Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
U
uva
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Analytics
Analytics
CI / CD
Repository
Value Stream
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Taddeüs Kroes
uva
Commits
5714e76f
Commit
5714e76f
authored
May 09, 2011
by
Taddeüs Kroes
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Portfolio xcs: added some sentences.
parent
1e6bfad1
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
7 additions
and
3 deletions
+7
-3
portfolio/xcs/xcs.tex
portfolio/xcs/xcs.tex
+7
-3
No files found.
portfolio/xcs/xcs.tex
View file @
5714e76f
...
...
@@ -14,6 +14,8 @@
\frame
{
\frametitle
{
Indeling
}
\tableofcontents
}
...
...
@@ -26,7 +28,7 @@
\begin{itemize}
\item
Ligt dicht bij de webontwikkelaar
\item
Aantal embedded web servers groeit
\item
Beveiliging groeit niet mee
\item
Beveiliging groeit niet mee
(26 XCS-lekken in 23 apparaten)
\end{itemize}
}
...
...
@@ -39,7 +41,6 @@
\begin{itemize}
\item
Invoegen van scripts op een webpagina door te profiteren van
slechte validatie
%\item Infectie en executie gaan beide via de web interface
\item
Persistent of non-persistent
\end{itemize}
}
...
...
@@ -185,7 +186,7 @@ aanvaller -> HTTP -> web service
\begin{itemize}
\item
Probleem: derde partij verwacht ``veilige'' data, cloud service
stuurt ``raw'' data
\item
Twitter: escape
bij invoer (input time)
$
\rightarrow
$
derde partij
\item
Twitter: escape
at input time
$
\rightarrow
$
derde partij
moet unescapen voor eigen format
$
\rightarrow
$
foutgevoelig
\item
Facebook: escape at display time
$
\rightarrow
$
derde
partij moet zelf escapen, dit gebeurt soms niet
...
...
@@ -225,7 +226,10 @@ aanvaller -> HTTP -> web service
\frametitle
{
Meer informatie
}
\begin{itemize}
\item
Artikel:
\emph
{
``The Emergence of Cross Channel Scripting''
}
door
Hristo Bojinov, Elie Bursztein en Dan Boneh
\item
\url
{
http://en.wikipedia.org/wiki/Cross-site
\_
scripting
}
\item
Vragen?
\end{itemize}
}
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment