{"id":986,"date":"2019-07-12T19:11:17","date_gmt":"2019-07-13T04:11:17","guid":{"rendered":"\/blog\/?p=986"},"modified":"2023-09-21T09:26:51","modified_gmt":"2023-09-21T00:26:51","slug":"%ec%9b%b9-%ec%b7%a8%ec%95%bd%ec%a0%90-%ea%b8%b0%ec%a4%80-%ec%a0%95%eb%a6%ac","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=986","title":{"rendered":"\uc6f9 \ucde8\uc57d\uc810 \uae30\uc900 \uc815\ub9ac"},"content":{"rendered":"\n

\ucd9c\ucc98: https:\/\/m.blog.naver.com\/nowababa\/220845748729<\/span><\/span><\/p>\n


<\/span><\/span><\/p>\n


<\/span><\/span><\/p>\n

<\/span><\/span><\/p>\n

o OWASP Top 10  (<\/span>https:\/\/www.<\/a><\/span>owasp<\/span>.org\/<\/span>)<\/span><\/p>\n

  <\/span>- <\/span>\uc6f9<\/span> <\/span>\ud504\ub85c\uadf8\ub798\ubc0d\uacfc<\/span> <\/span>\uad00\ub828\ud558\uc5ec<\/span> <\/span>\uac00\uc7a5<\/span> <\/span>\ub9ce\uc774<\/span> <\/span>\ubc1c\uc0dd\ud558\ub294<\/span> <\/span>\ucde8\uc57d\uc810\uc744<\/span> <\/span>\uc815\ub9ac\ud55c<\/span> <\/span>\ub9ac\uc2a4\ud2b8\ub85c<\/span> <\/span>\ubc88\ud638\uac00<\/span> <\/span>\uc911\uc694\ub3c4\ub97c<\/span> <\/span>\ubc18\uc601\ud558\uace0<\/span> <\/span>\uc788\uc73c\uba70<\/span> <\/span>\uac1c\ubc1c<\/span> <\/span>\uc801\uc6a9\uc774\ub098<\/span> <\/span>\uad50\uc721\uc774<\/span> <\/span>\uc6a9\uc774\ud568<\/span><\/p>\n

   <\/span>\u203b <\/span>OWASP : Open Web Application SecurityProject<\/span><\/p>\n


<\/p>\n
<\/span>

\ubc88\ud638<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub0b4\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

1<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

2<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc778\uc99d \ubc0f \uc138\uc158 \uad00\ub9ac \ucde8\uc57d\uc810<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

3<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305 <\/span>(XSS)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

4<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud55c \uc9c1\uc811 \uac1d\uccb4 \ucc38\uc870<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

5<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubcf4\uc548 \uc124\uc815 \uc624\ub958<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

6<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubbfc\uac10 \ub370\uc774\ud130 \ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

7<\/span><\/p>\n<\/span><\/td>

<\/span>

\uae30\ub2a5 \uc218\uc900\uc758 \uc811\uadfc \ud1b5\uc81c \ub204\ub77d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

8<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc694\uccad \ubcc0\uc870 <\/span>(CSRF)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

9<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc54c\ub824\uc9c4 \ucde8\uc57d\uc810\uc774 \uc788\ub294 \ucef4\ud3ec\ub10c\ud2b8 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

10<\/span><\/p>\n<\/span><\/td>

<\/span>

\uac80\uc99d\ub418\uc9c0 \uc54a\uc740 \ub9ac\ub2e4\uc774\ub809\ud2b8 \ubc0f \ud3ec\uc6cc\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr><\/tbody><\/table>


<\/p>\n

<\/span> <\/p>\n

o SANS Top 25<\/span> (<\/span>http:\/\/cwe.mitre.org\/top25\/<\/a><\/span>)<\/span><\/p>\n

<\/span><\/p>\n

  - <\/span>\uad50\uc721\uc740 \ud1b5\ud574 \uc18c\uc2a4 \ub808\ubca8\uc5d0\uc11c \ucde8\uc57d\uc810\uc744 \uc57c\uae30\ud558\ub294 \ucf54\ub4dc\ub97c \ub9cc\ub4e4\uc9c0 \uc54a\ub3c4\ub85d \ud558\ub294 \ubaa9\uc801\uc73c\ub85c \ub9cc\ub4e4\uc5b4 \uc84c\uc73c\uba70 \ud575\uc2ec\uc801\uc778 \uc624\ub958\ub4e4\uc744 \ud3ec\ud568\ud558\uace0 \uc788\uc74c<\/span><\/p>\n


<\/p>\n
<\/span>

\ubc88\ud638<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub0b4\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

1<\/span><\/p>\n<\/span><\/td>

<\/span>

SQL<\/span>\uba85\ub839\uc5d0 \uc0ac\uc6a9\ub41c \ud2b9\ubcc4\ud55c \uc5d8\ub9ac\uba3c\ud2b8\ub97c \ubb34\ud6a8\ud654 \ud558\uc9c0 \uc54a\uc74c <\/span>(SQL<\/span>\uc778\uc81d\uc158<\/span>)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

2<\/span><\/p>\n<\/span><\/td>

<\/span>

OS<\/span>\uba85\ub839\uc5d0 \uc0ac\uc6a9\ub41c \ud2b9\ubcc4\ud55c \uc5d8\ub9ac\uba3c\ud2b8\ub97c \ubb34\ud6a8\ud654 \ud558\uc9c0 \uc54a\uc74c <\/span>(OS<\/span>\uc778\uc81d\uc158<\/span>)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

3<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc785\ub825 \ud06c\uae30\ub97c \ud655\uc778\ud558\uc9c0 \uc54a\uace0 \ubc84\ud37c\uc5d0 \ubcf5\uc0ac <\/span>(<\/span>\ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0<\/span>)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

4<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc6f9\ud398\uc774\uc9c0 \uc0dd\uc131 \ub3c4\uc911 \uc785\ub825\uac12\uc744 \ubb34\ud6a8\ud654 \ud558\uc9c0 \uc54a\uc74c <\/span>(XSS)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

5<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud575\uc2ec \uae30\ub2a5\uc5d0 \ub300\ud55c \uc778\uc99d \ub204\ub77d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

6<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc778\uac00 \uae30\ub2a5\uc744 \ub204\ub77d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

7<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc778\uc99d \ub370\uc774\ud130\ub97c \ucf54\ub4dc\uc5d0 \uc9c1\uc811 \uae30\ub85d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

8<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubbfc\uac10\ud55c \ub370\uc774\ud130 \uc554\ud638\ud654 \ub204\ub77d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

9<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc704\ud5d8\ud55c \uc720\ud615\uc758 \ud30c\uc77c \uc5c5\ub85c\ub4dc\ub97c \uc81c\ud55c\ud558\uc9c0 \uc54a\uc74c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

10<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc2e0\ub8b0\ud560 \uc218 \uc5c6\ub294 \uc785\ub825 \uc815\ubcf4\uc5d0 \uc758\uc874\ud558\uc5ec \ubcf4\uc548\uc131 \uacb0\uc815<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

11<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd88\ud544\uc694\ud55c \uad8c\ud55c\uc73c\ub85c \uc2e4\ud589<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

12<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc0ac\uc774\ud2b8\uac04 \uc704\uc870 \uc694\uccad <\/span>(CSRF)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

13<\/span><\/p>\n<\/span><\/td>

<\/span>

\uae08\uc9c0\ub41c \ub514\ub809\ud1a0\ub9ac \uc811\uadfc\uc744 \uc81c\ud55c\ud558\uc9c0 \uc54a\uc74c <\/span>(<\/span>\uacbd\ub85c \ucd94\uc801<\/span>)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

14<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubb34\uacb0\uc131 \uac80\uc0ac \uc5c6\uc774 \ucf54\ub4dc \ub2e4\uc6b4\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

15<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc62c\ubc14\ub974\uc9c0 \uc54a\uc740 \uc778\uac00<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

16<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc2e0\ub8b0\ud560 \uc218 \uc5c6\ub294 \uc81c\uc5b4\uc601\uc5ed\uc5d0\uc11c \uc628 \uae30\ub2a5\uc744 \ud3ec\ud568<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

17<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc911\uc694\ud55c \uc790\uc6d0\uc5d0\uc11c \uc798\ubabb\ub41c \uad8c\ud55c\uc744 \ud560\ub2f9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

18<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc7a0\uc7ac\uc801 \uc704\ud5d8\uc744 \uac00\uc9c4 \ud568\uc218\ub97c \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

19<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud558\uac70\ub098 \ud574\ub3c5 \uac00\ub2a5\ud55c \uc554\ud638 \uc54c\uace0\ub9ac\uc998 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

20<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubc84\ud37c \ud06c\uae30\ub97c \uc798\ubabb \uacc4\uc0b0<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

21<\/span><\/p>\n<\/span><\/td>

<\/span>

\uacfc\ub3c4\ud55c \uc778\uc99d \uc2dc\ub3c4\ub97c \uc81c\ud55c\ud558\uc9c0 \uc54a\uc74c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

22<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc2e0\ub8b0\ud560 \uc218 \uc5c6\ub294 \uc0ac\uc774\ud2b8\ub85c <\/span>URL<\/span>\ub9ac\ub2e4\uc774\ub809\uc158 \ud5c8\uc6a9<\/span>(<\/span>\uc624\ud508 \ub9ac\ub2e4\uc774\ub809\uc158<\/span>)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

23<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubb38\uc790 \ud615\uc2dd\uc744 \ud1b5\uc81c\ud558\uc9c0 \uc54a\uc74c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

24<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc815\uc218 \uc624\ubc84\ud50c\ub85c\uc6b0 \ub610\ub294 \ub7a9\uc5b4\ub77c\uc6b4\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

25<\/span><\/p>\n<\/span><\/td>

<\/span>

Salt<\/span>\uac12 \uc5c6\uc774 \ub2e8\ubc29\ud5a5 \ud574\uc26c\uac12 \uc774\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr><\/tbody><\/table>


<\/p>\n

<\/span> <\/p>\n

o KISA <\/span>\ud648\ud398\uc774\uc9c0 \ucde8\uc57d\uc810 \uc9c4\ub2e8\u00b7\uc81c\uac70 \uac00\uc774\ub4dc <\/span>(<\/span>http:\/\/kisa.or.kr<\/a><\/span>)<\/span><\/p>\n

  - <\/span>\uc6f9 \uc0ac\uc774\ud2b8 \uad00\ub9ac\uc790 \ub610\ub294 \ubcf4\uc548\ub2f4\ub2f9\uc790\uac00 \uc9c1\uc811 \ub530\ub77c \ud560 \uc218 \uc788\ub3c4\ub85d \uc27d\uac8c \uc791\uc131\ub41c \uac00\uc774\ub4dc<\/span><\/p>\n


<\/p>\n
<\/span>

\ubc88\ud638<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub0b4\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

1<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc6b4\uc601\uccb4\uc81c \uba85\ub839 \uc2e4\ud589<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

2<\/span><\/p>\n<\/span><\/td>

<\/span>

SQL <\/span>\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

3<\/span><\/p>\n<\/span><\/td>

<\/span>

XPath <\/span>\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

4<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc815\ubcf4\ub204\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

5<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc545\uc131\ucf58\ud150\uce20<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

6<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud2b8<\/span>(XSS)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

7<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc57d\ud55c \ubb38\uc790\uc5f4 \uac15\ub3c4<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

8<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd88\ucda9\ubd84\ud55c \uc778\uc99d \ubc0f \uc778\uac00<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

9<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud55c \ud328\uc2a4\uc6cc\ub4dc \ubcf5\uad6c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

10<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd88\ucda9\ubd84\ud55c \uc138\uc158 \uad00\ub9ac<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

11<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \ub9ac\ud018\uc2a4\ud2b8 \ubcc0\uc870<\/span>(CSRF)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

12<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc790\ub3d9\ud654 \uacf5\uaca9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

13<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud30c\uc77c \uc5c5\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

14<\/span><\/p>\n<\/span><\/td>

<\/span>

\uacbd\ub85c\ucd94\uc801 \ubc0f \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

15<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub370\uc774\ud130 \ud3c9\ubb38\uc804\uc1a1<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

16<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucfe0\ud0a4 \ubcc0\uc870<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

17<\/span><\/p>\n<\/span><\/td>

<\/span>

URL\/<\/span>\ud30c\ub77c\ubbf8\ud130 \ubcc0\uc870<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

18<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub514\ub809\ud130\ub9ac \uc778\ub371\uc2f1<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

19<\/span><\/p>\n<\/span><\/td>

<\/span>

\uad00\ub9ac\uc790\ud398\uc774\uc9c0 \ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

20<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc704\uce58\uacf5\uac1c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

21<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc6f9 \uc11c\ube44\uc2a4 \uba54\uc18c\ub4dc \uc124\uc815 \uacf5\uaca9<\/span><\/p>\n<\/span><\/td><\/tr><\/tbody><\/table>


<\/p>\n

<\/span> <\/p>\n

O <\/span>\ud589\uc790\ubd80<\/span> SW<\/span>\uac1c\ubc1c\ubcf4\uc548 \ubcf4\uc548\uc57d\uc810<\/span> <\/span>(http:\/\/<\/span>www.mospa.go.kr\/<\/a><\/span>)<\/span><\/p>\n

  - <\/span>\uacf5\uacf5<\/span>, <\/span>\ud589\uc815\uae30\uad00 \uc2dc\uc2a4\ud15c \uac1c\ubc1c\uc2dc \uc801\uc6a9\ud574\uc57c\ud558\ub294 <\/span>SW<\/span>\uac1c\ubc1c\ubcf4\uc548 \ubcf4\uc548\uc57d\uc810 \uae30\uc900 <\/span>47<\/span>\uac1c<\/span><\/p>\n


<\/font><\/p>\n<\/font><\/font><\/font><\/font><\/font><\/font>

\ubc88\ud638<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub0b4\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

1<\/span><\/p>\n<\/span><\/td>

<\/span>

SQL <\/span>\uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

2<\/span><\/p>\n<\/span><\/td>

<\/span>

\uacbd\ub85c \uc870\uc791 \ubc0f \uc790\uc6d0 \uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

3<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4\uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud2b8<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

4<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc6b4\uc601\uccb4\uc81c \uba85\ub839\uc5b4 \uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

5<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc704\ud5d8\ud55c \ud615\uc2dd \ud30c\uc77c \uc5c5\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

6<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc2e0\ub8b0\ub418\uc9c0 \uc54a\ub294 <\/span>URL <\/span>\uc8fc\uc18c\ub85c \uc790\ub3d9\uc811\uc18d \uc5f0\uacb0<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

7<\/span><\/p>\n<\/span><\/td>

<\/span>

XQuery <\/span>\uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

8<\/span><\/p>\n<\/span><\/td>

<\/span>

XPath <\/span>\uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

9<\/span><\/p>\n<\/span><\/td>

<\/span>

LDAP <\/span>\uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

10<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4\uc0ac\uc774\ud2b8 \uc694\uccad \uc704\uc870<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

11<\/span><\/p>\n<\/span><\/td>

<\/span>

HTTP <\/span>\uc751\ub2f5\ubd84\ud560<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

12<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc815\uc218\ud615 \uc624\ubc84\ud50c\ub85c\uc6b0<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

13<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubcf4\uc548\uae30\ub2a5 \uacb0\uc815\uc5d0 \uc0ac\uc6a9 \ub418\ub294 \ubd80\uc801\uc808\ud55c \uc785\ub825\uac12<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

14<\/span><\/p>\n<\/span><\/td>

<\/span>

\uba54\ubaa8\ub9ac \ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

15<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud3ec\ub9f7 \uc2a4\ud2b8\ub9c1 \uc0bd\uc785<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

16<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc801\uc808\ud55c \uc778\uc99d \uc5c6\ub294 \uc911\uc694\uae30\ub2a5 \ud5c8\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

17<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd80\uc801\uc808\ud55c \uc778\uac00<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

18<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc911\uc694\ud55c \uc790\uc6d0\uc5d0 \ub300\ud55c \uc798\ubabb\ub41c \uad8c\ud55c \uc124\uc815<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

19<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud55c \uc554\ud638\ud654 \uc54c\uace0\ub9ac\uc998 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

20<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc911\uc694\uc815\ubcf4 \ud3c9\ubb38\uc800\uc7a5<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

21<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc911\uc694\uc815\ubcf4 \ud3c9\ubb38\uc804\uc1a1<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

22<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud558\ub4dc\ucf54\ub4dc\ub41c \ube44\ubc00\ubc88\ud638<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

23<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucda9\ubd84\ud558\uc9c0 \uc54a\uc740 \ud0a4 \uae38\uc774 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

24<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc801\uc808\ud558\uc9c0 \uc54a\uc740 \ub09c\uc218 \uac12 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

25<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud558\ub4dc\ucf54\ub4dc\ub41c \uc554\ud638\ud654 \ud0a4<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

26<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud55c \ube44\ubc00\ubc88\ud638 \ud5c8\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

27<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc0ac\uc6a9\uc790 \ud558\ub4dc\ub514\uc2a4\ud06c\uc5d0 \uc800\uc7a5\ub418\ub294 \ucfe0\ud0a4\ub97c \ud1b5\ud55c \uc815\ubcf4 \ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

28<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc8fc\uc11d\ubb38 \uc548\uc5d0 \ud3ec\ud568\ub41c \uc2dc\uc2a4\ud15c \uc8fc\uc694\uc815\ubcf4<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

29<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc194\ud2b8 \uc5c6\uc774 \uc77c\ubc29\ud5a5 \ud574\uc26c\ud568\uc218 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

30<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubb34\uacb0\uc131 \uac80\uc0ac\uc5c6\ub294 \ucf54\ub4dc \ub2e4\uc6b4\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

31<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubc18\ubcf5\ub41c \uc778\uc99d\uc2dc\ub3c4 \uc81c\ud55c \uae30\ub2a5 \ubd80\uc7ac<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

32<\/span><\/p>\n<\/span><\/td>

<\/span>

\uacbd\uc7c1\uc870\uac74<\/span>: <\/span>\uac80\uc0ac \uc2dc\uc810\uacfc \uc0ac\uc6a9 \uc2dc\uc810<\/span>(TOCTOU)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

33<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc885\ub8cc\ub418\uc9c0 \uc54a\ub294 \ubc18\ubcf5\ubb38 \ub610\ub294 \uc7ac\uadc0 \ud568\uc218<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

34<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc624\ub958 \uba54\uc2dc\uc9c0\ub97c \ud1b5\ud55c \uc815\ubcf4 \ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

35<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc624\ub958 \uc0c1\ud669 \ub300\uc751 \ubd80\uc7ac<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

36<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd80\uc801\uc808\ud55c \uc608\uc678 \ucc98\ub9ac<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

37<\/span><\/p>\n<\/span><\/td>

<\/span>

Null Pointer <\/span>\uc5ed\ucc38\uc870<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

38<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd80\uc801\uc808\ud55c \uc790\uc6d0 \ud574\uc81c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

39<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud574\uc81c\ub41c \uc790\uc6d0 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

40<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucd08\uae30\ud654\ub418\uc9c0 \uc54a\uc740 \ubcc0\uc218 \uc0ac\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

41<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc798\ubabb\ub41c \uc138\uc158\uc5d0 \uc758\ud55c \ub370\uc774\ud130 \uc815\ubcf4 \ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

42<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc81c\uac70\ub418\uc9c0 \uc54a\uace0 \ub0a8\uc740 \ub514\ubc84\uadf8 \ucf54\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

43<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc2dc\uc2a4\ud15c \ub370\uc774\ud130 \uc815\ubcf4\ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

44<\/span><\/p>\n<\/span><\/td>

<\/span>

Public <\/span>\uba54\uc18c\ub4dc\ubd80\ud130 \ubc18\ud658\ub41c <\/span>Private <\/span>\ubc30\uc5f4<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

45<\/span><\/p>\n<\/span><\/td>

<\/span>

Private <\/span>\ubc30\uc5f4\uc5d0 <\/span>Public <\/span>\ub370\uc774\ud130 \ud560\ub2f9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

46<\/span><\/p>\n<\/span><\/td>

<\/span>

DNS lookup<\/span>\uc5d0 \uc758\uc874\ud55c \ubcf4\uc548\uacb0\uc815<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

47<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud55c <\/span>API <\/span>\uc0ac\uc6a9<\/span><\/p>\n<\/td><\/tr><\/tbody><\/table>


<\/p>\n

  <\/span> <\/span><\/p>\n

o <\/span>\ud589\uc790\ubd80 \uc8fc\uc694\uc815\ubcf4\ud1b5\uc2e0\uae30\ubc18\uc2dc\uc124 \uae30\uc220\uc801 \ucde8\uc57d\uc810 \ubd84\uc11d \ud3c9\uac00 \ubc29\ubc95<\/span>(<\/span>\uc6f9<\/span>)<\/span> <\/span>(http:\/\/<\/span>www.mospa.go.kr\/<\/a><\/span>)<\/span><\/p>\n

 - <\/span>\uc8fc\uc694\uc815\ubcf4\ud1b5\uc2e0\uae30\ubc18\uc2dc\uc124 \ud3c9\uac00 \uae30\uc900 \uc911 \uc6f9 \ucde8\uc57d\uc810 \ubd80\ubd84<\/span><\/p>\n


<\/p>\n
<\/span>

\ubc88\ud638<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub0b4\uc6a9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

1<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

2<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud3ec\ub9f7\uc2a4\ud2b8\ub9c1<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

3<\/span><\/p>\n<\/span><\/td>

<\/span>

LDAP <\/span>\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

4<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc6b4\uc601\uccb4\uc81c \uba85\ub839 \uc2e4\ud589<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

5<\/span><\/p>\n<\/span><\/td>

<\/span>

SQL <\/span>\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

6<\/span><\/p>\n<\/span><\/td>

<\/span>

SSI <\/span>\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

7<\/span><\/p>\n<\/span><\/td>

<\/span>

XPath <\/span>\uc778\uc81d\uc158<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

8<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub514\ub809\ud130\ub9ac \uc778\ub371\uc2f1<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

9<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc815\ubcf4 \ub204\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

10<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc545\uc131 \ucf58\ud150\uce20<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

11<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4\uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

12<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc57d\ud55c \ubb38\uc790\uc5f4 \uac15\ub3c4<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

13<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd88\ucda9\ubd84\ud55c \uc778\uc99d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

14<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucde8\uc57d\ud55c \ud328\uc2a4\uc6cc\ub4dc \ubcf5\uad6c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

15<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud06c\ub85c\uc2a4\uc0ac\uc774\ud2b8 \ub9ac\ud018\uc2a4\ud2b8 \ubcc0\uc870<\/span>(CSRF)<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

16<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc138\uc158 \uc608\uce21<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

17<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd88\ucda9\ubd84\ud55c \uc778\uac00<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

18<\/span><\/p>\n<\/span><\/td>

<\/span>

\ubd88\ucda9\ubd84\ud55c \uc138\uc158 \ub9cc\ub8cc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

19<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc138\uc158 \uace0\uc815<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

20<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc790\ub3d9\ud654 \uacf5\uaca9<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

21<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud504\ub85c\uc138\uc2a4 \uac80\uc99d \ub204\ub77d<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

22<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud30c\uc77c \uc5c5\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

23<\/span><\/p>\n<\/span><\/td>

<\/span>

\ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

24<\/span><\/p>\n<\/span><\/td>

<\/span>

\uad00\ub9ac\uc790 \ud398\uc774\uc9c0 \ub178\ucd9c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

25<\/span><\/p>\n<\/span><\/td>

<\/span>

\uacbd\ub85c \ucd94\uc801<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

26<\/span><\/p>\n<\/span><\/td>

<\/span>

\uc704\uce58 \uacf5\uac1c<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

27<\/span><\/p>\n<\/span><\/td>

<\/span>

\ub370\uc774\ud130 \ud3c9\ubb38 \uc804\uc1a1<\/span><\/p>\n<\/span><\/td><\/tr>

<\/span>

28<\/span><\/p>\n<\/span><\/td>

<\/span>

\ucfe0\ud0a4 \ubcc0\uc870<\/span><\/p>\n<\/td><\/tr><\/tbody><\/table>\n","protected":false},"excerpt":{"rendered":"

\ucd9c\ucc98: https:\/\/m.blog.naver.com\/nowababa\/220845748729 o OWASP Top 10  (https:\/\/www.owasp.org\/)   – \uc6f9 \ud504\ub85c\uadf8\ub798\ubc0d\uacfc \uad00\ub828\ud558\uc5ec \uac00\uc7a5 \ub9ce\uc774 \ubc1c\uc0dd\ud558\ub294 \ucde8\uc57d\uc810\uc744 \uc815\ub9ac\ud55c \ub9ac\uc2a4\ud2b8\ub85c \ubc88\ud638\uac00 \uc911\uc694\ub3c4\ub97c \ubc18\uc601\ud558\uace0 \uc788\uc73c\uba70 \uac1c\ubc1c \uc801\uc6a9\uc774\ub098 \uad50\uc721\uc774 \uc6a9\uc774\ud568    \u203b OWASP : Open Web Application SecurityProject \ubc88\ud638 \ub0b4\uc6a9 1 \uc778\uc81d\uc158 2 \uc778\uc99d \ubc0f \uc138\uc158 \uad00\ub9ac \ucde8\uc57d\uc810 3 \ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305 (XSS) 4 \ucde8\uc57d\ud55c \uc9c1\uc811 \uac1d\uccb4 \ucc38\uc870 5 \ubcf4\uc548 \uc124\uc815 \uc624\ub958 6 \ubbfc\uac10 \ub370\uc774\ud130 \ub178\ucd9c 7 \uae30\ub2a5 \uc218\uc900\uc758 \uc811\uadfc \ud1b5\uc81c \ub204\ub77d 8 \ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc694\uccad \ubcc0\uc870 (CSRF) 9 \uc54c\ub824\uc9c4 \ucde8\uc57d\uc810\uc774 \uc788\ub294 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[12],"tags":[],"class_list":["post-986","post","type-post","status-publish","format-standard","hentry","category-computing_security"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/986","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=986"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/986\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=986"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=986"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=986"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}