ABSTRACT

From a “chess” perspective, the Hypertext Transfer Protocol (HTTP) can be an important means of gaining perimeter access to a network; compromising an HTTP server is the chess equivalent of taking a knight or rook — it can afford an attacker a means to penetrate deep into an organization’s systems and networks, beyond any perimeter defenses.