The What, Why and How of Software Security

Modern symmetric block encryption algorithms need to satisfy a number of properties to be considered strong. One such property is the property of “Confusion”. What it means is that if an attacker is conducting an exhaustive key search, and if the key Read More...

About a month back, ACE Engineering released " XSSDetect ", a stripped down version of the "Code Analysis Tool for .NET code bases (CAT.NET)". A Cross site scripting (XSS) vulnerability exists in a web application whenever user controlled input, without Read More...