Hackers Chronicle - Online Cyber Security News: OWASP

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjm-nT14QyLjY-ZaKOLwHBCQzpGFHbLvWYOk6khndJoXJ2AqRP-uEUxw4y6HH7yVbakzAGlHKDE5ivpQWvUZyYfXpKZ3JXC3sooY3Xaxr0CH_fIdCBSYmj5CSYOOPHxYt5JQk2vlRyfE8/s1600/10-open-source-tools.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Top 10 Open Source security tools" border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjm-nT14QyLjY-ZaKOLwHBCQzpGFHbLvWYOk6khndJoXJ2AqRP-uEUxw4y6HH7yVbakzAGlHKDE5ivpQWvUZyYfXpKZ3JXC3sooY3Xaxr0CH_fIdCBSYmj5CSYOOPHxYt5JQk2vlRyfE8/s1600/10-open-source-tools.jpg" title="Top 10 Open Source security tools" width="320" /></a></div>
<br />
The layered-security approach centers on maintaining appropriate security measures and procedures at five different levels within your IT environment: Data, Application, Host, Network and Perimeter. Implementing security at each level is very important to ensure end-to-end security and selecting top 10 tools from large group of open source projects was very difficult as the tool selection vary based on requirements. However I have selected the most popular security tools to provide security at each level. The selection based on feature set, simplicity and active among the community development for enhancing the tools better and better to match current IT standards and requirements.<br />
<br />
<h3>
Data security</h3>
This section covers encryption tools for providing security at the data level. Encrypting data which resides in local system and even when it travels across your network is a recommended best practice because, if all other security measures fail, a strong encryption scheme protects your data.<br />
<br />
The following are some of the tools provide security at the data level:<br />
<h3>
GnuPG</h3>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2s62Oi4AxTp0fPTNhAyzTERJKeDOaipHMfVnkpZlnFdDM2b-1ButZR4De7Hj9EOMle4_Pq4bytMUIFeYX4srTv2cRWDjeqdHjigKFY62sHUclmNFTPVWAMWD0_gjrDQxx7res5wC2CFc/s1600/logo-gnupg-light-purple-bg.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em; text-align: center;"><img border="0" height="108" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2s62Oi4AxTp0fPTNhAyzTERJKeDOaipHMfVnkpZlnFdDM2b-1ButZR4De7Hj9EOMle4_Pq4bytMUIFeYX4srTv2cRWDjeqdHjigKFY62sHUclmNFTPVWAMWD0_gjrDQxx7res5wC2CFc/s1600/logo-gnupg-light-purple-bg.png" width="320" /></a><br />
<div style="text-align: justify;">
 GnuPG/GPG (<a href="http://www.gnupg.org/" target="_blank">GNU Privacy Guard</a>) is a GNU project and it’s used for file and email encryption. This project is mainly created to provide an alternative solution to PGP (Pretty Good Privacy) and it complies with OpenPGP standards. GPG is a command line tool and its part of all the major Linux distributions (Fedora, CentOS, openSUSE, Ubuntu).</div>
<br />
<br />
One simple use case: Taking data backup is a common task and most of the time we store the data with un-encrypted format. Using GPG, generate public and private key in your backup server and import the public key to all data servers from where you want to take backup and encrypt it. This way, your backup infrastructure fulfills the IT security policy.<br />
<h3>
Truecrypt</h3>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsI1oStKeFGr7_1jYTqHgECmhdUDiy7XhBTPGkpE0_THQmvVxnWOiBdx3mFMIYr_J07TSRoEy0-_nCzrhPDa5c9VYQa-wAWXM5GI8C0_F8fJxsR-tHndCumHvm_FEh1dpAoMNBXjLe8ZA/s1600/Truecrypt+logo.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsI1oStKeFGr7_1jYTqHgECmhdUDiy7XhBTPGkpE0_THQmvVxnWOiBdx3mFMIYr_J07TSRoEy0-_nCzrhPDa5c9VYQa-wAWXM5GI8C0_F8fJxsR-tHndCumHvm_FEh1dpAoMNBXjLe8ZA/s1600/Truecrypt+logo.png" /></a><br />
<div style="text-align: justify;">
There are many open source utilities out there for disk level encryption. I have considered <a href="http://www.truecrypt.org/" target="_blank">Truecrypt</a> for disk level encryption. It’s an open-source security tool used for on-the-fly disk encryption. Truecrypt encrypts the data automatically right before it is saved to the disk and decrypts right after it is loaded from the disk, without any user intervention.</div>
Application security<br />
Application security is as important as other levels of security. Now a day’s web presence and web development companies are increasing drastically. Similar way, web vulnerabilities are also increasing and most of the vulnerabilities are discovered after deployment. The main reason for application security threats are as security aspects are not considered during the application design and development.<br />
The following project helps application developer to design and develop secure application.<br />
<h3>
OWASP</h3>
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx5SwIbDF5_VHn_S1nRnevh74MSTzqlu1KQgySEwfrxRToKAY_kzT-SozLfbsuKpwi2aYGxDGKX2a7dQpdC3OZ7-fsUllawxN4uAcXUFVh_4wH9T1PrGmZl5psTCvXMf6_K9mO8y3Irm0/s1600/owasp_logo.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx5SwIbDF5_VHn_S1nRnevh74MSTzqlu1KQgySEwfrxRToKAY_kzT-SozLfbsuKpwi2aYGxDGKX2a7dQpdC3OZ7-fsUllawxN4uAcXUFVh_4wH9T1PrGmZl5psTCvXMf6_K9mO8y3Irm0/s1600/owasp_logo.png" width="193" /></a><br />
<br />
<div style="text-align: justify;">
The Open Web Application Security Project (<a href="http://www.owasp.org/" target="_blank">OWASP</a>) is an open-source web application security project and it provides best practices, tools, guidelines, testing procedures and code review steps that software developers, architects and security practioners can follow to design and develop design secure software. OWASP chapters are available all over the world. You can join to the chapter which is local to you and start learning and contributing to the project.</div>
<h3>
Host security</h3>
The host level security protects the individual devices, such as servers, desktops, laptops etc., on the network. The tools which are discussed in this section provide excellent protection at the host level because they are designed to meet specific characteristics of a single device.<br />
The following are some of the tools provide security at the host level:<br />
<h3>
ClamAV</h3>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdLuT59bOxKiflj4YR_ZJhfkGnoYLnHcUWb6He1qGrEBmiGu9GPTrJ7i2me5tM0QppzLEEDQA6p4y52A2iECcapPGbUrq54jZ9RUxneg6i0kpS-V5DhyxUQfWVyF_S7FHNlXgUo9V_N6g/s1600/Clam.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdLuT59bOxKiflj4YR_ZJhfkGnoYLnHcUWb6He1qGrEBmiGu9GPTrJ7i2me5tM0QppzLEEDQA6p4y52A2iECcapPGbUrq54jZ9RUxneg6i0kpS-V5DhyxUQfWVyF_S7FHNlXgUo9V_N6g/s1600/Clam.png" width="200" /></a><br />
<div style="text-align: justify;">
Securing the data by encrypting it is not enough to make sure that our data is secure. <a href="http://www.clamav.net/" target="_blank">ClamAV</a> is considered as antivirus engine to scan all our data which is coming from various sources. ClamAV is an open-source antivirus engine which is designed for detecting Trojans, viruses and malwares, to prevent the unauthorized access of the data. It acts as mail gateway scanner, thus scanning all the incoming emails before they are sent to the user mailbox.</div>
<br />
<h3>
OSSEC</h3>
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA1qyLOVSwmpBUe_Zt9g-LidLzhtgB6QNBEWWC1QsT2aXkUjhNCJ2p1q2WM7ek77Tc0QUUAX7_l5iFUjOCZimo-RWjHZDhJGPtO74eQXj2dT9PHN6tr8bO5sPQcxQBuO_n4vMJokNO32g/s1600/ossec-hids.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA1qyLOVSwmpBUe_Zt9g-LidLzhtgB6QNBEWWC1QsT2aXkUjhNCJ2p1q2WM7ek77Tc0QUUAX7_l5iFUjOCZimo-RWjHZDhJGPtO74eQXj2dT9PHN6tr8bO5sPQcxQBuO_n4vMJokNO32g/s1600/ossec-hids.png" /></a><br />
OSSEC (<a href="http://www.ossec.net/" target="_blank">Open Source SECurity</a>) is an open source Host based <a href="http://rahlabs.blogspot.in/search/label/Intrusion%20Detection" target="_blank">Intrusion Detection System</a> (HIDS) that provides log monitoring and SIM/SEM solution.<br />
<br />
Most of the banking customers primarily look for compliance requirements such as Payment Card Industry Data Security Standard (PCI DSS), HIPPA etc.  OSSEC helps customers to meet such standards and it helps to integrate with existing infrastructure such as Security Incident Management/Security Event Management (SIM/SEM). Adoption of OSSEC by the IT industry is growing very rapidly.<br />
<br />
The key features of OSSEC,<br />
<br />
<ul>
<li>File integrity checking</li>
<li>Log monitoring</li>
<li>Rootkit detection</li>
<li>Active response</li>
<li>Network security</li>
</ul>
The network level security refers to your internal LAN and WAN. Your network may include desktops, servers, laptops and other devices which are required for internal and external communication. Unlike host level security tools, the network security tools are extended to communicate with the hosts connected to the network and provides consolidated vulnerable information.<br />
The following are some of the tools provide security at the network level:<br />
<h3>
Snort</h3>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBPehn75NvkTIq_iKBk8VLxHFh82bndEAo6eHS10xKLFrF7cyRh3n275STR1qJObUiCkEvBDWkZzafFHOTBWIGBlkpZrwnYfqc5O_QV1Mh3LJsrB5ii8cSj_B8EMEbJ3dn_rc8q0w3Nlk/s1600/Snort_ids_logo.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBPehn75NvkTIq_iKBk8VLxHFh82bndEAo6eHS10xKLFrF7cyRh3n275STR1qJObUiCkEvBDWkZzafFHOTBWIGBlkpZrwnYfqc5O_QV1Mh3LJsrB5ii8cSj_B8EMEbJ3dn_rc8q0w3Nlk/s1600/Snort_ids_logo.png" /></a><br />
<div style="text-align: justify;">
<a href="http://www.snort.org/" target="_blank">Snort</a> is an open source network Intrusion Detection and Prevention System (IDS/IPS). It performs detection and analysis of network traffic moving across your network in much greater detail than your firewall. Similar to anti-virus engine, IDS and IPS tools analyze traffic and compare each packet to a database of known attack profiles.</div>
 IDS tools alert your IT staff that an attack has occurred; IPS tools go a step further and automatically block the harmful traffic. It takes major role in most company security architectures.<br />
<h3>
OpenVAS</h3>
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXKpoeHC95ZyP9jXDOmBeyx1MhmG0e6i_32XMDEFrVaBs9yUoiuKBRaDvMj0gzWDsXyUCdjV6ix_wKG2xAS-OQH9s-TMCHAF1M2D0X3UUYSAGYjZqWb-1nLKDihAkFa3wShFGGJJXQNJc/s1600/openvas_logo.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="121" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXKpoeHC95ZyP9jXDOmBeyx1MhmG0e6i_32XMDEFrVaBs9yUoiuKBRaDvMj0gzWDsXyUCdjV6ix_wKG2xAS-OQH9s-TMCHAF1M2D0X3UUYSAGYjZqWb-1nLKDihAkFa3wShFGGJJXQNJc/s1600/openvas_logo.png" width="320" /></a><br />
Open Vulnerability Assessment System (<a href="http://www.openvas.org/" target="_blank">OpenVAS</a>) is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and management system.<br />
 It’s an alternative system to Nessus.<br />
Vulnerability management is a security practice designed to proactively prevent the exploitation of vulnerabilities that exist within organization. Vulnerability management alone does not fix vulnerabilities. Patch and configuration management and antivirus software to block or eliminate identified malware.<br />
<h3>
Backtrack</h3>
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqB0lTCtIiC-ffKz9hp_wNb-aV2euzaem1UHmX0m9fuuzyjRmdYj3x37RVBbgDrYXc7W1sDFOv7eHW_WOrbgtoJwS1TTIyFuE43fRwfuUG_Ikzx44S5RrZA8aisEtwGLch88LIJXXfLss/s1600/Backtrack_logo.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="48" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqB0lTCtIiC-ffKz9hp_wNb-aV2euzaem1UHmX0m9fuuzyjRmdYj3x37RVBbgDrYXc7W1sDFOv7eHW_WOrbgtoJwS1TTIyFuE43fRwfuUG_Ikzx44S5RrZA8aisEtwGLch88LIJXXfLss/s1600/Backtrack_logo.png" width="200" /></a><br />
<a href="http://www.backtrack-linux.org/" target="_blank">Backtrack</a> is a well-known Linux based security distribution used for penetration testing. It’s a one stop solution for security professionals and includes more than 300 open source security tools. The tools are neatly categorized into different areas.<br />
<br />
<h3>
OSSIM</h3>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgr8YeG9WANBoetPKGyQyjTYHqTZF4wIi8lF9Q_rrR1p0p5XCo-4_MgEWcza7qHnZZK6eE1d_jQH2o_celdnbfhwPoecEQrlpyfRsqcgh-ViVwvdinKJFrWFLoGq7MvQhR63RZ9ebv0cJ8/s1600/AlienVault_OSSIM_Software_Logo.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="89" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgr8YeG9WANBoetPKGyQyjTYHqTZF4wIi8lF9Q_rrR1p0p5XCo-4_MgEWcza7qHnZZK6eE1d_jQH2o_celdnbfhwPoecEQrlpyfRsqcgh-ViVwvdinKJFrWFLoGq7MvQhR63RZ9ebv0cJ8/s1600/AlienVault_OSSIM_Software_Logo.png" width="200" /></a><br />
<div style="text-align: justify;">
Open Source Security Information Management (<a href="http://sourceforge.net/projects/os-sim/">OSSIM</a>) provides a Security Information and Event Management (SIEM) solution. It is a one-stop solution and integrated the open source software’s NTOP, Mrtg, Snort, OpenVAS, and Nmap. OSSIM is a cost effective solution in the area of monitoring network health and security of network/hosts compared to other propriety products.</div>
Perimeter security<br />
Perimeter is the area where your network ends and the Internet begins. The perimeter consists of one or more firewalls to protect your network. The following is one of tool that provides perimeter security:<br />
<h3>
IPCop</h3>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrbKVr5yI9X1N92SJpfEFVyGtbvO_fRDq1s86PdKjb_iXaCfVe_rvirk3iXcr66CMqjDPxjHmSGpZ_wsSJH8y2nAoRi5GCkC1Y0qK3dO3_vDCaRVEx2Xgc0FSqGVvpv0X9SlKGs6_9hh0/s1600/IPCOP.gif" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="64" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrbKVr5yI9X1N92SJpfEFVyGtbvO_fRDq1s86PdKjb_iXaCfVe_rvirk3iXcr66CMqjDPxjHmSGpZ_wsSJH8y2nAoRi5GCkC1Y0qK3dO3_vDCaRVEx2Xgc0FSqGVvpv0X9SlKGs6_9hh0/s1600/IPCOP.gif" width="320" /></a><br />
<div style="text-align: justify;">
<a href="http://www.ipcop.org/" target="_blank">IPCop</a> is a Linux based firewall distribution and it’s configured and made ready to protect your network. It can be run on a standalone machine or deployed at edge network i.e. </div>
behind ISP network. IPCop also offers DHCP server, DNS server, Proxy server and Intrusion Detection functionalities.</div>

The layered-security approach centers on maintaining appropriate security measures and procedures at five different levels within your I...

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAgpxGTak2XLAfaHcG2B8cFfd2LQhguWRnOiFpIlFr9OeFD22tlABEmPA80wC8YN0mHVBIzHvLqlVvO9KfEvABGGsgKaADKMV81gjuD-o_QWvnyWmPMwRGncNYcJ6dbzU9_oJeBbcATeTc/s1600/secure-web.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAgpxGTak2XLAfaHcG2B8cFfd2LQhguWRnOiFpIlFr9OeFD22tlABEmPA80wC8YN0mHVBIzHvLqlVvO9KfEvABGGsgKaADKMV81gjuD-o_QWvnyWmPMwRGncNYcJ6dbzU9_oJeBbcATeTc/s400/secure-web.jpg" width="400" /></a></div><br />
<h3>Introduction:</h3><br />
All most every website on the internet has a risk of getting Hacked .The growing generation of new Hackers are able to exploit almost every digital device from mobile to a calculator! , so websites are easy for them to Hack and compromise. Every year people pay thousands and thousands of rupees just to protect their<br />
<br />
 websites from not getting hacked. Cyber security is a major concern now a days for everyone from a business man to a government employee or even the common man. Imagine a situation in which you are a business man who has a database of information about your clients and your site has been hacked. What will you do? All your clients will be angry with you because of their privacy disclosure and your business will go down.<br />
<br />
But if you will protect your website then this situation will never come in your life.<br />
<h3>Protecting your website:</h3><br />
<h3>Old version of web server:</h3>One of the most common mistakes that people make is that they just use old versions of web server. This is actually a very big vulnerability as any attacker can easily exploit the loophole in that web server and get inside your server.<br />
<br />
<h3>Invalid or expired SSL certification:</h3>If a website has a login page then a valid SSL certification should be installed into the server not an invalid SSL certification. The SSL server encrypts the traffic.For example this is an example of an expired or an invalid SSL certification:<br />
<br />
The SSL certificate (<div class="system pop">serial: 00f716cc219f44c663 </div>) is expired.<br />
<br />
The cerificate valability period is: <div class="system pop">Thu Jan 22 19:52:15 UTC+0530 2009 to Fri Jan 22 19:52:15 UTC+0530 2010 </div>In this situation the attacker can easily install a sniffer and start sniffing all the data that is being passed to the server.<br />
<br />
<h3>Server Vulnerable to XSS:</h3>XSS or cross site scripting is the process in which the attacker hacks the website by injecting some javascript into the website. www.In.com vulnerable to XSS XSS is a very common method and even FBI and CIA are vulnerable to it.<br />
<br />
This attack can be easily prevented easily by filtering all the special characters (#, <,” ,/,…etc) from being inputted into the search field and also filtering them into the commenting fields.<br />
<br />
<h3>Server Vulnerable to SQL injection:</h3><br />
SQL injection is also as common as XSS but the only thing is that here the attacker tries to input SQL commands into the server and get into the database or log into the admin page without proper username and password.<br />
<br />
This attack can also be prevented by filtering all the special characters from being inputted into any input field.<br />
<br />
<h3>Default Password and usernames:</h3>Some administrators are so dumb that they forget to remove default passwords from the script of the login page, this means that anyone can login into the admin panel of the site with the username as “root” or “admin” and password as “root” or “admin” too. This vulnerability can be patched up by removing this feature from the script.<br />
<br />
<h3>Unrestricted applications:</h3>Here in this vulnerability the site has a editor which can be used to upload files to the server for example the url can be <div class="system pop">www.site.com/backhend_of_site/fck/editor/fckeditor.html </div>This will show up the following:<br />
<br />
And here I can upload anything without the admin privileges. To protect you self from these kind of attacks always use validated softwares.<br />
<br />
<h3>Admin page access:</h3><br />
Some people just don’t change the admin page location, for example people have admin page at www.site.com/admin. This is a vulnerability because if we have got access to admin page then we can try out SQL injections on the admin page. So always change the admin page to something like: <div class="system pop">www.site.com/abc</div><br />
<h3>Robots.txt:</h3>Robots.txt file tells us about what features the site has allowed and disallowed so one can get a list of possible directories in a server like:<br />
<div class="content shadow-radial">User-agent: *<br />
  Disallow: /search<br />
  Disallow: /groups<br />
  Disallow: /images<br />
  Disallow: /catalogs<br />
  Disallow: /catalogues<br />
  Disallow: /news</div>We can prevent this by adding less directories to the robots.txt file and password protecting all the directories which come inside this file.<br />
<br />
<h3>Test.php:</h3>This file contains all the configuration of the php server running on the server so one should block it.For example the URL can be: http://site.com/test.php. We can protect from this kind of attacks by removing this file.<br />
<br />
<h3>Conclusion:</h3><br />
We have come to the end of this article. These were the some of the methods.<br />
<br />
<span style="color: red;">Further Reading:</span> <br />
<a href="https://www.owasp.org/index.php/OWASP_Guide_Project">https://www.owasp.org/index.php/OWASP_Guide_Project</a><br />
<a href="http://www.securecomputing.com/SecureIFV/index.cfm?tabs=w,m,f,s,sf,sg">http://www.securecomputing.com/SecureIFV/index.cfm?tabs=w,m,f,s,sf,sg</a><br />
<br />
Regards,<br />
<br />
Hardeep Singh<br />
(<a href="http://www.facebook.com/h4rdeep">www.facebook.com/h4rdeep</a>)<br />
</div>

Linux Tutorials OWASP Tutorials Web Security Securing the Web

Introduction: All most every website on the internet has a risk of getting Hacked .The growing generation of new Hackers are able to explo...

Top 10 Open Source security tools

Securing the Web

Popular

Comments

Archive