Web Application Security 101 - 12 Logging
1 like370 views
Logging issues were identified including incorrect time synchronization across logs, logging of sensitive information like passwords and credit card numbers, and unauthorized access to log files. Logs need accurate timestamps for forensic investigation and protection as they may contain sensitive data. The document discusses exploring these logging issues in more detail in a lab.
Web Application Security 101 - 12 Logging
- 2. Types Of Issues Incorrect time synchronization. Logging of sensitive information. Unauthorized access to logs.
- 3. Incorrect Time Synchronization If the time of the logs is desynchronized it will make it difficult to perform forensic investigation in case of a break-in.
- 4. Logging Of Sensitive Information Some types of information such as user session ids, passwords, credit card numbers, cvv data and more should not be logged.
- 5. Unauthorized Access To Logs Log files may contain sensitive data and therefore needs to be protected.
- 6. Lab We will explore some of these areas in more detail.