A vulnerability is a weakness is an asset or the absence or the weakness of a safeguard or countermeasure.
Examples of common vulnerabilities include:
If a vulnerability is exploited, loss or damage to an asset can occur.
The server refuses to perform the request using the current protocol but might be willing to do so after the client upgrades to a different protocol. The server MUST send an Upgrade header field in a 426 response to indicate the required protocol(s).
Abstraction Abstraction is a protection mechanism concept that provides efficiency. It allows something that is complex to be represented in a simple manner. Example An example of abstraction is having all employees in an organization be classified into groups. After they are classified into groups, each group is assigned security controls, restrictions, or permissions. The…
Reducing risk, or risk mitigation, is the implementation of safeguards and countermeasures to eliminate vulnerabilities or block threats. Example: Removing the File Transfer Protocol (FTP) from a server to avoid FTP attacks, and a larger example is to move to an inland location to avoid the risks from hurricanes.
The request was directed at a server that is not able to produce a response. This can be sent by a server that is not configured to produce responses for the combination of scheme and authority that are included in the request URI. Clients receiving a 421 Misdirected Request response from a server MAY retry…
Physical controls are items you can physically touch. Examples, Laptop lock cables, door badges, motion detectors, video cameras, mantraps, alarms.
The target resource does not have a current representation that would be acceptable to the user agent, according to the proactive negotiation header fields received in the request, and the server is unwilling to supply a default representation. The server SHOULD generate a payload containing a list of available representation characteristics and corresponding resource identifiers…