Security Experts:
Noa Bar-Yosef
Noa Bar-Yosef is a Senior Security Strategist at Imperva. Previously, she held the position of a senior security researcher with the Imperva Application Defense Center. Prior to Imperva, she has held TA positions in courses on programming and network security at Tel Aviv University and Open University. She has also been a software engineer with educational software vendor Sunburst Technology. Bar-Yosef holds a Masters of Science degree from Tel-Aviv University, School of Computer Science and a Bachelors of Science degree from The Hebrew University, School of Computer Science.
Recent articles by Noa Bar-Yosef
-
Advocates of secure development say that proponents of WAFs are pushing a technology that is simply a band-aid for applications that need to be fixed as part of the System Development Life Cycle. Here's why that's not true.
-
Implanting Easter eggs is not only a developer’s take at humor. In fact, they could be sprinkled within the code to specifically cause a devastating effect.
-
Once you’ve selected one or more WAFs to evaluate, it’s time to test them and decide which one is the right one for you. But how then do you evaluate a WAF?
-
Choosing a Web Application Firewall (WAF) solution from the many vendors in the market is not easy. For those who must, here are some important aspects of the decision-making process to consider.
-
In this column we’ll take a look at the basics of public key cryptography and how it works, along with a brief history of RSA - creators of this breakthrough security solution.
-
Recent incidents should remind us of the threats plaguing some of the Internet’s trust models and implementation, namely, the Public Key Infrastructure (PKI) and Secure Socket Layer (SSL).
-
Companies are increasingly seeing the benefits of using social technologies both for internal and external purposes. What is the security impact of this trend? What should security teams think about?
-
There was never a dull moment in 2011. With all the hacks this year, is it even possible to choose the seven prime hacks of 2011? It’s not an easy task, but let’s take a crack at it.
-
Lists of most common passwords are very useful for hackers since they can use these to increase their probability of guessing a user’s password in a quicker and more efficient manner.
-
This week Noa dives into Business Logic Attacks, pointing out different aspects and how to mitigate them. Business logic attacks abuse the functionality of a program. They’re stealthy as they don’t come as malformed requests and they contain legitimate values. Often, we can't even call them illegal.
-
IP addresses are often discounted from a security perspective. But it’s time to think again. Gathering information about individual IP addresses has a number of uses that can assist and influence security decisions.
-
By studying the most prevalent attack techniques used by hackers, we can enhance our security solutions. Here’s how.
-
A look at the four most prevalent attack techniques used by today's cyber attackers. These attack techniques include SQL Injection Attacks, Remote File Inclusion, Directory Traversal and Cross Site Scripting (XSS). Interestingly, three of the four techniques were used by LulzSec during their summer hacking rampage.
-
This week, we highlight a mix of tools and tool types that security researchers should have in their weapons in arsenal, including tools unveiled for the first time at the Black Hat conference.
-
We talk a lot about cybercrime, but what about security researchers? Building better defenses can be like building a house – it's hard to do without the right tools. In this two-part series, we will be taking a look at a list of ten tools used by different researchers.
-
Online gambling sites face security challenges from a number of different sources. First, there’s the external hacker, who at his own convenience – from his home, a cafe or on the road – can launch attacks in attempt to steal sensitive data, raise havoc or commit fraud.
-
Hackers are using Search engines as tools in numerous ways. How do they use them and what can businesses do to fight back against attackers?
-
Ultimately it is up to the law enforcement agencies to ensure the safety of the online users and businesses. These agencies can learn lessons from the physical world and apply these to the virtual world. There is a lot of work ahead, and in the meantime, hackers are enjoying their status and are continuing to conjure new scams for users to fall prey.
-
Crafting a national cybersecurity strategy to protect citizens means focusing on three key areas: protecting government systems, protecting national infrastructure, and establishing systems, controls and processes to help the private sector operate safely in cyberspace.
-
Governments around the globe are adopting very different approaches to how citizens can engage online. Sometimes it has proven to be a double-edged sword.
-
Are major data breach headlines helping consumers become more secure? Not necessarily. Many users still ignore security advisories, and our lackadaisical approach to security affects other consumers.
-
Not all retailers find the prospect of a hefty price tag reason enough to invest in securing customer data. Luckily for consumers, there is an even more compelling reason to protect customer data - regulations.
-
An Inside Look at Some of the Strategies and Tactics Cybercriminals Use to Conduct Successful Phishing Attacks
-
Second column in a series describing the hottest commodities found in underground markets. We continue to explore the trending “commodities” in these markets and how to protect from your data being exchanged in these markets.
-
Similarly to any market economy, the goods being traded in underground markets are driven by supply and demand.
Subscribe to SecurityWeek
- Report: Roughly One-in-Ten Devices Connecting to Corporate Networks May Be Infected
- Webcast Tomorrow: "The Great Security Divide: How Security Can Work Better with Development"
- A Problem Worth Having? Multilingual Single Character Top-level Domains
- NCC Group Launches DDoS Attack Simulation Service
- Banking Trojan Bypasses Mobile Security with Sophisticated Attack
- Survey Looks to Find What IT Security Wants From Big Data
- Anonymous Hacks U.S. Bureau of Justice Statistics Server
- U.S. Nuclear Regulatory Commission Chairman Resigns
- MasterCard Proposes Industry Group to Drive EMV Adoption
- Hacker Puts Beta Android Spyware on Google Play
Copyright © 2012 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use