Although traditional firewalls have effectively prevented network-level attacks, most future attacks will be at the application level, where current security mechanisms are woefully inadequate. Application-level security vulnerabilities are inherent in a Web application’s code, regardless of the technology in which the application is implemented or the security of the Web server and backend database on which it is built. A recent advisory published by Internet Security Systems (see the “Internet Resources” sidebar, p. 44) claims that 11 widely deployed shopping cart applications are vulnerable to a simple attack that lets hackers pur- chase goods for much less than their listed price. Worryingly, the attack does not require particular technical skill; it suffices to save the shopping cart’s HTML confirmation form to disk, use a text editor to modify the price of the goods (stored in a hidden form field), and load the HTML form back into the browser.
Read the rest of this entry »

• 0 Comments

SKF is an international industrial Group operating in some 130 countries and is world leader in bearings. The company was founded in 1907 following the invention of the self-aligning ball bearing by Sven Wingquist and, after only a few years, SKF began to expand all over the world. Today, SKF has some 45 000 employees and more than 80 manufacturing facilities spread throughout the world. An international sales network includes a large number of sales companies and some 7 000 distributors and retailers. Worldwide availability of SKF products is supported by a comprehensive technical advisory service. The key to success has been a consistent emphasis on maintaining the highest quality of its products and services. Continuous investment in research and development has also played a vital role, resulting in many examples of epoch-making innovations.
Read the rest of this entry »

• 0 Comments