SQL PL/SQL, XML, and Other Injections
An injection attack is a way of sneaking malicious code into an application. This is most frequently successful with data-driven applications, where the addition of new information is expected to be fairly routine. An entry field is the most common access route. Once an access route is found, code will be injected into the field and transmitted to the application.
Common languages for injection attacks include SQL and XML, though others can be used. The goals of injection attacks can vary, from spoofing an identity to tampering with data already on a system or even shutting down access to a system.
Based on what you gathered from the resources, compose the OS vulnerability section of the SAR. Be sure to:
· explain Windows vulnerabilities and Linux vulnerabilities;
· explain the Mac OS vulnerabilities, and vulnerabilities of mobile devices;
· explain the motives and methods for intrusion of the MS and Linux operating systems;
· explain the types of security awareness technologies, such as intrusion detection and intrusion prevention systems;
· describe how and why different corporate and government systems are targets; and
· describe different types of intrusions such as SQL PL/SQL, XML, and other injections.
You will provide the company’s leadership with a brief overview of these vulnerabilities in your SAR.
