Linking your business to more business.

Caught between PCI-DSS compliance mandates and a shrinking budget?

Use our quick contact form above and we'll show you how to become PCI-DSS complient on a seriously tight budget!

Still looking for more conventional answers? Here are some possible resources for PCI-DSS...

http://www.cgisecurity.com/web_application_firewalls/
Comments 0 TrackBack 0 Read more of this story...Stateful Web Application Firewalls with .NETA Web Application Firewall WAF though still evolving is crucial for strong application layer defense. Unfortunately HTTP is a stateless protocol and session management is... Evaluation Criteria v1 ReleasedThe Web Application Security Consortium is pleased to announce v1.0 of The Web Application Firewall Evaluation Criteria. WAFEC is a result of a collaboration between web application firewall vendors and independent security professionals to create a comprehensive vendor-neutral...

http://www.tssci-security.com/archives/2009/02/12/post-to-webappsec-mailing-list
Post to webappsec mailing-list on WAF and pen-test: dead again | tssci security... assuranceinformation assurancesecure sdlcsdlccpsltestingpreventionKeyWordsPoliticsSecurityDefensetssci securityHome About Wall Bookshelf Publications Projects bruteoptions.py findamatch.bat nmaparse.py ph_range.py resolve.rb tissynbe.py utime2me.cPost to webappsec mailing-list on WAF and pen-test dead again There is no doubt in my mind that some very strong experts out there have put... things. First of all the word firewall is dead and therefore the word web application firewall and the associated acronym WAF are also dead. Imagine today if there existed a control channel that when taken over by adversaries it became a... an ISV organization or an Enterprise development team If you are part of the group that is spending 120M on WAF technology then you are hurting the SASTDAST market because youre taking away that spending. Clearly risk analysis is not taking... the offensive-research space are. These countermeasures are closer to the code even HIPS is closer than network-based IPS li

http://tssci-security.com/
ph_range.py resolve.rb tissynbe.py utime2me.cPosted by Marcin on February 23rd 2009 in Security. Comments 1 RSSPost to webappsec mailing-list on WAF and pen-test dead again There is no doubt in my mind that some very strong experts out there have put... things. First of all the word firewall is dead and therefore the word web application firewall and the associated acronym WAF are also dead. Imagine today if there existed a control channel that when taken over by adversaries it became a... an ISV organization or an Enterprise development team If you are part of the group that is spending 120M on WAF technology then you are hurting the SASTDAST market because youre taking away that spending. Clearly risk analysis is not taking... the offensive-research space are. These countermeasures are closer to the code even HIPS is closer than network-based IPS like many WAF suggestions. Is is true that we still require assurance even after 15 years of exploitation-countermeasure optimization I r

http://en.wordpress.com/tag/pci/
a new payment processor being breached got confirmed somewhat more Tags breach Compliance Cybercrime Security security incidents InfosecA WAF Does Not Make You PCI Compliant paloaltonetworks wrote 3 weeks ago One of the most common questions that arises when...

http://paloaltonetworks.wordpress.com/2009/02/17/a-waf-does-not-make-you-pci-com
A WAF Does Not Make You PCI Compliant «... common questions that arises when PCI is discussed is whether or not Palo Alto Networks is a web application firewall WAF and can we address section 6.6 of the PCI DSS requirement. The short answer is no. The differences are pretty... protocol. And because of the term application there is a bit of a leap taken that we fall into the WAF category. Lets take a look at the differences in a bit more detail. Web Application Firewalls WAF are designed to... have web application coding issues or want an added layer of security for their public facing web applications need a WAF. Key attributes of a Web Application firewall Designed to compensate for insecure coding practices only those companies that... only those companies that use web applications and are concerned that their code is insecure need to buy a WAF. Highly customized for each environment looking at how the web application is supposed to act and acting on...

http://www.artofdefence.com/
firewall router web proxy internet filtering internet threat protection web filter content filter web filter appliance content filter appliance waf WAF W.A.F. web security internet security web application security web application firewall art of defence security phishing xss cross site scripting...

http://holisticinfosec.blogspot.com/
to taking payment card information on httpswww.pcisecuritystandards.org theyre not beholden to their own standard. But it would seem that a WAF or a review of site code per PCI DSS 1.2 Section 6.6 to prevent cross-site scripting as indicated in PCI...