http://neoerudition.net/data-room-and-abilities-for-employees
There are a variety of ways that attackers could target web applications (websites that let you communicate directly with software via browsers), to steal confidential data, introduce malicious codes, or take over your computer. These attacks exploit weaknesses in components such as web apps and content management systems as well as web servers.
Web app attacks comprise the majority of security threats. In the past decade attackers have developed their skills in finding and exploiting vulnerabilities that impact the perimeter defenses of an application. Attackers are able to circumvent the most common defenses by leveraging techniques such as phishing, social engineering and botnets.
A phishing attack is a method of fooling victims into clicking an email link that contains malware. The malware downloads onto their computer, allowing attackers to gain access to devices or systems for additional goals. Botnets are a group of infected or compromised connected devices that attackers can use to launch DDoS attacks, spreading malware, perpetuating fraud on ads and more.
Directory traversal attacks use the use of movement patterns to gain access to configuration files, files, databases, and files on web pages. In order to protect against this kind of attack requires the proper sanitization of inputs.
SQL injection attacks target the database which stores crucial information about a service or website by injecting malicious code which allows it to bypass security measures and disclose information that normally wouldn’t. Attackers then execute commands that dump databases, as well as other.
Cross-site scripting (or XSS) attacks insert malicious code into a trusted website to take over browsers of users. This enables attackers to steal session cookies as well as confidential information, impersonate users, manipulate content, and many more.