Questions tagged [terminology]

For questions about names of attacks, vulnerabilities, concepts, etc.

13 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
1answer
168 views

What is the proper terminology and base CVSS score for the following cache related behaviour?

An interface (website/application) that requires authentication should have a proper HTTP caching mechanism. When it doesn't, it allows an attacker to browse back after logout or read the cache in ...
2
votes
1answer
37 views

Vocabulary matters: link between faults and weaknesses

I am trying to make the link between faults and weaknesses (As defined by Common Weaknesses Enumeration, a MITRE project). The word "fault" is generally used in the reliability domain, to designate ...
2
votes
1answer
61 views

Terminology (analogy?) for losing control of a secret due to re-sharing

Regarding sharing a password/access/secret to someone... and then you don't have control whether they will also share this on, and potentially it could/will end up publicly known, thus insecure. The ...
1
vote
1answer
61 views

Difference between Process and Practice in Information Security

I'm learning from the "Information Security" book and already know what the two terms policy and procedure mean. While these two terms are quite easy to distinguish: policy is what to do to secure ...
1
vote
0answers
40 views

Facial Recognition Attack Nomenclature

Is there a generally acknowledged term for spoofing facial recognition with a photo of the target face (Samsung smartphone facial recognition, not Apple FaceID (depth measurement)).
1
vote
0answers
89 views

Difference between IAG and IDM

What is the difference between Identity Management products (such as Forefront/MIM, PicketLink, OpenIDM) and Identity Access Governance tools (such as Sailpoint,Savyint, CyberArk)? Apologies for ...
1
vote
0answers
83 views

Privacy terminology: Online privacy vs Internet Privacy vs Digital Privacy

While, to my eyes, Digital Privacy is the broader term ( anything digital whether online or not), I have seen all 3 used interchangeably (i.e: link vs title). Also, despite having different entries in ...
1
vote
0answers
80 views

Does “assesse” have a particular meaning in information security?

From this job description, bold added: The human factors expert is needed to conduct research on human subjects that perform tasks for full spectrum cyber operations. The researcher will define, ...
0
votes
0answers
54 views

What's the term for a hash sent early and plain text revealed later?

I think there is a known pattern where you post the hash of a document, e.g. on Twitter, in order to have its time registered. You could then later publish the document and have it accredited for the ...
0
votes
0answers
47 views

What is securing an application platform called?

I'm searching for the right terminology for this element of cyber security. If I want to secure something like a PaaS for other applications to use, how is this usually called? It's not application ...
0
votes
0answers
32 views

Risk, threat, vulnerability with an example

Given a situation where a system has SSL 3.0 and TLS 1.0 enabled would the following mapping be accurate: Weakness/vulnerability: The remote service accepts connections encrypted using TLS 1.0 and ...
0
votes
0answers
36 views

Is there a common general placeholder name for the “protected secret”?

I wonder if there is a general name for the "protected information" that you are trying to protect. Sometimes it's a code or a password or a token and I would like to know if there is a word for ...
-2
votes
1answer
71 views

What is the term to describe “Transitivity” in network security?

If A's security is breached, while A and B are in the same network, then B's security is breached. I can imagine this could happen to computer networks, but also to social networks; for example if ...