Detecting Attacks on Data and Applications
Introduced
Vocabulary
| English |
|---|
| accounting/əˈkaʊntɪŋ/ |
| honeypot/ˈhʌnɪpɒt/ |
| data loss prevention/ˈdeɪtə lɒs prɪˈvenʃn/ |
Watching the data
- Accounting 审计记录 logs who accessed what and when.
- A honeypot 蜜罐 is a fake valuable file — any access is a clear attack sign.
- Re-hashing a file reveals if it was altered.
Choosing detective controls
- Honeypots and hash checks are cheap.
- A data loss prevention (DLP) 数据泄露防护 service is powerful but costly.
- More sensitive data deserves closer monitoring.
Explore
Match the log evidence to the attack
OR 1=1 = SQL injection;
Your subject
Loading subjects…
Pick one and the site follows you — notes, papers, videos and practice all open on it.