Info about attack trees

Hellp everybody, I'm new to this malinglist and to pen-testing.
I'm here to learn and I'm starting with a question :)

I'm looking for some informations about attack trees usage in web application analysis.

For my master thesis I decided to study the usage of this formalism in order to reppresent attacks to a web applications.
I need a lot of use cases from which to start learning common attacks which can help building a proper tree.

From where can I start?

I've already read the OWASP top 10 vulnerabilities an I'm familiar with XSS, SQLi, ecc. however I've no clue on how to combine them together in order to perform the steps needed to attack a system. I'm looking for some examples and maybe to some famous attacks from which I can understand which steps are performed and how commons vulnerabilities can being combined together. Any help is really appreciated.



------------------------------
Federico De Meo

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

Relevant Pages

  • [Full-disclosure] Info about attack trees
    ... I'm new to this maling-list and to security in general. ... I'm looking for some informations about attack trees usage in web application analysis. ... For my master thesis I decided to study the usage of this formalism in order to reppresent attacks to a web applications. ...
    (Full-Disclosure)
  • RE: FW: Secure Password Policy?
    ... I believe this discussion has strayed off any relevance to pen-testing and ... Unless something comes in with relevance, ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)
  • Re: tcp proxy for middle man attack
    ... includes some MITM attacks: http://ettercap.sourceforge.net/ ... As attacks through web applications continue to rise, ... Download FREE whitepaper on how a managed service can ...
    (Pen-Test)
  • Re: Exploiting code: The Future
    ... As attacks through web applications continue to rise, ... Download FREE whitepaper on how a managed service can ...
    (Pen-Test)
  • Re: Exploit through firewall question
    ... That box could be used as a springboard for other attacks. ... Download FREE whitepaper on how a managed service can ... As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. ... Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. ...
    (Pen-Test)