情報システムの企画・設計・開発・運用でのセキュリティ確保の推進又は支援に関すること

Threat Analysis

Security Requirements Definition

Attack Surface

Security by Design

Privacy by Design

Software Bill of Materials

Information system Security Management and Assessment Program

Software Bill of Materials

Common Criteria

Federal Information Processing Standards 140

Security Patch Management

Zero Trust Architecture

Demilitarized Zone

Defense in Depth

Microsegmentation

Reverse Proxy

Software Defined Perimeter

Authentication

Multi-Factor Authentication

Single Sign-On

Security Assertion Markup Language

OAuth 2.0

FIDO2/Web Authentication

Role-Based Access Control

Principle of Least Privilege

Transport Layer Security

SQL Injection

Cross-Site Scripting

Cross-Site Request Forgery

OS Command Injection

Session Management

Directory Traversal

HTTP Header Injection

Buffer Overflow

Input Validation

Escape Processing

Content Security Policy

HTTP Strict Transport Security

Vulnerability Assessment

Penetration Test

Fuzzing

Static Application Security Testing

Dynamic Application Security Testing

Interactive Application Security Testing

Software Composition Analysis

Security Patch Management

Patch Management

Log Management

Security Information and Event Management

Security Orchestration, Automation and Response

Change Management

Configuration Management

Backup and Restore

DevSecOps

Continuous Integration / Continuous Delivery

Infrastructure as Code

Source Code Management

Container Security

Secrets Management

Cloud Security Posture Management