Abuse of Functionality

21

Abuse of Functionality is an attack technique that uses a web site s own

features and functionality to consume, defraud, or circumvents access

controls mechanisms.

Denial of Service

22

Denial of Service (DoS) is an attack technique with the intent of

preventing a web site from serving normal user activity.

Insufficient Anti automation

23

Insufficient Anti automation is when a web site permits an attacker to

automate a process that should only be performed manually.

Insufficient Process Validation

24

Insufficient Process Validation is when a web site permits an attacker to

bypass or circumvent the intended flow control of an application.

9

Copyright 2004, Web Application Security Consortium. All rights reserved.