Glossary of Application Security Terms | Black Duck

Application Security Glossary

A

• Agile Software Development Life Cycle
• API Security Testing
• Application Security
• Application Security Orchestration and Correlation
• Application Security Posture Management
• Application Vulnerability Correlation

B

• Binary Code and Binary Analysis
• Blockchain
• Building Security in Maturity Model

C

• CI/CD Tools
• Clickjacking
• Cloud Computing
• Cloud Penetration Testing
• Connected Car Cybersecurity
• Container Security
• Continuous Development
• Continuous Integration and Continuous Delivery/Deployment
• Continuous Testing
• Cross-Site Request Forgery
• Cross-Site Scripting
• Cryptography
• Cybersecurity

D

• DevOps
• DevSecOps
• Dynamic Application Security Testing

E

• Ethical Hacking
• EU Cyber Resilience Act

F

• FedRAMP
• Fuzz Testing

G

• General Data Protection Regulation
• Glossary

H

• HIPAA

I

• Infrastructure as Code​
• Interactive Application Security Testing
• Internet of Things

L

• LDAP Injection

M

• Microservices
• Mobile Application Security

N

• Network Penetration Testing
• Network Security

O

• Open Source Audit
• Open Source Licenses
• Open Source Software
• OWASP Top 10 2021

P

• PCI DSS Compliance
• Penetration Testing
• Phishing
• Policy-as-Code

R

• Red Teaming

S

• Secure Code Review
• Security Risk Assessment
• Social Engineering
• Software Architecture / Software Security Design
• Software Composition Analysis
• Software Development Life Cycle
• Software Package Data Exchange
• Software Supply Chain Security
• SQL Injection
• Static Application Security Testing

T

• Telecom Network Security
• Threat Modeling Explained: Definition, Benefits, and Best Practices

U

• UL 2900

V

• Vendor Risk Management
• Vulnerability Assessment

W

• Web Application Penetration Testing
• Web Application Security