Common Vulnerability Scoring System (CVSS) rating is used as a guideline to identify and describe key metrics of a flaw and is meant to help…Leer artículo completo

This is a primer on the implementation of the ROLIE protocol. The purpose of this report is to recommend automated processes for information exchange of…Leer artículo completo

When it comes to managing security risks, enterprises face an increasing number of challenges. One of these challenges is managing the security health of the…Leer artículo completo

Application allowlisting is the practice of specifying an index of approved applications or executable files that are permitted to run on a system by a…Leer artículo completo

You can avoid the "heart-ache and the thousand natural shocks" of conflicting vulnerability reports by following Red Hat's OVAL feed and security ratings. Here's how…Leer artículo completo

“I don’t have permission to do this!” That’s one of many phrases that I used to hear from a couple of developers when trying to…Leer artículo completo

In this final entry for the container security series, we'll look at network traffic control for containers running in Red Hat OpenShift…Leer artículo completo

In our last post we talked about using Multi-Category Security (MCS) instead of Multi-Level Security (MLS) to provide isolation on systems with different levels of…Leer artículo completo

In this post, we look at Control-Flow Integrity (CFI) protection implemented by the Clang compiler for x86_64 architecture…Leer artículo completo

Red Hat’s virtualization ecosystem consists of QEMU, an emulator, and Linux's Kernel-based Virtual Machine (KVM), an in-kernel driver along with many other software projects that…Leer artículo completo