In information security, a confused deputy is a computer program that is tricked by another program (with fewer privileges or less rights) into misusing its authority on the system. It is a specific type of privilege escalation.[1] The confused deputy problem is often cited as an example of why capability-based security is important.
Capability systems protect against the confused deputy problem, whereas access-control list–based systems do not.[2]
^Wu, Jianliang; Cui, Tingting; Ban, Tao; Guo, Shanqing; Cui, Lizhen (2015-09-10). "PaddyFrog: systematically detecting confused deputy vulnerability in Android applications: PaddyFrog: systematically detecting confused deputy vulnerability in Android applications". Security and Communication Networks. 8 (13): 2338–2349. doi:10.1002/sec.1179.
^"ACLs". sourceforge.net.
and 20 Related for: Confused deputy problem information
confuseddeputyproblem is often cited as an example of why capability-based security is important. Capability systems protect against the confused deputy...
objects, including web pages. Clickjacking is an instance of the confuseddeputyproblem, wherein a computer is tricked into misusing its authority. In...
any host but the originating host, thwarting FTP bounce attacks. Confuseddeputyproblem M. Allman; S. Ostermann (1999). "RFC 2577". doi:10.17487/RFC2577...
intention. This inevitably leads to such programs being subject to the confuseddeputyproblem. The term "ambient authority" is used primarily to contrast with...
program is tricked by another into misusing its authority. The confused-deputyproblem is a specific type of privilege escalation. Pistoia observed that...
scripting, add-ons, and cookies are particularly vulnerable ("the confuseddeputyproblem") and also need to be addressed. Following the principle of defence...
subsystems are nested within more general subsystems, mitigating the confuseddeputyproblem endemic to centralized or superuser system policy. The framework...
The Y2K problem is the electronic equivalent of the El Niño and there will be nasty surprises around the globe. — John Hamre, United States Deputy Secretary...
cleanup to meet Wikipedia's quality standards. The specific problem is: this article is confusing, unorganized, and poorly written. Please help improve this...
Shah Faesal (born 17 May 1983) is an Indian bureaucrat currently posted as Deputy Secretary in the Ministry of Culture (India) In 2010, he became the first...
cousin Maddy Ferguson, leading to disputes with Donna, who is similarly confused about her feelings for him. After Maddy's death, he leaves Twin Peaks and...
Kurdish language and culture were forbidden. The Dersim massacre is often confused with the Dersim Rebellion that took place during these events. In 1937–38...
three states, Mengjiang, the Provisional Government of the ROC (not to be confused with the 1912 government of the same name and flag) and the Reformed Government...
questioned. In addition, experts note that in Russia social business is often confused with charity. Genuine Russian social entrepreneurs rarely define themselves...
than any other candidate. By August his campaign's messaging had become confused due to staff rivalries, and in September, he was accused of plagiarizing...
Australian Labor Party Not to be confused with the federal cabinet of Australia. After the Disappearance of Harold Holt, the Deputy Prime Minister, McEwen, took...
Global Information