\"Web Application Threats\" Please respond to the following:From the e-Activity,
ID: 3667245 • Letter: #
Question
"Web Application Threats" Please respond to the following:From the e-Activity, rank what you believe to be the top three (3) greatest security threats (e.g., cookie / session poisoning, platform exploits, etc.), and provide a rationale for your rankings. Explain the key inherent dangers of the chosen threats, and indicate the key reasons why you believe such threats pose more of a risk than other current ones in existence. Justify your answer.
For each of the three (3) Web application threats ranked in the first part of this discussion, discuss the appropriate countermeasures that security personnel could utilize in order to minimize the damage of such threats. Determine whether or not the countermeasures that you have ranked are reactive or proactive in nature, and suggest the primary ways in which each countermeasure could assist in preventing further damage from the threats in question. Explain whether or not honeypots would assist in protecting and evaluating the three (3) threats selected. Provide a rationale for your response.
Explanation / Answer
With this type of attack, the attacker captures the user's authentication cookie using monitoring software and replays it to the application to gain access under a false identity.
Countermeasures to prevent cookie replay include:
If your application implements its own user store containing user account names and passwords, compare its security to the credential stores provided by the platform, for example, a Microsoft Active Directory® directory service or Security Accounts Manager (SAM) user store. Browser history and cache also store user login information for future use. If the terminal is accessed by someone other than the user who logged on, and the same page is hit, the saved login will be available.
Countermeasures to help prevent credential theft include:
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.