语言软件安全漏洞.ppt

《语言软件安全漏洞.ppt》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、Vulnerabilityin.NETCourseObjectivesInthischapter,wewillExaminesomecommonflawsinwebapplicationsExamineattackmethodsSQLInjection:InputValidationOftenMisuseAuthentication:APIAbuseInsecureRandomness:SecurityFeaturesNon-SerializableObjectStoredinSession:Time&StateUnreleasedResource:CodeQualityLogForgi

2、ng:InputValidationMisconfiguration:EnvironmentCommonFlawsInWebApplicationsQuestion:What’swrongwiththiscode?stringuserName=ctx.getAuthenticatedUserName();stringquery="SELECT*FROMitemsWHEREowner='"+userName+"'ANDitemname='"+ItemName.Text+"'";sda=newSqlDataAdapter(query,conn);DataTabledt=newDataTabl

3、e();sda.Fill(dt);1.SQLInjection:InputValidationsda=newSqlDataAdapter("SELECTDataFROMUsersWHEREName=‘joe’or‘1’=‘1’”,conn);Answer:Hackerswillhack…1.SQLInjection:InputValidationQuestion:What’swrongwiththiscode?IPAddresshostIPAddress=IPAddress.Parse(RemoteIpAddress);IPHostEntryhostInfo=Dns.GetHostByA

4、ddress(hostIPAddress);if(hostInfo.HostName.EndsWith("trustme.com")){trusted=true;}2.OftenMisused:AuthenticationAPIAbuseFindIPaddressof*.trustme.comfromwhoisserverSpoofsrcIPaddresstotheipaddresstheyfound2.OftenMisused:AuthenticationAPIAbuseAnswer:HackerswillHackQuestion:What’swrongwiththiscode?str

5、ingGenerateReceiptURL(stringbaseUrl){RandomGen=newRandom();return(baseUrl+Gen.Next().toString()+".html");}3.InsecureRandomness:SecurityFeaturesTwousersaccessthesamefunctionatthesametime…Boom!!Theygotthesamefilename.3.InsecureRandomness:SecurityFeaturesAnswer:ThiswillBreakQuestion:What’swrongwitht

6、hiscode?publicclassDataGlob{StringGlobName;StringGlobValue;publicvoidAddToSession(HttpSessionStatesession){session["glob"]=this;}}4.Non-SerializableObjectStoredinSession:Time&StateAuserisworkingonputtinginfointhewebpage,thentheserverwanttoswitchotherservertoservethisparticularuser.Aftertheservers

7、avedthesessionandgottheotherservertotakeplacetotakecareofuser,thedatainGlobobjectwaslostormissingbecausethedatawasstorewasincomplete.usingSystem.Web;namespaceglob{[Serializable]publicclassDataGlob{StringGlobName;String