WIKI Security specialists carry out a wide range of security projects and repeatedly encounter practical requirements that existing tools alone cannot meet. They define the functions needed in the field and develop lightweight programs and practice-oriented security guides in-house.
This menu shares toolkits and guides validated in real project environments. Through them, WIKI Security turns field experience into organizational technical assets and supports a more realistic security response.
(*) Source: Korea Internet & Security Agency (KISA) (*) Data: Korea Internet & Security Agency (KISA) This is the Guide for Vulnerability Assessment and Remediation of Web Applications. Web Application …
Section 1. Input Data Validation and Representation Accepting and using user input without proper validation exposes a system to numerous security threats. To prevent such vulnerabilities, it is recommended to …
1. Local Storage Security A. Definition HTML5 provides a new API called postMessage. This is a framework for scripts to pass data from one domain to another. To ensure that …
Section 1. Ajax Vulnerabilities and Countermeasures Ajax (Asynchronous JavaScript and XML) is a web application development method that uses asynchronous JavaScript to exchange XML data with a web server via …
Section 1. Security Countermeasures 1. Script Injection Vulnerability A. Vulnerability Details and Security Countermeasures This vulnerability refers to attacks that control a web browser to attack a PC by causing …
SQL Injection Vulnerability Vulnerability Details and Security Countermeasures Websites interface with DBMS, and data transactions occur through user input values in web applications. If validity verification for user input is …
Section 1. Input Data Validation and Representation 1. Cross-Site Scripting (XSS) A. Definition When unvalidated external input is used in the generation of dynamic web pages, malicious scripts may be …
1. Account Management Deletion of Default Accounts (Priority: High) Delete system default accounts and unused accounts. Criteria A. Delete default accounts (lp, uucp, nuucp). B. Delete accounts for resigned, transferred, …
1. Account Management 1.1. Default Accounts (Importance: Medium) Overview Check for and delete default accounts that are not used on the system, and any suspicious or unusual accounts. Delete the …
