ALL >> General >> View Article
Detection & Handling Of Application Security Threats

Since there are several variations in specific attacks as well as attack techniques, for better detection, it is essential to view the threat in the prospects of how attackers are attempting to achieve.
Application Threats & Countermeasures
A good way of detecting application threats is to arrange them in a vulnerable category. Here is an overview of the various categories and the main threats to the application.
Input validation vulnerability category includes threats like cross-site scripting, buffer overflow, SQL injection, and canonicalization.
Authentication is prone to brute force attacks, cookie replay, dictionary attacks and network eavesdropping.
Authorization includes confidential data disclosure, elevation of privilege, luring attacks and data tampering.
The configuration management category includes the attacks like unauthorized administration interface access, the absence of individual accountability, clear text config data retrieval, over-privileged process and unauthorized configuration stores access.
Sensitive data includes access to sensitive data in storage, ...
... data tampering, and network eavesdropping.
Session management includes session replay, session hijacking, and man in the middle attack.
Cryptography includes poor key management, poor key generation, custom or weak encryption.
Exception Management comprises a denial of service and information disclosure.
Auditing & Logging involves user denies of doing an action, attackers covers his tracks and attacker exploits a vulnerability without a trace.
How To Handle Application Security Threats
Validated Input- Validate the inputs to the application by using fundamental edit checking to ensure that the content submitted through the user interface is proper for each fold.
Bind Variables – take the benefits of bind variables when executing SQL queries.
Restrict the access to the internal resources through various application server config settings.
Update framework on a normal interval.
Qualify entire user input
Filter potentially malicious input
Choose a strong password, which is complex, aren’t regular words, and include a compilation of lowercase, uppercase, numeric & special characters.
Use standard encryption technology to keep sensitive information in configuration databases and files.
Use sturdy ACLs to safeguard Windows resources.
Perform role evaluation before permitting access to the application, which could potentially disclose sensitive data.
Use sturdy authorization with several gatekeepers.
Add Comment
General Articles
1. How Technology Is Transforming The Future Of Online Sports PlatformsAuthor: reddy book
2. Kerala’s Emerging Franchise Opportunities
Author: MFJ LLP
3. Why 925 Silver Oxidised Rings Are The Perfect Mix Of Vintage And Style
Author: 925 Silver
4. The Rise Of Responsible Online Gaming In India
Author: reddy book
5. Best Open Source Tools For Document-style Reporting Like Crystal Reports
Author: Vhelical
6. What Is The Best Bi Software Other Than Tableau – Helical Insight
Author: Vhelical
7. Why Night Drone Surveillance Is Vital For Industrial Plant Safety
Author: Dronitech
8. Recommended Garden Room Company For Home Offices
Author: Pecasa Home
9. Ensuring Resilience: Emp Testing Services
Author: Ryan Seacrest
10. Best Ecommerce Design And Development Company In India | Build High-converting Online Stores
Author: Listany
11. The Complete Guide To Stainless Steel Flanges – From Neelam Forge Experts
Author: Neelam Forge India
12. Slither Into Nostalgia: A Deep Dive Into The Enduring Appeal Of Snake Game
Author: Games
13. Aws Devops Training Institute In Hyderabad | Devops Online
Author: Visualpath
14. Transforming Beauty Science: The Future Of Cosmeceuticals Formulation And Product Development
Author: Foodresearchlab
15. Premium Stainless Steel Coils – Durable Solutions For Global Industries
Author: R.H. Alloys