Security

The Common Vulnerability Scoring System (CVSS) is a standard that can be used to uniformly assess the vulnerability of computer systems using a point system from 0 to 10. CVSS is currently available in version 3.1 and recognizes the vulnerability classifications “none”, “low”, “medium”, “high” and “critical”. In cybersecurity, it is crucial to assess the … Read more

Information security aims to ensure the confidentiality, integrity, and availability of information. This allows information to be protected against threats such as unauthorized access or manipulation. In the corporate environment, the economic damage is prevented. Information Security is a vital aspect of our increasingly digital world. With the exponential growth of data and the widespread … Read more

Kerberos is a distributed, ticket-based authentication service. It can be used for secure authentication in TCP/IP networks and provides users with tickets to use services. Passwords no longer need to be transmitted over the network. Microsoft uses Kerberos as the default authentication method in Windows-based networks. Kerberos was developed at the Massachusetts Institute of Technology. … Read more

Kali Linux is a Linux distribution specialized in security and penetration testing of IT systems. The distribution includes numerous tools and utilities for performing a wide variety of testing methods. In the ever-evolving cybersecurity landscape, Kali Linux has emerged as a powerful and widely-used operating system designed for penetration testing and ethical hacking. With its … Read more

Wi-Fi Protected Setup (WPS) is a standard of the Wi-Fi Alliance that simplifies the registration process of end devices in an encrypted WLAN. Thanks to WPS, the WLAN password does not have to be configured on the client. There are four different WPS methods. In today’s hyperconnected world, where wireless networks have become an indispensable … Read more

Unified Threat Management refers to a security solution that provides multiple security systems and functions in a single appliance. Components of UTM include firewalls, IDS and IPS systems, antivirus protection, gateways, VPNs, spam filters, and content filters. What is Unified Threat Management? Unified Threat Management (UTM) refers to a comprehensive approach to network security that … Read more

The WLAN encryption standard WPA3 (Wi-Fi Protected Access 3) was adopted in June 2018 as an addition to the existing standard WPA2. WPA3 brings significant improvements in authentication and encryption. It is also expected to simplify the configuration of WLAN devices and increase security at public hotspots. In an increasingly interconnected world, securing our digital … Read more

Welcome, fellow digital explorers! Have you ever wondered about those secret digital chinks that mischievous hackers exploit? Well, you’re in for a treat! Today, we’re diving headfirst into the fascinating world of security vulnerabilities. Buckle up and get ready for a wild ride as we uncover the hidden truths behind these sneaky weak spots that … Read more

A Threat Intelligence Service provides up-to-date information on the threat situation of IT security due to cyber attacks and other threats. For this purpose, the service collects data from various sources and makes it available in processed form. In today’s complex and rapidly evolving security landscape, ensuring the safety and protection of nations and their … Read more

Bring Your Own Key describes a concept for the encrypted storage of data on the platform of a cloud provider. It is not the provider who generates and manages the necessary key material, but the user or customer. BYOK offers a higher level of security. For even greater security, concepts such as BYOE (Bring Your … Read more

The Certified Cloud Security Professional is a certification from (ISC)². The certification is aimed at people who work in the cloud and IT security environment. With certification, they demonstrate in-depth knowledge of cloud security of various topics. For the CCSP, proof of several years of experience in various cloud topics is required. As the world … Read more

In today’s digital landscape, network security plays a crucial role in safeguarding sensitive information and ensuring the smooth functioning of business operations. With the rise of cloud computing, organizations are increasingly adopting cloud platforms like Microsoft Azure to host their applications and data. One essential component of securing network traffic in Azure is the Network … Read more

In today’s interconnected digital world, the term “botnet” has gained notoriety as a formidable threat to online security. But what exactly is a botnet? In simple terms, a botnet refers to a network of compromised computers, also known as “bots” or “zombies,” controlled by a malicious actor, the botmaster. These networks can consist of thousands … Read more

Temporal Key Integrity Protocol (TKIP) is a security protocol for WLAN networks that was developed to provide an alternative for WEP, which is considered insecure, as quickly as possible. Like WEP, TKIP is based on the RC4 algorithm for encrypting data and has been considered insecure since 2009. Wireless networks have revolutionized the way we … Read more

WPA stands for Wi-Fi Protected Access and refers to the successor standard to WEP for encryption and authentication in WLANs that was adopted in 2003. WPA was intended to eliminate the known security gaps and vulnerabilities of WEP and provide security in wireless networks again. Like WEP, WPA is no longer considered sufficiently secure today … Read more

Remote Code Execution makes it possible to execute unwanted program code on a computer remotely. Often, security gaps in the operating system and in applications or poorly secured input options are the reason for this security problem. Attackers use the Internet to penetrate systems via remote code execution, execute malware or take over the systems … Read more

Remote access is access from a local computer to remote computers, servers, networks, or other IT systems. Access can take place via private data networks or the Internet. Typical applications include working at a remote location or remote maintenance of computers and IT systems. Authenticated and encrypted connections are used to secure remote access. Remote … Read more

Unlike the open Internet, whose pages can be found via search engines such as Google, the Darknet or Deep Web is hidden from view. Here a network is created from and between all participants, classical servers do not exist. The internet has become a crucial part of our lives. It has revolutionized how we communicate, … Read more