In the Internet popularity and Web technology rapid evolution's today, the challenge which the online security faces is day by day stern. Is following on-line information and the service usability promotion, as well as the base sub-Web attack and the destruction growth, the security risk has achieved the unprecedented altitude. Because the numerous trouble-free services concentrate above the network itself, the Web application procedure is forgotten nearly. Perhaps this is because the application procedure in the past was the stand-alone program which frequently moved on a computer, if this computer security, then the application procedure was safe. Now, the situation has been different, the Web application procedure moves on many kinds of different machines: Client side, Web server, database server and application server. Moreover, because they may let all person use generally, therefore these application procedure has become the numerous attack backstage bypass.
Because the Web server will provide several different ways to request that the repeater for applied the server, and will have revised or the new homepage sending back for the end-user, this caused illegal to intrude the network becomes easier.
Moreover, many programmers did not know how to develop the security the application procedure. Perhaps their experience is the development independent application procedure or Intranet the Web application procedure, these application procedure had not considered when the shortage of security is used possibly will present the disastrous consequence.
The attack which next, many Web application procedure easy to receive through the server, the application procedure and the interior has developed the code which carries on. These attack adopted the peripheral firewall security measure directly, because of the port 80 or 443 (SSL, security sleeve joint character protocol layer) must open, with the aim of letting the application procedure normal operation. The Web application procedure attack including (refuses service) to application procedure's DoS to attack, the change homepage content as well as to steal the enterprise the key information or the user information and so on.
In brief, the reason that the Web application attack is different with other attacks, is because they were discovered very difficultly, moreover possibly comes from any online user, even is undergoes the confirmation the user. Until now, this aspect not yet receives takes seriously, because the enterprise users mainly use the firewall and the invasion examination solution protect its network the security, but the firewall and the invasion examination solution could not discover the Web attack.
Common Web application security crack
Below will list the security crack which a series of will usually appear, and explained simply how these cracks will be produce.
Known weakness and wrong disposition
The known weakness including the Web application use's operating system and in the third party application procedure's all program error or may by the use crack. This question also involves to the wrong disposition, contains has the unsafe default setting or the manager has not carried on the safe disposition the application procedure. A very good example is your Web server is disposed may let any user's pass from system any directory path, will like this possibly cause the revelation to save on Web server's some sensitive information, like password, source code or customer information and so on.
Other pages: : 1 * 2 * 3 * Next>>
|
You are here: hacking technology
> network management
> Content
Category: Home
> network management