Re: Application-level Attacks

[Adam Shostack <adam () homeport org>]

On Thu, Jan 27, 2005 at 06:56:58PM -0800, Crispin Cowan wrote:
| Shimon Silberschlag wrote:
| 
| >Today, when attacks are shifting towards using the already open ports 
| >on the firewall, at the application level,
| 
| It is often said that contemporary attacks are migrating to 
| application-level attacks. Can someone point me to data backing this claim?

I think the rise of SQL injection (and other forms of injection
attacks) could be a symptom of this trend.  I don't know if anyone has
collected, say a mass of IDS data from varios places to act as
evidence.

Adam
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards