4 ms·
is your software actively attacked like major browsers/operating systems?
by kobebrookskC3 4y ago
is your software actively attacked like major browsers/operating systems?
- FpUser 4y agoCurrent project (business backend server in C++) that would qualify for attack sits behind NGINX. Looking at the logs I see all kinds of attempts related to Wordpress, PHP, etc. etc. Also we use 3rd party protection on production before NGINX. Since the server exposes proprietary JSON API with what I would say extreme validation before trying to actually do anything nothing that seems to be illegal gets in. I mean it is not 100% guarantee as nothing else in our lives but so far nothing extraordinary (keeping my fingers crossed).
- kobebrookskC3 4y agoif you see it in the logs, that seems like bots looking for low hanging fruit. what about focused attacks by sophisticated adversaries? here, a heap buffer overflow in a c++ library is a major part of enabling rce https://en.wikipedia.org/wiki/Xpdf https://en.wikipedia.org/wiki/Xpdf