Cryptography
From Guidance Share
Contents |
[edit]
Description
Session management for Web applications is an application layer responsibility. Sessiosecurity is critical to the overall security of the application.
[edit]
Vulnerabilities
- Poor Key Generation or Key Management
- Weak or Custom Encryption
[edit]
Attacks
- Checksum Spoofing
- Cryptanalysis Attacks (chosen plain-text attack, known plain-text attack)
[edit]
Countermeasures
- Use well-known implementations of well-known cryptographic algorithms (e.g., implementations in .NET System.Cryptography namespace classes)
[edit]
Resources
- Hack Crypto Overview: http://www.hack.gr/users/dij/crypto/overview/
