Q: Which of the following best minimizes software security risk?
-
A
Regular security audits
-
B
Open redirects
-
C
Input validation
-
D
Intercepting validator
B
Answer:
B
Explanation:
Open redirects are an example of a software security anti-pattern. This vulnerability occurs when a web application allows an attacker to redirect users to malicious sites through URL manipulation. Open redirects are a serious security risk because they can be used in phishing attacks, tricking users into visiting malicious websites. Regular security audits, input validation, and intercepting validators are best practices for maintaining security, ensuring the system is secure against vulnerabilities like open redirects. Anti-patterns are common practices that seem reasonable but lead to security weaknesses, so it’s essential to avoid them during development.
Related Topic:
Share Above MCQ