Gain insights into effective security techniques including patching, cryptography, and phishing prevention. Explore practices to make systems resistant and vulnerabilities more detectable, enhancing defense against attacks.

docker.tar.gz

network-commands

node

It seems like hardly a week goes by without a high-profile computer breach. Why do these happen? How can you prevent them? This course doesn’t have all the answers, but it does outline practices that make life harder for attackers and that will help tide you over until you get a full-time security team in place.

In this course, you will learn 5 simple, yet effective, techniques for preventing attackers from getting into your system. These techniques are related to: patching, software vulnerabilities, cryptography, windows security, and phishing. Within each chapter you will learn the best practices for preventing vulnerabilities and how to make them more detectable. 

This course is based on the Pragmatic Programmers’ book, Practical Security, and is aimed at developers, admins, team leads, architects, technology generalists, and all others who stand guard against the things that disrupt the network.

Practical Security: Simple Practices for Defending Your Systems

We’ve seen how to search for an exact match. Now let’s see how to search for an approximate match using SQL’s wild card searches.

# Searching for approximate matches
If we wanted to search for all the journal entries that contain the word “Time” we could execute the following SQL:

SELECT CreatedTimestamp, Body FROM journal_entries WHERE Body LIKE '%Time%';

query_sqli_tables.sql

Whatever is between the `%` signs is the wildcard. This query returns the time stamp and journal entry for every row that contains the wildcard in the Body column. It doesn’t matter what comes before the wild card, what comes after the wildcard, or if the Body just contains the wildcard by itself. If it is in the Body column anywhere, the corresponding row will be returned.

# Searching within a journal
Armed with this SQL expertise, let’s suppose our journaling web app is wildly successful and we’re flush with cash from investors. We want to add search capabilities for version 2. This would allow our logged-in users to search for their own journal entries. 

Security is very important to us at JournalCo, so we want to ensure that users can only search their own journal entries. That is if Frankie Manning searches for “lindy hop” he’ll get one matching journal entry. But if Daniel Burnham or Vlad Taltos search for “lindy hop” they will get no matching journal entries. How might we implement this?

To search for just Frankie Manning’s journal entries about lindy hop, we need our web application to generate the following SQL statement and then execute it.

In this lesson, we will further elaborate on SQL commands. 

Introduction

Patching

Vulnerabilities

Cryptography

Windows

Phishing

More SQL Commands

Searching for approximate matches