MIS Week 7 Site:

 In the news  Presentations (2)  More Walk Through of WebGoat  Next Week 2MIS

 Submitted  ship-with-man-in-the-middle-adware-that-breaks-https- connections/ ship-with-man-in-the-middle-adware-that-breaks-https- connections/  threats/insider-threats/from-hacking-systems-to- hacking-people-/a/d-id/ threats/insider-threats/from-hacking-systems-to- hacking-people-/a/d-id/  reens_NA/Protectors/Industries/VisualHackingExperim ent/?WT.mc_id= reens_NA/Protectors/Industries/VisualHackingExperim ent/?WT.mc_id=  parking-ticket-data-breach parking-ticket-data-breach  location.html location.html MIS

 Submitted  powershell-wmi-evade-detection-mandiant powershell-wmi-evade-detection-mandiant  operating-system.html?m=1 operating-system.html?m=1  open-all-year/ open-all-year/  intelligence/cybercrime-cyber-espionage-tactics- converge/d/d-id/ ?print=yes intelligence/cybercrime-cyber-espionage-tactics- converge/d/d-id/ ?print=yes  report/2015/02/lenovo-betrayed-customer-trust.aspx report/2015/02/lenovo-betrayed-customer-trust.aspx MIS

 What I noted  fraud-efforts-under-scrutiny/ fraud-efforts-under-scrutiny/  wants-govt-access-to-encrypted-communications.html wants-govt-access-to-encrypted-communications.html  _breach_broadens/ _breach_broadens/  ffins_build_exploit_kit_coffins/ ffins_build_exploit_kit_coffins/  te_execution_vuln/ te_execution_vuln/  nerable_threat_study/ (2-4 Yr Old Hacks) nerable_threat_study/ MIS

6

 Access Control Flaws  Stage 1  Stage 2  Authentication Flaws  Cross-Site Scripting  Phishing  Stage 1  Stage 5  Reflected XSS Attacks  Improper Error Handling  Fail Open Authentication Scheme MIS

 Injection Flaws:  Command Injection: " & netstat -ant & ifconfig“  Numerical SQL Injection: or 1=1  Log Spoofing  XPATH Injection  String SQL Injection  Modifying Data with SQL Injection  Adding Data with SQL Injection  Blind Numeric SQL Injection  Blind String SQL Injection MIS

 In the news  More Walkthrough of WebGoat MIS

? 10