How to select a CAAT
CAAT stands for Computer Assisted Audit Techniques
This is a common thing of discussion among IS Auditors is "which one is best - CAATs or Manual method of IS Audit". Sometimes manual method is not enough to find out effective and efficient IS Audit results. On the other hand in many instances use of CAATs gives less efficient results than corresponding manual IS Audit methods.
Showing posts with label Information Security. Show all posts
Showing posts with label Information Security. Show all posts
Monday, November 24, 2008
How to select a CAAT
IP Security & Authentication Header (AH)
IP Security & Authentication Header (AH)
IP Security (IPSec) is a super set of protocols which to large extent ensure security of Internet Protocol (IP). Beside Internet Key Exchange (IKE) two other important protocol supported by IPSec are
1. Authentication Header (AH)
2. Encapsulating Security Payload (ESP)
Monday, November 17, 2008
Access Control in UNIX based operating systems
Access Control in UNIX based operating systems:
A lot of UNIX based operating systems are available. Although basic architecture is same for all these Operating System but they varies in functionality.
Friday, October 24, 2008
Vishing
Vishing like phishing is a socially engineered attempt to get your financial information. Unlike phishing rather than luring you to a website, it lures you to a phone number
read more
Antivirus Plasma
Antivirus Plasma is a faux security program that does not provide any additional security features or functions for your computer. As we thought, Antivirus Plasma is nothing more than another rogue application that performs various malicious actions to get computer users to purchase the Antivirus Plasma
read more
Friday, September 26, 2008
Chrome Antics: Did Google Reverse-Engineer Windows?
Since its release a few weeks ago, curious developers have been sniffing through the source code for Google's new Chrome web browser.
read more
The Hacker's Voice Digest Issue - No. 3 Released Today!!
Contents:# Rough guide to number stations - Part 3 By Demonix# History of BT Strowger Systems - By Belial# List of interesting phone numbers - Blue_Chimp# VoIP spectacular with 10nix and...# Hacking Vonage - Belial# Easy Peasy ID theift - Hyper# Urban Exploration - BT exchanges# Rants# News# Interviews# and a fuckton more!...
read more
Top 5 Very Important Security Tests For Your Computer
Until and unless you are not attacked by any virus or spyware you think that your computer security is very high but when your PC gets infected it is too late. So if you think that you have a good Internet security why not you go for some Internet Security Tests :
read more
Friday, September 12, 2008
How Crackers Deface Websites? Why They Do It?
The title speaks itself. Through this blog post I am not purposing to influence you to start defacing, but to briefly give you a better understanding of how and why it is done. ...Almost everyday I visit Zone-H’s archive of special digital attacks, I find that at least 1 or 2 attacks were done against US governmental web servers...
read more
Thursday, September 4, 2008
Error detection & correction by Parity Checking
In parity checking an extra bit called a parity bit is added to a byte of data or more appropriately a data set to detect if data set is transmitted correctly. This is a means of error detection and sometimes error correction. Parity bit is sometimes also called check bit.
read more | digg story
10 important Benefits of Decision Support System (DSS)
A Decision Support System (DSS) is an Interactive Information System which may encompass Expert System (s), Artificial Intelligence / Business Intelligence whose function is to collect semi structured information (data), to analyze and to shape the data to form a model .and present...
read more | digg story
Tuesday, September 2, 2008
The Web Incidents Hacking Database
The web hacking incident database (WHID) is a Web Application Security Consortium project dedicated to maintaining a list of web applications related security incidents. The database is unique in tracking only media reported security incidents that can be associated with a web application security vulnerability.
read more
Comparison of different SQL implementations
The following tables compare how different DBMS products handle various SQL (and related) features. If possible, the tables also state how the implementations should do things, according to the SQL standard.
read more | digg story
Integrated Test facility for CISA Exam
f the IS auditor is very comfirtable with the database and application and he is wll aware of flow of data, then only he should use this techniques. Otherwise this will be very difficult to differentiate two types of data.
read more | digg story
Important points to remember about OSI – Application Layer
Application Layer is highest layer /7th Layer/Closest to user layer of 7 OSI layers. Many people think that Application Layer will contain different applications. Application Layer does not contain any application. It contains the protocols supporting different applications.
read more | digg story
Use of Sequence Check as CAAT tool
Sequence Check is an important CAAT tool which is mainly used in:1. Validation Control2. Processing ControlThis a way by which w ensure whether a set of data is :1. properly ordered or sequenced or out of ordered2. within a predefined limit or range or out of predefined range
read more | digg story
How to plan a Penetration Test
Penetration Tests is very important as it leads to the modification/adoption of policies related to Information System. Vulnerabilities detection may lead to a stronger system.Proper planning of Penetration testing is even more important.
read more | digg story
Corrective Control & Information System's irregularities
Corrective Controls are one of the three basic types of internal control which are basically meant to correct detected irregularities of Information System. Success of corrective control (any type of internal control) depends mainly upon the following factors:1. Control Objective definition2. Control Rule sets .....
read more | digg story
Error detection & correction by Parity Checking
In parity checking an extra bit called a parity bit is added to a byte of data or more appropriately a data set to detect if data set is transmitted correctly. This is a means of error detection and sometimes error correction. Parity bit is sometimes also called check bit.
read more | digg story
Saturday, August 23, 2008
Subscribe to:
Posts (Atom)
My Favourite Blog List
Blog to watch
Ranking & Authority
 |
 |