assuringyourwebapplicationsecurity

assuringyourwebapplicationsecurity内容摘要：

e by press time. And it39。 s also worth noting that one wouldn39。 t have to call Amazon to pull this off. Your pizza guy could do the same thing, for example. If you have an AppleID, every time you call Pizza Hut, you39。 re giving the 16yearold on the other end of the line all he needs to take over your entire digital life. The victim39。 s initial post: Update: Apple has changed its policy and stopped taking phonebased password reset requests, pretty much as a result of this incident, and has beefed up security: Overview of Web Application Threats • Web based attacks focus on an application itself and functions on layer 7 of the OSI. • Uses your own application against you. • Typically appears to be a valid user – Doesn’t typically try to beat the door down – Targets vulnerable portions of your application and sneaks in • Five basic categories – Spoofing, Repudiation, Information Disclosure, Denial of Service, Elevation of Privileges 3 Levels of Web Application Hardening • Vulnerability Prevention – Make sure your application does what it is suppos。