Tag: security

Error handling

SQL Injection attack

Data and Input Validation

Buffer overflow attack

Invalidated input

Cross site scripting (XSS)

Use of firewall for content verification

web sever misconfiguration

Directory structures

Facility security measures

Alarm codes

Password policy

HTTP 1.1

HTTP 1.0

SSL/TLS

HTTP Keep-Alive

Cross Site Scripting (XSS)

Buffer Overflow

SQL Injection

Cross Site Request Forgeries (CSRF)

Defence

Dumpster Diving

Deterrence

Detection

Make user aware of his obligation and establish accountability for his action

Publish organizations policies

Showcase organization's technological advancements

Detect any intrusion into internal network of the organization

Go-Live (deployment to production)

Support and Maintenance

Requirement Gathering Phase

Prototyping Phase

Identifying all possible erroneous inputs and managing how the application responds to them

During application execution, if some special conditions are met, then a specific subroutine 'exception handler' is called

Commercial runtime environments have tools that record debugging information from memory at the time of exception to provide 'root-cause' analysis information later.

All of the above

It may be copyrighted and not usable without explicit permission, payment or formal credit to creator

It may carry spyware, backdoors or some form of malicious code

It may breach the service agreement with customer if done without approval

All of the above