Improving Web Application Security: Threats and - CGISecurity

Chapter 2: Threats and Countermeasures 33Luring AttacksA luring attack occurs when an entity with few privileges is able to have an entitywith more privileges perform an action on its behalf.To counter the threat, you must restrict access to trusted code with the appropriateauthorization. Using .NET Framework code access security helps in this respect byauthorizing calling code whenever a secure resource is accessed or a privilegedoperation is performed.Configuration ManagementMany applications support configuration management interfaces and functionality toallow operators and administrators to change configuration parameters, update Website content, and to perform routine maintenance. Top configuration managementthreats include:● Unauthorized access to administration interfaces●●●●Unauthorized access to configuration storesRetrieval of plaintext configuration secretsLack of individual accountabilityOver-privileged process and service accountsUnauthorized Access to Administration InterfacesAdministration interfaces are often provided through additional Web pages orseparate Web applications that allow administrators, operators, and contentdevelopers to managed site content and configuration. Administration interfacessuch as these should be available only to restricted and authorized users. Malicioususers able to access a configuration management function can potentially deface theWeb site, access downstream systems and databases, or take the application out ofaction altogether by corrupting configuration data.Countermeasures to prevent unauthorized access to administration interfacesinclude:● Minimize the number of administration interfaces.● Use strong authentication, for example, by using certificates.● Use strong authorization with multiple gatekeepers.● Consider supporting only local administration. If remote administration isabsolutely essential, use encrypted channels, for example, with VPN technology orSSL, because of the sensitive nature of the data passed over administrativeinterfaces. To further reduce risk, also consider using IPSec policies to limit remoteadministration to computers on the internal network.