글 수 187,841
  •  

Secure Your Web Application Like Your Own House

조회 수 20 추천 수 0 2016.04.02 12:42:21
CTU Login - A simple way to see web application security is as simple as picturing your house. It provides a entry way, a mystery, windows, a number of rooms, a roof covering, boundary fences and different access routes. Merely the terminology is unique.

The Front Door.
Leading door associated with a web application is the login page and, unsurprisingly, oahu is the primary point of attack. A login page will contain edit boxes to type an individual name and password along with a button to deliver these for that server to authenticate your access to the remaining web application. Some login pages may provide a captcha to ensure that you really are a person and not a mock-up of the same form on the different server. The mock-up form will cycle through variations of user names and passwords until it gains accessibility to the application. This is what's called cross-site forgery and is also similar to a burglar alarm forging the secrets to your property.

Captchas are jumbled pictures of scrambled letters and numbers which make it impossible to have an automated script to learn. Unfortunately, because the scripts become cleverer at reading these images, the captcha images have to become more complex and harder for humans to learn. This makes frustration for your end-user because they have repeated failed attempts at gaining access to their account as the captcha was unreadable. Damaged whipped cream this has been to switch the captcha with a secure token. The secure token is generated my joining the user name, password and then any other user information available with a uniquely generated key. This concatenation will be encrypted and stored being a hidden field within the form, thus which makes it impossible for any mock-up form to make a successful login attempt.

The Windows and Mystery.
CTU Login - Do you know the windows of a web application? I don't mean the os on the server. I'm referring to potential aspects of each page which may be broken to create a forced entry. These areas are edit boxes and text areas that allow a user to type information. An assailant uses edit boxes and text areas to enter commands which the database understands. In the event the software programs are not written securely then its very easy to interrupt the database when it is saving the info, so it will execute the commands given by the attacker. Typical attacks could result in the database being destroyed, data being stolen or user information being compromised. This sort of attack is recognized as SQL injection.

Boundary Fences.
The boundary fences of your web site are any links, editable areas as well as the main URL address. The Link to the page itself and links a part of the page can be copied and modified from another site in order that commands can be accomplished from the server. Javascript code can be inserted into editable areas to push data to be listed in a rogue site or to gain power over the user's web browser. Database commands can also be inserted into the main URL address. These attacks are called cross-site scripting (XSS) attacks because they're scripts which direct an individual for an attacker's own internet site. XSS attacks could be utilized to steal a user's authenticated session identifier and then use it to increase the amount of access of one other account they have created.
List of Articles
번호 제목 상담날짜 상담종료일 배경색상 상담확인 면담주기 반복단위 상담시간
공지 2015년 2학기 정기상담 2015년 2학기 정기상담 안내 file              
공지 2015년 2학기 정기상담 상담가능 (14:00~17:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~16:00)              
공지 2015년 2학기 정기상담 상담가능 (16:00~18:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~17:00)              
공지 2015년 2학기 정기상담 상담가능 (16:00~18:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~16:00)              
공지 2015년 2학기 정기상담 상담가능 (14:00~17:00)              
공지 2015년 2학기 정기상담 2015년 2학기 정기상담 안내 file              
공지 2015년 1학기 정기상담 안내 (필독) file              
공지 2015년 1학기 정기상담 공지 (필독) file              
공지 상담가능(14:00~16:00)              
공지 상담가능(14:00~17:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(14:00~17:00)              
공지 상담가능(14:00~16:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(14:00~17:00)              
공지 2014년 2학기 정기상담 공지(필독) file              
공지 2014년 2학기 정기상담 공지(필독)              
공지 상담가능(15:00~17:00)              
공지 상담가능(15:00~17:00)              
공지 상담가능(10:00~12:00)              
공지 상담가능(13:00~15:00)              
공지 상담가능(15:00~17:00)              
공지 상담가능(10:00~12:00)              
공지 상담가능(13:00~15:00)              
공지 상담가능(16:00~18:00)              
공지 상담가능(15:00~17:00)              
공지 2014년 1학기 정기상담 공지(필독) file              
공지 상담가능(13:00~17:00)              
공지 상담가능(13:00~17:00)              
공지 상담가능(13:00~17:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(10:00-12:00)              
공지 2013년 2학기 정기상담 공지(필독)              
공지 상담가능(13:00-18:00)              
공지 상담가능(13:00-18:00)              
공지 상담가능(13:00-18:00)              
공지 2013년 1학기 정기상담 공지(필독) file              
공지 상담가능(1:00-3:00)              
공지 상담가능(3:00-6:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(4:00-6:00)              
공지 상담가능(10:00-12:00)              
공지 상담가능(3:00-6:00)              
공지 2012년 2학기 정기상담 공지(필독) file              
공지 2012년 2학기 정기상담 공지(필독) file              
공지 2012년 1학기 정기상담 공지(필독) file              
공지 상담가능(1:00~2:45)              
공지 상담가능(1:00~3:00)              
공지 상담가능(3:00~7:00)              
공지 상담가능(1:00~4:00)              
공지 상담가능(1:00~2:45)              
공지 상담가능(1:00-3:00)              
공지 상담가능(3:00-7:00)              
공지 상담가능(1:00-2:45)              
공지 2012년 1학기 정기상담 공지(필독) file              
3941 If you have any issue...              
3940 Hcg Truth Or Fiction              
3939 Searching For Sex In Membership Penguin              
3938 .              
3937 If you have virtually...              
3936 Currency Trading Tips              
3935 Top Pc Gaming Laptop Cpus              
3934 Should you loved this...              
3933 Three Necessities About Garcinia Cambogia              
3932 FRComment Avoir Des Dragon City Hack              
3931 Forex Trading Guide              
3930 Moviestarplanet Hack Archives              
3929 Free Download Marvel Contest Of Champions Hack NO Survey Free Hack 2015              
3928 Download Tap Titans Hack              
3927 Currency Trading For Beginners              
3926 HARGA BEGEL & MENGETAHUI KUALITAS BEGEL              
3925 If you loved this rep...              
3924 How Can The Markets React, Although Obama Remains In The Whitehouse?              
3923 Making Sense Of The Eccentrically Innovative Styles Of Lady GaGa              
3922 User Profile              
3921 Figure Out How To Forex              
3920 If you liked this sho...              
3919 Best Time To Trade The Currency Market              
3918 What's Meta Dealer Programming              
3917 If you have any inqui...              
3916 If you have any queri...              
3915 Quick Methods In Finance - Insights              
3914 On How Best To Choose An Online Stock Trading System, Know More              
3913 Illimités Tokens Et Argent Avril 2015              
3912 Jasa Konsultan It /marketing / Branding Online, Web Desain / Design Website, Sosmed / Social Media / Sosial Media, Pembuatan Toko / Website Online, Seo / Optimisasi Google, Instagram & Twitter              
3911 Hungry Shark Evolution Hack. Storify              
3910 If you loved this pos...              
3909 Here Are Actually The Most Ideal Web Sites And Apps You Can Make Use Of To Keep Track Of The Weather Condition              
3908 The Way To Layout A Site Which Works For You              
3907 Garcinia Cambogia HCA Extract Review For Weight Loss Within 2016              
3906 A Part That Will Help You Together With Your Web Page Design Needs              
3905 Cette Beauty Week! (Présentation & Code Promotion)              
3904 Free Dominatrix Cams Reviews & Guide              
3903 If you cherished this...              
3902 For Assistance With Creating Your Web Site, Go Through These Guidelines              
3901 And Dr . Ounce Facts On Pinterest              
3900 Flea Medication Choices              
3899 If you adored this ar...              
3898 And Dr . Ounce Facts On Pinterest              
3897 Developing A Site? You Should Check This Out!              
3896 Can Garcinia Cambogia Help You Lose Weight              
3895 Suggestions, Tricks And Suggestions To Consider Your Internet Layout To A Different Degree              
3894 Revamp Your Blog Using These Website Design Ideas              
3893 Step Up With Pay Per Click Management Services              
3892 To read more on http:...              
3891 Search Engine Keyword Optimization              
3890 Web Design Recommendations You Don't Wish To Miss Out On              
3889 Triche Et Pirater Real Racing 3 Hack Real Racing Three Triche Illimité Money Et Gold              
3888 Jewellery Supplies              
3887 Create A Femdom Your Parents Would Be Proud Of              
3886 Find The Right Way To Sell Your Jewelry Online              
3885 Win A Pair Of Danon Jewellery Dragonfly Earrings In Our Latest Giveaway!              
3884 Find Out How You Could Prevent Acquiring Over-graded Diamond              
3883 Publishing Your Game And Making Money: Psn And Wiiware              
3882 Danon Necklace N4167 Jewellery              
3881 This Article Will Make Your Femdom Amazing: Read Or Miss Out              
3880 FREE Head Soccer Hack Apk Online ! No Download ! Unlimited Points              
3879 USA Made Health Supplement Selected As Best Brand Garcinia Cambogia              
3878 Trendy Promenade Dresses For A Evening You'll Never Neglect              
3877 Sound Advice For Picking Excellent Web Design Computer Software              
3876 Handcrafted Jewellery And Gift Designs From Israel              
3875 Get Plenty Of Excellent Ideas On This Page About Website Design              
3874 Does Your Teen Need Inpatient Drug Rehabilitation?              
3873 A Secret Weapon For Cuckold              
3872 Root Elements Of Porn Around The UK              
3871 Google Pay Per Click Mistake And How To Fix It.              
3870 Dan Anton Entrepreneur Talks SEO, Advertising, Apps And Military Life.              
3869 US Every Week              
3868 What Google Can Teach You About Femdom              
3867 Why You Should Contact Locksmiths              
3866 US Every Week              
3865 Don't Get Fooled: Guide For Purchasing Fine Jewelry              
3864 Clash Royale Hack Guide              
3863 Gay Men Know The Secret Of Great Sex With Femdom              
3862 simply click the up c...              
3861 Eight Unforgivable Sins Of Dominatrix Live Chat              
3860 History Of Shoes By Jeff Johnson              
3859 Adverse Effects Of Garcinia Cambogia              
3858 Hcg Period 3 Helpful Taco Salad              
3857 Adverse Effects Of Garcinia Cambogia              
3856 Team Penguin Tips              
3855 Top Choices Of Bondage Video Chat              
3854 If you have any queri...              
3853 In 15 Minutes, I'll Give You The Truth About Femdom              
3852 Some Sound Guidance To Discover The Ideal Legal Representative              
3851 Learn To Care For Your Danon Jewellery              
3850 Should you loved this...              
3849 Jeff Paul Internet Marketing Makes You Earn Millions By Jones Adams              
3848 Fear? Not If You Use Femdom The Right Way!              
3847 How To Make More Cyber Mistress By Doing Less              
3846 How To Find The Correct Clothing When You Are Petite              
3845 If you are you lookin...              
3844 If you cherished this...              
3843 The Ulitmate Live Fetish Cams Trick              
3842 Traded Fund