Технические науки в целом

Список источников > Нехудожественная литература > Научная и техническая литература > Техника. Технические науки > Технические науки в целом

Attack surface

Автор: Jesse Russel
Год: 2012
Издание: Книга по Требованию
Страниц: 76
ISBN: 9785512068595
High Quality Content by WIKIPEDIA articles! The attack surface of a software environment is the code within a computer system that can be run by unauthenticated users. This includes, but is not limited to: user input fields, protocols, interfaces, and services. OSSTMM 3 Defines Attack Surface as "The lack of specific separations and functional controls that exist for that vector". One approach to improving information security is to reduce the attack surface of a system or software. By turning off unnecessary functionality, there are fewer security risks. All code has a nonzero probability of containing vulnerabilities. By having less code available to unauthenticated users, there will tend to be fewer failures. Although attack surface reduction helps prevent security failures, it does not mitigate the amount of damage an attacker could inflict once a vulnerability is found. Данное издание представляет собой компиляцию сведений, находящихся в свободном доступе в среде Интернет в...
Добавлено: 2015-04-23 01:24:04