Web Security

요약

웹 보안 도메인에 대한 지식과 도구들을 정리한 맵입니다.

Concepts

OWASP Top 10 계열

• XSS · CSRF · Clickjacking
• SQL Injection · Command Injection · XXE
• SSRF · IDOR · Path Traversal

Authentication

• OAuth · JWT
• Session · CORS

Network Security

• DDoS
• Firewall (예정)

Encryption (예정)

• TLS/SSL, 대칭/비대칭 암호화

Tools

Cloudflare

• Cloudflare · Cloudflare Bypass

AWS Services

• AWS WAF · AWS Shield · AWS CloudWatch