Questions tagged [business-logic-attack]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3
votes
3answers
298 views

Web Application Firewall using web app source code analysis

I read this page: Category:OWASP Best Practices: Use of Web Application Firewalls, and I found that WAF cannot generally detect logical attacks. We know each web application has a number of input ...
6
votes
1answer
137 views

Do anti-XSS rules of Web Application Firewall break business logic?

I've read about Web Application Firewalls in a MOOC, and the provided example is that the WAF can filter out a request like ?user=<script to avoid potential XSS attacks. But what if a webpage of ...
1
vote
0answers
44 views

Electronic store security [closed]

Iam not sure if this is the right place to ask this question. I would like to know what security features an electronic store should have besides the general alarm system monitored by a security ...
0
votes
2answers
97 views

Do Cyber Range(s) detect Business Logic Security Failures?

I had been studying Cyber Ranges for a while & found out there applicability in defense, military control systems, enterprise & in medical. I'm interested to know if the stimulation which is ...
3
votes
1answer
230 views

Should business logic attack be one of the testing methods during pentesting or vulnerability assessment project?

Should business logic attack be one of the testing methods during pentesting or vulnerability assessment project? Business logic attacks most of the time are left out during pentesting either it was ...