An XSS attack requires a website meets two criteria: a. Web browser should have support JavaScript and accept user inputs. b. Accepts user input without validating it and SQL database should be running in the back-end. c. Accepts user input without validating it and construct the response based on user input. d. All of them

An XSS attack requires a website meets two criteria: a. Web browser should have support JavaScript and accept user inputs. b. Accepts user input without validating it and SQL database should be running in the back-end. c. Accepts user input without validating it and construct the response based on user input. d. All of them

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter2: Compliance: Law And Ethics

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

Which of the following aims will be aided by authentication support? The sections that follow describe the benefits and drawbacks of authentication methods.
71. An attacker sits between customer and Banker, and captures the information from the customer and retransmits to the banker by altering the information. This attack is called as .............. a. Masquerade Attack b. Replay Attack c. Passive Attack d. Denial of Service Attack
Which of these can be used to defend against some types of client attacks on a password system (note: the system must remain a user-knowledge-based authentication system)? Select one: a. Hash the passwords and store the hashes, rather than the plaintext passwords b. Store the password on a physical object c. Use one-time passcodes d. Limit the number of login attempts allowed
If Alice would like to launch the attack on anybody who visits her malicious web page. In this case, she does not know who is visiting the web page before hand. Can she launch a CSRF attack to add her to the victim’s friend list? Please explain.
server allows upper and lowercase letters and numbers for passwords, size limit 10. if size of a salt used in server is 16 bits, how many attempts in worse case needed for brute force attack to crack password?
Distinguish hash from MAC. Show how they may be used to authenticate communications. What authentication standards do they not meet, and what attacks/algorithm failures are possible?
Which of these can be used to improve defenses against host attacks on a password system in which the passwords are stored in plain text (note: the system must remain a user-knowledge-based authentication system)? Select one: a. Hash the passwords and store the hashes, rather than the plaintext passwords b. Store the password on a physical object instead c. Use one-time passcodes instead d. Limit the number of attempts allowed
Which of our objectives would be most likely to be achieved if we were to get support for authentication? The benefits and drawbacks of different authentication strategies will be covered in the sections that follow.
What is a tracker attack, exactly? Use a suitable example to explain tracker attacks.
Exists a term for a collection of servers intended to deceive attackers?