| |
|
|
Web Services Security
|
ALSO CALLED: XML Web Services Security and .NET Security
DEFINITION: Directory traversal is a form of HTTP exploit in which a hacker uses the software on a Web server to access data in a directory other than the server's root directory. If the attempt is successful, the hacker can view restricted files or even execute commands on the server. Directory traversal
Definition continues below.
|
|
| Recent Vendor Reports on Web Services Security |
Future: The View from Visionaries
sponsored by Information Security Magazine
JOURNAL ARTICLE: Posted: 11 Jan 2008 | Published: 01 Jan 2008
|
|
WebInspect for Application Developers
sponsored by SPI Dynamics
PRODUCT LITERATURE: Posted: 19 Apr 2004 | Published: 01 Jan 2004
|
|
WebInspect for Application Developers: Microsoft® Visual Studio® .NET Version
sponsored by SPI Dynamics
PRODUCT LITERATURE: Posted: 19 Apr 2004 | Published: 01 Jan 2004
|
|
| |
WEB SERVICES SECURITY DEFINITION (continued):
attacks are commonly performed using Web browsers. Any server in which input data from Web browsers is not validated is vulnerable to this type of attack. Although some educated guesswork is involved in finding paths to restricted files on a Web server, a skilled hacker can easily carry out this type of attack on an inadequately protected server by searching through the directory tree. The risk of such attacks can be minimized by careful Web server programming, the installation of software updates and patches, filtering of input from browsers, and the use of vulnerability
Web Services Security definition sponsored by SearchSecurity.com, powered by WhatIs.com an online computer dictionary
|
| |
|