Cyber Security

  Introduction   Businesses cannot run without software, So every business in the wild is vulnerable to Cyber Attacks. It is important to know your Vendor, similar to how you are protecting your infrastructure. A Software product supplied by a vendor can expose significant Attack Surfaces to the wild. This is the classic Supply Chain Attack. How can Enterprises make sure the vendors are maintaining their software vendors and products are secured against Hackers. This post can help you check the list and maintain the integrity of your environment.  Know Your Vendor "Know Your Vendor" is a right to every customer who are using the Vendor's product. You can ask any number of questions and then decide on a Vendor. I herewith summarize the following points which I have seen customers asking me before installing our products and also from my own experience.  What level of Permission does the Software take to run on the system. root/SYSTEM privileges shouldn't be given unle...

  Key Things to Consider for Product Security The primary aim of this blog is to share my ideas on Product Security. Key trends and how to secure a software product. In this blog, we are going to talk about "Pushing Security to the Left" in SDLC Push Security to the left of SDLC SDLC - Software Development Life Cycle SDLC consists of Design - Development - Testing - Production Product Owners think about Security only in Testing or Production environment Product Owners should start thinking about Security while designing the application Majority of the Security risks if we think about security while designing the application   Important Security decisions to consider while Designing your product?   Assign or get only the required permissions in your Product  Store only the data which are absolutely required If you store any PII data, kindly encrypt the data  Try to whitelist all the input that you are obtaining from the user If your application receives any data ...