Category-840: 业务逻辑错误

ID: 840
Status: Incomplete

Summary

Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.

Membership

Notes

Research Gap

References

REF-795 Business Logic Flaws and Yahoo Games
REF-796 Seven Business Logic Flaws That Put Your Website At Risk
REF-797 Business Logic Flaws
REF-798 Abuse of Functionality
REF-799 Defying Logic: Theory, Design, and Implementation of Complex Systems for Testing Application Logic
REF-667 Real-Life Example of a 'Business Logic Defect' (Screen Shots!)
REF-801 Toward Automated Detection of Logic Vulnerabilities in Web Applications
REF-802 Designing a Framework Method for Secure Business Application Logic Integrity in e-Commerce Systems

文章来源于互联网:scap中文网