List specifying allowed or denied access.

Practices for developing secure software.

Attack or condition preventing normal service.

Giving only necessary permissions.

Cleaning input to remove unsafe content.

Distributed attack overwhelming a service.

Rules governing system security.

Checking input against expected rules.

Restricting operation frequency.

Entity that can be authenticated or authorized.