Secure Electronic Commerce Vulnerabilities and Analysis

Flashcards covering key concepts related to secure electronic commerce vulnerabilities and their analysis.

JavaScript

A programming language used to create dynamic content on web pages.

Inline Code

JavaScript code that is written directly within HTML tags.

External File

A separate JavaScript file that is linked to HTML using the

Technical Vulnerabilities

Security risks arising from insecure programming techniques that can often be detected by automated scanners.

Logical Vulnerabilities

Security issues stemming from faults in application logic or poor trust decisions.

SQL Injection

A common technical vulnerability where an attacker injects malicious SQL code into a web application.

Broken Access Control

A vulnerability that occurs when a system fails to enforce proper permissions, allowing unauthorized actions by users.

Security Misconfiguration

Vulnerabilities caused by improper setup of servers, applications, or databases.

Software Supply Chain Failures

Vulnerabilities arising when external libraries and dependencies are compromised.

Cryptographic Failures

Vulnerabilities related to the incorrect implementation or management of cryptographic protection for sensitive data.

Injection Attack

An attack that occurs when an attacker sends malicious data to a web application, which is then executed as part of a command.

Insecure Design

Design flaws in an application that lead to inherent vulnerabilities, despite having bug-free code.

Authentication Failures

Instances where a system fails to properly verify a user's identity, often due to weak passwords or session management flaws.

Software or Data Integrity Failures

When an application trusts code and data without verifying their integrity, potentially leading to the injection of malicious code.

Security Logging and Alerting Failures

Instances where a system fails to log and monitor suspicious activities or security events, hindering detection of breaches.

Mishandling of Exceptional Conditions

Failures to properly handle unexpected events such as user input errors, leading to potential security vulnerabilities.

OWASP

The Open Web Application Security Project, focused on improving software security.

OWASP Top 10

A regularly updated list of the most critical security risks to web applications.