词条 | Anti-Subversion Software |
释义 |
Software subversion is the process of making software perform unintended actions either by tampering with program code or by altering behavior in another fashion. For example, code tampering could be used to change program code to load malicious rules or heuristics, SQL injection is a form of subversion for the purpose of data corruption or theft[1] and buffer overflows[2] are a form of subversion for the purpose of unauthorised access. These attacks are examples of computer hacking. Anti-Subversion Software detects subversion and attempts to stop the effects of the hack. Software applications are vulnerable to the effects of subversion throughout their lifecycle from development to deployment, but particularly in operation and maintenance.[3]Anti-subversion protection can be accomplished in both a static and dynamic manner:
Software applications running on desktops, corporate servers, mobile devices and embedded devices are all at risk from subversion.[5] References1. ^http://www.verizonbusiness.com/resources/reports/rp_data-breach-investigations-report-2012_en_xg.pdf 2. ^http://www.infosecisland.com/blogview/21004-On-Buffer-Overrun-Vulnerabilities-Exploits-and-Attacks.html 3. ^https://buildsecurityin.us-cert.gov/bsi/547-BSI.html 4. ^Metaforic 5. ^http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/reports/rpt_security_in_the_age_of_mobility.pdf 1 : Computer security software |
随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。