Filter posts by category

Tutorial

AI Fuzzing

Fuzzing is the art of automatic bug detection. The goal of Fuzzing is to stress the application and cause unexpected behavior, resource leaks, or crashes.  Fuzz testing, or fuzzing, is a Black Box software testing technique that basically consists of finding implementation bugs using malformed or semi-malformed data injection in an automated fashion. A fuzzer […]

AI Fuzzing Read More »

Tutorial, Framework

Threat Modeling

Threat modeling, is a specialist profession that is closely related to software and application development. It encompasses the systematic identification, analysis, and mitigation of security risks and vulnerabilities within an application or system. This methodical approach involves identifying and prioritizing potential threats, evaluating the effectiveness of mitigations, and enhancing the application’s overall security posture. A

Threat Modeling Read More »

Tutorial, Framework, Technologies
RiskMgmt

Risk Management

Risk analysis means understanding the current state of risk and making an informed decision as to which elements require further investigation. Ideally, an organization would desire to have zero risk, but which requires an unlimited amount of time and money. In fact, organizations should prioritize strategies for mitigating risk to an acceptable level. A pragmatic

Risk Management Read More »

Framework, Technologies, Tutorial

Risk Assessment

A risk assessment, a tool for risk management, identifies vulnerabilities and threats and assesses the possible impacts to determine where to implement security controls. After parts of a risk assessment are carried out, the results are analyzed. Risk analysis is a detailed examination of the components of risk used to ensure that security is cost-effective,

Risk Assessment Read More »

Basic, Tutorial