6.3. Common Software Vulnerabilities

Try these first

1. 1.

   What is SQL Injection?

   Hint

   Think about how user input can interact with SQL commands.

2. 2.

   Explain what XSS stands for.

   Hint

   It involves scripts on webpages.

3. 3.

   What is SQL Injection?

   • Manipulation of database queries
   • A way to secure applications
   • A type of user input validation

   Hint

   Think about how attackers can interfere with database interactions.

4. 4.

   Is Buffer Overflow a type of software vulnerability?

   • True
   • False

   Hint

   Remember how data limits can be exceeded in memory.

5. 5.

   Develop a security plan that includes measures to prevent SQL Injection and Buffer Overflow in an application. Explain each measure.

   Hint

   Consider how each vulnerability can be attacked and ways to reinforce security.

6. 6.

   Create a scenario where Insecure Deserialization is exploited and outline the preventive measures that could have been taken.

   Hint

   Think about the flow of data in applications and how to control access.