OK
X

A T T E N T I O N !

Tickets on sale for our own 'Industry leading, highest rated' event out there!

The NEXT GENERATION
Contact Center & Customer Engagement
BEST PRACTICES Conference
featuring 2018 Top Contact Centers / CX Organizations!!
Events taking place in Europe, US, Asia

FIND OUT MORE

United States
Login
Invalid Login
Email
Password

Reset / Forgot Password Link

Register FREE
Become a Basic Member for free. Click on the memberships tab
Memberships
FacebookLinkedInTwitterRSSYoutubeInstagramContactCenterWorld
Exec Menu:
Classic Menu:
Default Classic Sub Menu:
Become a Basic Member for free. Click Here
Menu
  • Advertise
    • Overview
    • Directory
    • Banners
    • Emails
    • Events
    • Awards
    • Certification
    • Added Value
    • FAQ
  • Articles & News
  • Awards
    • Overview
    • Categories
    • How to enter
    • Past winners
    • FAQ
    • My entries
      • Overview
      • Welcome
      • Add Location
      • My Award Entries
      • My Payments
      • Submission Status
      • My Admins
      • Help
    • Judge / Sponsor
    • Industry Champion
    • Employee Engagement
  • Benchmarking
    • Global Benchmarking Study
    • Contact Center Exchange Program
    • Best Practice Conferences
    • Best Practice Awards
  • Events
    • North & South America
      • Americas Overview
      • Networking
      • Certificate/Benchmarking
      • Conference Schedule
      • Book Tickets
      • Contact Us
      • Venue/Travel
      • Gala Dinner
      • Travel Information
      • Useful Information
      • Convince Your Boss
      • Sponsorship
      • Transaltion Services
    • Europe, Middle East & Africa
      • EMEA Overview
      • Networking
      • Certificate/Benchmarking
      • Conference Schedule
      • Book Tickets
      • Contact Us
      • Venue/Travel
      • Gala Dinner
      • Travel Information
      • Useful Information
      • Convince Your Boss
      • Sponsorship
      • Transaltion Services
    • Asia Pacific
      • Asia Pacific Overview
      • Networking
      • Certificate/Benchmarking
      • Conference Schedule
      • Book Tickets
      • Contact Us
      • Venue/Travel
      • Gala Dinner
      • Travel Information
      • Useful Information
      • Convince Your Boss
      • Sponsorship
      • Transaltion Services
    • Global
      • Global Overview
      • Networking
      • Certificate/Benchmarking
      • Conference Schedule
      • Book Tickets
      • Contact Us
      • Venue/Travel
      • Gala Dinner
      • Travel Information
      • Useful Information
      • Convince Your Boss
      • Sponsorship
      • Transaltion Services
  • Groups
    • Aerospace
    • Agent Zone
    • Association
    • Automotive
    • Awards
    • Banking / Finance / Credit
    • Benchmarking
    • Best Practices
    • Charity / Not For Profit
    • Computer Hardware / Software
    • CRM
    • Executive Track
    • Government
    • Healthcare / Pharmaceutical
    • HR
    • Insurance
    • Legal
    • Management
    • Manufacturing
    • Outbound
    • Outsourcing
    • Performance
    • Quality
    • Retail
    • Service Industry
    • Social Media
    • Tactics & Strategy
    • Technology
    • Telecom
    • Training
    • Travel / Transportation / Tourism
    • Utilities
    • Workforce Management
  • Jobs
  • Resources
    • International Contact Center Week
    • TopPlace2Work
    • Mobile App
    • Social Exchange Program
    • The Learning Academy
    • Find a Career
    • Glossary
    • Link to Us
    • Industry Social Overview
    • RSS Feeds
    • Company Blogs
    • Sponsorship Opportunities
    • Submit Editorial
    • Association Directory
    • Demo's and Tutorials
    • Feeds for Your Website
    • Event Photos
  • Suppliers
  • Tips
  • Tips
  • Articles
  • Events
    • Best Practice Conferences
    • Other Events
  • Awards
  • Benchmarking
    • Global Benchmarking Study
    • Contact Center Exchange Program
    • Best Practice Conferences
    • Best Practice Awards
  • Jobs
  • Suppliers
  • Resources
    • International Contact Center Week
    • TopPlace2Work
    • Mobile App
    • Social Exchange Program
    • The Learning Academy
    • Find a Career
    • Glossary
    • Link to Us
    • Industry Social Overview
    • RSS Feeds
    • Company Blogs
    • Sponsorship Opportunities
    • Submit Editorial
    • Association Directory
    • Demo's and Tutorials
    • Feeds for Your Website
    • Event Photos
  • Advertise
  • Groups
    • Aerospace
    • Agent Zone
    • Association
    • Automotive
    • Awards
    • Banking / Finance / Credit
    • Benchmarking
    • Best Practices
    • Charity / Not For Profit
    • Computer Hardware / Software
    • CRM
    • Executive Track
    • Government
    • Healthcare / Pharmaceutical
    • HR
    • Insurance
    • Legal
    • Management
    • Manufacturing
    • Outbound
    • Outsourcing
    • Performance
    • Quality
    • Retail
    • Service Industry
    • Social Media
    • Tactics & Strategy
    • Technology
    • Telecom
    • Training
    • Travel / Transportation / Tourism
    • Utilities
    • Workforce Management
WHAT CAN WE HELP YOU FIND?
categories
All
Articles
Tips
People
Company
Jobs
Video
Blog
Gallery
Glossary
Store

Industry Research : Imperva Finds Business Logic Attacks Attractive To Hackers

Imperva (NYSE: IMPV), a provider of a new category of data security solutions for high-value business data in the data center, today announced the release of the second Imperva Web Application Attack Report (WAAR), which revealed that web applications are subject to business logic attacks. The WAAR, created as a part of Imperva’s ongoing Hacker Intelligence Initiative, offers insight into actual malicious web application attack traffic over a period of six months, June 2011 through November 2011.

??Imperva monitored and categorized attacks across the internet targeting 40 different applications. The WAAR outlines the frequency, type and geography of origin of each attack to help security professionals better prioritize vulnerability remediation.

??"Business logic attacks are attractive for hackers since they follow a legitimate flow of interaction of a user with the application," said Amichai Shulman, Imperva’s CTO."This interaction is guided by an understanding of how specific sequences of operations affect the application’s functionality. Therefore, the abuser can lead the application to reveal private information for harvesting, skew information shared with other users and much more — often bypassing security controls."

-In the six month period from June – November 2011, the observed web applications suffered attacks in the range of 130,000 to 385,000 per month. At its peak, the application set was under attack at a rate of nearly 38,000 per hour or ten per second.

-Hackers are relying on business logic attacks due to their ability to evade detection: Imperva also investigated two types of Business Logic attacks: Comment Spamming and Email Extraction. Comment Spamming injects malicious links into comment fields to alter search engine results and potentially defraud consumers.Email Extraction simply catalogs email addresses for building spam lists.These Business Logic attacks accounted for 14% of the analyzed malicious traffic.

-The geographic origin of Business Logic attacks were:
oEmail extraction was dominated by hosts based in African countries.
oAn unusual portion of the Comment-spamming activity was observed from eastern-European countries.

-Hackers exploit five common application vulnerabilities: The five most common application vulnerabilities are: Remote File Inclusion (RFI), SQL Injection (SQLi), Local File Inclusion (LFI), Cross Site Scripting (XSS) and Directory Traversal (DT). Cross Site Scripting and Directory Traversal are the most prevalent classical attack types. Why are these vulnerabilities targeted? Hackers prefer the path of least resistance and application vulnerabilities offer a rich target.


Today's Tip of the Day - Assessing The Proposal

Read today's tip or listen to it on podcast.

Related Editorial

  • Imperva Report Examines Dangers In Light Of Military Singles Hack
  • Imperva Research New Search Engine Hack Innovation
  • Imperva Releases Details of How Search Engine Poisoning (SEP) Works
  • Imperva Deconstructs Local and Remote File Inclusion Attack Vectors
  • Imperva Analyzes High-Profile ‘Anonymous’ Attack
  • 86% of IT Organisations Don’t Track Sensitive Documents

More Editorial From Imperva

  • Imperva Report Examines Dangers In Light Of Military Singles Hack
  • Imperva Deconstructs Local and Remote File Inclusion Attack Vectors
  • Imperva Analyzes High-Profile ‘Anonymous’ Attack
  • Imperva Research New Search Engine Hack Innovation
  • Imperva Releases Details of How Search Engine Poisoning (SEP) Works
  • 86% of IT Organisations Don’t Track Sensitive Documents

Published: Wednesday, February 1, 2012

Printer Friendly Version Printer friendly version

Industry Suppliers

Get Listed
GenesysPREMIUMGenesys
http://genesys.com
Genesys® powers 25 billion of the world’s best customer experiences each year. Our success comes from connecting employee and customer conversations on any channel, every day. Over 10,000 companies in...
(view more)
NICE SystemsNICE Systems
NICE (NASDAQ: NICE), is a worldwide provider of intent-based solutions that capture and analyze interactions and transactions, realize intent, and extract and leverage insights to deliver impact in re...
(view more)
Aspect SoftwareAspect Software
Aspect Software contact center and workforce optimization solutions engage consumers, empower agents, improve quality, and lower the cost of delivering remarkable experiences. Our cloud, private cloud...
(view more)
DialogicDialogic
Dialogic is a provider of technologies based on open standards such as host media processing and other multimedia products that enable its customers and partners to deliver mobile, video, IP, and TDM ...
(view more)
Get Listed

Upcoming Events

Submit Event
EUROPE, MIDDLE EAST & AFRICA - NEXT GENERATION Contact Center & Customer Engagement Best Practices
2018 Top Ranking Performers from ContactCenterWorld.com showcase the top contact centers and professionals from all over the region! Read More...
 1
 2274 
Share