Questions tagged [terminology]

For questions about names of attacks, vulnerabilities, concepts, etc.

9 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
1answer
120 views

What is the proper terminology and base CVSS score for the following cache related behaviour?

An interface (website/application) that requires authentication should have a proper HTTP caching mechanism. When it doesn't, it allows an attacker to browse back after logout or read the cache in ...
4
votes
0answers
45 views

Is there a term for the combination of principal and credential?

In an API that needs to take a principal and a credential as arguments, what is the pair of those two pieces of information commonly called? FFW Apache Shiro seems to call this an AuthenticationToken....
2
votes
1answer
60 views

Terminology (analogy?) for losing control of a secret due to re-sharing

Regarding sharing a password/access/secret to someone... and then you don't have control whether they will also share this on, and potentially it could/will end up publicly known, thus insecure. The ...
1
vote
0answers
26 views

What's the difference between OVAL definitions, objects, and tests?

I'm trying to become more familiar with OVAL tst def and obj references in joval xml definition files. For example, I'll see stuff like: <criterion comment="Foo" test_ref="oval:org.mitre.oval:...
1
vote
0answers
18 views

Vocabulary matters: link between faults and weaknesses

I am trying to make the link between faults and weaknesses (As defined by Common Weaknesses Enumeration, a MITRE project). The word "fault" is generally used in the reliability domain, to designate ...
1
vote
0answers
79 views

Privacy terminology: Online privacy vs Internet Privacy vs Digital Privacy

While, to my eyes, Digital Privacy is the broader term ( anything digital whether online or not), I have seen all 3 used interchangeably (i.e: link vs title). Also, despite having different entries in ...
1
vote
0answers
78 views

Does “assesse” have a particular meaning in information security?

From this job description, bold added: The human factors expert is needed to conduct research on human subjects that perform tasks for full spectrum cyber operations. The researcher will define, ...
0
votes
0answers
36 views

Is there a common general placeholder name for the “protected secret”?

I wonder if there is a general name for the "protected information" that you are trying to protect. Sometimes it's a code or a password or a token and I would like to know if there is a word for ...
-2
votes
1answer
66 views

What is the term to describe “Transitivity” in network security?

If A's security is breached, while A and B are in the same network, then B's security is breached. I can imagine this could happen to computer networks, but also to social networks; for example if ...