Threat | Other Vulnerabilities

• Browser flaws

  • Hostile servers can exploit weaknesses in MS IE and Netscape Communicator to access local files, etc
    • A continuous journey of discovery, response, etc.
  • Untrusted hackers aren’t breaking in... trusted employees are unwittingly opening the door by accessing hostile web pages

• Server flaws

  • Hackers can exploit server-side vulnerabilities, installing hostile code on a trusted server that exploits clients
  • Cross-site scripting complicates the issue... only countermeasure is good server-side defensive programming