Security
Security shapes design more than it looks: login flows, error messages, permissions and what an interface may show.
Not yet reviewedLevel
Terms
- IntermediateSecrets ManagementTools and practices to securely store, manage, and retrieve credentials, API keys, and certificates.Not yet reviewed
- IntermediateIAMIdentity and Access Management: frameworks controlling access permissions and roles for digital identities.Not yet reviewed
- BeginnerOAuthAn open standard authorization protocol that enables apps to securely access user resources without exposing credentials.Not yet reviewed
- IntermediateJWT RotationRegularly invalidating and refreshing JSON Web Tokens to reduce risk from compromised authentication tokens.Not yet reviewed
- BeginnerTLSTransport Layer Security: cryptographic protocols designed to secure network communications over HTTPS.Not yet reviewed
- BeginnerEncryption at RestProtecting inactive data stored on disks, databases, or backups using encryption algorithms.Not yet reviewed
- BeginnerEncryption in TransitProtecting data while it is actively moving between client and server or between internal microservices.Not yet reviewed
- IntermediateWAFWeb Application Firewall: a filter that monitors and blocks malicious web traffic directed at web applications.Not yet reviewed
- BeginnerDDoS ProtectionDefensive mechanisms that absorb or mitigate Distributed Denial of Service attacks meant to take services offline.Not yet reviewed
- BeginnerCORSCross-Origin Resource Sharing: an HTTP-header based mechanism enabling servers to restrict cross-domain requests.Not yet reviewed
- BeginnerCSRFCross-Site Request Forgery: an attack forcing an authenticated end-user to execute unwanted actions on a web app.Not yet reviewed
- BeginnerSQL InjectionA code injection technique where malicious SQL statements are inserted into entry fields for execution.Not yet reviewed
- BeginnerXSSCross-Site Scripting: a security vulnerability enabling attackers to inject malicious scripts into trusted websites.Not yet reviewed
- IntermediateSSRFServer-Side Request Forgery: an attack where a web application is coaxed into sending crafted requests to unexpected locations.Not yet reviewed
Articles
Cross-site request forgery
A concrete attack to start from, with the standard defense.
Know more about Security?
Suggest a term, a change, or a resource. No account needed.
Suggest a change