Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange


A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.

× 729
A weakness or flaw in computer software and hardware which allows an attacker to take advantage of (exploit) a targeted system.
× 724
a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.
× 693
a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a l…
× 690
Key management involves the entire key life-cycle: generation, exchange, storage, safeguarding, use, vetting, revocation, replacement and retirement.
× 663
A digital signature (not to be confused with a digital certificate) is an electronic signature that is used to authenticate the identity of a message sender or document signer, and usually to ensure t…
× 611
An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possi…
× 607
Security aspects specific to the Java programming language, libraries, and virtual machine.
× 606
Security related aspects of databases and database access.
× 593
short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for sig…
× 591
An acronym for Payment Card Industry (PCI) Data Security Standard (DSS). A set of rules and policies for protecting information related to card based financial instruments.
× 587
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
× 581
A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to a user's browser and for the browser to return the state information t…
× 577
a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.
× 563
an open source implementation of PGP, a file encryption and signature tool widely used for emails
× 561
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
× 549
mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, admi…
× 536
used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.
× 511
a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to which he is already logged in including the session cookie.
× 491
prevention of an attack vector (e.g. XSS, HPP, CSRF)
× 485
A security mechanism which enforces policy describing which requesters may perform operations on specified objects. There are typically multiple types of operations. Common operations include: read, w…
× 476
the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.
× 474
For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. Whe…
× 467
a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
× 458
a machine running a software daemon that is generally accessed over a network by other machines.
× 451
Questions about the security of Apache open source software, especially Apache HTTP Server
× 443
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but co…
× 441
A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enha…
× 433
an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
× 425
Management of semi-permanent interactive information interchange between two or more communicating devices, or between a computer and user
× 423
Wireless security topics including 802.11, Bluetooth, and others.
× 419
A robust and open source security tool for network discovery and security auditing.
× 417
an open-source relational database management system.
× 411
The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.
× 405
an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.
× 403
the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used …
× 402
a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a use…