Matches in SemOpenAlex for { <https://semopenalex.org/work/W591304058> ?p ?o ?g. }
Showing items 1 to 78 of
78
with 100 items per page.
- W591304058 abstract "(Chapters 1-6 conclude with a Conclusion, Exercises, and References. Chapter 7 concludes with a Conclusion and References and the Appendices conclude with only References.) Preface. Dedication. Chapter Summaries. I. INTRODUCTION. 1. A Fault Model for Software Security Testing. Why Security Testing is Different. A Fault Model for Security Vulnerabilities. Security Concerns and the How to Break Software Fault Model. Creating an Attack Plan. A Note on Format. II. CREATING UNANTICIPATED USER INPUT SCENARIOS. 2. Attacking Software Dependencies. First Attack: Block access to libraries. Second Attack: Manipulate the application's registry values. Third Attack: Force the application to use corrupt files. Fourth Attack: Manipulate and replace files that the application creates, reads from, writes to or executes. Fifth Attack: Force the application to operate in low memory, disk space and network availability conditions. Summary: A Checklist for Battle. 3. Breaking Security through the User Interface. First Attack: Overflow input buffers. Second Attack: Examine all common switches and options. Third Attack: Explore escape characters, character sets and commands. Summary: A Checklist for Battle. III. DESIGN AND IMPLEMENTATION ATTACKS. 4. Attacking Design. First Attack: Try common default and test account names and passwords. Second Attack: Use Holodeck to expose unprotected test APIs. Third Attack: Connect to all ports. Fourth Attack: Fake the source of data. Fifth Attack: Create loop conditions in any application that interprets script, code or other user supplied logic. Sixth Attack: Use alternate routes to accomplish the same task. Seventh Attack: Force the system to reset values. Summary: A Checklist for Battle. 5. Attacking Implementation. First Attack: Get between time of check and time of use. Second Attack: Create files with the same name as files protected with a higher classification. Third Attack: Force all error messages. Fourth Attack: Use Holodeck to look for temporary files and screen their contents for sensitive information. Summary: A Checklist for Battle. IV. APPLYING THE ATTACKS. 6. Putting it All Together. Pre-Attack Preparations. Opponent#1: Microsoft Windows Media Player 9.0 (Windows). Opponent#2: Mozilla 1.2.1 (Windows). Opponent#3: OpenOffice.org 1.0.2 (Linux). V. CONCLUSION. 7. Some Parting Advice. How Secure is Secure? Mining Gold from Bug Databases. Final Words of Wisdom. APPENDICES. Glossary of Coding, Testing, and Software Security Terms. Appendix A. Using the Tools on the Accompanying CD. Surveying the Tools. Holodeck. Port Scanner. Appendix B. Software's Invisible Users. Where Errors Slip In. The Human User. The Operating System User. The API User. The File System User. Index." @default.
- W591304058 created "2016-06-24" @default.
- W591304058 creator A5042406406 @default.
- W591304058 creator A5042557132 @default.
- W591304058 date "2004-01-01" @default.
- W591304058 modified "2023-09-23" @default.
- W591304058 title "How to break software security : effective techniques for security testing" @default.
- W591304058 hasPublicationYear "2004" @default.
- W591304058 type Work @default.
- W591304058 sameAs 591304058 @default.
- W591304058 citedByCount "15" @default.
- W591304058 countsByYear W5913040582015 @default.
- W591304058 countsByYear W5913040582016 @default.
- W591304058 countsByYear W5913040582021 @default.
- W591304058 crossrefType "book" @default.
- W591304058 hasAuthorship W591304058A5042406406 @default.
- W591304058 hasAuthorship W591304058A5042557132 @default.
- W591304058 hasConcept C103377522 @default.
- W591304058 hasConcept C109297577 @default.
- W591304058 hasConcept C111919701 @default.
- W591304058 hasConcept C113328881 @default.
- W591304058 hasConcept C166957645 @default.
- W591304058 hasConcept C184842701 @default.
- W591304058 hasConcept C195518309 @default.
- W591304058 hasConcept C2776576444 @default.
- W591304058 hasConcept C2777230681 @default.
- W591304058 hasConcept C2777904410 @default.
- W591304058 hasConcept C2778627824 @default.
- W591304058 hasConcept C2780741293 @default.
- W591304058 hasConcept C35525427 @default.
- W591304058 hasConcept C38652104 @default.
- W591304058 hasConcept C41008148 @default.
- W591304058 hasConcept C79974875 @default.
- W591304058 hasConcept C95457728 @default.
- W591304058 hasConceptScore W591304058C103377522 @default.
- W591304058 hasConceptScore W591304058C109297577 @default.
- W591304058 hasConceptScore W591304058C111919701 @default.
- W591304058 hasConceptScore W591304058C113328881 @default.
- W591304058 hasConceptScore W591304058C166957645 @default.
- W591304058 hasConceptScore W591304058C184842701 @default.
- W591304058 hasConceptScore W591304058C195518309 @default.
- W591304058 hasConceptScore W591304058C2776576444 @default.
- W591304058 hasConceptScore W591304058C2777230681 @default.
- W591304058 hasConceptScore W591304058C2777904410 @default.
- W591304058 hasConceptScore W591304058C2778627824 @default.
- W591304058 hasConceptScore W591304058C2780741293 @default.
- W591304058 hasConceptScore W591304058C35525427 @default.
- W591304058 hasConceptScore W591304058C38652104 @default.
- W591304058 hasConceptScore W591304058C41008148 @default.
- W591304058 hasConceptScore W591304058C79974875 @default.
- W591304058 hasConceptScore W591304058C95457728 @default.
- W591304058 hasLocation W5913040581 @default.
- W591304058 hasOpenAccess W591304058 @default.
- W591304058 hasPrimaryLocation W5913040581 @default.
- W591304058 hasRelatedWork W120838261 @default.
- W591304058 hasRelatedWork W1480385994 @default.
- W591304058 hasRelatedWork W1499506028 @default.
- W591304058 hasRelatedWork W1531064568 @default.
- W591304058 hasRelatedWork W1559645909 @default.
- W591304058 hasRelatedWork W1563848652 @default.
- W591304058 hasRelatedWork W1627377440 @default.
- W591304058 hasRelatedWork W1679465978 @default.
- W591304058 hasRelatedWork W2112518482 @default.
- W591304058 hasRelatedWork W2296743769 @default.
- W591304058 hasRelatedWork W2354413762 @default.
- W591304058 hasRelatedWork W2381043778 @default.
- W591304058 hasRelatedWork W2492368755 @default.
- W591304058 hasRelatedWork W2580555244 @default.
- W591304058 hasRelatedWork W2738103798 @default.
- W591304058 hasRelatedWork W2908401980 @default.
- W591304058 hasRelatedWork W3184302803 @default.
- W591304058 hasRelatedWork W34209996 @default.
- W591304058 hasRelatedWork W2184964202 @default.
- W591304058 hasRelatedWork W2803593747 @default.
- W591304058 isParatext "false" @default.
- W591304058 isRetracted "false" @default.
- W591304058 magId "591304058" @default.
- W591304058 workType "book" @default.