Defensive Design Flashcards
What does a data validation routine do?
Ensures that the data entered is of the correct range, type, length, format and that it is present
What are the 5 main data validation checks?
Range check
Type check
Length check
Presence check
Format check
What does a range check do?
Checks that a number/ date is within a sensible range
What does a type check do?
Checks if the data is of the correct type
What does a length check do?
Checks that the data entered is of the correct length
What does a presence check do?
Checks that the field has not been left blank
What does a format check do?
Checks that the data entered is of the correct format
Define anticipating misuse
Always thinking of preventing hackers
Describe Network Protocols
For any communication, data has to be transmitted. For this to happen there must be rules in place. These rules are called network protocols.
What does HTTP stand for?
Hyper Text Transfer Protocol
What is HTTP used for?
Sending and receiving webpages
What is HTTPs?
A more secure version of HTTP
What makes HTTPs more secure?
The webpages are encrypted
What does FTP stand for?
File Transfer Protocol
What does FTP do?
Transfers files between clients and servers
What does POP stand for?
Post Office Protocol
What does SMTP stand for?
Simple Mail Transfer Protocol
What does IMAP stand for?
Internet Message Access Protocol
What does POP do?
Receives emails and deletes them once they are downloaded
What does IMAP do?
Receives emails but doesn’t delete them
What does SMTP do?
Sends emails from clients or between servers
What does the TCP do to send data over networks?
- Divides the message into smaller parts called packets
- Adds a sequence number so it can be reassembled
- Adds error correction information so errors can be found and fixed
What does the TCP do to receive data over networks?
- Examines each packet for errors
- Fixes errors
- Requests missing packets to be resent
- Reassembles the message using sequence numbers
What does the IP do to sent packets over networks?
- Adds the destination address to each packet
- Adds it’s own address (source address) to indicate where the packet originated from
