Ngân hàng câu hỏi

SQL injection exploits vulnerabilities to execute malicious SQL. Prevent with parameterized queries, input validation, and least privilege access.

XSS injects malicious scripts into web apps, executed by users' browsers. Prevent with input validation, output encoding, and CSP.

2FA adds extra security by requiring two verification forms: something known (password) and something possessed (device).

Hashing transforms passwords into hashes using algorithms; salting adds randomness, enhancing security against attacks.

OAuth allows third-party app access to user data without exposing credentials, using access tokens for authorization.

Protect by regenerating session IDs post-authentication, using unpredictable IDs, and tying IDs to user authentication.

Least privilege limits access rights; defense in depth layers security. Both minimize attack surfaces and provide redundancy.

A DDoS attack overwhelms a target with traffic, causing unavailability. Mitigate with DDoS protection, rate limiting, and traffic analysis.

Secure data by encrypting at rest and in transit, using secure authentication, and following best practices.

API security is vital to protect data and prevent unauthorized access, using authentication, validation, rate limiting, and encryption.