Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

Filter by
Sorted by
Tagged with
0
votes
0answers
4 views

Recommendations for site that saves user's browser sessions in 'tabs'

I'd like to find the best software option to save a user's 'tabs' as well as all data associated with it (say google, microsoft, etc accounts) within my application. Ex: A user logs in to my app, can ...
-3
votes
0answers
10 views

Starting on Kali Linux [on hold]

What is the best site to learn Kali Linux? How to begin? I don't know nothing. Sorry for this.
0
votes
0answers
11 views

Ruby library for secure password hashing

Following several resources on the web (e.g. here), I'd like to use the $6$rounds=500000$%.16s format for password hashing. One option is mkpasswd -m sha-512 -R 50000. However, I would prefer a Ruby ...
0
votes
0answers
2 views

Microsoft Dynamics CRM to Sharepoint permission synchronisation

Does anyone know software/addons for Microsoft Dynamics CRM and Sharepoint which synchronize the permission rights between these two systems? Dynamics CRM and Sharepoint have a standard integration ...
0
votes
0answers
5 views

Use oauth2 or oauth3?

I've been thinking in the creation of a new software (software development, software design ...) and when taking part in the software security / how to do securily the software, I've discovered that a ...
1
vote
1answer
25 views
+50

What free secure file erasure software can be used without installation?

What downloadable alternatives to Eraser are wholly free can be operated (without losing any functions) without installation like TeamViewer? don't require command lines? I'm unskilled with ...
1
vote
0answers
6 views

Opensource software for endpoint visibility

Looking for FLOSS platform for monitoring many remote user endpoints (varying devices and OSs) for visibility and data leak protection (eg. if notice that a particular policy is violated on a user ...
0
votes
0answers
6 views

How do I secure IoT Device in development? [closed]

I'm currently looking for ways to implement security in my IoT device. I've looked for ways to encrypt the communication but I've failed to find one. Is there a website that I can refer to see the ...
0
votes
0answers
4 views

PC Component Firmware integrity and security software

I recently bought a new laptop. If you read the news you must've noticed Vault 6 and Vault 7 leaks (from Wikileaks), which contain rootkits which sit on your Hard Drive Firmware, MBR and other hidden ...
0
votes
0answers
4 views

What software can I use to safely store clients' credentials to 3rd party applications which don't have an API?

I'm currently developing a business which acts like an automatization tool. I'm working with a few sites which don't have an API and I desperately need to get data from the clients' accounts. Because ...
0
votes
0answers
8 views

Malware Remove Software - Mcafee, Avast, AiroAV, Eset?

Which anti virus is the best for Mac and Windows (I'm using both). I know the list of malware and virus removal tools is long (Avast, Sophos, AiroAV, Norton, Mcafee, Bit Defender, etc., etc).
0
votes
0answers
5 views

Encrypted data and DLP

I was looking at solutions to detect sensitive data using a DLP solution, from a encrypted data set being transmitted. Although DLP can detect and block password protected files, I don't suppose it ...
0
votes
0answers
2 views

Is there a framework or a tool which will test 3rd party Java jars for security vulnerability and recommends suitable updates or upgrades?

I am looking for a framework or a tool which will test 3rd party Java jars for security vulnerability and recommends suitable updates or upgrades.
0
votes
0answers
8 views

What program can I use to prove my application is malware-free/safe?

I've created an electron application that I intend to distribute to others through email. I'd like to know if there is some sort of software or website I can use to show clients that the application ...
0
votes
0answers
8 views

Where can I find a C library for Linux that implements C11 annex K?

I'm looking for a C library for Linux that implements the optional C11 Annex K bounds-checking interface. It should: Provide commonly-used *_s interfaces included in the standard. Actively and ...
0
votes
0answers
7 views

A tool for time specific log analysis

I often have web logs when an incident happens and I need to analyse the activity to find out how it happened. So I do not have full logs, I just have it for last 2 hours before the incident or so. Is ...
0
votes
0answers
5 views

Container security/ vulnerability testing tools

I am doing performance bench-marking for different container technology. Now I want to check the performance of a container from security perspective. Is their any tools or way to find and compare ...
0
votes
0answers
3 views

Protect files in a lan shared folder from copy or deleting

I've several cad project in a lan shared folder. Now they are accessible from the technical office computers and they can work on them, but also copy them on private drives or delete them from the ...
1
vote
0answers
12 views

How to secure my computer? [closed]

Let's say my PC will work with many different usb flash drives, disks, etc. I want to be sure my main HDD will be safe from viruses. I was thinking about some live cd usb flash. If I will boot from ...
2
votes
0answers
21 views

Software to build a taxi app easily, without vendor lock-in

Could you please help me narrow my search for software that can be used to make a taxi app? The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
1
vote
0answers
5 views

Which is the best security solution for the credentials in scripts HashiCorp or Thycotic Secret server?

Many of the DevOps activities involve the use of a hardcoded key or credential somewhere in the application’s environmentor in powershell scripts. However, hardcoded passwords of any type are a ...
0
votes
0answers
6 views

Need a security tool for docker base images

I need to find a tool that could cover the needs of my team. More sooner than later we will be allowing developer to push their own docker base images to registry and need to find a tool that inspect ...
1
vote
0answers
37 views

Post quantum TLS based web-browser client

Are there any open source projects that implement a web browser client that has support for post quantum TLS protocols so that it can talk with post quantum patched TLS web servers. I've checked ...
0
votes
0answers
10 views

how to secure REST APIs from a backend app that are called from a frontend app?

I have 2 web apps running in the cloud. the frontend one serves an angular app and the backend one exposes REST services. Frontend is secured via SSO, but backend needs be secured as well. Backend ...
0
votes
0answers
14 views

What software can I use to encrypt all files that are copied out of a system?

What software can I use to encrypt all files that are copied out of the system(USB, network, email,...) such that only systems with the same encryption will be able to read the files. OS is Windows.
-2
votes
1answer
17 views

How to limit login access and create ban after 4 attempts to web application based on user's IP address? [closed]

i have created the js file for this purpose but i cannot find a way to limit the access after 3 failed attempts based on user's ip address. can someone please suggest me a way to do that? i do not ...
1
vote
0answers
18 views

recommendation for IAM for .NET Core with row level security

I am looking for a good IAM library or framework for .NET Core that would give row level filtering of a SQL data set. Are there any out of the box solutions that would support something similar to ...
0
votes
0answers
8 views

Identity and Access Management solution

1) We are using Oracle IDM (Identity Management) solution for authentication (includes MFA), authorization, single-sign-on and self-service password reset (forgot password) needs. 2) Some of the ...
0
votes
0answers
7 views

Software to trace back a decrypted video

My friend has sent his students some videos weeks ago for educational purposes of his course. As he does not want that other people resell them, he decided to encrypt the video with ev4-encryption. ...
0
votes
0answers
4 views

What are the alternatives for storing keys, secrets and certificates securely in the cloud

I'm looking for an alternative to a service like Azure Key Vault to store secrets, keys and certificates. While Azure key vault does a commendable job, I want a solution that is cloud agnostic and ...
0
votes
0answers
4 views

Software to get better experiences with “modern” web page

I take steps to minimize the amount of data that can be collected about me, for a variety of reasons. For example, to reduce instances of "identity theft", hacking, etc. I normally use an older ...
1
vote
0answers
6 views

What software to use for DevSecOps pipeline?

I have a CD pipeline built in Jenkins that builds a Java project, packages the microservices as docker containers and uses terraform for provisioning on AWS. What are the plugins I should add to: Do ...
0
votes
0answers
4 views

App to fingerprint (possibly password) protect an Android app

If I don’t have a password on my Android device (I know, I know), is there an app which can protect individual applications, such as my email? I strongly prefer fingerprint protection, but will ...
1
vote
0answers
21 views

Looking for a “remote wipe” software package for Windows 10

I'm looking for a solution that would allow me to locate a stolen or lost Windows 10 PC, and initiate a remote data wipe. We can't use the built in Windows 10 location feature as we don't log in with ...
1
vote
0answers
15 views

What is better alternative technologies of Elastic Stack for endpoint detection and response (EDR) products collecting/analyzing endpoint log data?

I am trying to develop endpoint detection and response (EDR) as a security solution. I am currently researching how to actually develop it. I googled quite a few websites, but they only described just ...
0
votes
0answers
9 views

Detecting vulnerabilities in JNI systems

I'm looking for a tool that is able to detect vulnerabilities in JNI (Java native interface) systems (systems are written with C(++) and Java?) IS there any tool that can analyze and extract the ...
0
votes
0answers
9 views

I found out my new android secretly unlocking my microphone.. i need a app to check what app is responsible for this

sorry for the long title.. I'm looking for a app to check what app is set my microphone (secretly) on. Does anybody know a tool/app to find this out.. i can only find apps/tools for blocking mic/cam. ...
0
votes
0answers
6 views

What are some free/open source plugins in Android Studio to identify vulnerable code written in application code?

I am testing an Android App, I have the code access and want to perform vulnerability analysis in the code. Please suggest me some open source/free plugin of Android Studio/IntelliJ. I tried RIPS but ...
0
votes
0answers
25 views

Security solution for prosumer

I need to protect two machines, both are running W10; one is my work PC and the other a gaming PC. Actually Im running GData Is on both, but it seems it is draining more resources at every update, and ...
0
votes
0answers
7 views

Azure AD v. ADFS

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
0
votes
0answers
4 views

access control solution for cpanel environment to control access to (external) password protected sites

I need a solution. The solution is probably more about configuration of existing software rather than new code but whatever can work in my environment. The challenge: I have a number of internet ...
0
votes
0answers
14 views

Keycloak SPI - OAuth2 and 2 FA using my own 2FA Service

I want to use keycloak OAuth2 and 2factor auth for my project. But I have to use my own service(not FreeOTP or Google Authenticator) for 2FA. I have made many research, but I couldn't find good ...
0
votes
0answers
3 views

How best to deal with repeated arbitrary requests (DDOS) to my website

security noob here. So my website is starting to experience some ddos attacks (a lot of requests being made to arbitrary endpoints from a few source IPs). What are some common approaches to dealing ...
0
votes
0answers
13 views

Most secure cloud storage service

I'm looking for a secure cloud storage. Currently using Dropbox, but considering to switch given that it doesn't fully encrypt files, and thus files aren't really only mine lol. I've heard about ...
0
votes
0answers
6 views

Looking for Home Network Monitor/IDS

I've spent some time looking for a home network IDS, and I've tried a couple of tools but to no luck. Do you have any recommendations? I'll be running the software on an old laptop, that's got 16GB ...
1
vote
0answers
5 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
0
votes
1answer
16 views

self hosted website, trival ssl certificate installs

I host my own website from a home server (domain hosted through go daddy) and I have been trying to find information on how to install a ssl certificate. How ever I cant find any information on how to ...
0
votes
0answers
53 views

Recommendation for using Spring Security SAML library version

I'm trying to use the Spring Security SAML DSL wrapper for configuring the SAML Service Provider using the actual Spring Security SAML library to leverage the easy to use Java based configuration ...
0
votes
0answers
21 views

Hosting simple html with authentication-only access

I have this weird idea in my mind - like is it possible to host simple html page on my desktop the access to which is only accepted via an authentication key? I have a static IP and nowadays domain ...
0
votes
1answer
9 views

Looking for cloud- or Unix-based open-source tools that support long-term enterprise-wide key/passphrase management and provide a programmatic API

My question really is: how does an enterprise (a small ~150-employee company) manage the passphrases and encryption keys used at the time of encrypting a large volume of data, when such encrypted data ...