General Web Application Security Terms

<div dir="ltr" style="text-align: left;" trbidi="on"><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Application Security Manager (ASM)</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">A web application firewall from F5 Networks that integrates with WhiteHat Security Sentinel's vulnerability management service. Sentinel users can update the security policy on a per-vulnerability basis to mitigate the risk of its exploitation while the vulnerability is being addressed in the Web application code.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Authentication</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">The process of verifying identity, ownership, and/or authorization.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Backdoor</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">Malicious code inserted into a program for the purposes of providing the author covert access to machines running the program.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Base 64</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">A method for encoding binary data into printable ASCII strings. Every byte of output maps to six bits of input (minus possible padding bytes).</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Blacklist</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">When performing Input validation, the set of items that —if matched — result in the input being considered invalid. If no invalid items are found, the result is valid.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">IP Address</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">A unique address assigned to a networked device, including computers, and servers.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Padding</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">Data added to a message that is not part of the message. For example, some block cipher modes require messages to be padded to a length that is evenly divisible by the block length of the cipher — i.e., the number of bytes that the cipher processes at once.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Policy</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">A set of rules employed by a Web application firewall that detect and block attempts to exploit a vulnerability in a Web application. All HTTP requests are assessed for strings that contain vulnerable parameters. Policy rules need to be maintained periodically.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Root User</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">A user with unlimited access to all operations on a computer.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Read Access</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">The ability to view the names of files in a directory, but not any other information such as file type, size, and so on.)</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Web Application Firewall (WAF)</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">A device or software module that applies a set of policy rules to incoming traffic to block potential attacks on a Web application. Also known as a WAF.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Whitelist</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">When performing input validation, the set of items that, if matched, results in the input being accepted as valid. If there is no match to the whitelist, then the input is considered invalid. That is, a whitelist uses a ‘default deny’ policy.</div><h3 style="color: #006699; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 1em; letter-spacing: 0.23999999463558197px; line-height: 15px; margin: 20px 10px 7px 17px; padding: 0px;">Write Access</h3><div style="color: #525252; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; letter-spacing: 0.23999999463558197px; line-height: 18px; margin: 10px 30px 15px 17px; padding: 0px;">The ability to create, delete, change permissions, or rename files.</div></div>

web application security General Web Application Security Terms

Application Security Manager (ASM) A web application firewall from F5 Networks that integrates with WhiteHat Security Sentinel's vulnera...

Read More..