we can take to uphold them, even when challenged.
Since there are quite a few layers to look at and explore with Defense in Depth, I created an Infographic to break them down visually and take a look at some of the considerations and control measures commonly involved with each.
Do you frequently notice the update indicators in your WordPress interface and hurry over to apply the latest fixes… only to find that the update is actually a only yet another translation update for a language you don’t even use at all?
After a flurry of updates this week for Russian, Romanian and other language packs that don’t impact my use of WP in any way, I decided to check out how to nullify these frequent translation updates. As with many aspects of WordPress, it’s pretty easy and file-based.
In an Information Security context, fabrication is one of the four broad-based categories used to classify attacks and threats. A fabrication attack creates illegitimate information, processes, communications or other data within a system.
In an Information Security context, modification (or alteration) refers one of the four broad categories used to discuss attacks and threats. The actual or intended effect of an modification attack is to tamper with data, systems or other digital assets.
In an Information Security context, interruption is one of the four broad-based categories used to classify attacks threats. An interruption attack attempts to make systems (or the information in them) unavailable for use.
In an Information Security context, an interception refers one of the four broad categories used to classify attack patterns. The actual or intended effect of an interception attack is that unintended parties gain access to information or other digital assets (applications, environments, files).