moreprocess.com @moreprocess-blog - Tumblr Blog

Virtualization: The Advantages and Disadvantages of VM

Virtualization provides a company with significant opportunity to increase efficiency and decrease costs in its IT operations. However, virtualization also introduces additional risks. Here are the advantages and disadvantages of virtualization:

Advantages of Virtualization:

Server hardware costs may decrease for both server builds and server maintenance.

Multiple operating systems can share…

View On WordPress

#advantages #Disadvantages #security #virtualization #VM

Internal Security Control Classifications

There 3 different internal security control classifications:

Preventative control is to prevent the breach or incident to happen in the first place, and here’s how you can do that.

Hire the right kind of people and train them properly

Physical access control where you can come in with a keycard, badge access, man-trap, etc.

You must have detailed security policies. This tells you what you’re…

View On WordPress

#Classifications #control #Internal

Apache Archiva Cross-Site scripting and Command Execution

Apache Archiva is an extensible repository management software.

Apache Archiva is affected by following vulnerabilities:

Apache Archiva is affected by a vulnerability in the version of the Struts library being used, which allows a malicious user to run code on the server remotely.

Apache Archiva is affected by cross-site scripting (XSS) issue by sending a crafted request which could be used to…

View On WordPress

#Apache #Archiva #Command #Cross-Site scripting #Execution

MongoDB Accessible Without Authentication Vulnerability

MongoDB is an open-source document database, and NoSQL database. It’s possible to access MongoDB without any authentication.

Impact

Exploitation of this vulnerability allows a remote attacker to connect to the database. Consequently, the attacker can access sensitive information, and can launch denial of service attacks through the destruction of data.

Solution

Enable the authentication of…

View On WordPress

Microsoft Windows 2000/XP Event Log Administrative Weakness

Threat: Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the “Do not overwrite events (clear log manually)” option is set, does not notify the administrator when the log reaches its maximum size.

Impact: Could allow local users and remote attackers to avoid detection.

Solution: This issue was first corrected in Windows XP Service Pack 1 (SP1) and Windows 2000…

View On WordPress

How to Evaluate Project Management Frameworks and Governance Practices

If there is no accountability, projects will flounder.

Make sure that key stakeholders are identified early, and that their relationships to each other and to the project are well-defined and respected.

Ensure that the communication channels were open between stakeholders.

Verify that there has been sufficient commitment to the project from senior management.

Determine whether the project…

View On WordPress

8 Validation Steps to Identify Key PCI DSS Compliance Gaps

Here are the 8 validation steps to identify the PCI gaps:

Validate that centralized policies and procedures are in place. This validation step involves reviewing policies, procedures, and processes are utilized to protect the cardholder data environment.

Validate internal network segmentation (via firewalls or router/switch based ACLs) is in place Conduct technical analysis of controls…

View On WordPress

How to Copy Datafile from Primary to Standby Database using RMAN

Steps to copy the datafile from the primary database to the standby database using RMAN.

1. From the Primary DB server, run:

rman target=/

RMAN> backup as copy datafile 324 format ‘/home/oracle/backup_standby/test_xmit.dbf';

Starting backup at 04-FEB-15 using channel ORA_DISK_1 using channel ORA_DISK_2 using channel ORA_DISK_3 using channel ORA_DISK_4 channel ORA_DISK_1: starting datafile copy inp…

View On WordPress

#Copy #datafile #db #Oracle #rman

How to Copy Datafiles from Standby DB to Another Location (Oracle)

The following steps demonstrate how to copy datafiles from the Oracle Standby database to another location:

1. From Production database

STOP log shipping

alter system set log_archive_dest_state_2=DEFER;

Make sure change is made

select * from v$parameter where name like '%log_archive_dest_state_2%'

2. From Standby database

Cancel recovery

ALTER DATABASE RECOVER MANAGED STANDBY DATABASE CANCEL;

View On WordPress

5 Processes for Validating PCI Compliance

Is PCI DSS compliance mandatory? Who needs to be PCI compliant? What does it take to be compliant?

If you store, process, and/or transmit cardholder data, you are subject to and must comply with PCI DSS. While the Security Standards Councilis responsible for managing the data security standards, each payment card brand maintain its own separate compliance enforcement programs. Each payment card…

View On WordPress

10 Key Compliance Factors of PCI DSS

Here are the 10 key compliance factors of PCI DSS.

The company has previously been PCI certified by a PCI-QSA

Centralized policies and procedures are in place.

Internal network segmentation (via firewalls or router/switch based ACLs) is in place.

Cardholder data is NOT stored in clear text.

Formal key management processes are in place.

Logging is enabled for all in-scope system components.

Logs…

View On WordPress

#DSS #Factors #PCI #pci Compliance #security #SSC

PCI DSS Version 3 Changes: In a nutshell, all merchants must upgrade from SSL protocol to the most current, secure version of TLS to meet PCI DSS version 3.1 scheduled to roll out in April. Secure ...

PCI DSS Version 3.1 Release Announced for April 2015

To sum it all up, you must upgrade to the most current, secure version of TLS to meet PCI DSS version 3.1. Even older versions of TLS will not work as they also have security vulnerabilities.

PCI DSS version 3.0 was just rolled out in January 2015. And just 4 months after that release, the PCI Security Standards Council has decided to revise it to version 3.1 to address the more recent SSL v3.0…

View On WordPress

How to Configure your Password to Prevent Security Breach

There has been many security and data breaches in recent days where email accounts were hacked from individuals and sensitive data like credit card #, social security #, driver’s license #, and etc. were stolen from companies of all sizes. Here’s a list of some of the largest data breaches of all time.

Anthem, 2015: 69 million to 80 million records compromised

Home Depot, 2014: 56 million…

View On WordPress

How to Determine the Switch a Linux Server is Connected to

To determine what switch you are connected to (this is only known to work on Cisco switches as it replies on CDP (Cisco Discovery Protocol) but may also work on others), run the following command under Linux.

tcpdump -nn -v -i <INTERFACE> -s 1500 -c 1 ‘ether[20:2] == 0x2000′

This may take 30 seconds or so to come back but will give you switch information including the IP address.

tcpdump:…

View On WordPress

How to Truncate VMWare events to Free up Space

This article is being intentionally left somewhat vague because these actions should NOT be performed routinely. However, when the VMWare Virtual Center’s MS SQL databases have become so large that clearing out all the old event data has become necessary. This is one of several ways to do this.

The following query will give you a list of all your tables and give you how many rows and how large…

View On WordPress

#Database #logs #SQL #truncate #virtual center #vmware

Traces of Plastic Found in Rice in Plano, TX Grocery Store

I can’t help but to share it on this blog. Although it’s not relevant to the technology space but I have to share it with my readers and followers. My sister texted me this morning some pictures of what I called “plastic rice”. She purchased a bag of sweet, long grain rice from a local supermarket in Plano yesterday and just started to open it up this morning to prepare food for lunch. She cooked…

View On WordPress

#jusgo #plastic rice #rice #texas

Trending Blogs

Recently Viewed Blogs

moreprocess.com