中央大学电子计算机中心多媒体与网路应用资讯推广课程电子教案.pptVIP

?中央大學電子計算機中心「多媒體與網路應用」資訊推廣課程;Agenda;Agenda;不要做壞事！;不要被抓到！;不要說我教的;Agenda;網頁安全？;ways to attack;attack scenarios;Agenda;*;OWASP Top 10 - 2010;OWASP Top 10 - 2010;OWASP Top 10 - 2010;OWASP Top 10 - 2010;Agenda;Injections;how SQL works in web;Why SQL?;how injections work?;attack skills;影響;how to defense;Practice;Agenda;XSS;background knowledge;how to attack;how to attack;example;what may happened?;Just For Fun Samy;Big Site also XSSable;how to defense;practice;Agenda;background knowledge;;;如果偷到了cookie;how to steal it?;;把cookie送到雲端! ;哪個白痴會點這鬼連結;hidden;防範;鎖定user agent / header ;Practice;QA?;end;Ref