The WhiteHack Blog

I have noticed that I have not been including much in the way of security items within this blog, so lets kick off with a couple of cool new/updated toys.

First up we have GreenSQL, a database firewall.

(Original article here)

Any site that uses a database backend needs to be very aware of how easy a SQL injection attack is, just do a search on youtube and you’ll find loads (well, just under 800). For a good (and easy to read) book explaining how to protect against SQL injection (using PHP & MySQL 5) check out this book.

For those of you who want to take a belt-and-braces approach to your website back end security an interesting option is GreenSQL.

(continue reading…)

The Microsoft guidelines for MCSA: Security state that you must get:

Two Core exams (70-290 and 70-291)
One Client exam (70-620, 70-270, or 70-210)
Two security exams (70-299, 70-227, 70-350, or 70-351, or use a third-party certification).

The third party certifications include the Security+.

So surely then getting the MCSA, then getting the Security+ should not make a person an MCSA: Security, without getting another of the security exams?

Well, not quite, if you already have your A+ then you qualify for MCSA: Security status.

(continue reading…)