Split-Response

Question 1

What is a split-response/request attack?

Answer 1

• occurs when an attacker is able to manipulate the way a web server processes HTTP requests and responses, leading to potentially malicious outcomes
• can have serious implications for user privacy and security

Question 2

Can accessing browser’s cache lead to split-response attack?

Answer 2

yes

Question 3

How does split-response attack work?

Answer 3

• split-response attacks can cause the client to download content and store it in the cache that was not an intended element of a requested web page
• once files have been poisoned in the cache, then even when a legitimate web document calls on a cached item, the malicious item will be activated

Question 4

What’s a dissolvable NAC?

Answer 4

software agent or application that is used as part of a Network Access Control solution but has a specific characteristic: it is designed to run temporarily and then automatically terminate or “dissolve” itself