 - Cache cramming is a method of tricking a computer into running Java code it would not ordinarily run. The method consists of placing code in the computer's local disk cache when the computer uses Internet Explorer in certain environments.
The rogue Java code, which is a special applet (small program) known as a port scanner, is executed as a result of the computer user visiting a particular Web site designed by the cracker. When activated, the applet opens a socket connection from the cracker's computer. This can give the cracker access to data on the hard drive of the affected computer.
 |
Learn more about Web Application Security |
| Web Application Attacks Learning Guide: This guide explains how Web application attacks occur, identifies Web application attacks, and provides Web application security tools and tactics to protect against them. |
| Information security book excerpts and reviews: Visit the Information Security Bookshelf for book reviews and free chapter downloads. |
| Quiz: Could you detect an application attack?: Test your application security awareness, review common application attacks and learn how to improve application layer logging to detect and protect against these attacks. |
| Web Application Attacks Learning Guide: This guide explains how Web application attacks occur, identifies Web application attacks, and provides Web application security tools and tactics to protect against them. |
| State-based attacks: Session management: This excerpt reviews session management techniques developers can use to protect against session hijacking and other Web application attacks. |
| Content Spoofing: This excerpt from "Preventing Web Attacks with Apache" explains how content spoofing attacks exploit vulnerabilities and how to use Apache to protect against them. |
| CONTRIBUTORS: |
R. Damian Koziel |
| LAST UPDATED: |
04 Jun 2007
|
 |
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
|
|
More resources from around the web:
|
|
Show me everything on 
