April 25, 2018 Application Security, Research Dima Bekerman, Avishay Zawoznik, Johnathan Azaria Sonification of DDoS Attacks: Netflow Melodies and a Tomato Panic Button Vegetables, DDoS attacks, and soundwaves... no, really.
April 24, 2018 Compliance, Data Security Timothy Yim Critical Actions to Finalize Your GDPR Compliance Program Starting May 25, 2018, enforcement begins for the new EU General Data Protection Regulation (GDPR) and its heightened principles and requirements regarding data privacy, data processing, and data security. The...
April 13, 2018 Application Security, Research Nadav Avital, Koby Kilimnik Drupalgeddon 2.0: Are Hackers Slacking Off? Ever since March 28th, when Drupal published a patch for a RCE named Drupalgeddon 2.0 (SA-CORE-2018-002/CVE-2018-7600), Imperva has been monitoring our cloud looking for hackers’ attempts to exploit the vulnerability,...
April 13, 2018 Application Security Robert Hamilton Securing Modern Web Applications: Threats and Types of Attacks Web Application Firewalls are the most advanced firewall capabilities available to IT teams. Deploying the appropriate WAF is important, especially these days when the security threat landscape is changing so...
April 10, 2018 Data Security, Insider Threats Nir Harif How to Tune Your Database Security to Protect Big Data Data security for big data faces the same threats of external breaches, malicious insiders, and compromised insiders. So how do we take the trusted, successful data security methods used on RDBMS, and render them compatible with big data servers? How can we close the gap between big data servers’ demand, and the lacking security measures used to protect them? Here's how we believe you can tune your security to protect big data.
April 5, 2018 Data Security, Research Elad Erez, Luda Lazar A Deep Dive into Database Attacks [Part IV]: Delivery and Execution of Malicious Executables through SQL Commands (MySQL) In this post we cover different techniques for execution of SQL and OS commands through MySQL database servers that can be used for delivering and executing malicious payloads on a target system.
