Questions tagged [terminology]
For questions about names of attacks, vulnerabilities, concepts, etc.
212
questions
2
votes
1answer
40 views
The use of “over” in cryptography (as in “a hash over the key”)
This is the ultimate noob question.
When reading discussions of cryptography, I often come across phrases like these:
...calculates a hash over the primary key...
...a key derivation function ...
0
votes
1answer
56 views
SNMP - need help with terminology
In many resources, I see that community strings are also called default passwords. But in the Server Manager, I see "Community name" and it makes more sense.
So why people often use the phrase "...
1
vote
2answers
60 views
adaptive vs. non-adaptive adversaries; Is there a precise, unique and general definition?
In this Ethereum github page (Link to the page: https://github.com/ethereum/wiki/wiki/Sharding-FAQ#what-are-the-security-models-that-we-are-operating-under) there is a very brief definition of the ...
3
votes
2answers
117 views
What are client-side exploits
I am learning about cybersecurity and have read about client-side exploits. I know they are vulnerabilities/exploits and they target the client instead of a server. What are some examples of this and ...
2
votes
3answers
118 views
Terminology for reduced brute-force attack?
Many security algorithms today have such a large key length, that there's just no use in trying to brute-force a key. For example to find one AES-256 key you would have to try 2^255 keys on average.
...
2
votes
1answer
44 views
What's the difference between OVAL definitions, objects, and tests?
I'm trying to become more familiar with OVAL tst def and obj references in joval xml definition files.
For example, I'll see stuff like:
<criterion comment="Foo" test_ref="oval:org.mitre.oval:...
41
votes
3answers
7k views
What is the meaning of Triage in Cybersec world?
I searched Google about this term, but the definitions that I found was related to the medical world, and nothing related to IT. I think that is some kind of procedure of documenting something maybe? ...
2
votes
1answer
267 views
How do I interpret output that produces gpg listing keys?
Correct me where I'm wrong. There are public and private (or secret) keys. A public and a private key make up a keypair. Some keypairs are bound to the other ones. The former are called subkeys, the ...
2
votes
3answers
97 views
Confusing terminologies: Incident, alert, event, ticket [duplicate]
I am doing research on Security orchestration and automation response (SOAR) and three above terminologies make me very confused.
We are currently following the workflow like: some security events ...
2
votes
2answers
52 views
Definition of information in ISO 2700x
I've searched through recent versions of ISO 27000, 27001 and 27002 and couldn't find definition of "information". Where can I find it? Is "information" defined anywhere? Or maybe I should look at ...
2
votes
1answer
71 views
What is a Security Guideline and how does it stand in relation with Standards, Policies, Procedures?
I'm currently working on the definitions-section of a paper. Therefore I have to define the term "Guideline" and how its relationship to other terms (Standards, Policies, Procedures) looks like.
...
1
vote
1answer
89 views
What is the difference between full end-to-end encryption and end-to-end encryption?
What is the difference between full end-to-end encryption and end-to-end encryption?
Are there any differences between these two terms?
0
votes
1answer
227 views
What is a “security bod”?
This is a term I ran across in a blog post by Troy Hunt (which was linked from an answer on this site):
I heard a perfect example of this just the other day when speaking to a security bod in a ...
0
votes
1answer
56 views
What's the relation between a Security Framework & Standards, Guidelines, Procedures and Policies?
I'm currently writing a paper about security standards. Therefore several terms have to be defined before I can actually start. The problem is that in every resource the term "Framework" is somehow ...
1
vote
0answers
18 views
Vocabulary matters: link between faults and weaknesses
I am trying to make the link between faults and weaknesses (As defined by Common Weaknesses Enumeration, a MITRE project). The word "fault" is generally used in the reliability domain, to designate ...
-1
votes
2answers
449 views
What is difference between cracking and ethical hacking?
Today I read about ethical hacking and cracking. I read that ethical hacking is legal but cracking is illegal. The confusion came in my mind when I think that both are same.
So how can we identify ...
33
votes
3answers
7k views
What does “in-house hash function” mean?
In security news, I faced a new term related to hash functions: it is reported that the "in-house hash function" used in IOTA platform is broken (i.e. Curl-P hash function). You can find the complete ...
1
vote
5answers
178 views
What does “hacked” actually mean? [duplicate]
In the context of a) information security and b) an operating system such as Windows 10 or OS X, what actually constitutes a "hack"? Most non-technical end-users associate the term "hack" with the ...
3
votes
3answers
225 views
Difference between white-box testing and secure code review
As far as I know, penetration testing can be divided into black-box, gray-box, and white-box testing. But then what about secure code review? Is it part of white-box testing or is it separate?
4
votes
2answers
166 views
How are ciphers related to cryptographic algorithms like DES or AES?
It looks like I am having a terminology issue here. In cryptography, we have stream ciphers and block ciphers. I understand their difference. We also have cryptographic algorithms like AES (Rijndael).
...
3
votes
1answer
157 views
What does Frank Abagnale mean by “Level 4 security” in his talk at Google?
During his talk at Google, Frank Abagnale mentioned the following:
...we will be doing away with passwords in the next 24 months. Passwords will leave the world, there will be no more passwords. ...
12
votes
4answers
4k views
Eavesdropping vs. sniffing
I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing.
According to their definitions, sniffing involves reading or ...
0
votes
2answers
40 views
What is the correct terminology for enforcing access control by means of cryptography, or on a privileged list?
I have a server that enforces access control by means of cryptography, by not giving up data, or by a combination thereof.
By the former (cryptography), I mean: If a user requests some data, the ...
79
votes
4answers
21k views
What exactly is CTF and how can I as programmer prepare for a CTF with beginner-friendly people?
I reached out to an old friend of mine who was a terrific programmer back in my school days and he invited me to attend one of the CTF events with his university group.
This group seems very beginner ...
3
votes
2answers
1k views
Difference between “weakness” and “vulnerability”?
What is the difference between the terms "vulnerability" and "weakness" when it comes to security?
I was looking at the CWE page and it mentions that a weakness leads to a security vulnerability. I ...
0
votes
1answer
85 views
Benign, Malicious Domains and Definitions
I am working on a research project where we segregate domains used for malicious purpose from benign domains.
However, my guide does not want the term malicious domain and benign domain in the paper....
3
votes
2answers
195 views
Why are Protection Rings called rings?
Protection rings are different privilege levels granted to software, with the kernel being the most privileged, applications the least privileged, and drivers somewhere in between.
My question is why ...
1
vote
1answer
227 views
What is this phishing technique called using subdomains
I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
0
votes
3answers
2k views
Port sweep vs port scan
I was asked this question in an interview:
"What is a port sweep?"
When I replied with port scan he said that my answer was not a scan, it was a port sweep. I googled and found "tcp sweep: but not "...
3
votes
2answers
835 views
Is server public key and Diffie Hellman public are the same?
I am trying to understand the working of TLS. I understand that there are various way to generate the master secret used to encrypting the data. Such as DH (Ephemeral DHE) and RSA. I understand that, ...
163
votes
4answers
34k views
What does it mean to “burn a zero-day”?
I noticed a comment on this answer where another user said
...but it requires risking burning a 0day, which people are not always all that willing to do.
I did an Internet Search for the phrase "...
2
votes
1answer
67 views
Is it reasonable to consider logs as a “technical control”?
I'm studying for the CCSP exam and one of the examples of technical controls (referenced in the course training material) confuse me:
Technical controls, also referred to as logical controls, are ...
3
votes
2answers
393 views
Is there a difference between “risk tolerance” and “risk appetite”?
I'm studying for the CCSP exam and I'm a little confused on the difference between "Risk Appetite" and "Risk Tolerance". Is there a clear and discernible difference? Can the terms be used ...
1
vote
1answer
28 views
Is this description of the term “event” accurate within the context of Business Continuity and Disaster recovery?
I'm studying for the CCSP exam and I came across this description:
An event is any unscheduled adverse impact to the operating
environment. An event is distinguished from a disaster by the
...
2
votes
1answer
207 views
Is there a difference between “Maximum Tolerable Downtime” and “Maximum Allowed Downtime”?
I'm studying for the CCSP exam and one of the BC/DR terms that is referenced in my study material is "Maximum Allowable Downtime". The definition for it is:
MAD (Maxium Allowable Downtime) How ...
0
votes
1answer
77 views
What's the difference between “directory services” and “identity repositories”?
I'm studying for the CCSP exam and the study material references two different terms which seems very similar:
Directory Services A system for managing identities and attributes. These allow the ...
-1
votes
1answer
499 views
What's the difference between “Organization normative framework” and “Application normative framework”?
I'm studying for the CCSP exam and I'm confused with some of the terminologies between Organization normative framework and application normative framework.
The training material defines them as:
...
7
votes
3answers
336 views
When did we start to call malicious software “malware”?
I'm looking into the history of malware. When was malicious software fist called malware? I think that malicious software is called "computer virus".
19
votes
3answers
6k views
What is the difference between “Incident”, “Attack” and “event”?
In the Computer and network security incident taxonomy what are the differences between "Incident", "Attack" and "event"? Where does "threat" fit with them?
2
votes
1answer
251 views
Does “crypto offloading” require the use of ASICs? Can the concept be applied elsewhere?
I'm studying for the CCSP exam and the training material is a little vague on the term "crypto offloading".
The term was mentioned in passing while describing TLS:
TLS is a protocol designed to ...
2
votes
2answers
936 views
What's the difference between an API gateway and XML gateway?
I'm studying for the CCSP exam and am confused on the difference between an "API gateway" and "XML gateway". The training material I have states:
API gateways are also an important part of a ...
3
votes
1answer
953 views
What's the difference between an “application-aware firewall” and a “web application firewall”?
I'm studying for the CCSP and my training material isn't very clear on the definition between "application-aware firewall" and "web application firewall".
The training material states:
Early on, ...
1
vote
1answer
2k views
Is SHA synonymous with SHA1 or SHA0?
There is so little info and so much confusion out there.
People often equate SHA2 as being SHA256; so then would SHA be 160 bit, also known as SHA1?
Is SHA deprecated, like SHA1?
Are they the ...
1
vote
1answer
233 views
When to model a concept via object vs taxonomy vs galaxy in MISP?
Taxonomies in MISP are a triple of (namespace, predicate, value) referred to as "machinetags".
Galaxies seem to be similar. The MISP galaxy docs state that
MISP galaxy is a simple method to ...
0
votes
3answers
182 views
What is the difference between Compliance and Auditing in Information Security?
I am a student working on my semester project and it's about developing a SIEM solution with Big Data tools to be used in a SOC (security operations centre) and I know that collecting logs can be used ...
10
votes
1answer
437 views
What is SpeedSurfing?
My Sophos antivirus detected what it calls "SpeedSurfing", and my Google-fu is failing me. The Chrome extension it deleted was Boomerang for Gmail.
-2
votes
1answer
270 views
What exactly is the meaning of 'trojan' and 'rootkit'? [duplicate]
I know both are a type of malware, trojans 'disguise them self as a useful program' and rootkits 'embed them self in the system to avoid detection'. Technically how do they accomplish such things? I'm ...
-1
votes
1answer
86 views
What is the meaning of “me” in ipfw rules?
ipfw is an IP firewall and traffic shaper control program.
The term "me" appears on ipfw statements like below:
ipfw add 02050 allow tcp from me to any out
I would like to know exactly what "me" ...
17
votes
4answers
3k views
Where does authenticity fit into the CIA Triad?
Consider a chat application where an attacker is able to send messages in any user's name. This obviously violates the message's authenticity. But what aspect of CIA would be violated?
Integrity ...
4
votes
1answer
552 views
What's the difference between “load testing” and “stress testing” within the context of a security audit?
I'm preparing for the CCSP examine and am trying to wrap my mind around the concepts of "load testing" and "stress testing" within the context of security.
I think the difference here is that:
...
