Please see attached file
You will be required to create 1 new thread, and provide substantive comments on at least 3 threads created by other peers. Make sure to explain and backup your responses with facts and examples. This assignment should be in APA format and have to include at least two references.
How should cache handling be accomplished in order to minimize the ability of the attacker to deliver a payload through the cache?
Vamshi Krishna Gentela
COLLAPSE
Top of Form
A cache refers to “a reserved storage location that collects temporary data to help websites, browsers, and apps load faster” (Annamalaisami et al., 2014). This is done by storing a temporary backed up copy of the resource accessed to ensure that should the user need this resource again, he or she can quickly get it instead of having to look for the original one. This is because, the cache memory is closer to the CPU than RAM is. At the same time, RAM is slower. Cache memory is in three levels. Level 1 is the closest to the processor. It is small but it also the fastest. Level 2 follows and it located on the processor. It is bigger in size but at the same time, it is a little bit slower than Level 1. Level 3 follows and it has the biggest memory.
Payload occurs when the “back-end processor reads what’s been put into the cache” (Annamalaisami et al., 2014). This would allow the attacker to get the information that has ben stored in the cache such as files, images, and other pertinent data on the device. Payload caching “is supported primarily by an enhanced network interface controller (NIC) and its driver, with modest additional kernel support in the network buffering and virtual memory system” (Annamalaisami et al., 2014).
As said earlier, an attacker can deliver a payload through the cache if he or she can get the processor to read what is in the cache. To stop this, the best method to use would be to add some logic to the back end where “the back-end could query for the presence of an object and, if present, order the cache to delete all reference to the object’s reputation” (Annamalaisami et al., 2014). This will mean that no data gets to be read from the cache memory. Instead, if it requested for, the backend will check for these objects and delete them instead of actually reading them.
This works by eliminating the potential threat surface. Here, we can see that the data is put in the position where it cannot be read nor really accessed. Therefore “If data are never read from the cache, then cache manipulation by the back-end presents a very limited attack surface, if any surface is present at all”.
Bottom of Form
Simon Jaysheel Madugula
COLLAPSE
Top of Form
Cache Handling
Attackers have various ways of launching an attack on their victim, one of them delivering a payload through the cache. Payload, which refers to a malicious type of virus whose intention is to irritate and interfere by blocking and causing disruption to the victim's normal functions, can be delivered through cache email spam, among other means. Attackers are causing cache poisoning, and disabling cache in a web server is not a reasonable approach to dealing with them. Thus, to reduce transmission of this type of virus, caches need to be dealt with in various ways.
Despite web caching being a significant HTTP feature that reduces web traffic and the web server burden, it poses a security threat in web cache poisoning. To limit the chance of hackers’ exploiting this type of cache, web developers should keep away from user input from HTTP request headers and cookies as much as possible (Cobb, 2018). This implies that the administrator should always try to shun away from creating any cache key decision from untrusted user input that is HTTP header when calculating cache keys.
Review caching server configurations is another approach that should be employed in dealing with cache, which a hacker could use in a staging attack. In this case, the developer validates and cleanse any input used as the right strategy. The back-end query and command should be in place to eliminate all references to the object's reputation by deleting them (Appcheck, 2020). This command can be automatic such that reputation processing instructs the command to cache without communicating backing.
They should utilize the Param Miner extensions to audit their application. Param Miner identifies hidden unconnected parameters. It will be of great essence in finding web cache poisoning weak points. It will help examine and find out if there are any unkeyed inputs generated by framework or third party component. Furthermore, if there is any unkeyed input, it should be handled properly to avoid the risks of getting virus contamination (Cobb, 2018). This may involve a back-end processor not reading what it has in the cache, thus avoiding payload.
Proper handling of cache is required to protect unnecessary interference of malicious attacks through the exploitation of cache since it can cost an organization much more through waste of resources such as time and human resources, among others, which will then lead to an increase in the cost of production and low returns.
Bottom of Form
+
Sai Kumar Rapul
COLLAPSE
Top of Form
In computing terminology, a cache is a rapid information storage layer that stores a subset of information from the actual stored data in the database. It is ordinarily transient, with the goal that future requests for that information are presented quicker than by getting to the information's essential stored place (Nguyen et al., 2019). Whenever we request the reusable data in the stored place, we can access quicker than getting from the actual site—caching permits you to reuse recently recovered productively or processed information at any time within the application need. The cache data is generally stored in hardware with the software correlation to increase the data retrieving than getting from the storage layer. While executing caching, it's essential to comprehend the legitimacy of the information being reserve (Nguyen et al., 2019).
A sufficient reserve brings about a high hit rate, which implies the information was available when gotten. A cache miss happened when the data got was absent in reserve. Controls, for example, TTLs (Time to live), can be applied to terminate the information likewise. Another thought might be whether the store condition should be Highly Available, which can be fulfilled by In-Memory motors, such as Redis (Schoenfield, 2015). An In-Memory layer can be utilized as an independent information storage layer as opposed to storing information from an essential area. In this situation, it's necessary to characterize a proper RTO (Recovery Time Objective- - the time it takes to recoup from a blackout) and RPO (Recovery Point Objective- - the last point or exchange caught in the recuperation) on the information inhabitant in the In-Memory motor to decide if this is reasonable. Structure techniques and attributes of various In-Memory motors can be applied to meet most RTO and RPO necessities (Schoenfield, 2015).
The framework reserve is a steady stockpiling territory on a PC used to store the working framework's document data and all other programming programs introduced on the PC. It implies that the quantity of reserves required per memory channel is insignificant. Interestingly, a memory director should decide if a given gadget has enough reserve for its absolute data transfer capacity or memory limit. On the off chance that the aggressor can control the memory tending to method of a module utilized for the store, they can control the size of the reserve substance. By and large, assailants who control the method of a module confine how they can change the reserve's substance (Schoenfield, 2015).
Payload caching supports fundamentally by an upgraded network interface controller (NIC) and its driver, with unassuming extra piece support in the arrange and virtual memory framework. The approach is for the NIC to store bits of the approaching bundle stream, in particular, information payloads (instead of headers) to be driven (Schoenfield, 2015). The host and the NIC arrange utilization of the NIC's payload store to lessen information moves over the I/O transport. The Benet might be permitted to have based middle people where custom structures were recently required. Hackers are brilliant nowadays by using various techniques to introduce payload into the cache. Switching with some other information through popups. Cookies to capture user’s sensitive information Password and demographical information. Denial of service (Dos/DDoS) by overloading with multiple attempts -hung threats (Nguyen et al., 2019).
Bottom of Form
