If you were the hacker how might you exploit the...

If you were the hacker, how might you exploit the vulnerabilities and compromise Microsoft's database? Discuss two approaches you might take. For each approach, describe the Microsoft vulnerabilities that you would seek to exploit and why your hacking method therefore has a good chance of succeeding. If you were the CISO of Microsoft, what could you have done to prevent this from happening? In your response, discuss three steps that you as CISO would have taken, and whether each step should still be implemented post-breach.

Transcript

00:03 If i were the hacker, i might exploit the vulnerabilities in microsoft database the following ways.

00:13 First one is sql injection attack.

00:21 See one of the most common methods of exploiting database vulnerabilities is through sql injection attacks.

00:31 In this approach, i would try to inject malicious sql code into the database by exploiting vulnerabilities in the web application that interacts with that database.

00:50 For example, if the web application does not properly validate user input, i could inject sql code that would allow me to access and manipulate the database.

01:02 This method has a good chance of succeeding because many web applications have vulnerabilities that can be exploited through sql injection attack.

01:14 Next social engineering.

01:16 Social engineering another approach i might take to use tactics to gain access to the database.

01:28 For example, i could send phishing emails to employees at microsoft tricking them into revealing their login credentials or other sensitive information.

01:38 Alternatively, i could pose as a legitmate user and use social engineering tactics to convenience an employee to give me access to the database.

01:49 This method had a good chance of succeeding because humans are often the weakest link in cybersecurity.

01:56 If i were the ciso of microsoft, there are several steps i could take to prevent this from happening...

Question

Please give Ace some feedback