Articles on Tools

• Web Security Mitigating Attacks on Web Applications Through the Browser
  Attackers use browsers as gateways to attack web applications via XSS (executing malicious JavaScript in app context), CSRF (tricking browsers into submitting crafted requests), clickjacking...
• Tools Mitigating Attacks on the User of the Web Browser
  Browsers are improving protection against socially-engineered malware. Internet Explorer's SmartScreen includes application reputation tracking—warning users about executables without reputation...
• Web Security NoScript Strengthens Security Even If You Allow Scripting
  NoScript's script-blocking requires users to allowlist every site—many automatically click "allow" or uninstall it. If script allowlisting isn't for you, enable scripts globally but keep NoScript's...
• Tools 10 Information Security Mistakes: A False Sense of Security
  Ten practices that create false security: capturing logs without sufficient detail, policies no one follows, vulnerability scans without remediation processes, pen tests excluding workstations,...
• Cheat Sheets How to Use the Security Architecture Cheat Sheet for Internet Applications
• Tools Smells Like Phish: Symantec's Update Norton Internet Security Email