One way to prevent this from happening is to not store passwords or sensitive information at all. This way there is nothing for anyone to steal. If you need to store password information, Microsoft recommends that you “store only a hash of the password. When a user presents credentials, you can hash the user's password and compare only the hashes of the two” (Web Application Security Overview). Storing hashed passwords is the best way to store passwords if necessary. Again, it's always best to use authentication when users are accessing sensitive information to ensure they are authorized to access the information. One of the most common attacks occurring today is Denial of Service. Microsoft describes denial of service attacks as “deliberate attacks intended to make an application less available than it should be” (Web Application Security Overview). This is done by servers receiving multiple service requests at the same time. This is also known as overloading the server causing it to crash. This has been in the news recently with the attacks on the Ferguson and St. Louis County police departments making their website completely unavailable for the public to access their information for several
tags