| Title: | Web Security: Know Your Enemy |
| URL: | http://www.rimmkaufman.com/rkgblog/2007/03/07/web-security-know-your-enemy/ |
| Printed: | January 6, 2009 |
| Source: | The Rimm-Kaufman Group Blog, info@rimmkaufman.com |
- March 7, 2007
- 0 comments
Jamie Riden, Ryan McGeehan, Brian Engert, and Michael Mueter recently released a depressing whitepaper on the prevalence of web attacks titled “Know Your Enemy”. They’re members of the New Zealand, Chicago, Chicago, and German Honeynet Projects, respectively. “Honeypots” or “honeynets” are computer systems set up as traps for attackers.
In their study, they observed roughly 20 attack attempts each day(!) on each server. Some attackers hid behind proxy servers (including Google Translate). Some used “onion routing” to disguise their origin. The goal of the attacks included sending spam, blog comment spam, web site defacement, bandwidth and disk theft, botnet recruitment, and phishing. One phishing attacker attempted to place a convincing copy of Google’s Orkut on the server, hoping to use the hardware to phish Google logins:
Now, you’re probably not running any of the specific open source apps discussed in this paper on your exposed servers, so you may not face the exact exploits described. Regardless, hardening an e-commerce web site is hard, and too many web retailers underestimate the risk of attack. The threat is real and increasing.
Web security isn’t just an IT issue — security should be an active concern for marketing and senior management.
Know Your Enemy: a good introduction to a critical topic.
If you like this post, consider subscribing to our RSS feed. You can also have new posts sent to you via email.
Possibly Similar Posts
- Fatals To Browser
- Is Your Online Store Vulnerable To CSRF and XSS Attacks?
- Viewing On-Deck Google PR Releases
- AMA’s Hot Topic Series on Search Marketing
- Increase Site Speed To Increase Site Conversion
Trackback
http://www.rimmkaufman.com/rkgblog/2007/03/07/web-security-know-your-enemy/trackback/No Comments Yet
Your comment will be first!
Your Comment