A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [terminology]

For questions about names of attacks, vulnerabilities, concepts, etc.

Filter by
Sorted by
Tagged with
6
votes
1answer
7k views

What is TTP hunting?

What is "TTP hunting" in terms of network security research? I came across this term, but do not know what this is . Tried to google it, but TTP seem to stand for many different things, but none of ...
3
votes
1answer
609 views

Is there a name for an anti-virus station / kiosk?

I am not able to define the exact term for a station that is meant to scan whatever media coming from outside a company and that have the following specifications: The station should never be on any ...
2
votes
2answers
254 views

Unambiguous terminology for different kinds of malware?

I noticed in the literatures that there are no exact boundaries for numerous information security terms such as malware, virus, etc. Some people say malware in the umbrella under which viruses, worms, ...
7
votes
3answers
3k views

What is the difference between misuse and abuse cases in security?

I know that misuse cases are use cases which help identify security requirements as they highlight the user's goal in misusing the system, but what exactly is abuse cases and what is the difference or ...
3
votes
1answer
162 views

What does Frank Abagnale mean by “Level 4 security” in his talk at Google?

During his talk at Google, Frank Abagnale mentioned the following: ...we will be doing away with passwords in the next 24 months. Passwords will leave the world, there will be no more passwords. ...
0
votes
3answers
3k views

Port sweep vs port scan

I was asked this question in an interview: "What is a port sweep?" When I replied with port scan he said that my answer was not a scan, it was a port sweep. I googled and found "tcp sweep: but not "...
12
votes
4answers
5k views

Eavesdropping vs. sniffing

I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing. According to their definitions, sniffing involves reading or ...
0
votes
2answers
40 views

What is the correct terminology for enforcing access control by means of cryptography, or on a privileged list?

I have a server that enforces access control by means of cryptography, by not giving up data, or by a combination thereof. By the former (cryptography), I mean: If a user requests some data, the ...
6
votes
2answers
417 views

Do people use “phising” as a real term, or just a mistaken spelling of “phishing”

Is "phising" a commonly accepted term, or just a mis-spelling of "phishing"? I've always understood "phishing" is a common security term. However, recently I've started seeing serious articles and ...
3
votes
2answers
2k views

Difference between “weakness” and “vulnerability”?

What is the difference between the terms "vulnerability" and "weakness" when it comes to security? I was looking at the CWE page and it mentions that a weakness leads to a security vulnerability. I ...
0
votes
1answer
116 views

Benign, Malicious Domains and Definitions

I am working on a research project where we segregate domains used for malicious purpose from benign domains. However, my guide does not want the term malicious domain and benign domain in the paper....
3
votes
2answers
227 views

Why are Protection Rings called rings?

Protection rings are different privilege levels granted to software, with the kernel being the most privileged, applications the least privileged, and drivers somewhere in between. My question is why ...
6
votes
1answer
1k views

In IPSec what is the definition & purpose of SAD and SPD?

What is a Security Application Database & Security Policy Database? What is their role in processing models for OUTBOUND and INBOUND packets?
1
vote
1answer
329 views

What is this phishing technique called using subdomains

I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
3
votes
2answers
1k views

Is server public key and Diffie Hellman public are the same?

I am trying to understand the working of TLS. I understand that there are various way to generate the master secret used to encrypting the data. Such as DH (Ephemeral DHE) and RSA. I understand that, ...
4
votes
2answers
160 views

Way of categorising and organising types of security issues and areas

I have recently done a security review and uncovered 200 or so areas to improve upon covering a very diverse range of topics; Some points are process, some are config, some are new systems to be ...
3
votes
3answers
2k views

What's the difference between privacy and anonymity? [closed]

In the previous topic I was talking about VPN and TOR browser, and someone mentioned privacy VS anonymity. What's the actual difference between them?
3
votes
2answers
535 views

Is there a difference between “risk tolerance” and “risk appetite”?

I'm studying for the CCSP exam and I'm a little confused on the difference between "Risk Appetite" and "Risk Tolerance". Is there a clear and discernible difference? Can the terms be used ...
2
votes
1answer
70 views

Is it reasonable to consider logs as a “technical control”?

I'm studying for the CCSP exam and one of the examples of technical controls (referenced in the course training material) confuse me: Technical controls, also referred to as logical controls, are ...
2
votes
1answer
342 views

Is there a difference between “Maximum Tolerable Downtime” and “Maximum Allowed Downtime”?

I'm studying for the CCSP exam and one of the BC/DR terms that is referenced in my study material is "Maximum Allowable Downtime". The definition for it is: MAD (Maxium Allowable Downtime) How ...
1
vote
1answer
29 views

Is this description of the term “event” accurate within the context of Business Continuity and Disaster recovery?

I'm studying for the CCSP exam and I came across this description: An event is any unscheduled adverse impact to the operating environment. An event is distinguished from a disaster by the ...
3
votes
2answers
5k views

Cyber Security vs. Digital Security

What is the difference between Cyber Security and Digital Security? They sound very similar (same) to me, But I have read that current techniques of Machine Learning can provide Digital Security, ...
0
votes
1answer
106 views

What's the difference between “directory services” and “identity repositories”?

I'm studying for the CCSP exam and the study material references two different terms which seems very similar: Directory Services A system for managing identities and attributes. These allow the ...
7
votes
3answers
340 views

When did we start to call malicious software “malware”?

I'm looking into the history of malware. When was malicious software fist called malware? I think that malicious software is called "computer virus".
19
votes
3answers
6k views

What is the difference between “Incident”, “Attack” and “event”?

In the Computer and network security incident taxonomy what are the differences between "Incident", "Attack" and "event"? Where does "threat" fit with them?
2
votes
1answer
317 views

Does “crypto offloading” require the use of ASICs? Can the concept be applied elsewhere?

I'm studying for the CCSP exam and the training material is a little vague on the term "crypto offloading". The term was mentioned in passing while describing TLS: TLS is a protocol designed to ...
3
votes
1answer
1k views

What's the difference between an “application-aware firewall” and a “web application firewall”?

I'm studying for the CCSP and my training material isn't very clear on the definition between "application-aware firewall" and "web application firewall". The training material states: Early on, ...
6
votes
2answers
138 views

What category of anonymity do onion routing and blockchains afford?

My understanding is that a strict definition of anonymity means that defeating the security mechanism is logically impossible or mathematically infeasible, and therefore so is deducing the identity. (...
11
votes
2answers
2k views

What is SQL injection?

What is the meaning of SQL injection? I am not able to understand the term. And what problems may be caused by SQL injection?
1
vote
1answer
278 views

When to model a concept via object vs taxonomy vs galaxy in MISP?

Taxonomies in MISP are a triple of (namespace, predicate, value) referred to as "machinetags". Galaxies seem to be similar. The MISP galaxy docs state that MISP galaxy is a simple method to ...
4
votes
3answers
194 views

Is there a pre-existing taxonomy of attackers?

When building a security policy (and implementing it) you must know who you are defending against. I would like to use proper terms, if they're already defined. I'm imagining a list such as: Passive ...
7
votes
3answers
3k views

What are the accepted naming convention for the terms “public/private keys” and “certificates”?

Is there an accepted naming convention for referring to PKI artifacts? There seems to be a lot of confusion with the naming of artifacts. For example, it seems that some people refer to: public ...
0
votes
3answers
193 views

What is the difference between Compliance and Auditing in Information Security?

I am a student working on my semester project and it's about developing a SIEM solution with Big Data tools to be used in a SOC (security operations centre) and I know that collecting logs can be used ...
10
votes
1answer
455 views

What is SpeedSurfing?

My Sophos antivirus detected what it calls "SpeedSurfing", and my Google-fu is failing me. The Chrome extension it deleted was Boomerang for Gmail.
4
votes
1answer
440 views

Is FAR (False Accept Rate) a property of algorithm or a property of the system?

As known in biometrics: https://en.wikipedia.org/wiki/Biometrics#Performance False match rate (FMR, also called FAR = False Accept Rate): the probability that the system incorrectly matches the ...
0
votes
2answers
3k views

In cyptography what is “Key Space”?

What is a Key space and how does it relate to the strength of a cryptosystem? Comment on the strength of the DES algorithm with a 56 bit key. What relevance does the key space have for passwords? ...
-2
votes
1answer
405 views

What exactly is the meaning of 'trojan' and 'rootkit'? [duplicate]

I know both are a type of malware, trojans 'disguise them self as a useful program' and rootkits 'embed them self in the system to avoid detection'. Technically how do they accomplish such things? I'm ...
-1
votes
1answer
111 views

What is the meaning of “me” in ipfw rules?

ipfw is an IP firewall and traffic shaper control program. The term "me" appears on ipfw statements like below: ipfw add 02050 allow tcp from me to any out I would like to know exactly what "me" ...
3
votes
1answer
756 views

Is Threat Risk Assessment the same as Threat Risk Modeling?

I've been asked to help fill out a survey and one of the questions is whether a Threat Risk Assessment has been performed on a blog we're setting up for a charity. The WordPress blog will use a free ...
5
votes
1answer
641 views

What's the difference between “load testing” and “stress testing” within the context of a security audit?

I'm preparing for the CCSP examine and am trying to wrap my mind around the concepts of "load testing" and "stress testing" within the context of security. I think the difference here is that: ...
17
votes
6answers
18k views

What is the distinguishing point between a script kiddie and a hacker?

When I think of a script kiddie I think of someone who might barely research a tool then point it at a website - things like the recent question about LOIC come to mind when I think of that. A hacker (...
0
votes
2answers
591 views

Is constantly downloading large amount of files from a web server considered DDoS?

For example, there's like a million files stored on a website (publicly, anyone with a link can get it), and I wrote a program to retrieve it one by one. Since obviously my program pings the server ...
4
votes
1answer
308 views

What is an Origin Error Attack?

Similar to my previous question here, however I thought it was best to ask two separate questions rather than combining them into one. From The Forrester Wave™: DDoS Services Providers, Q3 2015 ...
1
vote
2answers
77 views

Is crimeware defined by anything other than intent?

I'm learning about different types of viruses, and one category of virus is "crimeware." I read the wikipedia page for crimeware, and to me it seems that crimeware is just a specific usage of spyware. ...
0
votes
1answer
213 views

Is IP geolocation threat intelligence?

If the suppliers of your business are all located in North America, but your supplier web portal suddenly receives a lot of traffic from elsewhere, you should investigate. Therefore, IP geolocation ...
2
votes
1answer
815 views

What is the difference between “web penetration testing” and “web application penetration testing”?

I decided to start learning "web application penetration testing". But while I am learning I find there is another term "web penetration testing". Can someone tell me what's the difference between ...
2
votes
1answer
459 views

What is an indicator of compromise?

I'm struggling to understand what is an indicator of compromise. I found different definitions on the web but I still don't know. The definitions I found are: 1 - Something (file, network connection) ...
4
votes
1answer
81 views

Is there a difference in terminology between the words “cryptogram” and “ciphertext”?

I've noticed that certain security professionals use the term "ciphertext" while others use "cryptogram". Is there any meaningful difference between those terms? Or can they be used interchangeably?
5
votes
1answer
366 views

Why is it called micalg?

RFC3851 says: The multipart/signed Content type has two required parameters: the protocol parameter and the micalg parameter. and The micalg parameter allows for one-pass processing when ...
2
votes
1answer
158 views

What is “Intentionally misleading Artificial Intelligence to create a misleading outcome” called?

I'm writing about a computer system that relies on Artificial Intelligence and the threats that this may include. One threat vector (for example) is to seed Bayesian AI with content to skew the ...