Web Application Security - Stanford University
Spring 2014
CS 155
Web Application Security
John Mitchell
Reported Web Vulnerabilities "In the Wild"
Data from aggregator and validator of NVD-reported vulnerabilities
Three top web site vulnerabilites
! SQL Injection
Browser sends malicious input to server
n? Bad input checking leads to malicious SQL query
! CSRF ¨C Cross-site request forgery
n? Bad web site sends browser request to good web
site, using credentials of an innocent victim
! XSS ¨C Cross-site scripting
n? Bad web site sends innocent victim a script that
steals information from an honest web site
n?
Three top web site vulnerabilites
! SQL Injection
Browser sends
malicious
to server
Uses SQL
to changeinput
meaning
of
database command
n? Bad input checking leads to malicious SQL query
! CSRF ¨C Cross-site request forgery
n? Bad web site
sends request
to good
web site, using
Leverage
user¡¯s session
at
victim sever
credentials of an innocent
victim who ¡°visits¡± site
! XSS ¨C Cross-site scripting
n? Bad web site
sends
innocent
Inject
malicious
scriptvictim
into a script that
steals information
fromcontext
an honest web site
trusted
n?
Command Injection
Background for SQL Injection
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- oracle banking digital experience
- iomega ix2 dl users guide cnet content
- web application security stanford university
- ilinksview network management platform user s manual v1 0
- carestream vue pacs and vue archive 12 1 administration guide
- manual cambium networks
- oracle enterprise session border controller
- how to set wi fi function for hikvision wi fi camera
- administrator s manual audiocodes
- nighthawk ax6 6 stream ax4300 wifi router model rax45
Related searches
- stanford university philosophy department
- stanford university plato
- stanford university encyclopedia of philosophy
- stanford university philosophy encyclopedia
- stanford university philosophy
- stanford university ein number
- stanford university master computer science
- stanford university graduate programs
- stanford university computer science ms
- stanford university phd programs
- stanford university phd in education
- stanford university online doctoral programs