Malicious Javascript Injection Attacks.pdf

(1018 KB) Pobierz
Ravi Kishore K
e-Security
C-DAC, Hyderabad
10/05/2012
C-DAC, Hyderabad
1
JavaScript Attacks in News
•
JavaScript opens doors to browser-
based attacks
•
Javascript injection claims UN and UK
government sites
•
JavaScript injection attacks seem to
be the in thing these days
•
Javascript
injection
attacks
compromise high profile sites.
10/05/2012
C-DAC, Hyderabad
2
JavaScript Attacks in News
•
Malicious JavaScript Possibly Infected 20,000
Websites
•
About 55,000 web sites were compromised by
cybercriminals with
Malicious
iFrames
targeting to
infect with exploit scripts every user that visits
them.
•
More than half a million web pages distributed a
variant of the Zlob Trojan to unsuspected users
through
Malicious JavaScripts.
•
How malicious JavaScript is used: A “Drive-by
Download“
10/05/2012
C-DAC, Hyderabad
3
Popular JavaScript Injection Attack
•
Injecting malicious JavaScript into legitimate
web pages allows hackers to silently redirect
the victim's browser to load content and
malware from a remote server. This so called
"drive-by
download"
has created a number of
security challenges for organizations and end
users alike.
10/05/2012
C-DAC, Hyderabad
4
Drive by Download
Malicious JavaScript Injection based
Attack
10/05/2012
C-DAC, Hyderabad
5

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin