Articles
Dynamic URL rewriting with .htaccess
Written by Miha Monday, 07 February 2011 21:17
I was upgrading some old page with new CMS that supported nice and friendly URLs. I didn't want to loose all those precious links to page content so I tried to make redirects with .htaccess. As I soon realized this is not so trivial as I thought.
Secure Socket Layer - SSL
Written by Miha Monday, 07 February 2011 19:01
Secure Sockets Layer (SSL) is predecessor of Transport Layer Security (TLS).
Cryptographic protocol that provides secure communications on the Internet for such things as web browsing, e-mail, Internet faxing, instant messaging and other data transfers. There are slight differences between SSL and TLS, but they are essentially the same.
ISAKMP (Internet Security Association and Key Management Protocol)
Written by Miha Monday, 07 February 2011 18:46
ISAKMP (Internet Security Association and Key Management Protocol) is a protocol for establishing Security Associations (SA) and cryptographic keys in an Internet environment. ISAKMP provides a framework for authentication and key exchange. It is designed to be key exchange independent. Authenticated keying material for use with ISAKMP are provided by protocols such as Internet Key Exchange and Kerberized Internet Negotiation of Keys.
Read more: ISAKMP (Internet Security Association and Key Management Protocol)
OAKLEY Key exchange protocol
Written by Miha Monday, 07 February 2011 16:49
The Oakley Key Determination Protocol is a key-agreement protocol that allows authenticated parties to exchange keying material across an insecure connection using the Diffie-Hellman key exchange algorithm.
Key management
Written by Miha Monday, 07 February 2011 11:22
Key management includes all of the provisions made in a crypto-system design, in cryptographic protocols in that design, in user procedures, and so on, which are related to generation, exchange, storage, safeguarding, use, vetting, and replacement of keys.
Security mechanisms
Written by Miha Sunday, 06 February 2011 21:10
Basic concepts of security mechanism such as pseudorandom number generator, hash functions, symmetric and asymmetric algorithms, steganography, watermarking etc.
Information technology standards overview
Written by Miha Sunday, 06 February 2011 20:23
Standard is an established norm or requirement vital to support and harmonize trading. It is usually a formal document that establishes uniform engineering or technical criteria, methods, processes and practices.
Information system security - threats
Written by Miha Sunday, 06 February 2011 19:36
If the assets identification is the first step of security then threats identification is a step number two.
Information system assets
Written by Miha Sunday, 06 February 2011 19:26
Asset is anything of a value to the organization.
Identification of assets is the first step of security. If we do not know what should be protected we cannot protect it.
Information system privacy concepts
Written by Miha Sunday, 06 February 2011 19:17
Privacy means someone's right to keep their personal matters and relationships secret.
Information system security
Written by Miha Friday, 04 February 2011 21:00
Security importance has been growing with the wider application and penetration of computer communications during last decades. Until recently the emphasis in the field of security and privacy has been on technology. Today the importance of the human factor became a major concern as human resources usually present the weakest link in the security. Security and privacy should become integral part of corporate culture.
Information vs data
Written by Miha Friday, 04 February 2011 20:20
Data
Data are plain (raw) facts representing events or physical environment..
Information
Information is data that have been shaped into a form that is meaningful and useful to human beings.
Data in themselves are fairly useless. But when these data are interpreted and processed to determine its true meaning, they become useful and can be called Information.
Decentralized database
Written by Miha Sunday, 23 November 2008 17:15
Database in general can be described as a pair: data (D) and index (I). We can have this two centralized on one computer or allocated on different computers.
Decentralized control system
Written by Miha Friday, 21 November 2008 14:13
Control system is included in operating system and usually in each application as well. It should be striven for as much system and as little application control as possible. I present what kind of control systems we have and how they can be decentralized.