Behavior that defaults to a safe state.

Access determined by attributes and policies.

Weakness that can be exploited.

Injection targeting SQL queries.

Multiple layers of security controls.

Access enforced by centralized security rules.

Potential cause of harm to a system.

Injection causing unintended command execution.

Security model requiring continuous verification.

Resource owners control permissions.