Measure designed to reduce security risk.

Injecting scripts into web content.

Point where trust assumptions change.

Obtaining higher permissions than authorized.

Rules governing security behavior.

Tricking a browser into unwanted requests.

Isolated environment restricting program actions.

Account with elevated permissions.

Overall security condition of a system.

Accessing files outside intended directories.