Library Guides: PLP Minor in Cybersecurity: LU2_Week 11

Online Articles

Parameter Tampering
Parameter tampering is a type of web-based cyber attack in which certain parameters in a URL are changed without a user's authorization. In some cases, the data entered by a user into a form field of a webpage may also be modified -- again, without the user's authorization. The attack may point the browser to a link, page or site that the user did not intend to access.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 9

What is Server Misconfiguration?
Servers are dedicated computers for a specific purpose, and unlike the Desktop computer, these computers are made for durability, longevity, and for working for long periods of time as compared to a desktop PC.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 16

HTTP Response Splitting
HTTP response splitting is a means to an end, not an end in itself. At its root, the attack is straightforward: an attacker passes malicious data to a vulnerable application, and the application includes the data in an HTTP response header.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 18

NTFS overview
NTFS, the primary file system for recent versions of Windows and Windows Server, provides a full set of features including security descriptors, encryption, disk quotas, and rich metadata. It can be used with Cluster Shared Volumes (CSV) to provide continuously available volumes that can be accessed simultaneously from multiple nodes of a failover cluster.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 25

SOAP vs REST API: Difference Between Web Services
SOAP stands for Simple Object Access Protocol whereas REST stands for Representational State Transfer.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 33

Your Guide to Sensitive Data Exposure (Fuzzing) & How to Fix It
This article delves into sensitive data exposure risks, how attackers use Random Fuzzing/Fuzzer programs to exploit such risks, and various best practices and tools to mitigate such risks in modern application delivery.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 40

What is DNS Hijacking - How to Protect Yourself?
What is DNS Hijacking or DNS Redirection and how to protect yourself? In this video, we have explained how DNS works and what is DNS hijacking through animation.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 11

DNS Amplification Attack
In this video we will be going over a DNS attack what to look out for and how to prevent it.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 12

Web Cache Poisoning Explained : Web Security & Vulnerability
Before today's topic about the web cache poisoning vulnerability, we need to take a quick look at the fundamentals of web caching. When a user is requesting a page on a website, say index.html, the server will first check its cache to see if a copy of that page can be found in the cache.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 19

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 23

Everything You NEED to Know About WEB APP Architecture
Software architecture for a web application is essentially the blueprint for how a web app is structured. There's monolithic architecture, where you basically piled everything into a single, tightly coupled codebase.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 31

What is insecure deserialization and how to prevent it?
We'll dive into insecure deserialization, its examples, and how to best prevent it.

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 42

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 20

Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 40