Tag: security

Should be placed securely in a folder called “temp” in the web root

Can be placed anywhere in the web root as long as there are no links to them

Should be completely removed from the server

Can be placed anywhere after changing the extension

Print the logs to a paper

Create a copy of data in your laptop/desktop

Copy the files to CD-R's

None of the above

Unvalidated input

Lack of authentication

Improper error handing

Insecure configuration management

Commercial applications

Custom built applications

In house developed applications

All of the above

Data Validation

Secure Cookies

Encryption

Comprehensive exception handling

Session ID

Account Privileges

UserName

Password

Ensure that the data has not been tampered with

Ensure that the session is valid

Ensure that the user is valid

All of the above

The type of users who would be accessing the data

Availability, Integrity and Confidentiality

The threat level the company faces

Access controls protecting the data

Availability, Integrity, Confidentiality

Usability, Reliability, Accountability

Quality, Accountability, Integrity

None of the above

During testing

During development

During design

During all phases of application development