I have a question in security programming. As all of us know, when we have a database with passwords or anything sensitive, we would like to encrypt it so it is not readable by other. Now I want to know, which of the method is secured or less secured. Is it Iterative Salting (1000x iterative) or Encryption method such as SHA 256, MD5, and all others. Kindly give me your opinion on this please.
View 11 RepliesI'm having to store a user account locally on a machine, what would be the best method to store this? (Needs to be reversable encryption rather than hash)I'm accessing a UNC share as mentioned here: url...Can anyone suggest a better method or changes to the above to secure the credentials as much as possible?
View 1 RepliesI've been trolling for a long time now and have decided to register as I finally have some time to start jumping into VB. The last time I coded VB, the current version was VB 4. I've been out of programming for a good while now and considered myself a beginner (tutorial example coder haha).
My question is: Where is a good place to start learning VB.NET?
I know it's an often asked and answered question - but let me give you a bit more information so more specialized replies might be given.
I'm in INFOSEC/COMSEC and would like to (eventually) develop a program that contains a DB of information that is read by the application and saves input information into a DB (encrypted) as well. The program will be a 800-53 C&A control assessment program; used for tracking system compliance for federal information systems. I would like to be able to develop such a tool to make my life easier at work instead of using Excel spreadsheets to track everything.
I would like to learn:
- Input / Output methods and validation (for secure coding)
- Read/Write DB Encryption (RSA or other 128-bit) for user input information
- Ability to generate PDF reports from the primary keys and data sets from the above DB
My goal is to create a program that allows a user to install the program, setup a 'master' account that a serial/key has been generated for - that master account is then allowed to create new projects (progress saved in DB). A project asks the user certain questions pertaining to information systems and takes the input and saves it into the DB (encrypted). When the assessment is completed, I would like the program to be able to generate a PDF report from the DB (from a layout template I created).
Im trying to make a little login app that connects to my mysql. But I cant figure out how would i salt the password then hash it?
View 5 Repliescan someone tell me how salting works. i get stuck when adding more info to the data.
View 2 RepliesI have a database that is secured with a workgroup and I can not open it from VB7 to store or read data from it. I do not know what I am doing wrong.
Code in vb
Private DatabaseName As String = "C:\_Test SoftwareAppendix_FTEF1060.MagFlowMeterCalibrationDatabaseSecurity.mdw"
strConnect =
"Provider = Microsoft.Jet.OLEDB.4.0;" & _
"Data source = " & DatabaseName & ";" & _
"Jet OLEDB:"
[Code]...
I have taken this code from this forum and what I can see is that when the application is run and enter a username and password, it will compared with the username and password that is exactly the same as the database. What i want is that when the user enter the password, like it prompt out like "invalid password","the password must be not more that 8 characters". So how could I make it? Here is the code that I have used:
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
Dim con As New OleDbConnection("Provider=Microsoft.jet.oledb.4.0;data
[code]......
I have taken this code from this forum and what I can see is that when the application is run and enter a username and password, it will compared with the username and password that is exactly the same as the database. What i want is that when the user enter the password, like it prompt out like "invalid password","the password must be not more that 8 characters". So how could I make it? Here is the code that I have used:
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
Dim con As New OleDbConnection("Provider=Microsoft.jet.oledb.4.0;data
[Code]....
This is the original code in c#
public class CategoryRepository: RepositoryBase<Category>, ICategoryRepository
{
public CategoryRepository(IDatabaseFactory databaseFactory)
: base(databaseFactory)
[Code]...
Does anyone has an idea what i should change to let it work and let my UserRepository use the methods in RepositoryBase while implementing the IUserRepository?
I have set up a method in vb.net and in xcode for encrypting a string using as far as i can tell the same parameters for an AES encryption.I've looked all over the place but cannot find information on whether they use the same encryption algorithm and settings.
this is the vb.net code:
Dim encryptAES As New AesCryptoServiceProvider()
Dim encoding As New UTF8Encoding()
Dim encryptor As ICryptoTransform
encryptAES.Key = encoding.GetBytes("12345678901234567890123456789032")
encryptAES.IV = encoding.GetBytes("1234567890123416")
encryptAES.Mode = CipherMode.CBC
[Code]...
I am trying to access a FTP secured site (SSL/TSL) and transfer a file in VB.Net using FTPRequest. When I try to complete the transfer I get an error back "The remote certificate is invalid according to the validation procedure". However when I connect to the same FTP site with FileZilla UI, I can transfer files with no problem. Why can do transfers with FileZilla and not in VB.Net? Does FileZilla have its own Certificate?
View 3 RepliesI'm trying to access a secured website using vb 2005 and webbrowser control. I've got the credentials, the script can pass the login page but when trying to navigate to the second page within, the page is being redirected back(to the first page after logging in). The second page I'm trying to get to retrieves the data from a database and displays some options for the user to select in order to prepare a report which can be downloaded after the fields selections. And I wanted my script to do this automatically without user interaction.
Public Class Form1
Private Sub TestButton_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles TestButton.Click
Dim wb As WebBrowser = WebBrowser1
[code]....
know open an xml file into a datagrid. The xml file is stored in a secured ftp with username and password. Just as an example if the site ftp.mysitesite.com, with username "xxx" and the password "XXX" has the file 123.xml, then how do I load 123 into a datagrid. Is it possible to store these info to a variable in app.Config and use that variable to access the site?
View 5 Replieswe do have incidents that two different users signing on the same website and seeing other's account, one possible reason is the session id assigned to each sign on user got a collision - although the possibility could be extremely low, but in our case it is not acceptable as long as it is possible. So I am looking for a 100% absolutely secured session id?
View 4 RepliesI wanted to know what are the risks of opening up a socket server on a specified port? Right now I have it limited to only accept requests from 1 specific IP to that port and all the other ones get rejected (using the windows firewall), is there a way to implement an authentication or anything else so I can allow it to be accessed from any IP worldwide yet have it secured?
View 1 RepliesI am working with a vb program, but there is something strange on one of my .vb code pagewhen i put the "dot" afther the object name its dont show the methods availables for this objectbut on other vb code pages i can see it. but in this one no.for exmaplethis is a piece of code: Dim sb As New StringBuilder()
View 3 RepliesI am not sure how clear my question is by the title, but I am trying to make Class methods instead of Instance methods in Visual Basic that way I don't have to waste memory and code creating temporary objects to execute methods that don't need instance variables.
I am not sure if you can do that in VB but I know you can in Objective-C by using either a "+" or "-" sign in front of the method declaration. And in C++ (at least I think, I can't remember) you put the static keyword or const keyword in front of the function.How would I do this in VB if it is possible? Or should I just make a separate set of functions that are not members of a class?
Public Class Form1 Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load Dim someproc As Process
[Code]...
is there anyway that I can convert this to use RSA encryption?
Imports System.Text
Imports System.Security.Cryptography
Imports System.IO
Public Class ClsEncryption
[code].....
I have been trying to create an app that will do xor encryption. I have tried a few different functions but none of them seem to give me what I want. I need it to put the coded text into a 7 bit ascii string. For example if the key was a - 1100001 and the text to be encrypted was s - 1110011 then it would return 0010010 as the encryption. One of the pieces of code I tried to use
Public Function XOREncryption(ByVal CodeKey As String, ByVal DataIn As String) As String
Dim lonDataPtr As Long
Dim strDataOut As String
Dim temp As Integer
[code]....
This returns a hex digit though which will not work for what I want.
have made a library for my vb.net project by combining 3 libraries (using ilmerge).
View 3 RepliesI am attempting to create a program that can do raw RSA encryption (performing the encryption without using 'Encrypt' and 'Decrypt') of a user's message that can contain a-z, A-Z, 0-9, and [,.;:'"()]. I've attached a screen shot of the application form.
Basically, the user will pick from a list of prime numbers from the first box and input them into p and q. They will type their message in the designated textbox and then hit <encrypt> which will encrypt using p and q and then show the encrypted message below. I'll leave out the Key box since that deals with the math behind the encryption.
The part I am stuck on right now is assigning a number to each one of the characters so that it can be encrypted. These numbers need to remain the same so that the message can be decrypted as well.
i have this .xml file read and display at runtime by vb.net2003. the .xml file is the database which contain various data and its not for adding more data or edited by user so i need to protect the file so that my code can read and display those data. can anyone know how to protect the file.
View 1 RepliesHere is some code that works well for strings:
[Code]....
modifying these functions to encrypt/decrypt byte arrays rather than strings. Also, to have the functions return the encrypted/decrypted byte array, rather than a string.
I am trying to implement the encryption script from Barclays payment gateway, however it's in VB and the rest of our site is in c#.
The script is
Public Class Example
Inherits System.Web.UI.Page
#Region " Web Form Designer Generated Code "
[code]....
How am I able to either run this VB in my C# aspx page? Or do I need to convert it to use c#?? In my aspx page, I have the first line
<%@ Page Language="C#" ContentType="text/html" ResponseEncoding="utf-8" CodeBehind="encryption.cs" %>
my program takes a txt file and encrypts it successfully but it returns the wrong thing when decryting.[code]
View 4 RepliesI have a problem with an encryption made in AdobeFlex and which I need to translate to VB.NET.The core is a AES Encryption, but I tried several ways and code and the encrypted strings weren't the same The original Flex Sourcecode is:
VB
private function encryptAES(arg1:String, arg2:String, arg3:String="aes128-cfb8", arg4:String="None"):String
{
var loc1:*=com.hurlant.util.Hex.toArray(com.hurlant.util.Hex.fromString(arg2));
[code]....
My question is how to get the code work in VB.NET
I have a problem with an MD5-hash algorythm that's acting very oddly.Here's the
vbcode
Imports System.Security.Cryptography
Imports System.Text
[code].....
I'm looking to use RSA Asymmetric encryption to encrypt some data. I've read this article on the forums with a similar title, but it did not answer my question. What I would like to do is use the private key of an RSA key combination to encrypt (sign?) the data and use the public key to decrypt (verify?), as per this wikipedia article . I would like to use this method because I want people to be able to read the data, but not create it themselves. I've copied the code from Peter Bromberg's article RSA Encryption in .NET Demystified , but always get an exception with the "Bad Key" message. If I use the public key for decryption, it works fine (the opposite of what I want). use the public key for encryption.
View 2 RepliesIn my database I have a column that contains the passwords, and I use the
View 3 Replies