security flashcards

It is said that when a PC (Windows system) on the Internet, if there is no anti-virus software firewall, then within 10 minutes will be the fall of the city of the virus. Why is it so? Because when you surf the Internet, maybe some sites will be implanted virus, a Trojan horse or something, the site's users as long as a landing, if there is no protection measures, then your machine will certainly be immediately captured. Of course, the site is not intentionally to hang virus and Trojan to the us

Computer security is especially important to every computer user. It is absolutely not so careless in choosing security software. Currently, all types of anti-virus software on the market are mixed, making it difficult for users to choose from. In response to this situation, I would like to recommend a classic professional security software-Kaspersky

In the last period, we discussed the status quo of information security for small and medium-sized enterprises, and focused on the problems faced by small and medium-sized enterprises in terms of security awareness, investment capability, and technical reserves. Reading this article may give you a sense of difficulty in implementing information security in small

I. Introduction of PAM Authentication moduleThe PAM authentication module is called a pluggable authentication module. An important function is to enhance the use of the SU Command control, with the help of the PAM authentication module, only a very individual user can use the SU command to switch. Pam provides a central mechanism for authenticating all services for login, remote login (telnet,rlogin,fsh,ftp), Su and other applications where the system administrator formulates different authenti

Step one: Double-click the lower right corner 360 security Guardian icon to start the main program Step Two: Home Click on the Security Center, access to the firewall settings interface, in the protective wall set up center Click the Security Settings button Step three: Due to numerous protection items, this article mainly introduces the

In the previous article, we discussed how to use VPD to access the rows in an Oracle table (see Oracle Database Security-Virtual Private database (VPD)), which describes an access control technology that is more complex than VPD--ols (Oracle Label Security). Enable OLS If your database version is 10g, you will need to install additional OLS components, but if it is 11g, just enable OLS, because the 11g OL

Safety One, Web server security PHP is nothing but a Web server module function, so first of all to ensure the security of the Web server. Of course, the Web server to be secure and must first ensure that the system security, so it is far, endless. PHP can be combined with a variety of Web servers, and only Apache is discussed here. It is highly recommended tha

One, Web server security PHP is nothing but a Web server module function, so first of all to ensure the security of the Web server. Of course, the Web server to be secure and must first ensure that the system security, so it is far, endless. PHP can be combined with a variety of Web servers, and only Apache is discussed here. It is highly recommended that you st

1) started to encounter a problem, all the action can not intercept, it seems that spring security has failed, and then after all the action before adding "/" in the database resources is similar to/***.action, so there is no problem. I personally think there is a good solution, that is, different roles can be accessed by the JSP to build the unused package, and then struts2 the configuration file with different packages, not the package as a differen

[Directory] I. background and description 2. What is Cloud 3. What is cloud security? 4. How to Design cloud security 5. An authorized security evaluation test for SAE I. background and description Due to slow access to foreign servers and frequent access failures, we have been working with SAE to migrate the WooYun project to a stable SAE platform for a long t

I. Internet Security Protocol Overview 1.1 Internet Protocol SystemArchitecture of the TCP/IP protocol IP datagram format and TCP/UDP message segment format Web Technology composition: HTTP protocol, HTML markup Language. The relative position of security mechanism in TCP/IP protocol stack: Network layer, Transport layer and application layer.1.2 Internet

--IP security Policy for server security (lists only the ports or protocols that need to be masked or blocked) Protocol IP Protocol Port source Address Destination Address description method ICMP------ICMP blocking UDP 135 Any IP address my IP address 135-udp block UDP 136 Any IP address my IP address 136-udp block UDP 137 Any IP address my IP address 137-udp block UDP 138 Any IP address my IP address 138

Delete the following registry primary key: Wscript.Shell Wscript.shell.1 Shell.Application Shell.application.1 Wscript.Network Wscript.network.1 regsvr32/u wshom.ocx carriage return, regsvr32/u wshext.dll carriage return Windows 2003 hard Drive security settings C:\ Administrators All System All IIS_WPG only This folder List Folder/Read data Read properties Read Extended Properties Read permissions C:\inetpub\mailroot Administrators All System All Se

Command:Vim/etc/login.defsDefault settings:# Password Aging controls:## Pass_max_days Maximum Number of days a password is used.# pass_min_days Minimum number of days allowed bet Ween password changes.# pass_min_len Minimum acceptable password length.# pass_warn_age number of Days warning given before a password expires. #PASS_MAX_DAYS 99999pass_min_days 0 Pass_min_len 5 pass_warn_age 7Analytical:Pass_max_days---Password valid days, maximum how long to change

Original address: Webapi using token+ signature verification first, not to verify the way API Query Interface: Client invocation: http://api.XXX.com/getproduct?id=value1 As above, this way is simple and rough, in the browser directly input "Http://api." Xxx.com/getproduct?id=value1 ", you can get product list information, but this way there will be a very serious security problems, without any verification, you can get to the product list, resulti

Step One: Open the Conf folder under the ACTIVEMQ installation directory, open the Conf/jetty.xml, Value value = "false" for property name authenticate, modified to value = "true". The implication is: Launch login security authentication mechanism Step Two: Configure ACTIVEMQ secure login account and password Control ACTIVEMQ Security login account and password information is in the Conf/jetty-real.proper

Mobile phone lost QQ Security Center how to solve the tie? The first step: you can in the QQ token page Click to bind, the following figure: You can also click the "Bind" button on the Secret Protection Toolbox page, as shown below: The second step: into the Untied QQ token page, to determine the binding QQ token on the use of the user business impact, if you determine no problem, please click to determine the unified

Original link: http://sarin.iteye.com/blog/829738 Now for the security part. The Spring security framework is an upgrade of the Acegi, a framework that utilizes multiple filtering mechanisms to process requests, releasing requests that meet requirements, and blocking requests that do not meet the requirements, which is the biggest principle. Let's take a look at the simple URL filter below. Write an authen

Nowadays, it is not easy to secure mobile devices such as laptops, cell phones, and PDAs. The endpoint security is extremely immature, and the security professionals have little to worry about. Cloud computing and cloud security continue to promote the development of data and online applications, which is a revolutionary impetus to the traditional peripheral netw

The "Local Security Policy" provided by Windows XP is a good system security management tool, which can make our system safer. First, let's talk about how to start the "Local Security Policy ". Click "Control Panel" "Administrative Tools" "Local Security Policy" to go to the main interface of "Local