Improving Web Application Security: Threats and - CGISecurity

Contents viiHow to Use This Chapter ........................................................................................... 14Anatomy of an Attack ................................................................................................ 14Survey and Assess ............................................................................................... 15Exploit and Penetrate ............................................................................................ 15Escalate Privileges................................................................................................ 15Maintain Access ................................................................................................... 16Deny Service ........................................................................................................ 16Understanding Threat Categories ............................................................................... 16STRIDE ................................................................................................................ 16STRIDE Threats and Countermeasures ................................................................... 17Network Threats and Countermeasures ...................................................................... 18Information Gathering............................................................................................ 18Sniffing ................................................................................................................ 19Spoofing .............................................................................................................. 19Session Hijacking ................................................................................................. 19Denial of Service .................................................................................................. 20Host Threats and Countermeasures ........................................................................... 20Viruses, Trojan Horses, and Worms ........................................................................ 21Footprinting .......................................................................................................... 21Password Cracking................................................................................................ 22Denial of Service .................................................................................................. 22Arbitrary Code Execution........................................................................................ 23Unauthorized Access............................................................................................. 23Application Threats and Countermeasures .................................................................. 23Input Validation......................................................................................................... 24Buffer Overflows ................................................................................................... 25Cross-Site Scripting............................................................................................... 26SQL Injection ........................................................................................................ 27Canonicalization ................................................................................................... 28Authentication .......................................................................................................... 29Network Eavesdropping ......................................................................................... 29Brute Force Attacks............................................................................................... 30Dictionary Attacks................................................................................................. 30Cookie Replay Attacks........................................................................................... 31Credential Theft .................................................................................................... 31Authorization ............................................................................................................ 31Elevation of Privilege ............................................................................................. 32Disclosure of Confidential Data.............................................................................. 32Data Tampering..................................................................................................... 32Luring Attacks....................................................................................................... 33Configuration Management........................................................................................ 33Unauthorized Access to Administration Interfaces ................................................... 33Unauthorized Access to Configuration Stores .......................................................... 34Retrieval of Plaintext Configuration Secrets............................................................. 34Lack of Individual Accountability ............................................................................. 34Over-privileged Application and Service Accounts..................................................... 34