Tag: security

An unsolicited message was sent

A cell phone was cloned

An IM channel introduced a worm

Traffic was analyzed

Knowing the proper proxy and default gateway

Knowing whom to trust

Knowing what authentication method is most appropriate

Knowing how to resolve hostnames

Data owners

Users

Administrators

Management

Functional Manager

Senior Management

The owner

The user

Employees

Hackers

Attackers

Contractors

Eavesdropping

Working through a list of words

Session Hijacking

Pretending to be someone or something else

Captcha

Session Mgmt

Whitelisting of inputs

Blacklisting of inputs

unused request types or methods

manuals and installation documents

examples

All

SQL Injection is a type of security exploit in which the attacker is able to call built-in stored procedures

SQL Injection attack technique forces a web site to echo client-supplied data, which executes in a user's web browser

SQL Injection is a type of security exploit in which the attacker adds SQL statements in the user input

SQL Injection attacks allow a malicious individual to execute undesired SQL statements

Application Denial of Service attacks tend to exploit flaws in application design/architecture & implementation to prevent legitimate access to victim’s services

Application Denial of Service has 2 typical types: Account Lockout & Database Slowdown

Application developers should implement a strong positive validation mechanism at the server side, capable of filtering out malicious code/scripts from the user input.

Use principle of full privilege to provide grant access to a service/resource in the web application to the end users/clients