I have 20 years of software architecture, design & development experience including 17+ years with .NET/C#/SQL. I also have 12 years of experience implementing multiple layers of security in the applications & systems that I built.
I am a US citizen residing in the US. I will be working from either LA or San Diego. I have many years of experience working remotely. I can available to attend meetings during the week at normal business hours but prefer teleconference over videochat.
Services Summary:
- Application Security Architecture & Methods
- Security / Vulnerability / Risk Assessments
- Workstation / Server Hardening
- Email Encryption (PGP) and Browser Hardening
- Hard Drive Encryption (Desktop, Laptop, Tablet & Smartphone)
- Online & Communications Security (Web Browsing, Email, Network / Wi-fi, Secure Phones & Text)
- Cybersecurity Training / Education (For Devs, Sys Admins and Employees)
My approach to reviewing the security of your applications would be from the top level architecture and then drill down to the code level. Some of the things I would look at are:
- network exposure of an application or its components
- communication between an application's components/layers
- access security/control of each component
- anti SQL injection
- anti XSS
- proper configuration of SSL/TLS
- how data is stored; if it's stored securely
- anti DDoS capability
- is code / are binaries obfuscated
- are ports hidden / obfuscated
- are strings secured
- can access control/security be subverted or indirectly accessed by exploiting other/third party components
- third party code/control risk
- are the production servers hardened
- plus 20-30 other factors that are too long to list here