"CISP" Database and Application Security

Database security Feature Check tool
App detective of the U.S. app security company
NGS SQuirrel, the UK's next-generation software company

Common Application Security Threats

Network Level
Denial of service, electronic spoofing, sniffing 、......
System level
Web Service vulnerability, configuration error 、......
Application level
Code defects (SQL injection, XSS ...) ）
Resource Management
......
Business level
Fishing, process defects

Browser security Protection-cookie security

Set IE
Setting the level of privacy protection
Delete Cookies upon exit
Firefox
Do not record cookies
Other

Browser security protection-privacy protection

Privacy protection
Ie
Do not automatically save browsing history
Do not automatically save user name/password
Firefox
Private Browsing Window
Other

Web security Protection Products-application firewall

Web Application Firewall
Web Application Firewall,waf, also known as Web Firewall
A class of products designed to provide protection for Web applications by executing a series of security policies for Http/https to address security issues at the Web application layer
Key Common features
Intercepting an audit HTTP data stream
Web App access control
Web Application Hardening

Web Anti-tampering products

Function
Monitor the paging file on the Web server to prevent tampering
Principle
Backup file Comparison
Summary file Comparison
Trigger for a snip operation
System Bottom Filter

"CISP" Database and Application Security