Security Experts:
Tal Be'ery
Tal Be’ery is the web security research team leader at Imperva’s Application Defense Center (ADC). In this position, he leads the efforts to capture and analyze hacking activities. The insights obtained in this process are incorporated into the design of new security mechanisms by the web research team he leads. He holds a B.Sc and an M.Sc degree in Electrical Engineering and Computer Science and is a Certified Information Systems Security Professional (CISSP).
Recent articles by Tal Be'ery
-
We can assume Bitcoin will be followed by Bitcoin 2.0 that will solve Bitcoin 1.0 problems while maintaining the parts that were crucial to its success. But what exactly are these crucial elements?
-
When it comes to setting the standards for crucial internet functionality such as authentication, the Internet community must remain vigilant and carefully examine and scrutinize change proposals, to ensure they support the greater good of all of the Internet users.
-
Organizations should always assume third party code—coming from partners, vendors, mergers and acquisitions—is vulnerable, and take relevant precautions.
-
Tal explains the technical details behind recent Ruby on Rails vulnerabilities and shows how web applications’ administrators can avoid these and similar problems with some proper system hardening.
-
Tal explores the two main approaches hackers take in order to capitalize on their investment and the derived security measures against each approach.
-
While antivirus solutions are very effective in fighting widespread malware, there is a good chance that newer malware will evade anti-virus solutions.
-
The South Carolina Department of Revenue attack went unnoticed because the security team was not able to monitor and control data access across internal network and servers, making them blind to the attack.
-
In this column, Tal analyzes the technical details of the DKIM vulnerability, evaluates possible implications of the exploit, and points to some general lessons.
-
Last week, Mozilla removed the latest version of their Firefox Web browser just a day after it was released. Since Mozilla gave us little to work with, we will dive into the technical details of the vulnerability - a JavaScript vulnerability.
-
Google realized that the lack of a community based reputation feed was a key a gap in their security strategy, and filled that hole with the acquisition of VirusTotal.
-
The exploits of the recently discovered Java vulnerabilities puts the compromised insider threat in the spotlight again. The lesson that I have seen too few organizations learn from such attacks, is that protection should be around data rather than around devices.
-
A pragmatic approach to vulnerability management must include some compensating security controls in the form of an external security system that allows remediating vulnerabilities with hot patching.
-
Hackers’ investment in evasion techniques proves that they see Web Applications as a valuable attack surface.
-
The HTTP protocol, which provides the communication application layer, has remained pretty much stable throughout that period. All this is going to change soon as the IETF has chartered a working group with the task of updating HTTP to make it more suitable to the 21st Century Web.
-
New browser capabilities can enable employees to bypass an anti-BYOD policy and put company data at risk. Tal explains how new Browser Sync features can put the enterprise at risk.
-
Even if no actual harm was done as a result of the recent breach at LinkedIn, it should serve as a red flag for all social networks.
Subscribe to SecurityWeek
- Cyber Espionage Campaign Hits Organizations Around the Globe
- Are Certificate Revocation Processes Putting the Internet at Risk?
- Brobot: Information Sharing Lessons Learned
- Internet in 'Coma' as Iran Election Looms
- Yahoo Japan Suspects 22 Million IDs Stolen
- US Authorities Seize Bitcoin Operator Accounts
- Saudi Reports Attacks on Government Websites
- Italian Police Raid Hackers Who Took on Vatican
- Britain's Financial Times 'Hacked by Syrians'
- The High Financial Costs of Failed Trust
Copyright © 2013 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use