Security scans of applications

We are using FormsCentral for an application for a New York State program. The state would like to run security scans on the form. Who can we speak to to give the list of scans that they would like to run?

New York State IT would like to run the following actions on a form that we want to open for people to fill out for a New York State program.
They will be using a web vulnerability scanner:
-Transport Support (Http,https)
-XSS Vulnerabilities
-4 Concurrent Connections
-proper behavior of cookies
They say this is very basic scanning. They will not be trying to overload the system with a crawl or attack.

Similar Messages

How do I run a security scan on my macbook pro?

How do I run a security scan on my macbook pro?

If you have only Mac OSX running you don't need to run any security scan.
If any major security risk exists Apple offers Security Updates.
Just don't install any applications not needed,
If you run Windows that is a different story.

I am working on Security scan(to avoid cross site forgery) with the CSRF approach of tomcat(apache-tomcat-6.0.32) but I am getting following issue with firefox:

I am working on Security scan(to avoid cross site forgery) with the CSRF approach of tomcat(apache-tomcat-6.0.32) but I am getting following issue with firefox:
1. Firefox is not supporting CSRF provided by tomcat in a proper way firefox creating multiple sessions.
2. Whenever any exception (like JSP exception) comes on page. Firefox redirects it to CSRFPreventionFilter and this filter creates new session.
3. Sometimes while traversing through application also CSRFPreventionFilter filter creates new session.

I seem to have fixed it by putting <div class="clearfloat"></div> after the navigation bar?

Can i do a security scan or check system for integridy

Is there a need to do security scans or to check that new downloads run smoothly with other applications? Or is Mavericks a leave it be system??

If you're just concerned about making sure things you download aren't malware, that's not something that any anti-virus system will be able to guarantee you.
Mac OS X does have a number of anti-malware protections built in. Like all anti-malware systems, they're not perfect, but they're pretty good. You can find more information about this sort of thing in my Mac Malware Guide.
As for download safety, just be sure to always download straight from the developer's site, and only decent software. Don't dabble in worthless "cleaners" and the like. Don't download from torrents, piracy sites or download sites like Softonic or Download.com. Downloads from such sources are all very commonly riddled with adware at a minimum, and malware in some cases. If a site tells you that you have to download a "video plug-in" or something similar in order to view their content, it's probably a scam involving adware or malware.

Security scans on DBMS server still show Java vulnerabilities after applying JavaVM Component patch 20233168

JavaVM Component patch 19618575 was applied to our Oracle 11.2.0.3 DBMS Windows 8 server and a security scan was done showing no vulnerabilities.
However, patch 19618575 was rolled back by Bundle Patch 34 (20227195) and Oracle released another JavaVM Component patch 20227195. We applied the new JavaVM patch successfully and the System Admin did the security scan which showed there was still a vulnerability for the JavaVM Component.
Is anyone else having this problem.

Richard,
I have just applied patch to upgrade from Portal 3.0.9 to 3.0.9.8.1 (Patch applied to loginserver and portal schema) and the External Applications that were previously set up have gone from the portlet.
Does this relate to your note at the bottom:
"Minor issues with Bulk action. 1840420 CUSTOM WRITTEN EXTERNAL AUTH MODULE NEED TO BE UPDATED AFTER 3.0.9 UPGRADE SSOXOID.PKB DOESN'T LOAD.
External authentication modules that were written before 3.0.9 need to be updated after upgrading to 3.0.9. ssoauthx.pks is updated in 3.0.9 and contains additional routines that need to be implemented." ??
If I go to the "Login Server Administration" portlet and select the link "Administer External Applications" I get a list of 5 External Applications that have previously been set up.
If I go back to the Home Page and select "customize" on the "External Applications" portlet I get the message "Your Login Server administrator has not registered any external applications".
Does that mean I should just run 'ssoauthx.pks' & 'ssoxoid.pkb' or do I need to do something else ??
Thanks
Simo

When I downloaded firefox, it also downloaded McAffee Security Scan Plus. Why? Is this going to interfere with my other anti-virus?

downloaded firefox and also downloaded McAffee Security Scan Plus.
Why? Will it interfere with my other anti-virus

Where did you download Firefox from? It does not come with McAfee Security Scan if you download it from http://www.mozilla.com/ - it has no extra applications included.
Are you sure it was not a plugin that included the McAfee Security Scan, for example the Adobe Flash plugin will by default include it.

I opened the attachment on a malicious email in error on my IPad and have been informed by the genuine company that it will download malware software. Is this possible on my IPad or is there a way of running a security scan to see if it has been infected?

I received an email that I now know to be malicious and inadvertently opened up the attachment on my IPad that I've been informed will download malware or a virus. Can my IPad be infected this way or does anyone know if there is a way of running a security scan to check if there is a problem? I do have the most up to date IOS software installed.

There is no anti-malware for iOS, at least none that actually does anything useful. The odds of getting any malware infection via an email attachment on an iOS device is quite low - practically non-existent. Unless you are seeing any issues, there isn't much to do, other than deleting the email and being more cautious in the future.

The Secure Store Service application Secure Store Service Proxy is not accessible

I am working on setting up a new SharePoint 2013 Farm for our external web site which is currently running on 2010 SharePoint. Because this is an External Website for our organization we have an internally available Publishing Site and there is an Web App
Extension to provide Anon Access to users using the www address. Currently I am doing everything on a single server for testing with HOSTS entries to loop back so I can test with real host headers and not impact the 2010 prod environment. We will be setting
up 2 more WFEs with a NLB before moving this into prod but it isn't there yet. We brought the Site Collection Databases over but are still running in 2010 mode for now.
I migrated a copy of the Secure Store Database over from 2010 and had it put on the 2013 Farm's Database Server. Set up Secure Store and the Secure Store Proxy. I went into the Secure Store Proxy in CA and refreshed the Key with the proper Pass Phrase. After
doing that I could see the Target Application IDs listed. Everything was looking good so I went off to test. If I am on the publishing site I can go to a page that has the solution on it and it operates as expected. It does a query to a non SharePoint database
and returns information filtered based on the search parameters. The only odd thing I see is if I click on the "Site Actions" I get a message "An error has occurred with the data fetch. Please refresh page and retry." Need to look into
that more but it only happens on pages that have these solutions. Maybe a clue. If I go to the Anonymous Access page (www......) and try and use the solution, it immediately (way too quick to appear like it is doing anything) comes back with "The security
token request cannot be completed."
If I dig through the usage logs I am finding the following.
The Secure Store Service application Secure Store Service Proxy is not accessible. The full exception text is: The security token request cannot be completed.
Unexpected exception from endpoint address : https://[Servername]:32844/4e87fd3aabb640fb8cc3ed52188cf5c0/SecureStoreService.svc/https
Logging unknown/unexpected client side exception: InvalidOperationException. This will cause this application server to be removed from the load balancer queue. Exception: System.InvalidOperationException: The security token request cannot be completed.
at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForServiceContext(Uri contextUri) at Microsoft.SharePoint.SPChannelFactoryOperations.InternalCreateChannelActingAsLoggedOnUser[TChannel](ChannelFactory`1 factory, EndpointAddress
address, Uri via) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.GetChannel(Uri address) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName,
Boolean validateCanary, ExecuteDelegate`1 operation).
Initially I was fighting a firewall issue because it wasn't working (different errors) on both sides. Had Network Engineers open firewall ports needed and now it works on the publishing side. Still the same error on the Anon side. I suspect I have missed
something when it comes to configuring the Secure Store to allow access to anonymous connections.
Let me know if you need any more information but that should paint a pretty good picture as to how things are set up.
Thanks for any help on this one. Searches haven't found much that has helped so far.

Hi Sennister,
I recommend to verify the things below:
Did this issue occur with all the pages in the anonymous side?
Check if the Claims to Windows Token Service is started.
Change the <identity impersonate="true" /> in the web.config to see if the issue still occurs.
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

How to deploy a secured ADF 11g application to WebLogic 10.3 server?

Hi,
I have just enabled security in our ADF 11g application, as descripbed in [chapter 29|http://download.oracle.com/docs/cd/E12839_01/web.1111/b31974/adding_security.htm#insertedID0] of the Fusion Developer's Guide. It works fine in the embedded WebLogic server of JDeveloper.
Now I'm trying to deploy to our WebLogic 10.3 server, which runs in production mode. I'm running into all sorts of problems. The WebLogic console seems to have hundreds of security related pages, I don't know which one I should use, let alone how to use it. The Fusion Developer's Guide doesn't cover deployment to a production server:
>
When the target server is configured for production mode, you typically handle the migration task outside of JDeveloper using tools like Oracle Enterprise Manager. For details about using tools outside of JDeveloper to migrate the policy store to the domain-level in a production environment, see the [Oracle Fusion Middleware Security Guide|http://download.oracle.com/docs/cd/E12839_01/core.1111/e10043/toc.htm].
>
However, this guide is of very little help to me. I found [chapter 7|http://download.oracle.com/docs/cd/E12839_01/core.1111/e10043/addlsecfea.htm#insertedID0], which says "The recommended tool is Fusion Middleware Control." I have no idea what "Fusion Middleware Control" is, where to get it and how to use it.
Long story short: I'm totally lost. I'm looking for a step by step guide on how to deploy a secured ADF 11g application to a WegLogic 10.3 server that is running in production mode. Any help is highly appreciated.

Ok, I found a [very helpful blog post |http://andrejusb.blogspot.com/2009/01/practical-adf-security-deployment-on.html] by [Andrejus Baranovski|http://www.blogger.com/profile/04468230464412457426]. I wish Oracle's documentation was as clear as this...
The blog post refers to an article by Steve Muench, called [Simplified ADF 11g Application Credential and Policy Migration to Standalone WebLogic Servers|http://www.oracle.com/technology/products/jdev/tips/muench/credmig111100/index.html]. This article presents an Ant script that migrates policies from JDeveloper to WebLogic, using some PFM. (See the last definition here.)
The problem is that Steve Muench's script assumes that JDeveloper and the standalone WebLogic are on the same machine. However, in a typical environment, such as the one I'm working in currently, this is not the case. In our case the developer stations are Windows machines, while our WebLogic server runs on a HP-UX machine. So the question is: how to perform this migration between two machines with different operating systems?
Regards,
Bart Kummel

Secure Store Service Application takes a lot of time and does not create the database

Hi everybody,
I was trying to configure sharepoint performance point and I was following the instruction. After I created the performance point services application I tried to creat the secure store service application. When I do this, the progress window stays open forever
even after 2 hours. If I close the window, I will see that the secure store service and proxy app is created and the application pool also is created in IIS but the database is not and the application service is stopped. even when I want to delete it, it's
the same story and the progress window stays until I close it manually. Nothing has been logged in the event viewer because it doesn't throw any exceptions.
I don't think that I have permission issues on the database server side because I have created the performance point service app and the database is there. I have used the same credentials to crete the secure store.
I have restarted the secure store service and IIS for many times and even the server itself.
I'm wondering if anybody has had this issue because I couldn't find anything on the web.
Thanks,
Edwin

Alex, please ignore my previous answer. I found more information in the ULS. At the time that I started creating the service application by power shell these things are logged and they are repeated several times:
it starts with:
11/13/2013 15:19:55.52 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esj6 High
Creating Secure Store Service Application 'Secure Store Service Application'.
c402af0c-5ff6-4995-83b8-3f95210a8b3d
11/13/2013 15:19:55.54 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esj9 Medium
Creating "database object" 'SP_SecureStore' for application. At this time database is not created.
c402af0c-5ff6-4995-83b8-3f95210a8b3d
11/13/2013 15:19:55.54 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esk0 Medium
Saving "database object" 'SP_SecureStore' in the config db.
c402af0c-5ff6-4995-83b8-3f95210a8b3d
11/13/2013 15:19:55.83 w3wp.exe (0x0944)
0x0DB4
Secure Store Service
Secure Store
d4gx Verbose
BackgroundTasks instance accesed.
11/13/2013 15:19:55.83 SPUCWorkerProcessProxy.exe (0x13A0)
0x02B0
Secure Store Service
Secure Store
d4gx Verbose
BackgroundTasks instance accesed.
11/13/2013 15:19:55.83 PowerShell.exe (0x1698)
0x1740
Secure Store Service
Secure Store
f7wk Verbose
StartTracker called for secure store ''
11/13/2013 15:19:55.83 PowerShell.exe (0x1698)
0x1740
Secure Store Service
Secure Store
f7wl Verbose
Tracker not started because call not made from Service Host.
11/13/2013 15:19:55.83 WebAnalyticsService.exe (0x0A6C)
0x1B88 Secure Store Service
Secure Store
f7wk Verbose
StartTracker called for secure store ''
Finally it says:
11/13/2013 15:19:55.90 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esk9 High
Secure Store Service Application 'Secure Store Service Application' created.
c402af0c-5ff6-4995-83b8-3f95210a8b3d

How to do a security scan on my iPad

i would like to know how to do a security scan just incase I've downloaded a suspicious app or something. Does anyone know how

There is no virus or malware in the wild that can affect an iPad, unless it has
been jailbroken. If that is the case in your situation, Terms of Use for the forum prohibit
discussion of jailbroken devices.

Change security of adf application on weblogic

hi all,
i am new in weblogic. i set oid in weblogic succesfully. But i couldn't change security of adf application. Is there any documantationof how change security of adf application?

hi frank,
i mean that i set oid in myrealm which is my default security realm. I change order of Authentication Providers. all of the users of oid are in myrealm . However my application does not use this ldap configuration. i couldn't change security of application, and i need help. Before i deploy my 10.1.3 adf application to oc4j and during deployment i can set the security of application but i couldnt see anything like oc4j in weblogic
i configure my oid like below link
http://www.oracle.com/technology/products/jdev/tips/fnimphius/oidconfig/index.html

Using SQL Server credentials with Secure Store Target Application for Data Connection in Dashboard Designer

[Using SharePoint 2013 Enterprise SP1]
I would like to use SQL Server credentials in a Secure Store Target Application, and
this page makes it look like it's possible but when I attempt to use the new Target Application ID as authentication for a Data Connection in Dashboard Designer, I get a generic "Unable to access data source" with no error logged in SQL Server
logs.
I am able to use a Target Application with AD credentials to access the SQL db without a problem. Suggestions?

Hi,
1. Make sure that the credential is set to
Secure Store Target Application. Navigate to the Central Administration. Click on the
Application Management. Click on the Manage Service Applications. Click on the
Secure Store Service Application. Select the application ID and from the ECB menu click on the
Set Credentials. Enter the Credential Owner, Windows User Name and the
Windows Password.
2. Make sure that in the Dashboard Designer “Use a stored account” is selected in the “Authentication” and the proper application ID is mentioned.
Please refer to the link below for more information:
http://www.c-sharpcorner.com/Blogs/14527/unable-to-access-data-source-the-secure-store-target-applic.aspx
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

Scan to Application will not stop and cannot close

I recently scanned a phot to my mac and then imported to iphoto .
I scanned using a HP deskjet 3050.
The scan to application appears to still be running in the background as a moving cog appears in the top right hand menu bar next to network preferences, sync and time machine icons. When I right click on the cog it brings up stop scan to application but this has no effect.
Any ideas on how to quit.
Tiny Biny

Try rebooting the iPad by pressing and holding the on/off and home buttons simultaneously until the screen goes blank and you see the apple logo. It should take about 10-15 seconds to reboot.

Flashing "Running Security Scan..."

On Windows 7, 64-bit, MS Office 2010; when I try to launch an online software that integrates a fillable-form into my Adobe Acrobat 9 Standard, at the bottom of my IE9 screen, flashing nearly 2 times per second, I see messages that say: "Running Security Scan...". I have to quite IE and force Adobe Acrobat to quit to stop it. How can I fix this so that I can properly run the software? (It works okay on my old slow XP, 32-bit coomputer, Office 2007, but the manufactureres say it is not an Office 2010 problem, nor Windows 7, 64-bit). Also, this happens whether or not my Trend Micro Anti-virus software is running.

That's something local on your computer or browser; not the Adobe download site.
Try from http://get.adobe.com/reader/enterprise/

Security scans of applications

Similar Messages

Maybe you are looking for