Web Security

• Also known as “Cybersecurity”
• Website security refers to the protection of personal and organizational public-facing websites from cyberattacks
• Website security means protecting a website or web application by detecting, preventing and responding to cyber threats

Token

• A token is an object of value
• Token represents consent of user to use protected resources on behalf of the user
• Google define:token
  • a thing serving as a visible or tangible representation of a fact, quality, feeling, etc
  • a voucher that can be exchanged for goods or services, typically one given as a gift or forming part of a promotional offer
• Links:
  • https://stackoverflow.com/questions/4448661/what-is-the-exact-definition-of-token
  • https://www.sciencedirect.com/topics/computer-science/software-token
  • https://en.wikipedia.org/wiki/Access_token
  • https://en.wikipedia.org/wiki/Cryptocurrency#Crypto_token

Security token

• A soft token is a security resource often used for multifactor authentication
• A token is a representation of something in its particular ecosystem. It could value, stake, voting right, or anything. A token is not limited to one particular role; it can fulfill a lot of roles in its native ecosystem
• A security token is a peripheral device used to gain access to an electronically restricted resource. The token is used in addition to or in place of a password. It acts like an electronic key to access something
• A security token is a portable device that authenticates a person’s identity electronically by storing personal information
• Links:
  • https://www.techopedia.com/definition/5474/soft-token

Purpose of a security token

• Security tokens are (protected) data structures
  • contain information about issuer and subject (claims)
  • signed (tamper proof & authenticity)
  • typically contain an expiration time
• A client requests a token
• An issuer issues a token
• A resource consumes a token (has a trust relationship with the issuer)