Detecting Attacks on Data and Applications
Vocabulary
| English | Chinese | Pinyin |
|---|---|---|
| accounting | 审计记录 | shěn jì jì lù |
| honeypot | 蜜罐 | mì guàn |
| data loss prevention | 数据泄露防护 | shù jù xiè lòu fáng hù |
Watching the data
- Accounting 审计记录 logs who accessed what and when.
- A honeypot 蜜罐 is a fake valuable file — any access is a clear attack sign.
- Re-hashing a file reveals if it was altered.
Choosing detective controls
- Honeypots and hash checks are cheap.
- A data loss prevention (DLP) 数据泄露防护 service is powerful but costly.
- More sensitive data deserves closer monitoring.
Explore
Match the log evidence to the attack
OR 1=1 = SQL injection;