Tuesday, February 4, 2020

SABSA(Sherwood Applied Business Security Architecture)




SABSA is a security architecture framework and also methodology. SABSA is a layered framework starting from defining business requirements in layer 1. It goes from abstraction to more detailed phase. From policy level to more detailed and practical implementations of technology in order to achieve business goals.

Since it is a framework it defines the architecture, and since it is also a methodology it also provides the processes to achieve and maintain this architecture.


TLS/SSL Vulnerabilities

POODLE:  The SSL 3.0 vulnerability is in the Cipher Block Chaining (CBC) mode. Block ciphers require blocks of fixed length. If data in th...