|
|
Design of computer exercises for security of information systems
Nakládalová, Kateřina ; Tomašov, Adrián (referee) ; Myška, Vojtěch (advisor)
Nowadays, many services are provided in an online environment through web applications. A large amount of data and sensitive information is thus transmitted through cyberspace, which can be stolen by attackers if the systems that handle it are not sufficiently secure. Education in Information Security is therefore crucial. To this end, a web application in the Java programming language was therefore created to demonstrate attacks aimed at it. The application is constructed using Spring framework and connected to PostgreSQL database. The most common attacks on web applications are demonstrated and described in this thesis which are Brute force attack, SQL injection attack, Cross-site scripting attack and Cross-site request forgery, access control vulnerabilities, sensitive data exposure, data inconsistency in web application and interference with web application parameter manipulation. Specific ways of implementing protection against these attacks are given to ensure their safe use. This work can be used as a useful source of information for web application developers and users who want to gain knowledge about the issues of cyber attacks and thereby reduce the risk of their occurrence.
|
guest ::
RSS feed.