The terminology tag has no wiki summary.
11
votes
3answers
694 views
What is the difference between Exploit and Payload?
In computer security, we know that weak points in software are called vulnerabilities (if related to security). And once the vulnerability is found, theoretically it requires a piece of code as proof ...
4
votes
6answers
495 views
What is the distinguishing point between a script kiddie and a hacker?
When I think of a script kiddie I think of someone who might barely research a tool then point it at a website - things like the recent question about LOIC come to mind when I think of that. A hacker ...
1
vote
1answer
232 views
What is the origin of the three factors of authentication?
The three factors of authentication - something you have, something you know, something you are - are ubiquitous in security literature, but I have yet to find a reference to the origin of the ...
0
votes
6answers
316 views
What sort of security method is this called (if it has a name)?
I have thought of a way of securing access to an application interacting with another application.
Using this method
Application 1 - "What is the sum of 1+1?"
Application 2 - "3"
Application 1 - ...
1
vote
2answers
107 views
Is there a term for a “Master + extension” style password scheme?
I personally have (and preach) a password system using a "root" password shared amongst many passwords, plus a unique password component.
So for Gmail my password might be correcthorsebatterystaple + ...
-3
votes
1answer
177 views
What is a “cuckoo's egg”? [closed]
I remember that Clifford Stoll wrote a book called "The Cuckoo's Egg".
In the book, the reader follows him as he pursues a hacker through networks across the world. I seem to recall that the title ...
2
votes
3answers
127 views
Are all vulnerabilities security related?
Are all vulnerabilities security related? When people talk about vulnerabilities and security vulnerabilities, are they the same concept? My understanding is that a vulnerability is the a weakness in ...
5
votes
2answers
465 views
Taxonomy of Ciphers/MACs/Kex available in SSH?
SSH offers a large variety of algorithms for Ciphers, MACs and KexAlgorithms configuration options. Sometimes I need quick and light (my own internal network), and sometimes I want all the ...
5
votes
4answers
187 views
When should I use the word hacker, cracker, or black hat?
Everybody seems to have their own meaning of the word "hacker". To some, it's the good-guy vigilante with some non-professional characteristics.
To others, it's the aggressor, bad-guy, cracker, or ...
0
votes
1answer
91 views
What terms should I use to define security assessment work? [duplicate]
Possible Duplicate:
What is the difference between a penetration test and a vulnerability assessment?
I am tasked with hiring a consultant to do an analysis of our infrastructure security ...
5
votes
1answer
195 views
What does colluded truncation attack mean?
I'm doing my final year engineering project. I went through some ieee papers and came across something called colluded truncation attack. Can someone explain what it is. I'm planning to do the project ...
6
votes
2answers
804 views
What is SQL injection?
What is the meaning of SQL injection? I am not able to understand the term. And what problems may be caused by SQL injection?
4
votes
1answer
47 views
Looking for a taxonomy of anonymization or re-identification properties
We are working with personally identifiable information that needs to be de-identified. Is there an existing hierarchy or taxonomy of different kinds of re-identification properties?
7
votes
3answers
493 views
Security fields: AppSec vs. InfoSec vs. NetSec, etc
When reading about computer security, there are a lot of different areas mentioned: Application Security, Information Security, Network Security, IT Security, etc. What are the distinct fields within ...
8
votes
7answers
954 views
Definition of Software Security
I'm looking for a theoretical definition of Software Security. And I need to quote some book in an article.
Most of the books starts already assuming that the user knows what that is, and they're ...
8
votes
1answer
792 views
Oligomorphism vs polymorphism vs metamorphism in malware
What is the difference between these three? As I understand it, polymorphic malware code actually is always the same, and it's just that it appears to be different (through encryption, data ...
8
votes
2answers
120 views
Vulnerability Assessments - Vulnerability Taxonomies?
All,
First question on here so please be as gentle as you can :-)
I've been looking around for any writings or papers on a standard for classifying vulnerabilities. Not from a severity/risk/impact ...
3
votes
3answers
242 views
How do I clearly distinguish between groups of formal and informal models?
I'm currently studying for the CISSP exam and would like to ensure that I'm using proper terminology when referring to models. I'm a little confused because I'm coming across generic and specific ...
5
votes
4answers
466 views
What is War Dialing?
The topic says it all - I encountered the term in a PDF given to me. So ... what does the term/phrase 'War Dialing' mean?
6
votes
3answers
321 views
Malware nomenclature
If there a generally agreed upon naming convention for types of malware/virus? For example, are there agreed upon terms for virus, trojan, worm and the like?
If one exists could someone explain it or ...
