A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
A weakness or flaw in computer software and hardware which allows an attacker to take advantage of (exploit) a targeted system.
a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.
a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a l…
Key management involves the entire key life-cycle: generation, exchange, storage, safeguarding, use, vetting, revocation, replacement and retirement.
A digital signature (not to be confused with a digital certificate) is an electronic signature that is used to authenticate the identity of a message sender or document signer, and usually to ensure t…
An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possi…
Security aspects specific to the Java programming language, libraries, and virtual machine.
Security related aspects of databases and database access.
short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for sig…
An acronym for Payment Card Industry (PCI) Data Security Standard (DSS). A set of rules and policies for protecting information related to card based financial instruments.
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to a user's browser and for the browser to return the state information t…
a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.
an open source implementation of PGP, a file encryption and signature tool widely used for emails
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, admi…
used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.
a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to which he is already logged in including the session cookie.
A security mechanism which enforces policy describing which requesters may perform operations on specified objects. There are typically multiple types of operations. Common operations include: read, w…
the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.
For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. Whe…
a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
a machine running a software daemon that is generally accessed over a network by other machines.
Questions about the security of Apache open source software, especially Apache HTTP Server
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but co…
A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enha…
an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
Management of semi-permanent interactive information interchange between two or more communicating devices, or between a computer and user
A robust and open source security tool for network discovery and security auditing.
The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.
an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.
the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used …