CSRF (Cross-Site Request Forgery) definition in Cybersecurity
CSRF is a web security vulnerability that allows an attacker to induce users to perform actions that they do not intend to perform. It exploits the trust that a site has in a user's browser.
Notable Incidents
- Facebook CSRF exploit (2009), allowed attackers to perform actions on behalf of users.
- Django Web Framework CSRF Vulnerability, led to potential attacks on websites using older versions of Django.
How to Protect Your Network against CSRF
- Use anti-CSRF tokens in web forms.
- Implement same-site cookie attributes to prevent cookies from being sent in cross-site requests.