Please enable JavaScript.
Coggle requires JavaScript to display documents.
Security Vectors (Arbitrary code execution/Code injection (For example:…
Security Vectors
Arbitrary code execution/Code injection
For example: JSP Script Injection
Mitigation: Running Applications in unprevelidged containers
Mitigation: Best Practices while web-dev
Insecure Config Management
Mitigation: Service Broker
Mitigation: Cred Rotation
Mitigation: Best Practices
SQL Injectsion
Miitigation: Practives
Mitigation: Framework
Compromised Dependenices
Operating System CVE
Example: Heartbleed
Mitigation: Rolling deploys
Vulnerability in Dependencies
Example: Rails XSS
Mitigation: Ease of deployment/build-pack
Denial of Service Attacks
Resource Starvation
Mitigation: Resource Limits
Other apps are not effected
Mitigation: App recreation
Mitigation: Only one container effectd
Service Unavailability
Mitigation: go router
Mitigation: Application limits
Administrative Access control
Mitigation: cf audit trail
Mitigation: cf user management
Network Attacks
Cause of go router
Container to cotainer