글 수 188,196
  •  

Secure Your Internet Application Like Your Own House

조회 수 18 추천 수 0 2016.04.02 11:23:57
CTU Login - A good way to look at web application security is simply by picturing your house. It features a door, a mystery, windows, numerous rooms, a roof, boundary fences and different access routes. Just the terminology is unique.

Leading Door.
The leading door of any web application will be the login page and, not surprisingly, oahu is the primary reason for attack. A login page will contain edit boxes to type an individual name and password along with a button to deliver these for the server to authenticate your access to the rest of the web application. Some login pages may give a captcha to make sure you really are a person and never a mock-up of the identical form over a different server. The mock-up form will cycle through variations of user names and passwords until it gains accessibility application. This is known as cross-site forgery and is also similar to a burglar alarm forging the secrets to your home.

Captchas are jumbled pictures of scrambled letters and numbers which make it impossible to have an automated script to read. Unfortunately, since the scripts become cleverer at reading these images, the captcha images have to become more complex and harder for humans to see. This makes frustration for that end-user since they have repeated failed attempts at accessing their account as the captcha was unreadable. The reply to it has gone to switch the captcha using a secure token. The secure token is generated my joining the user name, password and any other user information provided with a uniquely generated key. This concatenation will be encrypted and stored as a hidden field within the form, thus making it impossible for any mock-up form to create a successful login attempt.

The Windows and Back Door.
CTU Login - Do you know the windows of your web application? I don't mean the os about the server. I'm talking about potential areas of each page which could be broken to make a forced entry. These areas are edit boxes and text areas which permit a user to type information. An assailant uses edit boxes and text areas to penetrate commands that the database understands. When the software is not written securely then it's quite simple to destroy the database when it is saving the info, so it will execute the commands furnished by the attacker. Typical attacks could cause the database being destroyed, data being stolen or user information being compromised. This type of attack is known as SQL injection.

Boundary Fences.
The boundary fences of the web site are any links, editable areas and also the main URL address. The Link to the page itself and links a part of the page could be copied and modified from another site in order that commands can be executed from the server. Javascript code can be inserted into editable areas to force data to become listed in a rogue site in order to gain charge of a person's internet browser. Database commands can also be inserted in to the main URL address. These attacks are classified as cross-site scripting (XSS) attacks since they're scripts which direct the consumer to a attacker's own internet site. XSS attacks could possibly be accustomed to steal a user's authenticated session identifier and use it to boost the level of access of one other account they have created.
List of Articles
번호 제목 상담날짜 상담종료일 배경색상 상담확인 면담주기 반복단위 상담시간
공지 2015년 2학기 정기상담 2015년 2학기 정기상담 안내 file              
공지 2015년 2학기 정기상담 상담가능 (14:00~17:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~16:00)              
공지 2015년 2학기 정기상담 상담가능 (16:00~18:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~17:00)              
공지 2015년 2학기 정기상담 상담가능 (16:00~18:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~16:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~17:00)              
공지 2015년 2학기 정기상담 2015년 2학기 정기상담 안내 file              
공지 2015년 1학기 정기상담 안내 (필독) file              
공지 2015년 1학기 정기상담 공지 (필독) file              
공지 상담가능(14:00~16:00)              
공지 상담가능(14:00~17:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(14:00~17:00)              
공지 상담가능(14:00~16:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(14:00~17:00)              
공지 2014년 2학기 정기상담 공지(필독) file              
공지 2014년 2학기 정기상담 공지(필독)              
공지 상담가능(15:00~17:00)              
공지 상담가능(15:00~17:00)              
공지 상담가능(10:00~12:00)              
공지 상담가능(13:00~15:00)              
공지 상담가능(15:00~17:00)              
공지 상담가능(10:00~12:00)              
공지 상담가능(13:00~15:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(15:00~17:00)              
공지 2014년 1학기 정기상담 공지(필독) file              
공지 상담가능(13:00~17:00)              
공지 상담가능(13:00~17:00)              
공지 상담가능(13:00~17:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(10:00-12:00)              
공지 2013년 2학기 정기상담 공지(필독)              
공지 상담가능(13:00-18:00)              
공지 상담가능(13:00-18:00)              
공지 상담가능(13:00-18:00)              
공지 2013년 1학기 정기상담 공지(필독) file              
공지 상담가능(1:00-3:00)              
공지 상담가능(3:00-6:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(4:00-6:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(3:00-6:00)              
공지 2012년 2학기 정기상담 공지(필독) file              
공지 2012년 2학기 정기상담 공지(필독) file              
공지 2012년 1학기 정기상담 공지(필독) file              
공지 상담가능(1:00~2:45)              
공지 상담가능(1:00~3:00)              
공지 상담가능(3:00~7:00)              
공지 상담가능(1:00~4:00)              
공지 상담가능(1:00~2:45)              
공지 상담가능(1:00-3:00)              
공지 상담가능(3:00-7:00)              
공지 상담가능(1:00-2:45)              
공지 2012년 1학기 정기상담 공지(필독) file              
4196 Rue B Jewellery              
4195 Create A Bondage Show Your Parents Would Be Proud Of              
4194 The Best Entry Points In FOREX              
4193 Six Awesome Tips About Femdom From Unlikely Sources              
4192 Contracts For Difference (CFDs)              
4191 Danon Jewellery Tips              
4190 If you have any thoug...              
4189 Ten Best Ways To Sell Bondage Chat              
4188 Forex Trading UK              
4187 Pure Garcinia Cambogia Extract Weight Loss Pills Reviews Intended For Australians              
4186 Common Questions About Jewelry Answered Here              
4185 Boom Beach Hack              
4184 On HubPages              
4183 If you have any kind ...              
4182 Insights On Uncomplicated Porn Products              
4181 Currency Trading Prices              
4180 Do You Know Me? MV EVALUATION (UniqueFreak)              
4179 If you have any inqui...              
4178 Basic Safety Garcinia Cambogia Risks And Unwanted Effects Webmd              
4177 FSA Charges Five Former Blue Catalog Team With 'Core Working'              
4176 When you have any kin...              
4175 Cfd Trading, Cfd Trading Online, Online Trading Program              
4174 If you beloved this p...              
4173 What Your Customers Really Think About Your Femdom?              
4172 Last Chance To Buy On Pinterest              
4171 Fashion Suggestions - Placing With Each Other An Outfit With Leggings              
4170 Here's more regarding...              
4169 Kids Love Femdom              
4168 Online Money Creating Is Easy With The Correct Way              
4167 No-Fuss Plans For Shemale - The Options              
4166 What The Pope Can Teach You About Danon Jewellery              
4165 Verbal Hcg              
4164 In case you have any ...              
4163 Best Femdom Tips You Will Read This Year              
4162 Team Penguin Ideas              
4161 Beginners Guide To Binary Options Trading              
4160 Win A Pair Of Danon Jewellery Dragonfly Earrings In Our Latest Giveaway!              
4159 Skincare Suggestions You Need To Have              
4158 The Art Of Choosing The Ultimate Gaming Laptop              
4157 The Untold Story On Femdom That You Must Read Or Be Left Out              
4156 What Is Currency Trading Exactly About?              
4155 Hcg Diet Dishes              
4154 Three Rivers Archery Supplies              
4153 If you liked this sho...              
4152 The Lesbian Secret Revealed: Femdom For Great Sex.              
4151 Danon Necklace N4167 Jewellery              
4150 Choosing Live Bondage Cams Is Simple              
4149 Perth Website Design.              
4148 What You Need To Know About Femdom And Why              
4147 How To Trade In Global Foreign Currency Market              
4146 In case you have just...              
4145 Kids, Work And Bdsm Chat Room              
4144 Top Nine Ways To Buy A Used Femdom              
4143 How To Be Described As A Millionaire Using Automatic Fx Trading              
4142 Acid Reflux Disease And Cancer              
4141 The Justin Bieber Guide To Femdom              
4140 Ways To Advertise Heart Health              
4139 Cell War On Key Kind Purchases In Talks              
4138 Garcinia Cambogia Extract A Double Action Fat Burner              
4137 Variations In Foreign Currency Price Have To Be Properly              
4136 Danon Jewellery Shopping              
4135 Looking For A Dominatrix Guide              
4134 How To Eliminate Existing Concrete              
4133 Online Odd Jobs              
4132 Outrageous Femdom Video Chat Tips              
4131 4 Ways To Use Hcg Drops For Weight Reduction              
4130 For more info on buy ...              
4129 Korea Makes £1.87bn Aggressive Bid For British Gas Traveler Dana Petroleum              
4128 Understanding The Basics Of Currency Trading              
4127 Enhance Your Teeth With Cosmetic Dentistry              
4126 5 Ways Femdom Sites Can Drive You Bankrupt - Fast!              
4125 Uto ADSL Down              
4124 All About Mistress Free Chat              
4123 Forex Robots              
4122 The Exquisite Collection Of Danon Jewellery Now At Shade Station              
4121 If you are you lookin...              
4120 If you beloved this r...              
4119 Buying Used Power Tools              
4118 If you please click ...              
4117 The Benefits Of Online Forex Trading              
4116 In the event you love...              
4115 If you have any conce...              
4114 What The Experts Tell You About Buying Jewelry              
4113 Can It Help You Lose Weight?              
4112 Learn To Care For Your Danon Jewellery              
4111 Muscle Building For Women - Advice And Tips              
4110 When you liked this p...              
4109 When you loved this i...              
4108 An Introduction To-Day Trading              
4107 What The Pope Can Teach You About Danon Jewellery              
4106 Prime Time For Pruning              
4105 If you have any thoug...              
4104 Hcg Drops              
4103 Should you adored thi...              
4102 Tree Removing & Tree Trimming              
4101 The True Story About Femdom That The Experts Don't Want You To Know              
4100 The Low Down On Casino Malaysia Exposed              
4099 What The Pope Can Teach You About Danon Jewellery              
4098 The Truth About Live Fetish Cam              
4097 Congress And The Founding Fathers Pray