Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [terminology]

For questions about names of attacks, vulnerabilities, concepts, etc.

Filter by
Sorted by
Tagged with
0
votes
1answer
152 views

What is the difference between vulnerability identification and exploitation?

Are strings like AND '1' = '2 and <script>alert('xss')</script> used to identify SQL injection and XSS vulnerability exploits? If so, when black-box testing a house made web application, ...
0
votes
1answer
115 views

Is there a 'key space' equivalent for encryption keys?

If a key space is the term given to the collection of all possible decryption keys for a given cryptosystem, then what is the collection of all possible encryption keys called?
0
votes
2answers
168 views

Confusing definitions of “parasitic virus” and “worm”

I was studying for CISSP certification when I came across the question "what type of virus attaches itself to an executable?" The answer was "parasitic". I find terms relating to viruses and malware ...
0
votes
2answers
40 views

What is the correct terminology for enforcing access control by means of cryptography, or on a privileged list?

I have a server that enforces access control by means of cryptography, by not giving up data, or by a combination thereof. By the former (cryptography), I mean: If a user requests some data, the ...
0
votes
0answers
36 views

Is there a common general placeholder name for the “protected secret”?

I wonder if there is a general name for the "protected information" that you are trying to protect. Sometimes it's a code or a password or a token and I would like to know if there is a word for ...
0
votes
1answer
32 views

Technical term needed: Per default secured / blacklist vs whitelist

I'm currently working on a homework and missing a technical term / known best practice to describe what I have learned or what I feel that is better. It is about a publish / subscribe architecture, ...
0
votes
1answer
195 views

What terms should I use to define security assessment work? [duplicate]

Possible Duplicate: What is the difference between a penetration test and a vulnerability assessment? I am tasked with hiring a consultant to do an analysis of our infrastructure security for a ...
-1
votes
5answers
302 views

Is there a name for this flawed way of thinking about security? [closed]

I've recently encountered a developer who thinks that she can implement security on the client end of a web application. Breaking the security is as trivial as reading a few lines of Javascript and ...
-1
votes
2answers
589 views

What is difference between cracking and ethical hacking?

Today I read about ethical hacking and cracking. I read that ethical hacking is legal but cracking is illegal. The confusion came in my mind when I think that both are same. So how can we identify ...
-1
votes
3answers
135 views

What does one call the strategy of using “pre-password transforms” as passwords?

Suppose that instead of using, say, Google, let me in! as my Google password, I used some consistent transform of this string, say ZWE1NjMyNm? What search keywords would be helpful to search for ...
-1
votes
1answer
100 views

What is the meaning of “me” in ipfw rules?

ipfw is an IP firewall and traffic shaper control program. The term "me" appears on ipfw statements like below: ipfw add 02050 allow tcp from me to any out I would like to know exactly what "me" ...
-1
votes
1answer
649 views

What's the difference between “Organization normative framework” and “Application normative framework”?

I'm studying for the CCSP exam and I'm confused with some of the terminologies between Organization normative framework and application normative framework. The training material defines them as: ...
-2
votes
1answer
350 views

What exactly is the meaning of 'trojan' and 'rootkit'? [duplicate]

I know both are a type of malware, trojans 'disguise them self as a useful program' and rootkits 'embed them self in the system to avoid detection'. Technically how do they accomplish such things? I'm ...
-2
votes
1answer
66 views

What is the term to describe “Transitivity” in network security?

If A's security is breached, while A and B are in the same network, then B's security is breached. I can imagine this could happen to computer networks, but also to social networks; for example if ...
-4
votes
1answer
120 views

What is the difference between data and information when it comes to Data Security? [closed]

I'm currently enrolled for Data Security program and for our assignment the question is to differentiate data and information. What is the difference between those two?