Skip to content

Glossary: Security Operations and Incident Response

Command injection

An attack where someone adds their own operating system command to input that a program passes to the command shell. Example: an attacker who can choose the order number in Dana's label code.

Where the book teaches it

Related terms

shell=TrueSAST (static application security testing)