Page 10 - Campus Chronicles Technical Magazine 2021

• website pages on the Internet require no Application Security Risks
authentication or authorization. Authorization is
supported on standard SQL but some special types
of authorization are not supported like all
employees can see their own salary slip but not the
salary slip of anyone else in the company. This type
of authorization leads to a problem in SQL and the
problems are
• Less amount of information about end-user:
With the development of the Web, the access of the
database comes fundamentally from Web
application servers. The end-users commonly try
not to have unique client identifiers on the actual
database, and for sure there may just be a single
client identifier in the database compared to all
users of an application server. Accordingly,
authorization determination in SQL can't be
utilized in the above situation.
• Absence of fine-grained authorization:
Authorization should be at the degree of individual
tuples if it is to be approved that employees can
see just their own salary slip. Such authorization is
unimaginable in the current SQL standard, which
licenses authorization just on a whole connection
or view, or on determining attributes of relations or
perspectives.
• Privacy: Privacy is the part of information
technology (IT) that deals with the capacity an
association or individual needs to figure out what
information in a computer system can be shared
with third parties. Applications that access such
private information should be built cautiously,
remembering the privacy regulations.
From the large-scale network to centered database
altering of web apps the security issues are distributed.
There are some security risks below:
• · The first security risk known as cross-site
scripting (XSS) permits an attacker to introduce
client-side code into a site page. The attacker gets
direct access to the user's data.
• Denial-of-service (DoS) and Distributed denial-of-
service(DDoS) attacks are used by some isolated
attackers to flood a designated server or the
framework that upholds it with different sorts of
traffic. This traffic in the end keeps real users from
getting to the server, making it shut down.
• A strategy called SQL injection (SQLi) is used by
hackers to take advantage of database flaws.
These hackers, specifically, can uncover user
personalities and passwords and can also create,
modify and delete data without taking permission
of the user.
• When a hacker executes a variety of attacks on an
application and ends up accidentally changing
some spaces of memory then Memory corruption
occurs. As a result, the software can behave
normally or shut down at the end.
• The buffer overflow happens when corrupted code
is introduced into the system's memory.
Overflowing the buffer zone's ability causes a
neighboring region of the application's memory to
be overwritten with data, representing a security
risk.
Campus
CHRONICLES 10
Technical Magazine
Abstraction inObject
Oriented Programming
Using C++
By Ms. Poonumalli Harshitha,
B. Tech (CSE) - 19UP1A0589
Data Abstraction is a process of providing only the
essential details to the outside world and hiding the
internal details, i.e., representing only the essential
details in the program.Data Abstraction is a
programming technique that depends on the
seperation of the interface and implementation details
of the program.Let's take a real life example of AC,
which can be turned ON or OFF, change the
temperature, change the mode, and other external
components such as fan, swing. But, we don't know the
internal details of the AC, i.e., howit works internally.
Thus, we can say that AC seperates the implementation
details from the external interface.
In C++ program if we implement class with private and
public members then it is an example of data
abstraction.
Data Abstraction can be achieved in two ways:
• Abstraction using classes
• Abstraction in header files.
Abstraction using classes: An abstraction can be
achieved using classes. A class is used to group all the
data members and member functions into a single unit
by using the access specifiers. A class has the
responsibility to determine which data member is to be
visible outside and which is not.
Campus
11 CHRONICLES
Technical Magazine
Abstraction in header files: An another type of
abstraction is header file. For example, pow() function
available is used to calculate the power of a number
without actually knowing which algorithm function
uses to calculate the power. Thus, we can say that
header files hides all the implementation details from
the user.
Access Specifiers Implement Abstraction:
• Public Specifier: When the members are declared
as public, members can be accessed anywhere
from the program.
• Private Specifier: When the members are
declared as private, members can only be
accessed only by the member functions of the
class.
Advantages Of Abstraction:
• Implementation details of the class are protected
from the inadvertent user level errors.
• A programmer does not need to write the low level
code.
• Data Abstraction avoids the code duplication, i.e.,
programmer does not have to undergo the same
tasks every time to perform the similar operation.
• The main aim of the data abstraction is to reuse the
code and the proper partitioning of the code
across the classes.
• Internal implementation can be changed without
affecting the user level code.