Buffer overflow
The buffer overflow is the malicious user causes the system paralysis to the server transmission mass data the model attack method. This system including saves these data the pre-placed buffer. If receives the data quantity is bigger than the buffer, then the partial data will overflow to the storehouse. If these data are the codes, the system will carry out afterward overflows to the storehouse in any code. Web also involves using the buffer overflow attack's typical example to the HTML document. If in HTML document's field's data enough big, it can create a buffer overflow condition.
Direct visit browsing
The direct visit browsing refers to the homepage which the direct visit should need to confirm. Does not have the correct disposition Web application procedure to be possible to let malicious the user visit directly includes the sensitive information URL or causes to provide the charge homepage the company to lose the income.
Web application security gait
Web can give enterprise's property, the resources and the prestige using the attack creates the significant destruction. Although the Web application increased the enterprise the danger which attacks, but has many methods to be possible to help to reduce this danger. First, must educate the development personnel to understand the safe encoding method. This step will only eliminate the majority of Web application the security problem. Next, insisted that follows all manufacturers the newest security patch procedure. If does not carry on patching to the known flaws, is the same with the Trojan horse, the aggressor can use your Web application procedure to pass through the firewall very easily to visit the Web server, the database server, to apply server and so on. Unifies these two steps, greatly will reduce the Web application to come under the attack the risk. Simultaneously the administrative personnels must take the strict measure, guaranteed that does not let anything slide from these
Other pages: : <<Prev * 1 * 2 * 3
|
You are here: hacking technology
> network management
> Content
Category: Home
> network management