Common Vulnerability Scoring System (CVSS) rating is used as a guideline to identify and describe key metrics of a flaw and is meant to help…Ler o artigo completo

This is a primer on the implementation of the ROLIE protocol. The purpose of this report is to recommend automated processes for information exchange of…Ler o artigo completo

When it comes to managing security risks, enterprises face an increasing number of challenges. One of these challenges is managing the security health of the…Ler o artigo completo

Application allowlisting is the practice of specifying an index of approved applications or executable files that are permitted to run on a system by a…Ler o artigo completo

You can avoid the "heart-ache and the thousand natural shocks" of conflicting vulnerability reports by following Red Hat's OVAL feed and security ratings. Here's how…Ler o artigo completo

“I don’t have permission to do this!” That’s one of many phrases that I used to hear from a couple of developers when trying to…Ler o artigo completo

In this final entry for the container security series, we'll look at network traffic control for containers running in Red Hat OpenShift…Ler o artigo completo

In our last post we talked about using Multi-Category Security (MCS) instead of Multi-Level Security (MLS) to provide isolation on systems with different levels of…Ler o artigo completo

In this post, we look at Control-Flow Integrity (CFI) protection implemented by the Clang compiler for x86_64 architecture…Ler o artigo completo

Red Hat’s virtualization ecosystem consists of QEMU, an emulator, and Linux's Kernel-based Virtual Machine (KVM), an in-kernel driver along with many other software projects that…Ler o artigo completo