cyber security course syllabus

more intuitive experience the vulnerability of the web. Of course, in addition to understanding all kinds of basic attack means, but also warns us that the site design is not easy, we have learned that the site design is really fur in the fur, not only functional, beautiful and other visual problems. How to avoid the vulnerability that can be exploited in the design process, how to find and rewrite is a problem worth pondering. Can only lament th

Interpretation of Google's breach of cyber security algorithmGive all your friends (whether you understand information security, as long as you want to know) to popularize Google's breach of SHA-1 what happened.(Feng Lisu @ han Bo information original, reproduced please specify)When you publish an article, how do you prove that this article has not been tampered

20155208 Xu Zihan "Cyber Confrontation" EXP9 Web Security Basic experiment requirementsThe objective of this practice is to understand the basic principles of commonly used network attack techniques. Webgoat the experiment in practice.Experimental processFor the last time, I did not choose to try the program for the last time I did this exciting activity.WebGoatWebgoat is a web-based vulnerability experimen

20155323 Liu Willang "Cyber Confrontation" EXP9 Web Security Foundation Practical purposeUnderstand the fundamentals of commonly used network attack techniques.Practice ContentWebgoat the experiment in practice.The practice process opens webgoat Webgoat is a flawed Java EE Web application maintained by owasp, which is not a bug in the program, but is deliberately designed for Web application

]?:/ /[\\w-]+\\. "); Buff.append (domain); Buff.append ("(\\/.*)? $)"); } buff.append ("| ( ^(?! HTTP). +$) "); White_domain_pattern = Pattern.compile (buff.tostring (), pattern.case_insensitive);}Five. File Upload preventionRiskThe server is under hacker controlPrincipleThe attacker can control the server by uploading an executable script via an attachment upload vulnerability.Prevention Verify file extension, only allow upload of file types in whitelist (both front and b