Chapter 11

Question 1

Defensive or Secure Programming

Answer 1

the process of designing and implementing software so that it continues to function even when under attack

Question 2

injection attack

Answer 2

wide variety of program flaws related to invalid handling of input data

This problem occurs when program input data can accidentally or deliberately influence the flow of execution of the program

Question 3

command injection

Answer 3

the input is used in the construction of a command that is subsequently executed by the system with the privileges of the Web server

Question 4

SQL injection

Answer 4

The user-supplied input is used to construct a SQL request to retrieve information from a database

Question 5

code injection

Answer 5

the input includes code that is then executed by the attacked system

Question 6

cross-site scripting (XSS) attacks

Answer 6

concerns input provided to a program by one user that is subsequently output to another user.

Question 7

XSS reflection vulnerability

Answer 7

The attacker includes the malicious script content in data supplied to a site