<meter id="pgsoe"></meter>

<code id="pgsoe"><u id="pgsoe"></u></code>

<acronym id="pgsoe"><video id="pgsoe"></video></acronym>
    1. <label id="pgsoe"></label>
  • <acronym id="pgsoe"><legend id="pgsoe"><blockquote id="pgsoe"></blockquote></legend></acronym>
      <label id="pgsoe"></label>
    <acronym id="pgsoe"></acronym>
  • <meter id="pgsoe"><u id="pgsoe"><option id="pgsoe"></option></u></meter>
    <output id="pgsoe"></output>
  • <var id="pgsoe"><ol id="pgsoe"></ol></var>
    DPC2020 - Workshop day

    General considerations

    A completely secure system is a virtual impossibility, so an approach often used in the security profession is one of balancing risk and usability. If every variable submitted by a user required two forms of biometric validation (such as a retinal scan and a fingerprint), you would have an extremely high level of accountability. It would also take half an hour to fill out a fairly complex form, which would tend to encourage users to find ways of bypassing the security.

    The best security is often unobtrusive enough to suit the requirements without the user being prevented from accomplishing their work, or over-burdening the code author with excessive complexity. Indeed, some security attacks are merely exploits of this kind of overly built security, which tends to erode over time.

    A phrase worth remembering: A system is only as good as the weakest link in a chain. If all transactions are heavily logged based on time, location, transaction type, etc. but the user is only verified based on a single cookie, the validity of tying the users to the transaction log is severely weakened.

    When testing, keep in mind that you will not be able to test all possibilities for even the simplest of pages. The input you may expect will be completely unrelated to the input given by a disgruntled employee, a cracker with months of time on their hands, or a housecat walking across the keyboard. This is why it's best to look at the code from a logical perspective, to discern where unexpected data can be introduced, and then follow how it is modified, reduced, or amplified.

    The Internet is filled with people trying to make a name for themselves by breaking your code, crashing your site, posting inappropriate content, and otherwise making your day interesting. It doesn't matter if you have a small or large site, you are a target by simply being online, by having a server that can be connected to. Many cracking programs do not discern by size, they simply trawl massive IP blocks looking for victims. Try not to become one.

    add a note add a note

    User Contributed Notes

    There are no user contributed notes for this page.
    To Top
    封丘| 崂山| 申扎| 天水| 北川| 临夏| 龙里| 黄陂| 新巴尔虎左旗| 溧阳| 连山| 丰宁| 永城| 汕头| 澄城| 朝克乌拉| 邛崃| 双阳| 宽城| 肇源| 奉贤| 宾阳| 太原北郊| 拉孜| 淄川| 昭通| 开封| 五常| 星子| 丰润| 临洮| 新龙| 大安| 乌苏| 修文| 若尔盖| 黄茅洲| 靖江| 太原南郊| 临汾| 鄯善| 深泽| 仁怀| 洛阳| 沧源| 邱县| 鹤山| 多伦| 商城| 黑山| 襄城| 淳安| 普宁| 邕宁| 龙泉驿| 张家港| 浪卡子| 嘉荫| 蒲江| 东平| 隆尧| 确山| 牡丹江| 泊头| 萧山| 新界| 会宁| 余干| 衢州| 安宁| 德惠| 西畴| 兴义| 引水船| 宜宾县| 宁县| 喀什| 阿尔山| 巴仑台| 江都| 建湖| 宜兰| 曹县| 梨树| 阿拉善右旗| 魏县| 大悟| 纳雍| 仁化| 美姑| 天河| 全椒| 新蔡| 嫩江| 汤河口| 五峰| 拉萨| 苏尼特右旗| 余姚| 凤县| 淮阳| 广宁| 海阳| 富阳| 鹤峰| 自贡| 阳朔| 凭祥| 呼玛| 祥云| 金堂| 富蕴| 太仆寺旗| 宣化| 红原| 鄄城| 瑞金| 盘山| 庐山| 铜梁| 浪卡子| 枣强| 富县| 牟平| 顺平| 长葛| 济阳| 临江| 秀山| 双流| 谷城| 西乌珠穆沁旗| 镇巴| 开平| 乌鲁木齐| 呼图壁| 清丰| 麻栗坡| 佛冈| 台南| 开原| 保德| 蔡甸| 石台| 河池| 栾川| 莱西| 海东| 嘉祥| 峨边| 德安| 青龙| 南县| 江浦| 普洱| 鄂尔多斯| 越西| 静乐| 福安| 旺苍| 澜沧| 硕龙| 伊通| 龙胜| 安远| 内乡| 荣昌| 金山| 杂多| 代县| 含山| 盘锦| 安多| 丹阳| 容县| 烟筒山| 西丰| 察尔汉| 绥中| 代县| 莱阳| 绿葱坡| 青龙山| 宾阳| 厦门| 南岳| 全南| 灵邱| 吐鲁番| 若羌| 乌当| 乡宁| 洪湖| 石渠| 大连| 牟平| 巴音布鲁克| 峄城| 酒泉| 新洲| 南乐| 黄山区| 黑山头| 咸丰| 蒙阴| 台北市| 温泉| 崇左| 上虞| 扎赉特旗| 寻甸| 鄂州| 华蓥山| 元谋| 胡尔勒| 凤翔| 阿里| 永靖| 建水| 叙永| 宜宾县| 灵寿| 饶阳| 永署礁| 文县| 吴桥| 九寨沟| 鹤城区| 海洋岛| 会东| 东乌珠穆沁旗| 天峨| 黄陵| 宜宾农试站| 丽江| 融水| 化州| 青浦| 穆棱| 丁青| 伊和郭勒| 江西沟| 霞浦| 麦盖提| 宁都| 乌兰| 云龙| 铁卜加寺| 深州| 石阡| 临朐| 濮阳| 汇川| 盘山| 拉萨| 蔡家湖| 黄茅洲| 新泰| 黄陵| 黑山| 扎兰屯| 安新| 开县| 信都| 兰溪| 淮滨| 根河| 岳阳| 铁卜加寺| 汤河口| 罗定| 太原古交区| 魏县| 江浦| 卫辉| 镇远| 上海| 马边| 南陵| 利川| 阜宁| 天山大西沟| 孟连| 新邵| 白杨沟| 芮城| 通辽钱家店| 吐尔尕特| 新巴尔虎右旗| 安平| 昆山| 荔波| 贵港| 四子王旗| 富宁| 松原| 高雄| 姚安| 宾阳| 思南| 泸西| 凤冈| 兴海| 文昌| 成都| 崆峒| 黔江| 礼县| 莫力达瓦旗| 容城| 东乡| 平泉| 桐柏| 衡东| 汶川| 云龙| 定安| 公馆| 嘉荫| 东丽| 合江| 鄞县| 绿葱坡| 长泰| 阿合奇| 阜康| 万盛| 邓州| 宝山| 汤阴| 天河| 鄂托克旗| 辰溪| 怒江| 宽甸| 波密| 庆元| 政和| 三台| 波阳| 徐州农试站| 辛集| 勃利| 吉安| 薛城| 荣昌| 宁化| 洛川| 阿坝| 孪井滩| 平武| 二连浩特| 乐山| 烟筒山| 武汉| 新宁| 壤塘| 绥棱| 黔江| 东安| 政和| 鹰潭| 茶卡| 宝过图| 琼山| 宜宾农试站| 城步| 千阳| 三都| 深泽| 洪湖| 惠水| 广南| 科尔沁左翼后旗| 朝阳| 伊金霍洛旗| 三穗| 南江| 赫山区| 靖西| 武定| 常山| 镇原| 北镇| 奉新| 威海| 大安| 沁阳| 兴宁| 宁强| 郧西| 沾益| 青龙| 南乐| 西昌| 呼玛| 镇源| 大关| 寻甸| 吉安县