Web Application Security

Index

Symbols

• 2FA (2-factor authentication), 2FA
• 404 pages, Default Error Messages and 404 Pages-Default Error Messages and 404 Pages

A

• admin/sys admin (system administrators), Language and Terminology
• advanced vulnerability scoring, Advanced Vulnerability Scoring
• AngularJS, AngularJS
• Ant, Java
• anti-CSRF middleware, Anti-CSRF middleware
• anti-CSRF tokens, CSRF Tokens
• anti-patterns
  • blacklists, Blacklists
  • boilerplate code, Boilerplate Code
  • client/server coupling, Client/Server Separation
  • trust-by-default, Trust-By-Default Anti-Pattern
• Apache, Web Servers
• API endpoint analysis
  • authentication mechanism, Authentication Mechanisms-Authentication Mechanisms
  • endpoint discovery, Endpoint Discovery-Endpoint Discovery
  • endpoint shapes, Endpoint Shapes-Application-Specific Shapes
  • overview of, Summary
  • purpose of, API Analysis
• APIs (application programming interfaces)
  • definition of term, Language and Terminology
  • recommended to avoid, Sanitizing User Input
• application architecture
  • defensive, Defensive Software Architecture
  • identifying weak points in, Identifying Weak Points in Application Architecture
  • key points, Web Application Reconnaissance
  • secure, Secure Application Architecture-Summary
  • secure versus insecure architecture signals, Secure Versus Insecure Architecture Signals-Secure Versus Insecure Architecture Signals, Defense
  • single versus multiple layers of security, Multiple Layers of Security
  • technology adoption and reinventions, Adoption and Reinvention
• application security engineers, Language and Terminology
• applications ...