Details of the Inquiry We operate small factories not only in Korea but also in about 10 countries around the world, and we have obtained ISO/IEC 27001 and ISMS certification and operate an ISMS with a small staff. Among the information security requirements is NTP Server configuration, but a web search mentions only bora.net, kornet,
Details of the Inquiry I built a simple web crawler in Python, and it worked as intended.However, when I run this program with proxychains to hide the source IP, the chain between the proxies is denied and I cannot retrieve the data…?When I searched for related posts, many developers seemed to have run into the
Details of the Inquiry The Log4j vulnerability is said to affect a very large number of products. How can we tell whether it affects our systems? Is there also a way to tell whether we have already been attacked? Only the important information is being shared on an urgent basis. Related vulnerabilities may continue to
Specific inquiry I am responsible for the technical side of information security at my company. The IT department has decided to develop information systems based on a microservice architecture.I have looked for related material, but most of it is conceptual. I am requesting help on the specific items I should present to the IT development
Details of the Inquiry Our company obtained PCI-DSS certification this year and, under its requirements, undergoes a penetration test every year.The penetration-test results reported an HTTPS TLS/SSL Cipher Suite vulnerability on the web server.When we check the actual status of the target web listener, the vulnerability does not appear to be present. The target in
How to implement data encryption with the server’s public key on a website that provides HTTPS? Occasionally, when diagnosing mock hacking on a mobile app or website, there are cases in which the data is encrypted with a random symmetric key method and transmitted to the server without encrypting the data using the
Details of the inquiry We want to add a simple chat function on the web. What should we consider from a security perspective? Security Considerations When Implementing WebSocket 1. Authentication mechanismApply an appropriate authentication mechanism in order to prevent WebSocket access by unauthorized parties. 2. Access ControlApply access control in an appropriate way so that