Education Center

Keeping track of the various terms, acronyms, threats, and technologies associated with cyber security and application security industries can be difficult. The Feroot Security Education Center is a great resource for you to bookmark. We regularly update the Education Center with new terms and additional resources to provide the application and cybersecurity community with the latest industry information and insight to help keep your business and customers safe.

Feroot-Education Center-What is DevSecOps

Topics

Attacks and Threats

Client-Side Security Terms

Application Security Teams & Terms

Cybersecurity Terms & Technologies

Information Security Terminology

Attacks and Threats

What is Account Takeover?

What is Broken Link Hijacking?

What is Cross-Site Request Forgery (CSRF)?

What Is a Cross-Site Scripting (XSS) Attack?

What is Cross-Site Scripting (XSS)?

What is Cryptomining?

What is Denial of Inventory?

What is a Directory Traversal or Path Traversal Attack?

What is DOM-based XSS?

What is Drive-by Web Skimming?

What is E-skimming?

What Is Formjacking?

What is a Homoglyph Attack?

What is HTML Smuggling?

What is a JavaScript Injection Attack?

What is a JavaScript Sniffer?

What is a Magecart Attack?

What is Magecart?

What Is a Malicious Script?

What is Payment Skimming?

What is PII harvesting?

What is Server-Side Request Forgery (SSRF)?

What are Sideloading and Chainloading?

What is a Software Supply Chain Threat?

What is SQL Injection?

What is XML External Entity Injection (XXE)?

Client-Side Security Terms

What is Client-Side Security?

What is a Content Security Policy (CSP)?

What is Fingerprinting in Cybersecurity?

What is Front-End Security?

What is a JAMstack?

What is JavaScript Security?

What is a Malicious Host?

What is a Network Host?

PCI DSS 4.0 and Client-Side Security: Changes & Impacts

What is Shadow Code?

What is Web Application Visibility?

Why is JavaScript Vulnerable?

Application Security Teams & Terms

What is an Application Security (AppSec) Analyst?

What is Code Obfuscators of JavaScript scripts?

What is Customer Journey Hijacking?

What is DevSecOps?

What is the difference between client side and server side of websites and web applications?

What is Dynamic Application Security Testing (DAST)?

How do Hackers Exploit WebSockets?

How to Automate Content Security Policy

How to Check If Your JavaScript Security Is Working

How to Create and Deploy a Content Security Policy

How to Prepare for Attacks on Client-side / Front-end of your websites and web applications

How to Prevent Data Leakage on Web Tracking Pixels on Healthcare Websites

How to Protect the Software Supply Chain from Vulnerable Third-Party Code

How to Recover from a Client-Side Attack

How to use Synthetic Users for Client-Side Security?

What are JavaScript Security Permissions?

What is JavaScript?

What is PCI DSS 4.0 Requirement 6.4.3.

What is Runtime Application Self-Protection (RASP)?

What are Software Developers?

What is Static Application Security Testing (SAST)?

What are the security risks when using CAPTCHAs on websites?

What are WebSockets?

Cybersecurity Terms & Technologies

What is a Command-and-Control (C2) Server?

What is Cybersecurity Risk Management?

What is a Firewall?

What is Identity and Access Management (IAM)?

What is Multi-factor Authentication (MFA)?

What is Penetration Testing (Pentesting)?

What is a Security Incident and Event Management Platform (SIEM)?

What is a Vulnerability Assessment?

What is Vulnerability Management?

What is a Web Application Firewall (WAF)?

Information Security Terminology

What are Advanced Persistent Threats (APTs)

What is Cyber Threat Intelligence (CTI)?

What is a Distributed Denial-of-Service (DDoS) Attack?

What are Indicators of Compromise (IoCs)?

What is the MITRE ATT&CK Framework?

What is the National Institute of Standards and Technology (NIST) Cybersecurity Framework?

What is OWASP Top 10?

What is a Security Operations Center (SOC)?

What are Tactics, Techniques, and Procedures (TTPs)?

What is Zero Trust?