Security

Augmenting password systems is becoming increasingly standard for internet-facing applications and services. This post explains how you can help secure your Internet facing services.

The Trustwave Global Security report demonstrates that most organizations need to do more to mitigate risks to their applications on the web. Kemp can be your partner in achieving this as we have the experience and the tools you need.

The cost of dealing with DDoS attacks can be high, this post will explain the damage they cause and how you can prevent them.

When it comes to application delivery monitoring there are a number of approaches that can be taken. Application performance monitoring (APM) enables insight into almost unlimited performance metrics on application…

Throughout history, civilizations have suffered from a false sense of security. One of the most famous incidents occurred during the war between Greece and Troy. The Trojans felt so confident…

Introduction Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks have been a prevalent method of disrupting service delivery from websites and other Internet based services for years.…

Security Assertion Markup Language (SAML) is an XML-based language used for secure authorization, authentication and has become the de facto method for modern web applications and federated identity deployments. By…

Introduction DirectAccess provides seamless and transparent, always on secure remote access for managed Windows clients. To provide scalability and eliminate single points-of-failure, DirectAccess servers can be configured in load-balanced clusters.…

What is the vulnerability? Web sites are constantly changing. Pages get published but later they are superseded by new ones that contain updated information. However many people will have the…

Applications, whether deployed in the cloud or on-premise, are more often falling victim to external DoS (and Distributed DoS) attacks. We created this experiment to demonstrate how KEMP LoadMaster can…

Cross Site Request Forgery An attacker can compromise a web application that has a Cross Site Request Forgery (CSRF) vulnerability by exploiting a valid authenticated session that has been set…

Missing Function Level Access Control What is the vulnerability? Web applications typically only show functionality that a user has the need for and rights to use in the UI on…

There has been a steady trickle of early adopters taking advantage of Cloud based email and Application services from Office 365, Google Apps, and others. New research from Cloud security…