Application Security

Scraping or web scraping refers to the extraction of data from websites. The term typically refers to automated processes implemented using a bot or web crawler.

Server-Side Includes (SSI) are directives present on web applications used to feed an HTML page with dynamic contents.

Server-side request forgery (SSRF) is a security vulnerability that allows attackers to send crafted requests from the server on behalf of it.

A Service Level Agreement (SLA) is the part of a contract which defines exactly what services a service provider will provide and the required level or standard for those services.

Session Fixation is an attack that permits an attacker to hijack a valid user session. The attacker must provide a legitimate web application session ID and try to make the victim's browser use it.

A Session Hijacking attack consists of the exploitation of the web session control mechanism, which is normally managed for a session token.

Session prediction is an attack technique used to hijack or impersonate a web or application user. The attack focuses on predicting session ID values that permit an attacker to bypass the authentication method of an application.

Session timeout occurs when a user does not perform any action on a web site during an interval (defined by a web server).