Developer's Guide to Web Application Security

IP addresses without raising suspicion.All too often, users of college, commercial,

government, and at-home broadband services will put systems on the Internet that

are improperly configured and can be readily used as jumping-off points by which

the attacker can probe other systems and networks.Timing is everything; even the

boldest intruder knows enough to refrain from attacking a system during normal

business hours when users are online and the system administrator is on duty.

Following reconnaissance of the system, the intruder will bide his time until the

night, weekend, or holiday when staff is at minimum. Christmas Eve, Christmas, and

New Year’ ...