From the course: Programming Foundations: Web Security
Unlock the full course today
Join today to access over 24,700 courses taught by industry experts.
Denial of service
From the course: Programming Foundations: Web Security
Denial of service
- A denial of service attack denies authorized users access to a server, service, or resource to which they would normally expect to have access. Denial of service is an attempt to prevent legitimate users from using a service. The underlying service may remain unaffected, but it's no longer available. Remember, data security has three goals, confidentiality, integrity, and availability. Denial of service is an attack on data availability. Denial of service attacks usually use flooding or crashing to make data unavailable. Flooding is when a system is overwhelmed with too many requests. There could be too many requests to a web server. It could be using up a limited number of connections to a database, or it could be sending so many data packets to a router that legitimate traffic slows to a crawl. Crashing is when software or hardware crashes and just stops operating. For example, an attacker could use a vulnerability…
Contents
-
-
-
-
-
-
(Locked)
Types of credential attacks4m 55s
-
(Locked)
Strong passwords4m 1s
-
(Locked)
URL manipulation and Insecure Direct Object Reference (IDOR)4m 43s
-
(Locked)
SQL injection6m 16s
-
(Locked)
Cross-Site Scripting (XSS)6m 15s
-
(Locked)
Cross-Site Request Forgery (CSRF)4m 21s
-
(Locked)
Cross-Site Request protections3m 38s
-
(Locked)
Cookie visibility and theft4m 37s
-
(Locked)
Session hijacking5m 8s
-
(Locked)
Session fixation3m 18s
-
(Locked)
Remote system execution2m 8s
-
(Locked)
File upload abuse2m 59s
-
(Locked)
Denial of service4m 55s
-
(Locked)
-