Re: Application-level Attacks

["Marcus J. Ranum" <mjr () ranum com>]

Adam Shostack wrote:
> I think that the "new" application layer attacks are things like sql
> injection for data theft, phishing, etc.  I think perhaps business
> layer attacks makes more sense as a name.

Those are "social engineering attacks"
:)
AKA "layer 8 attacks"
AKA "user layer attacks"
AKA "meat layer attacks"

By the way, you DON'T want to see what a meat layer buffer overrun
looks like....

mjr. 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards