A weakness in a system that can be exploited by threats to gain unauthorized access or cause harm.

A code injection technique that allows attackers to interfere with the queries made to a database.

A vulnerability that allows attackers to inject malicious scripts into web pages viewed by users.

Techniques and guidelines that developers follow to create applications resistant to security threats.

A systematic evaluation of a system’s security measures to ensure compliance with security policies.

The process of converting data into a coded form to prevent unauthorized access.

Simulated cyber attacks on a system to evaluate its security defenses.

Using software tools to automatically identify security weaknesses in an application.

The process of verifying that user inputs meet specific criteria to prevent malicious data from being processed.

The process of responding to and managing errors in a secure manner to avoid information leakage.

Practices and tools used to protect APIs from threats and vulnerabilities.

The process of handling cryptographic keys for secure data encryption and decryption.

A strategic outline for evaluating the security of an application through various testing methods.

A testing approach where team members work together to identify potential security issues.

Practices ensuring that applications are launched in a manner that minimizes security risks.

The process of identifying and prioritizing potential threats to an application.

A structured approach that provides guidelines and best practices for managing security risks.

Measures taken to safeguard personal and sensitive information from unauthorized access.

The process of identifying, evaluating, and prioritizing risks associated with an application.

Updates designed to fix vulnerabilities in software and enhance security.

A formal document outlining an organization’s approach to managing security risks.

Safeguards or countermeasures to mitigate identified security risks.

An additional layer of security requiring two forms of verification before granting access.

Manipulative tactics used to trick individuals into divulging confidential information.

Malicious software designed to harm, exploit, or otherwise compromise systems.