Please enable JavaScript.

Coggle requires JavaScript to display documents.

Web Security - Coggle Diagram

- - - - Limited Privilege
    - - Procedure-Oriented Access Control
      - Role-Based Access Control
  - - - Registration Authority (RA)
      - Validation Authority (VA)
      - Certificate Authority (CA)
- - - - Programs intentionally installed that may advertise one purpose
        but do something entirely different
    - - Change the values of links to redirect the unsuspecting
        victim to points of the attacker’s choosing
      - Obtain copies of the images the real site uses to generate
        its web site
    - - Often forgeries of this sort have serious spelling and
        syntax errors
      - The response rate is low because many people are
        skeptical of possible scams
      - Attackers using fake email know most people will spot
        the forgery
- - - - Replaces or modifies the content of a legitimate web site
      - Defeats the integrity of the web page
      - Objectives
        
        Prove a point or embarrass the victim
        
        Make a political or ideological statement
        
        Seek attention or respect
      - Substitute Content on a Real Website
      - Fake Email Message
        
        Spam
        
        Phishing
        
        Fake (Inaccurate) Email Header Data
      - Web Bug
      - Click Jacking
      - Cross-site Scripting
        
        Reflected XXS
        
        Persistent / Stored XSS
        
        DOM-based XSS
      - SQL Injection