1. Security concerns of web applications with database access
By Oscar Rivera
Fall 2008

2. SSL/TSL Secure layer over the internet Use Digital Certificates
Trust in the companies
Man in the middle attacks

3. 3 Tier architecture Protect DBMS from outside users Code division
Scalability

4. Logging in
Brute force attacks
Images
Additional personal information

5. Database users Level of access Groups of users
Security for the database
Guest user

6. SQL Injection Search = query Intruders get access to the database
Check the validity of the values on the web site
Regular expressions
.*\.txt$.

7. Triggers
Specification for execution of a function when the database is accessed
Execution authorization
Re-check the validity of values

8. Uses Various levels of logs Logs on Databases
Find responsible people after an attack
Recover from disaster
Various levels of logs

9. Cookies Text files Store preferences and user’s information Plain text
Broadcast every request

10. Sending data from web forms
GET/POST
When use POST?
When use GET?

11. Sessions
Table per user
Dynamic size
Time of duration

12. Status Bar When in frames When with JavaScript When GET-type links
Using Document Object Model