Input Validation Attack

---

Input Validation Attacks occur when you don’t validate the input to an application.

• E.g., input answer follows a specified acceptable format

Format String Attack

In format string attacks, attackers use certain print functions within a programming language that are meant to format the output but instead allow the attacker to manipulate or view an application’s internal memory.

Remediation

• To solve for this attack, validate input by filtering it for unexpected or undesirable content.
• Leverage error handling to ensure you anticipate and compensate for issues