A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
A weakness or flaw in computer software and hardware which allows an attacker to take advantage of (exploit) a targeted system.
a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.
Key management involves the entire key life-cycle: generation, exchange, storage, safeguarding, use, vetting, revocation, replacement and retirement.
a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a l…
A digital signature (not to be confused with a digital certificate) is an electronic signature that is used to authenticate the identity of a message sender or document signer, and usually to ensure t…
An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possi…
Security aspects specific to the Java programming language, libraries, and virtual machine.
An acronym for Payment Card Industry (PCI) Data Security Standard (DSS). A set of rules and policies for protecting information related to card based financial instruments.
A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to a user's browser and for the browser to return the state information t…
short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for sig…
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
an open source implementation of PGP, a file encryption and signature tool widely used for emails
mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, admi…
used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.
a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to which he is already logged in including the session cookie.
A security mechanism which enforces policy describing which requesters may perform operations on specified objects. There are typically multiple types of operations. Common operations include: read, w…
prevention of an attack vector (e.g. XSS, HPP, CSRF)
the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.
For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. Whe…
a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but co…
a machine running a software daemon that is generally accessed over a network by other machines.
Questions about the security of Apache open source software, especially Apache HTTP Server
an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enha…
Management of semi-permanent interactive information interchange between two or more communicating devices, or between a computer and user
Security controls and features related to an end user's account with a web/mobile based application or an operating system.
A robust and open source security tool for network discovery and security auditing.
The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.
an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site whic…