Posts

What is false positive and false negative in cyber security?

In the world of information security,  false positive  is the term used to indicate a file or item that is marked as malicious, but, in fact, isn’t. A f alse negative  is the opposite. It happens when a malicious file or item is labeled as secure, clean. In the end, false positive and false negative are errors and failures found in protection solutions that fail to label files and items correctly ----- True Positive : A legitimate attack which triggers to produce an alarm. You have a brute force alert, and it triggers. You investigate the alert, and find out that somebody was indeed trying to break into one of your systems via brute force methods. False Positive : An event signaling to produce an alarm when no attack has taken place. You investigate another of these brute force alerts, and find out that it was just some user who mistyped their password a bunch of times, not a real attack. False Negative : When no alarm is raised when an attack has taken place. There actua...

Differences between localStorage and sessionStorage?

Image
  localStorage   and   sessionStorage   are both ways for browsers to store key/value pairs for a particular domain using the Web Storage API. For most cases, we use the local Storage object if we want some data to be on the browser. If we want it on the server, then we use cookies, and the session storage is used when we want to destroy the data whenever that specific tab gets closed or the season is closed by the user we will take a look at the differences among them  What is the difference between  localStorage  and  sessionStorage ? How to use  localStorage  and  sessionStorage ? How to check  localStorage  and  sessionStorage  in the browser? What is the difference between local storage and session storage? “The  Storage  interface of the  Web Storage API  provides access to a particular domain's session or local storage. It allows, for example, the addition, modification, or deletion of ...

Differences of API and Web services?

 API vs Web Service API- An application programming interface(API) is a set of routines, data structures, object classes and/or protocols provided by libraries and/or operating system services in order to support  the building of applications. API is nothing but interface provided to the user for the programming done behind the application.  Web Service : A Web Service is defined by the W3C as " a software system designed to support interoperable machine to  machine interaction over a network" API and Web Service serve as a means of communication Web Service facilitates interaction between two machines over a network API acts as an interface between two different applications so that they can communicate with each other Introduction of API and Web Service An api exactly defines the methods for one software program to interact with the other. An api generally involves  calling functions from within a software program.  Being a user you ar...

Tools for responsive design

Below are list of tools using it for responsive design on web application development Webflow Bootstrap Imagify Origami Studio While web development trends for 2022 are being populated with rather new technologies like PWA and AMP, such relatively old ones as responsive web design are still out there on the scene. As most consumers prefer mobile devices to all others, Google intends to implement mobile-first indexing among the trends for web development. The ranking of a website will be determined by how effectively it is adapted for mobile devices. The list of tools for we development in 2022 can be changed according to the market situation or your business needs.

What is Azure KUDU?

Image
  When we create a web site/app in Azure environment then there are various ways of deploying and monitoring the website example using a publishing profile, cloud shell, KUDU console. Azure KUDU is one of the fastest and easiest ways of deploying the web site components to the Azure website. Azure KUDU is not only meant for the deployment but also it helps to development and admin team to get the logs of the web site, check the health of application by memory dumps, etc. It can be used as troubleshooting and analysis tools as well because we can get the required logs and we can monitor the processes of web sites that are running in the background. It is integrated with Git repository, CICD as well as we can access KUDU API endpoints programmatically. How to access KUDU: When we create any web site in Azure then it creates one special ‘SCM’ service site for us. Example- your Azure web site URL is ‘http://ABC.azurewebsites.net/’ then Azure creates SCM site for us with URL ‘https://my...

What is Brute Force Attack, Hash values and Rainbow tables?

Image
  What Is A Brute Force Attack? One common and rather simplistic method of hacking into an account is called a brute force attack. Essentially, you take a guess at all possible passwords until you arrive at the right one. That’s the only case where you would probably incessantly jab at your keyboard. However, considering the length of the average password, there are at least a billion possible variations. You’d need to try countless combinations of letters, numbers, and symbols before arriving at the right one. Ain’t  nobody  got time for that. Moreover, passwords are not stored in servers as the original string of text, but are instead stored in a format known as  hash values . What Are Hash Values? When companies store your account passwords on their servers, they don’t just store them as simple text. If they did, a simple ‘CRTL-F’ search would lead to the discovery of any password and its associated account. That’s where a hash algorithm proves to be useful. When ...

Unit Testing Frameworks for C#

  What is Unit Test? Unit testing involves the testing of each unit or an individual component of the software application. It is the first level of functional testing. The aim behind unit testing is to validate unit components with its performance. A unit is a single testable part of a software system and tested during the development phase of the application software The purpose of unit testing is to test the correctness of isolated code. A unit component is an individual function or code of the application. white box testing approach used for testing and usually done by the developer. Why Unit Testing? In a testing level hierarchy , unit testing is the first level of testing done before integration and other remaining levels of the testing. It uses modules of the testing process which reduces the dependency of waiting for Unit testing framework, stubs, drivers and mock objects are used for assistance in unit testing.  For example, let’s say that we had the Calculator class ...

KeyCloak

Image
Keycloak is open source Identity and Access management service for modern applications and services. Add authentication to applications and secure services with minimum fuss. No need to deal with storing users or authentication users. Its all available out of the box. You all even get advanced features such as User Federation, Identity Brokering and Social Login. Features Single Sign on and Single Sign-out Standard Protocols OAuth20, OIDC 1.0, SAML2.0 Flexible Authentication and Authorization Multi Factor Authentication one time passwords Social Login Google, Facebook, Twitter...etc. Provides centralized User management Supports Directory service(AD, LDAP) Customizable and Extensible Easy setup and configurable Core concepts Let's start with Keycloak's core concepts, as shown in Figure 1: Figure 1: Keycloak's core concepts."> A Keycloak  realm  is like a namespace that allows you to manage all of your metadata and configurations. You can have multiple realms based o...