InfoSecurity 2008 Threat Analysis

InfoSecurity 2008 Threat Analysis

Volumn , Issue , 2008, Pages

  Clark III, Champ ^a,b   Chaffin, Larry ^f   Chuvakin, Anton ^f   Paladino, Scott ^f   Dunkel, Dan ^f   Fogie, Seth ^c   Gregg, Michael ^e   Grossman, Jeremiah ^f   Hansen, Robert ^f   Petkov, Petko D ^f   Rager, Anton ^f   Schiller, Craig A ^f   DeRodeff, Colby ^d  

^a PORTLAND STATE UNIVERSITY   (United States)

^b Hawkeye Security Training LLC   (United States)

^c Airscanner   (United States)

^d ArcSight Inc   (United States)

^e Superior Solutions Inc   (United States)

^f NONE

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85014152831     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/B978-1-59749-224-9.X5001-3     Document Type: Book

References (5)

1. JavaScript/CSS API "getComputedStyle" http://ha.ckers.org/weird/CSS-history-hack.html.
2. Stealing Search Engine Queries http://www.spidynamics.com/assets/documents/JS_SearchQueryTheft.pdf.
3. JavaScript Console Error Login Checker http://www.http://ha.ckers.org/weird/javascriptwebsite-login-checker.html.
4. Flash to spoof client-side headers http://www.webappsec.org/lists/websecurity/archive/200607/msg00069.html.
5. In so-called drive-by-pharming http://www.symantec.com/enterprise/security_response/weblog/2007/02/driveby_pharming_how_clicking_1.html.