Articles Tagged “IPA”
8 articles tagged “IPA”, newest first.
-
Registered Information Security Specialist Exam, Spring 2024 (Reiwa 6) Afternoon Q1 — JWT alg=none, API Authorization, and Interim WAF Mitigation
This article explains Afternoon Q1 of Japan's Spring 2024 RISS exam: JWT alg=none, API authorization, Mass Assignment, 4-digit code brute force, and interim ...
-
Registered Information Security Specialist Examination, Autumn 2023 (Reiwa 5) Afternoon Question 2 Explained — Files Walking Out Over the Guest Wi-Fi
Autumn 2023 RISS exam Afternoon Question 2 shows how a USB-banned company loses files over guest Wi-Fi. It covers certificates, HSTS, MAC filtering, EAP-TLS ...
-
Registered Information Security Specialist Examination, Autumn 2023 (Reiwa 5) Afternoon Question 1 Explained — The Stored XSS Where 16 Reviews Show Up as 2
This walkthrough of Autumn 2023 RISS exam Afternoon Question 1 shows how split posts beat the character limit, how the session ID left as an image, and what ...
-
Information Security 10 Major Threats 2026 — How to Read the Ranking, and What SMEs Should Actually Guard Against
In IPA's 'Information Security 10 Major Threats 2026,' ransomware attacks took first place for the 11th year running, supply chain attacks came in second, an...
-
Don't Forget to Decide 'How Many Seconds Is Fast Enough' — Organizing Non-Functional Requirements With IPA's Non-Functional Requirements Grade
Disputes like 'it's too slow' or 'we didn't expect that failure response' usually trace back to non-functional requirements nobody decided on. This article e...
-
What Website Clients Should Know Too — Using IPA's 'How to Secure Your Website' as a Checklist
What standard should you use to check your company website's security against? This article explains the 11 vulnerabilities and countermeasures covered in IP...
-
Where Should SMEs Start on Security? — A Walkthrough of IPA's 'Information Security Guidelines for SMEs,' 4th Edition
Where should small and medium-sized businesses start on security? Drawing on IPA's 'Information Security Guidelines for Small and Medium Enterprises,' 4th ed...
-
How Should You Structure a Custom Software Development or Operations & Maintenance Contract? — Learning the Quasi-Mandate vs. Contract-for-Work Distinction from IPA's 'Model Contract'
When you outsource system development, how should the contract be structured? Drawing on the 'Information System Model Transaction and Contract' published by...