Cyber Security Java And Xss

Front 1

Strongly Typed

Back 1

Java can't access the host computer's memory.

Hint 1

Only objects for which the program has a reference can be accessed, can only perform operations that are valid for that object

Front 2

Classes

Back 2

Java programs are composed of classes, a class defines a collection of data fields, functions and methods that operate on those fields

Hint 2

Instances of classes are objects

Front 3

System Modification

Back 3

Attack that alters the client's computing system

Hint 3

Example: Deletes files, changes memory

Front 4

Invasion of Privacy

Back 4

Attack that steals client's confidential data

Hint 4

Example: Steals passwords, credit card numbers ect.

Front 5

Denial of Service

Back 5

Attack that exhaust's client's computing resource

Hint 5

Example: Filling a file system, using up all of systems memory

Front 6

Antagonism

Back 6

Just annoying as ****

Front 7

3 Components of Java Security Model

Back 7

The Bytecode Verifier, The Class Loader, The security Manager

Hint 7

Security depends on all of these parts working together

Front 8

ByteCode Verifier

Back 8

Checks to see if code is valid, makes sure things are in the correct format. Does check during class loading (loading byte code in the vm, very effecient) , both static and runtime checks. Checks the class tags associated with all java objects. Checks legal references

Hint 8

Example: Checks of methods are called with the appropriate number and types of arguments

Front 9

Class Loader

Back 9

Loads the byte code in the VM and constructs corresponding classes. Manages namespaces, can't have confusion about defintions. Originally meant to be extensible where users can add their own class loaders, but an attacker could load their own security manager and trick you.

Hint 9

Example: Final classes are not subclassed and final methods are not overridden. OR Unique class object to which any class name maps within the purview of the applets form the same directory on the same web server

Front 10

Security Manager

Back 10

Reference Monitor - Decides if requested operations should be allowed. Does a stack inspection

Hint 10

Example: A class loader is allowed to create a class of a given name

Front 11

Primordial Class Loader

Back 11

Bootstrap the Java environment, loading API classes

Front 12

Class Loader Objects

Back 12

Written in Java and can be extended, loads other classes in a heirarchy

Hint 12

Each applet gets its own class loader.

Front 13

Loading Procedure

Back 13

Consults primordial class loader, security manager still makes the real choices, then checks the class file with the verifier

Front 14

Java VM

Back 14

A virtual machine that keeps things away from computer memory

Hint 14

Seperates the applet from the operating system

Front 15

Type Confusion Attack

Back 15

Creates 2 references with different types to the same object

Front 16

Security Manager Trust Model

Back 16

Increasingly refined over time from white and black to "shades of gray" Can configure the policy now

Hint 16

1.0.2 - any applet was untrusted. 1.1 - Unsigned applets were untrusted, trusted were isgned applets. Introduced code signing. 1.2 and beyond- many shades of gray.

Front 17

ActiveX

Back 17

Software freamework created by microsoft that checks security and digitally signs web applications - specifically those made by microsoft

Front 18

DNS

Back 18

Domain Name System, hierarchical naming system for computers, translates memory names and IP addresses

Front 19

SQL Injection

Back 19

Adding your own script and ***** up the SQL and database, when the database scans it, the script gets executed

Front 20

Input Validation HTML

Back 20

A way to detect unauthorized inputs. Sometimes just finding characters, other times more complicated

Front 21

Cross Site Scripting (XSS)

Back 21

XSS vulnerabilities allow the generation of dynamic HTML contents with invalidaded inputs that do different things. These inputs are interpreted by browsers while rendering web pages.

Front 22

Stored XSS

Back 22

Occur when dynamic HTML contents are generated from unprotected info stored in persistance stroage. Content you provide is brought to another browser.

Hint 22

Example: Typing a script in to a comment, the server will serve the comment back to the next user who views it and the user's browser will execute the script. Or can transfer cookies to another sie

Front 23

Reflected XSS

Back 23

Sends email with linke that is a script instead of a file name. Echos back a script not a file name.

Hint 23

Name comes from the echo command?

Front 24

DOM Based XSS

Back 24

Modifieds the DOM "environment" in the victim's browser used by client-side script. Using a ? hides the activity from the server

Hint 24

Harder to fix because the server can't see it. Client side problem

Front 25

Cross site request forgery

Back 25

Serves a form to a user and lets them update their email but actually sends the info to a bad site.

Hint 25

Can change the email to something else?

Front 26

Sanitization

Back 26

Server should try to detect a script

Hint 26

attackers can point to javascript using push pull methods or calling images or using html. This is super hard to do. Nothing really works but there are resources

Front 27

XSS Defense

Back 27

Santization or filtering, encoding or eliminating dangrous constructs in untrusted data.

Hint 27

Super hard to get through the filter