Tag: security

Distribute virus through emails

Distribute worms through emails

Use botnets

Phising

Looting a bank

Looting email addresses, personal information

Stuxnet kind of attacks

Distributing virus, worms

Ping flood

Request to access a non-standard port

Request to access a standard port

DDOS

SQL injection

Social engineering attacks

War-dialing attack

War-driving attack

cross-site scripting

command injection

SQL injection

path traversal attacks

Client-side data validation

Filtering data with a default deny regular expression

Running the application under least privileges necessary

Using parameterized queries to access a database

Sufficient to secure the application

Sufficient only when combined with other controls

Sufficient if the passwords are longer than six characters

Sufficient if none of the users have administrative access

Blocking access to antivirus and antispyware updates

Aggregating surfing habits across multiple users for advertising

Customizing search results based on an advertiser's needs

All of the above

Trust user supplied data.

Clean and validate all user input

Use GET instead of POST.

Allow the use of HIDDEN form fields.

"Spoofed" e-mails and fraudulent websites designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords

A type of computer virus

An example of a strong password

None of the above