5.1 Application and Data Vulnerabilities and Attacks（应用与数据弱点及攻击）

LO 3 · EK 17 ｜ 严格按大纲顺序学习

▶ 从第一个 EK 开始看课件（幻灯片，可翻页/全屏） 点击下方任意 EK 编号（如 5.1.A.1）也可直接进入对应课件页

学习目标 Learning Objectives

5.1.A Explain how adversaries can exploit application and file vulnerabilities to cause loss, damage, disruption, or destruction.

- [5.1.A.1](/ek/5.1.A.1) — An adversary can read any unencrypted files if they have access to the device or drive storing t… - [5.1.A.2](/ek/5.1.A.2) — Computers have standard users and administrative users. Administrative users have access to cont… - [5.1.A.3](/ek/5.1.A.3) — When access control settings are weakly configured, many users often have permission to view and…

5.1.B Explain how application attacks exploit vulnerabilities.

- [5.1.B.1](/ek/5.1.B.1) — Applications are programs that run instructions on computers; they are executable data. Some app… - [5.1.B.10](/ek/5.1.B.10) — In a directory traversal attack, adversaries modify URLs and GET requests to attempt to access s… - [5.1.B.2](/ek/5.1.B.2) — Many applications take user input through open-ended input fields where users can type character… - [5.1.B.3](/ek/5.1.B.3) — Structured query language (SQL) is a computer language used to request information from database… - [5.1.B.4](/ek/5.1.B.4) — An SQL-injection attack places SQL commands and control characters into a user- input field in a… - [5.1.B.5](/ek/5.1.B.5) — Websites are written using hypertext markup language (HTML), and many websites use Javascript to… - [5.1.B.6](/ek/5.1.B.6) — A cross site scripting (XSS) attack injects malicious code into a website that a user’s browser … - [5.1.B.7](/ek/5.1.B.7) — When applications take user input, that input is written to a buffer. A buffer is a designated s… - [5.1.B.8](/ek/5.1.B.8) — A buffer overflow attack feeds more data into memory than was allotted, which can cause a system… - [5.1.B.9](/ek/5.1.B.9) — The files that run web applications are stored in directories on servers. When users access web …

5.1.C Assess and document risks from application and data vulnerabilities.

- [5.1.C.1](/ek/5.1.C.1) — Data security risks can involve a compromise of confidentiality when unauthorized persons can ac… - [5.1.C.2](/ek/5.1.C.2) — High risks from data vulnerabilities often involve highly sensitive data (e.g., data that is gov… - [5.1.C.3](/ek/5.1.C.3) — Moderate risks from data vulnerabilities often involve sensitive data not having strong enough e… - [5.1.C.4](/ek/5.1.C.4) — Low risks from data vulnerabilities often involve less sensitive information being encrypted wit…

---

← 返回单元 Unit 5