Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

0
votes
0answers
7 views

Azure AD v. ADFS

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
0
votes
0answers
4 views

access control solution for cpanel environment to control access to (external) password protected sites

I need a solution. The solution is probably more about configuration of existing software rather than new code but whatever can work in my environment. The challenge: I have a number of internet ...
-1
votes
0answers
4 views

TDE multiple master encryption keys within single schema [on hold]

Oracle 11.2.0.4.0 enterprise. We are hosting multiple customers data in single schema, a new customer wants his data to be secure with his unique encryption key. Using Transparent Data Encryption (...
-1
votes
0answers
8 views

How to implement security system for some company [on hold]

I have a security company ABC. An organization XYZ called you because they had a security breach. They want you to protect them from hackers. Imagine that they have zero security. Task is: 1)...
-2
votes
1answer
15 views

How can I find suid files in linux? [on hold]

From security perspective of my Linux boxes I want to list suid enabled files with the find command.
0
votes
0answers
8 views

Keycloak SPI - OAuth2 and 2 FA using my own 2FA Service

I want to use keycloak OAuth2 and 2factor auth for my project. But I have to use my own service(not FreeOTP or Google Authenticator) for 2FA. I have made many research, but I couldn't find good ...
0
votes
0answers
3 views

How best to deal with repeated arbitrary requests (DDOS) to my website

security noob here. So my website is starting to experience some ddos attacks (a lot of requests being made to arbitrary endpoints from a few source IPs). What are some common approaches to dealing ...
0
votes
0answers
8 views

Most secure cloud storage service

I'm looking for a secure cloud storage. Currently using Dropbox, but considering to switch given that it doesn't fully encrypt files, and thus files aren't really only mine lol. I've heard about ...
-2
votes
0answers
4 views

Is there any solution for Php Deployment in Linux Server as a single build file

I am researching for a better solution to secure my PHP source codes. I need a single executable file or set of files which does not contain any php codes. and it should support in the Linux web ...
0
votes
0answers
4 views

Looking for Home Network Monitor/IDS

I've spent some time looking for a home network IDS, and I've tried a couple of tools but to no luck. Do you have any recommendations? I'll be running the software on an old laptop, that's got 16GB ...
1
vote
0answers
5 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
-1
votes
0answers
14 views

linking mbedTLS in MicroPython

I'm new with programming libraries and I'm looking for help. I've tested MicroPython on esp32 using MQTT libarary secured by ssl and it worked like a charm. Now, MicroPython supports axTLS by default. ...
0
votes
1answer
15 views

self hosted website, trival ssl certificate installs

I host my own website from a home server (domain hosted through go daddy) and I have been trying to find information on how to install a ssl certificate. How ever I cant find any information on how to ...
-1
votes
0answers
5 views

Best Payment Authentication / Verification Services for eCommerce Payments

Our corporation has an eCommerce store dealing in jewelry We currently are using VerID by firstech to authenticate payments Consumers are prompted to answer 3 security questions when their order ...
0
votes
0answers
7 views

Recommendation for using Spring Security SAML library version

I'm trying to use the Spring Security SAML DSL wrapper for configuring the SAML Service Provider using the actual Spring Security SAML library to leverage the easy to use Java based configuration ...
0
votes
0answers
19 views

Hosting simple html with authentication-only access

I have this weird idea in my mind - like is it possible to host simple html page on my desktop the access to which is only accepted via an authentication key? I have a static IP and nowadays domain ...
0
votes
1answer
9 views

Looking for cloud- or Unix-based open-source tools that support long-term enterprise-wide key/passphrase management and provide a programmatic API

My question really is: how does an enterprise (a small ~150-employee company) manage the passphrases and encryption keys used at the time of encrypting a large volume of data, when such encrypted data ...
1
vote
0answers
15 views

Platform For Selling Videos Online?

I'd like to set up an online store where I can sell some video courses ( 3 or 4 with a 10 minutes maximum length each) , I would like to know if I could have the option of doing live video streaming, ...
0
votes
0answers
3 views

Distributed attacks detection - software or services

I need more distributed attacks detection software or services such as https://www.abuseipdb.com/ or https://www.blocklist.de. Right now I'm using those to add IPs that are near-guaranteed to be ...
2
votes
0answers
38 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
0
votes
0answers
9 views

Software for managing domain object ACLs

We are developing a MEAN stack application that includes discretionary access control for business/domain objects, much like a file or content management system does. Users must be able to give other ...
0
votes
2answers
33 views

Simple encryption app

I need to send passwords to other people. Is there an app (cross-OS if possible) that allows me to send them in a secure way ? Maybe a simple private/public keys system. Thanks !
0
votes
1answer
9 views

All-In-One vulnerability scanner for PHP project?

I've asked this on incorrect sub-site (security.se), however, i think that question fits this site more. So, I was searching for a tool, which includes multiple Vulnerability-Scanners, so we could ...
0
votes
0answers
12 views

Open source solution for self destruction messages on my own server (like Privenote)

I need a software solution for self destruction messages like for example privnote. But i need to run it on my own server due to security reasons. Does anyone have an idea? Thanks allot :)
1
vote
1answer
32 views

Secure delete files

I have a folder which I need to secure delete. I tried File Shredder and BleachBit but I got error because the files were in use or priviledge problems. Is there a program to delete files and restart ...
1
vote
0answers
9 views

Mac firewall or tool that blocks access to websites based on geographic location?

I'm looking for a free Mac OS firewall that allows blocking of sites based on the server's estimated geographic location or iptable-like banning at a minimum. The main application is to thwart ...
0
votes
0answers
10 views

iOS: secure storage for sensitive information

Sometimes I need to view some of my documents and it's always a huge pain to search for a physical copy, especially if you are not at home and just need to get some number. I am looking for a secure, ...
0
votes
0answers
15 views

Golang implementation of PCKS#11

With a PCKS#11 standard implementation, you can use a PIN smartcard for a MFA (multi-factor authentication) sign on. Commonly, there is a PKCS#11 interface in a webbrowser software to access secure ...
0
votes
2answers
67 views

Deterministic Password Generator

I am looking for deterministic password generators which are available for Linux. My goal is to have one password to remember and use that to make passwords for all my logins.
2
votes
1answer
30 views

Manage permissions and passwords for linux, windows and mac

I am searching some software to make something similar to a domain controller on windows that can be compatible with mac, linux and windows. I need to apply security roles and manage their password ...
0
votes
0answers
9 views

3rd party Android fingerprint unlock program?

I am looking for an Android program to allow fingerprint unlocking of my Lenovo P2 phone running Android 8.1. (The built-in support and settings appear not to work in the current mode I am testing ...
0
votes
0answers
23 views

Secure paidment method Primefaces

I´m interested in adding a payment method to my Primefacess app. Is there any paypal or any secure library for credit card payment that I can add? I´m specially interested in the credit card payment.
0
votes
0answers
14 views

Hosted VPN service for cloud-based business

Our business has about 400 associates who have to travel, and consequently use public Wi-Fi hotspots almost daily. It sounds like "best practice" dictates we should have them connect to a VPN to ...
0
votes
0answers
18 views

Certificate Management

Broadly, we are a Microsoft shop and our company manages about 1,500 certificates, mostly for our websites. We are no longer doing self-signed certificates and another contracted company "manages" the ...
1
vote
0answers
16 views

Is there a backup tool for linux that allows selective deletion as well as performing backups with just a public key on the client?

In the era of GDPR, making backups comply with all regulations can be a busy task. I am looking for a backup tool for linux that allows me to: Selectively delete files in the backup. Do a backup from ...
0
votes
0answers
17 views

How do I create an ITI-41 transaction receiver in Java?

Is there a standard way to implement an ITI-41 receiver in Java? Is there maybe a library I can utilize? Is there just some simple example code maybe? The specification for ITI-41 is quite large ...
1
vote
1answer
29 views

Tools to assess WiFi network security

It does focus on different areas of WiFi security: Monitoring: Packet capture and export of data to text files for further processing by third party tools. Attacking: Replay attacks, deauthentication,...
2
votes
0answers
8 views

Find a private certificate that has been made public

I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
2answers
59 views

Open source antimalware software for macOS

I'm looking for good categorically open source software for macOS. I did not use the term "antivirus", because I refer to software that can protect not only from viruses, but also from other types ...
2
votes
1answer
33 views

Tools for checking Spectre and Meltdown system vulnerabilities on Linux?

I seek some reliable ways / tools for checking Spectre and Meltdown system vulnerabilities on Linux? That are currently the following CVEs: CVE-2017-5753 [bounds check bypass] aka Spectre Variant 1 ...
1
vote
1answer
185 views

Replacement for RequestPolicy addon for Firefox?

The venerable, vintage, and very useful, RequestPolicy add-on for Firefox now seems to be behaving erratically for me (and I know that I won't be able to use it for much longer in any case, when ...
2
votes
0answers
21 views

A software program that provides a fake UPNP server

I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server. Log request for modifications to the firewall. As much information ...
2
votes
0answers
27 views

Enforced Password Change

Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
0
votes
1answer
33 views

Change Detection

I am currently using TDI Console Works for baseline and configuration change detection, and it is, unfortunately, rather expensive software. I was hoping someone might be able to recommend an ...
1
vote
0answers
13 views

Any sandboxing software that prevents scattered application files?

I'm looking for software that can sandbox applications, but without some of the traditional limitations. This is my use-case: I want to run Node and have it executable so Visual Studio Code can ...
1
vote
1answer
72 views

Pen Testing for REST API

I am new to security testing. I have been able to set things up for web applications. I want to run automated scans for my REST API. Burpsuite is a good tool but is not free. Are there any open source ...
0
votes
1answer
26 views

2FA Application Access

I'm looking for a "2 Factor" authentication option (I suppose, "Parental Controls") to manage the ability to open applications. Take the following scenario: 1) User attempts to open an application ...
0
votes
1answer
61 views

Git file encryption to support file/folder based permission to protect the source code from theft

I am using git and have the following problem: In the company where I work we want to protect the source code from theft. For example, when a a developer leaves and takes the source code of a project ...
5
votes
0answers
37 views

Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs

I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
0
votes
0answers
50 views

NextCloud Version Control

I plan on hosting a NextCloud instance via a Web-Server at work (due to high PC specs, "always online", and well...free power) to house all my Powershell, Bash and other documentation and scripts for ...