`Web Security` ↔ to prevent threats/exploits to Web App

aka websec

`CAPTCHA`

Challenge-Response test to Auth human intelligence

Exploit to inject naughty code into Client thru Website

exploit to execute naughty SQL code on DB - to spoof identity, access/destroy data

attack to flood Server with wasteful reqs to disrupt legitimate access, often via Botnet

various exploits to collect UID info through User Agent or behavior actions

(process) to convert (potentially unsafe) PDF to raw pixel then back to PDF

exploit to trick user to click for unintended action via invisible <iframe\> - common tactic for abusing ads

Content Security Policy

Metadata file about org/entity/location to Sign by CA

Public Key Infrastructure

Web of Trust