Questions tagged [terminology]
For questions about names of attacks, vulnerabilities, concepts, etc.
218
questions
-5
votes
1answer
102 views
Should we consider Deepfakes and fakenews as disinformation or misinformation? [closed]
Cognitive hacking some say is a new type of hacking field and some say it is something that been there for many years. Exploring the chapters of WIKI and using projects like MisinfoSec, got me ...
1
vote
0answers
38 views
Name of security measure that shows user a personal word / phrase / drawing [duplicate]
I remember a security measure I've seen on a few sites in the past against phishing, but I don't know what it's called. When the user logs in, or just inputs their username, the site shows some kind ...
1
vote
0answers
39 views
Facial Recognition Attack Nomenclature
Is there a generally acknowledged term for spoofing facial recognition with a photo of the target face (Samsung smartphone facial recognition, not Apple FaceID (depth measurement)).
1
vote
0answers
43 views
Difference between IAG and IDM
What is the difference between Identity Management products (such as Forefront/MIM, PicketLink, OpenIDM) and Identity Access Governance tools (such as Sailpoint,Savyint, CyberArk)?
Apologies for ...
2
votes
1answer
484 views
What is the difference between data owner, data custodian and system owner?
I just started studying up for the CISSP and am having trouble understanding few concepts:
Data owner
Data custodian
System owner
Somewhere I read:
The data owner (information owner) is usually a ...
2
votes
1answer
43 views
The use of “over” in cryptography (as in “a hash over the key”)
This is the ultimate noob question.
When reading discussions of cryptography, I often come across phrases like these:
...calculates a hash over the primary key...
...a key derivation function ...
0
votes
1answer
64 views
SNMP - need help with terminology
In many resources, I see that community strings are also called default passwords. But in the Server Manager, I see "Community name" and it makes more sense.
So why people often use the phrase "...
1
vote
2answers
86 views
adaptive vs. non-adaptive adversaries; Is there a precise, unique and general definition?
In this Ethereum github page (Link to the page: https://github.com/ethereum/wiki/wiki/Sharding-FAQ#what-are-the-security-models-that-we-are-operating-under) there is a very brief definition of the ...
3
votes
2answers
429 views
What are client-side exploits
I am learning about cybersecurity and have read about client-side exploits. I know they are vulnerabilities/exploits and they target the client instead of a server. What are some examples of this and ...
2
votes
3answers
138 views
Terminology for reduced brute-force attack?
Many security algorithms today have such a large key length, that there's just no use in trying to brute-force a key. For example to find one AES-256 key you would have to try 2^255 keys on average.
...
2
votes
1answer
53 views
What's the difference between OVAL definitions, objects, and tests?
I'm trying to become more familiar with OVAL tst def and obj references in joval xml definition files.
For example, I'll see stuff like:
<criterion comment="Foo" test_ref="oval:org.mitre.oval:...
41
votes
3answers
7k views
What is the meaning of Triage in Cybersec world?
I searched Google about this term, but the definitions that I found was related to the medical world, and nothing related to IT. I think that is some kind of procedure of documenting something maybe? ...
2
votes
1answer
597 views
How do I interpret output that produces gpg listing keys?
Correct me where I'm wrong. There are public and private (or secret) keys. A public and a private key make up a keypair. Some keypairs are bound to the other ones. The former are called subkeys, the ...
2
votes
3answers
107 views
Confusing terminologies: Incident, alert, event, ticket [duplicate]
I am doing research on Security orchestration and automation response (SOAR) and three above terminologies make me very confused.
We are currently following the workflow like: some security events ...
2
votes
2answers
76 views
Definition of information in ISO 2700x
I've searched through recent versions of ISO 27000, 27001 and 27002 and couldn't find definition of "information". Where can I find it? Is "information" defined anywhere? Or maybe I should look at ...
2
votes
1answer
89 views
What is a Security Guideline and how does it stand in relation with Standards, Policies, Procedures?
I'm currently working on the definitions-section of a paper. Therefore I have to define the term "Guideline" and how its relationship to other terms (Standards, Policies, Procedures) looks like.
...
1
vote
1answer
94 views
What is the difference between full end-to-end encryption and end-to-end encryption?
What is the difference between full end-to-end encryption and end-to-end encryption?
Are there any differences between these two terms?
0
votes
1answer
257 views
What is a “security bod”?
This is a term I ran across in a blog post by Troy Hunt (which was linked from an answer on this site):
I heard a perfect example of this just the other day when speaking to a security bod in a ...
0
votes
1answer
88 views
What's the relation between a Security Framework & Standards, Guidelines, Procedures and Policies?
I'm currently writing a paper about security standards. Therefore several terms have to be defined before I can actually start. The problem is that in every resource the term "Framework" is somehow ...
1
vote
0answers
19 views
Vocabulary matters: link between faults and weaknesses
I am trying to make the link between faults and weaknesses (As defined by Common Weaknesses Enumeration, a MITRE project). The word "fault" is generally used in the reliability domain, to designate ...
-1
votes
2answers
720 views
What is difference between cracking and ethical hacking?
Today I read about ethical hacking and cracking. I read that ethical hacking is legal but cracking is illegal. The confusion came in my mind when I think that both are same.
So how can we identify ...
33
votes
3answers
7k views
What does “in-house hash function” mean?
In security news, I faced a new term related to hash functions: it is reported that the "in-house hash function" used in IOTA platform is broken (i.e. Curl-P hash function). You can find the complete ...
1
vote
5answers
184 views
What does “hacked” actually mean? [duplicate]
In the context of a) information security and b) an operating system such as Windows 10 or OS X, what actually constitutes a "hack"? Most non-technical end-users associate the term "hack" with the ...
3
votes
3answers
315 views
Difference between white-box testing and secure code review
As far as I know, penetration testing can be divided into black-box, gray-box, and white-box testing. But then what about secure code review? Is it part of white-box testing or is it separate?
4
votes
2answers
171 views
How are ciphers related to cryptographic algorithms like DES or AES?
It looks like I am having a terminology issue here. In cryptography, we have stream ciphers and block ciphers. I understand their difference. We also have cryptographic algorithms like AES (Rijndael).
...
3
votes
1answer
162 views
What does Frank Abagnale mean by “Level 4 security” in his talk at Google?
During his talk at Google, Frank Abagnale mentioned the following:
...we will be doing away with passwords in the next 24 months. Passwords will leave the world, there will be no more passwords. ...
12
votes
4answers
5k views
Eavesdropping vs. sniffing
I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing.
According to their definitions, sniffing involves reading or ...
0
votes
2answers
40 views
What is the correct terminology for enforcing access control by means of cryptography, or on a privileged list?
I have a server that enforces access control by means of cryptography, by not giving up data, or by a combination thereof.
By the former (cryptography), I mean: If a user requests some data, the ...
80
votes
5answers
24k views
What exactly is CTF and how can I as programmer prepare for a CTF with beginner-friendly people?
I reached out to an old friend of mine who was a terrific programmer back in my school days and he invited me to attend one of the CTF events with his university group.
This group seems very beginner ...
3
votes
2answers
2k views
Difference between “weakness” and “vulnerability”?
What is the difference between the terms "vulnerability" and "weakness" when it comes to security?
I was looking at the CWE page and it mentions that a weakness leads to a security vulnerability. I ...
0
votes
1answer
116 views
Benign, Malicious Domains and Definitions
I am working on a research project where we segregate domains used for malicious purpose from benign domains.
However, my guide does not want the term malicious domain and benign domain in the paper....
3
votes
2answers
227 views
Why are Protection Rings called rings?
Protection rings are different privilege levels granted to software, with the kernel being the most privileged, applications the least privileged, and drivers somewhere in between.
My question is why ...
1
vote
1answer
329 views
What is this phishing technique called using subdomains
I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
0
votes
3answers
3k views
Port sweep vs port scan
I was asked this question in an interview:
"What is a port sweep?"
When I replied with port scan he said that my answer was not a scan, it was a port sweep. I googled and found "tcp sweep: but not "...
3
votes
2answers
1k views
Is server public key and Diffie Hellman public are the same?
I am trying to understand the working of TLS. I understand that there are various way to generate the master secret used to encrypting the data. Such as DH (Ephemeral DHE) and RSA. I understand that, ...
164
votes
4answers
34k views
What does it mean to “burn a zero-day”?
I noticed a comment on this answer where another user said
...but it requires risking burning a 0day, which people are not always all that willing to do.
I did an Internet Search for the phrase "...
2
votes
1answer
70 views
Is it reasonable to consider logs as a “technical control”?
I'm studying for the CCSP exam and one of the examples of technical controls (referenced in the course training material) confuse me:
Technical controls, also referred to as logical controls, are ...
3
votes
2answers
533 views
Is there a difference between “risk tolerance” and “risk appetite”?
I'm studying for the CCSP exam and I'm a little confused on the difference between "Risk Appetite" and "Risk Tolerance". Is there a clear and discernible difference? Can the terms be used ...
1
vote
1answer
29 views
Is this description of the term “event” accurate within the context of Business Continuity and Disaster recovery?
I'm studying for the CCSP exam and I came across this description:
An event is any unscheduled adverse impact to the operating
environment. An event is distinguished from a disaster by the
...
2
votes
1answer
342 views
Is there a difference between “Maximum Tolerable Downtime” and “Maximum Allowed Downtime”?
I'm studying for the CCSP exam and one of the BC/DR terms that is referenced in my study material is "Maximum Allowable Downtime". The definition for it is:
MAD (Maxium Allowable Downtime) How ...
0
votes
1answer
106 views
What's the difference between “directory services” and “identity repositories”?
I'm studying for the CCSP exam and the study material references two different terms which seems very similar:
Directory Services A system for managing identities and attributes. These allow the ...
-1
votes
1answer
740 views
What's the difference between “Organization normative framework” and “Application normative framework”?
I'm studying for the CCSP exam and I'm confused with some of the terminologies between Organization normative framework and application normative framework.
The training material defines them as:
...
7
votes
3answers
340 views
When did we start to call malicious software “malware”?
I'm looking into the history of malware. When was malicious software fist called malware? I think that malicious software is called "computer virus".
19
votes
3answers
6k views
What is the difference between “Incident”, “Attack” and “event”?
In the Computer and network security incident taxonomy what are the differences between "Incident", "Attack" and "event"? Where does "threat" fit with them?
2
votes
1answer
317 views
Does “crypto offloading” require the use of ASICs? Can the concept be applied elsewhere?
I'm studying for the CCSP exam and the training material is a little vague on the term "crypto offloading".
The term was mentioned in passing while describing TLS:
TLS is a protocol designed to ...
2
votes
2answers
1k views
What's the difference between an API gateway and XML gateway?
I'm studying for the CCSP exam and am confused on the difference between an "API gateway" and "XML gateway". The training material I have states:
API gateways are also an important part of a ...
3
votes
1answer
1k views
What's the difference between an “application-aware firewall” and a “web application firewall”?
I'm studying for the CCSP and my training material isn't very clear on the definition between "application-aware firewall" and "web application firewall".
The training material states:
Early on, ...
1
vote
1answer
3k views
Is SHA synonymous with SHA1 or SHA0?
There is so little info and so much confusion out there.
People often equate SHA2 as being SHA256; so then would SHA be 160 bit, also known as SHA1?
Is SHA deprecated, like SHA1?
Are they the ...
1
vote
1answer
277 views
When to model a concept via object vs taxonomy vs galaxy in MISP?
Taxonomies in MISP are a triple of (namespace, predicate, value) referred to as "machinetags".
Galaxies seem to be similar. The MISP galaxy docs state that
MISP galaxy is a simple method to ...
0
votes
3answers
193 views
What is the difference between Compliance and Auditing in Information Security?
I am a student working on my semester project and it's about developing a SIEM solution with Big Data tools to be used in a SOC (security operations centre) and I know that collecting logs can be used ...
