Application Security Flashcards
What is Application Security?
critical aspect of software development that focuses on building applications that are secure by design
What is Input Validation?
Area of Application Security
fundamental aspect of application security that acts as a gatekeeper to ensure that applications only act on well-defined and uncontaminated data.
What are Validation Rules?
These rules delineate acceptable and unacceptable inputs
What are Secure Cookies?
Cookies transmitted over a secure HTTPS connection to prevent potential eavesdroppers from intercepting the cookie data.
What is SAST?
Static Code Analysis
method of debugging and application by reviewing and examining its source code before the program is ever run.
What is a Manual Code Review?
if you perform this code review using a human instead of a static software analysis tool, we refer to this as manual code review.
What is Dynamic Code Analysis?
Testing method that analyzes an application while its running
What is Fuzzing?
Type of Dynamic Code Analysis
Finds software flaws by bombarding it with random data to trigger crashes and security vulnerabilities
What is Stress Testing?
type of software testing that evaluates the stability and reliability of a system under extreme conditions.
What is Code Signing?
technique used to confirm the identity of the software author and guarantee that the code has not been altered or corrupted since it was signed.
What is Sandboxing?
security mechanism that is used to isolate running programs by limiting the resources that they can access and the changes that they can make to a system
