In the past decade, a lot of people have utilized the Web to communicate and conduct business with their customers. This includes web applications that collect and store information. This includes customer information submitted through content management systems and online shopping carts, inquiry forms, or login fields.
They are usually accessed via the Internet and can be hacked to exploit weaknesses within the application or supporting infrastructure. SQL injection attacks which exploit weaknesses in databases, can cause damage to databases that contain sensitive information. Attackers can also exploit an advantage gained through hacking a Web application to find and gain access to other, more vulnerable systems on your network.
Other common Web attack types include Cross Site Scripting attacks (XSS) which exploit flaws in the web server to inject malicious code into web pages, it executes as an infected code in the victim’s browser. This allows attackers to steal sensitive information or send users to phishing sites. Web forums, message boards, and blogs are particularly susceptible to XSS attacks.
Distributed attacks on service (DDoS) are when hackers band together to pummel a website with more requests than it is able to handle. This could cause the site to slow down or shut down altogether that compromises its ability to handle requests and render it inaccessible for all users. This is the reason DDoS attacks can be especially damaging for small businesses that depend on their websites to run like local restaurants or bakeries.
