Security Glossary

Backdoor is an intentional or unintentional method of bypassing normal authentication or encryption to gain unauthorised remote access to a system or application. They are installed by attackers or left by developers for troubleshooting. Backdoors allow attackers to access systems without detection, steal data, or maintain persistent control over applications. There are three types of backdoors:

• Software backdoors: Hidden code, hardcoded passwords, or undocumented administrative access.
• Cryptographic backdoors: They lead to encryption bypass due to flaws in algorithms.
• Hardware backdoors: Access to compromised devices and chips.

They can be detected and prevented by monitoring unusual connections and traffic, using AI/ML to detect unauthorised, abnormal behaviour in the app or deploying firewalls, detection systems and anti-malware software.

Biometric authentication is a passwordless and secure access control technique. It verifies user identity using biological traits such as fingerprints, eye patterns, voice, and facial features. It does not use any passwords or pins, but recognises the user through its fingerprints, eye pattern and facial features. It reduces attacks and theft of personal data by providing faster, more convenient security for mobile devices, finance and facility access. It works by capturing biometric data through sensors and identifying them, verifying them and then providing access. It is widely used in current mobile devices, offices and securing sensitive data.

Blackbox testing is an approach where the testers evaluate an application without access to its internal code or structure. It helps identify vulnerabilities from an external attacker’s perspective, simulating real world attack scenarios. Testers interact with the application through inputs and outputs, analysing behaviour to find security flaws or unexpected responses. In mobile apps, it is used to test APIs, authentication flows, and user interactions without needing access to source code. This testing discovers flaws like SQL injection, cross-site scripting (XSS), and insecure data.