Technical, also known as logical controls, involve the hardware or software mechanisms used to manage access and to provide protection for resources and systems.
Examples: authentication methods (username, passwords, smart cards), encryption, firewalls, intrusion detection/prevention systems.
The origin server requires the request to be conditional. Its typical use is to avoid the “lost update” problem, where a client GETs a resource’s state, modifies it, and PUTs it back to the server, when meanwhile a third party has modified the state on the server, leading to a conflict. By requiring requests to…
The policy for accessing the resource has not been met in the request. The server should send back all the information necessary for the client to issue an extended request. It is outside the scope of this specification to specify how the extensions inform the client. If the 510 response contains information about extensions that…
Administrative controls are the policies and procedures defined by an organization’s security policy and other regulations or requirements. These controls focus on personnel and business practices. Examples: policies, procedures, hiring practices, background checks, employee training.
The server, while acting as a gateway or proxy, did not receive a timely response from an upstream server it needed to access in order to complete the request.
The user has sent too many requests in a given amount of time (“rate limiting”). The response representations SHOULD include details explaining the condition, and MAY include a Retry-After header indicating how long to wait before making a new request.
Anything that removes or reduces a vulnerability or protects against one or more specific threats can be classified as a safeguard, security control, or countermeasure. An example of this can be installing software patches, making system configuration changes, hiring security guard, or training employees to name a few.