Application Security
Detecting SQL Stored Procedure Abuse (T1505.001)
Stored procedures, xp_cmdshell and CLR assemblies can turn a database server into a persistence point. What MITRE says and how to audit yours.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Detecting Malicious Server Software Components (T1505)
Servers let developers extend them with modules, plugins and scripts. Adversaries abuse that for persistence. What to audit, sign and disable.
Oct 18, 20263 min read
Application Security
Detecting Crash Based DoS Exploitation (T1499.004)
Adversaries can exploit software flaws to crash an application or system and keep it down. How MITRE describes it, what crash patterns to watch, and how to cut exposure.
Oct 18, 20263 min read
Application Security
Detecting Application Exhaustion Floods (T1499.003)
Some application features are expensive to run. Repeated requests to them can take an app down. What MITRE says, what to watch for and how to filter.
Oct 18, 20262 min read
Application Security
Detecting Service Exhaustion Floods (T1499.002)
HTTP floods and TLS renegotiation attacks target the services you expose. Here is how MITRE describes them, how to spot them in logs, and how to filter them.
Oct 18, 20262 min read
Application Security
Detecting OS Exhaustion Floods (T1499.001)
How SYN and ACK floods exhaust an operating system's TCP state, what the traffic looks like, and the upstream filtering and SYN cookies that blunt them.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Endpoint Denial of Service (T1499)
Endpoint DoS exhausts host resources or crashes services without filling the network. What MITRE documents, what to watch in logs, and how to harden services.
Oct 18, 20264 min read
Application Security
Detecting Reflection Amplification DDoS Attacks (T1498.002)
Reflection attacks bounce spoofed requests off third party servers to multiply traffic. What MITRE documents about DNS, NTP and memcache, and what to monitor.
Oct 18, 20263 min read
Application Security
Detecting Direct Network Flood Attacks (T1498.001)
Direct floods send huge volumes of UDP, ICMP or TCP traffic at a target, often from botnets. What MITRE documents and how to detect and absorb them.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.