A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.
Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, etc.
accessed over a network such as the Internet or an intranet using a browser.
Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [fir…
A piece of data used in public key cryptography (specifically public key infrastructures) that contains identifying information (i.e. email address or web address), a hash of a public key, and a digit…
the practice and study of logical means used to achieve information confidentiality, integrity and authenticity. It covers, among other things, encryption (making some data unreadable …
any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator…
a function which takes a variable size input and produces a fixed size output. The algorithm tries to make it difficult to predict the output for a given input, find two inputs wit…
Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System,…
Securing Linux systems and applications; understanding Linux security features.
The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or n…
Related to email protocols, clients, servers, content, and message format.
Security aspects concerning code written in the programming language PHP which is often used for web applications.
an application which uses HTTP and related protocols to retrieve HTML and XML data from servers. As the web has become a critical source of information and communication, web browsers…
An attempt to penetrate a system's security in an effort to evaluate the protections in place.
Cross-Site Scripting: An attack method that involves injection of code or markup into a webpage. There are three major types of XSS: Reflected XSS, Stored XSS (aka persistent XSS) and DOM-based XSS (a…
Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that sof…
a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a…
The functions performed by the person or processes responsible for security of passwords on a given system.
The data, tools, and procedures which, when applied to a specific vulnerability, predictably violate the security design of a system.
An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather …
Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at andro…
an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly,…
the collection of hardware, software, and people responsible for issuing certificates in a hierarchical PKI. CAs may be public, as in SSL / TLS and government IDs, or privat…
an open-source implementation of basic cryptographic primitives, X.509 certificate utilities, and SSL and TLS protocols.
applied to questions related to various VPN types such as PPTP or IPSec.
a protocol for secure communication between computers to execute remote commands, transfer data and tunnel TCP connections.
Security in mobile devices. Issues concerning regular cellphones, smartphones, tablet computers and other portable information devices all fit into this category. If your question is specific to one o…
Application security - Specific to security concerns for an application that are independent from the underlying operating system, or surrounding infrastructure. Pertains to the design / architecture,…