Application Threats

Question 1

What is an application threat ?

Answer 1

An application threat takes advantage of vulnerabilities w/in the applications themselves.
Vulnerabilities might be present in these applications due to poor coding practices, or when the development of the programs is rushed due to a deadline resulting in more mistakes w/in the code and a lack of validation of input data.

(incomplete -v)
- [Furthermore, you can have low quality code where the containers within the code itself, which contain data such as arrays, are] -

Question 2

What are some examples of Application Threats ?

Answer 2

• SQL injections
• Cross-site scripting
• Session hijacking
• Identity spoofing
• Improper input value
• Security misconfiguration
• Information disclosure
• Hidden-field manipulation
• Broken session management
• Cryptography attacks
• Buffer overflow issue
• Phishing