Since web applications are commonly open to anyone on the Internet there are always a major target by
attackers in this lecture.
We're going to take a quick look at some of the most well-known Web attacks.
Ask you all is a method for talking to databases that can be used as an attack vector.
Ask injection is an attack that executes malicious Eskew all statements and can potentially read or
modify sensitive data cross-site scripting enables attackers to inject the client side scripts into
webpages that can be used to attack users accessing the same web site
similar to ask who own injection come in injection attacks are when an attacker sounds malicious commands
to vulnerable applications.
If successful this attack method can allow attackers to gain unauthorized access to system data.
Here are a few ways to help secure web applications.
So of course good code strong passwords want to make sure to run vulnerability scans constantly to see
what vulnerabilities are open on your web applications and prioritize those vulnerabilities.
Firewall hardening.
And last but not least IPX Let's hop into the lab and I'll show you some of the web application specific
IP signatures that can be configured on Cisco fire power devices.
So here are my I guess policy.
I went to rules and nine classifications and then I filtered the rules for web application attacks right
on the first page you can see some cross-site scripting signatures definitely want to have those and
able.
And then if I go to the last page you'll see that there's also some ask you all injection signatures.