Quiz: Could you detect an application attack?

More Information Learn how to improve application layer logging techniques Download Application logging is critical in detecting hack attacks, and listen to this tip on your MP3 player.

As application layer attacks continue to rise, information security practitioners should use logging techniques to protect their application servers. Take this five-question quiz to test your application security awareness, review common application attacks and learn how to improve application layer logging to detect and protect against these attacks.

1. Which of the following attacks is said to have arisen because the C programming language supplied the framework and poor programming practices supplied the vulnerability?
a. SQL injection
b. Buffer overflow
c. Cross-site scripting
d. SYN flood
Answer

2. Which of the following protocols can be used to ensure consistency in logging across applications, platforms and devices, governs network management, and monitors network devices and their functions?
a. EGP
b. IGP
c. RIP
d. SNMP
Answer

3. Which of the following statements about application logging is false?
a. Application logging can provide you with critical information in the event of a security incident.
b. Proactive monitoring will provide you with the ability to detect events in near real-time.
c. Reactive monitoring will offer invaluable assistance to forensic investigators.
d. It's difficult to start.
Answer

4. Which attack uses a multitude of compromised systems to send a flood of incoming messages to the target system to shut it down?
a. Denial-of-service attack
b. SYN flood attack
c. Distributed denial-of-service attack
d. None of the above
Answer

5. To improve the overall quality of Web applications, developers should abide by which of the following rules?
a. Trust user supplied data.
b. Clean and validate all user input.
c. Use GET instead of POST.
d. Allow the use of HIDDEN form fields.
Answer

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Web Application Security (Also see Web Access Control) Microsoft tools won't be quick fix for SQL injection attacks New defenses for automated SQL injection attacks HP aims at IBM with application vulnerability scanning as service Information security book excerpts and reviews Kaminsky on DNS rebinding attacks, hacking techniques Webmail security: Best practices for data protection Tracing malware's steps with RE:Trace SQL injection attack infects hundreds of thousands of websites PCI Council issues clarification on Web application security Web security gateways keep Web-based malware at bay Securing Productivity Applications Using Nessus Attack Scripting Language (NASL) to find application vulnerabilities Startup Symplified delivers SSO in the cloud Protecting exposed servers from Google hacks (and Google 'dorks') Apple updates QuickTime to plug dangerous flaw Which automated quality assurance tools can be used to test software? Product review: Mu-4000 Security Analyzer Product review: Klocwork Insight 8.0 PCI compliance and Web applications: Code review or firewalls? 7 Security Questions to Ask Your SaaS Provider Reasearch on Coding Backdoors Presents Ugly Picture

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary anonymous Web surfing  (SearchSecurity.com) buffer overflow  (SearchSecurity.com) cache cramming  (SearchSecurity.com) cookie poisoning  (SearchSecurity.com) dictionary attack  (SearchSecurity.com) distributed denial-of-service attack  (SearchSecurity.com) JavaScript hijacking  (SearchSecurity.com) National Computer Security Center  (SearchSecurity.com) threat modeling  (SearchSecurity.com) trigraph  (SearchSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary