翻訳と辞書 Words near each other ・ Crossed Clues ・ Crossed dystopia ・ Crossed extensor reflex ・ Crossed field antenna ・ Crossed fingers ・ Crossed Keys Tavern ・ Crossed ladders problem ・ Crossed letter ・ Crossed Lines ・ Crossed Lines (album) ・ Crossed Lines (film) ・ Crossed Loves ・ Crossed module ・ Cross-site ・ Cross-site cooking ・ Cross-site request forgery ・ Cross-site scripting ・ Cross-site tracing ・ Cross-species transmission ・ Cross-spectrum ・ Cross-State Air Pollution Rule ・ Cross-step waltz ・ Cross-stitch ・ Cross-Strait charter ・ Cross-Strait Economic Zone ・ Cross-Strait Economic, Trade and Culture Forum ・ Cross-Strait Forum ・ Cross-strait language database ・ Cross-Strait Peace Forum ・ Cross-Strait relations Dictionary Lists mini英和辞書 mini和英辞書 Webster 1913 Latin-English FOLDOC Wikipedia English ウィキペディア

翻訳と辞書　辞書検索 [ 開発暫定版 ] スポンサード リンク Cross-site request forgery ： ウィキペディア英語版 Cross-site request forgery Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF (sometimes pronounced ''sea-surf''〔) or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user's browser. ==History== CSRF vulnerabilities have been known and in some cases exploited since 2001. Because it is carried out from the user's IP address, some website logs might not have evidence of CSRF.〔 Exploits are under-reported, at least publicly, and as of 2007 there are few well-documented examples. The online banking webapplication of ING Direct was vulnerable for a CSRF attack that allowed illicit money transfers. Popular video website YouTube was also vulnerable to CSRF in 2008 and this allowed any attacker to perform nearly all actions of any user.〔 Customers of a bank in Mexico were attacked in early 2008 with an image tag in email. The link in the image tag changed the DNS entry for the bank in their ADSL router to point to a malicious website impersonating the bank. McAfee was also vulnerable to CSRF and it allowed attackers to change their company system. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Cross-site request forgery」の詳細全文を読む スポンサード リンク 翻訳と辞書 : 翻訳のためのインターネットリソース Copyright(C) kotoba.ne.jp 1997-2016. All Rights Reserved.