大学網頁應用程式的安全入門.pptxVIP

Agenda;Agenda;不要做壞事！;不要被抓到！;不要被抓到！;不要說我教的;Agenda;網頁安全？;ways to attack;attack scenarios;Agenda;12;OWASP Top 10 - 2010;OWASP Top 10 - 2010;OWASP Top 10 - 2010;OWASP Top 10 - 2010;Agenda;Injections;how SQL works in web;Why SQL?;how injections work?;attack skills;影響;how to defense;Practice;Agenda;XSS;background knowledge;how to attack;how to attack;example;what may happened?;Just For Fun Samy;Big Site also XSSable;how to defense;practice;Agenda;background knowledge;;;如果偷到了cookie;how to steal it?;;把cookie送到雲端! ;哪個白痴會點這鬼連結;hidden;防範;鎖定user agent / header ;Practice;QA?;end;Reference