OAT-006 Expediting - Revision history

Clerkendweller: /* Indicative Diagram */

2018-02-16T15:06:04Z

‎Indicative Diagram

Clerkendweller: /* Cross-References */

2018-02-16T11:48:02Z

‎Cross-References

Clerkendweller: /* OWASP Attack Category / Attack IDs */

2018-02-16T10:20:00Z

‎OWASP Attack Category / Attack IDs

Clerkendweller: New page

2018-02-16T10:19:41Z

New page

New page

__NOTOC__

This is an automated threat. To view all automated threats, please see the [[:Category:Automated Threat|Automated Threat Category]] page. The OWASP Automated Threat Handbook - Wed Applications ([https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf pdf], print), an output of the [[OWASP Automated Threats to Web Applications|OWASP Automated Threats to Web Applications Project]], provides a fuller guide to each threat, detection methods and countermeasures. The [https://www.owasp.org/index.php/File:Oat-ontology-decision-chart.pdf threat identification chart] helps to correctly identify the automated threat.

== Definition ==

===OWASP Automated Threat (OAT) Identity Number ===

OAT-006

===Threat Event Name===

Expediting

=== Summary Defining Characteristics===

Perform actions to hasten progress of usually slow, tedious or time-consuming actions.

===Indicative Diagram===

=== Description ===

Using speed to violate explicit or implicit assumptions about the application’s normal use to achieve unfair individual gain, often associated with deceit and loss to some other party.

In contrast to [[OAT-016 Skewing]] which affects metrics, Expediting is purely related to faster progression through a series of application processes. And [[OAT-017 Spamming]] is different to Expediting, since the focus of spam is to add information, and may not involve the concept of process progression.

=== Other Names and Examples ===

Algorithmic trading; Automated stock trading; Betting automation; Game automation; Gaming bot; Gold farming; Financial instrument dealing; High frequency trading; Last look trade; Mining; Purchase automation; Ticketing automation; Trading automation; Virtual wealth generation bot

=== See Also ===

* [[OAT-005 Scalping]]
* [[OAT-013 Sniping]]
* [[OAT-016 Skewing]]
* [[OAT-017 Spamming]]

== Cross-References ==

=== CAPEC Category / Attack Pattern IDs ===

* 210 Abuse of Functionality

=== CWE Base / Class / Variant IDS ===

* 841 Improper Enforcement of Behavioral Workflow

=== WASC Threat IDS ===

* 21 Insufficient Anti-Automation
* 42 Abuse of Functionality

=== OWASP Attack Category / Attack IDs ===

* [[:Category:Abuse of Functionality]]

[[Category: Automated Threat]]

@@ Line 19: / Line 19: @@
 ===Indicative Diagram===
+[[File:OAT-006_Expediting.png|500px|link=]]
 === Description ===

@@ Line 44: / Line 44: @@
 * 210 Abuse of Functionality
-=== CWE Base / Class / Variant IDS ===
+=== CWE Base / Class / Variant IDs ===
 * 841 Improper Enforcement of Behavioral Workflow
-=== WASC Threat IDS ===
+=== WASC Threat IDs ===
 * 21 Insufficient Anti-Automation

@@ Line 55: / Line 55: @@
 === OWASP Attack Category / Attack IDs ===
-* [[:Category:Abuse of Functionality]]
+* [[:Category:Abuse of Functionality|Abuse of Functionality]]
 [[Category: Automated Threat]]