Re: Application-level Attacks

[Adam Shostack <adam () homeport org>]

On Sat, Jan 29, 2005 at 04:30:29AM -0500, Marcus J. Ranum wrote:
| Adam Shostack wrote:
| >I think that the "new" application layer attacks are things like sql
| >injection for data theft, phishing, etc.  I think perhaps business
| >layer attacks makes more sense as a name.
| 
| Those are "social engineering attacks"
| :)
| AKA "layer 8 attacks"
| AKA "user layer attacks"
| AKA "meat layer attacks"

SQL injection is a social engineering attack?  

| By the way, you DON'T want to see what a meat layer buffer overrun
| looks like....

But monsieur, it is just wafer-thin!

;)
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards