A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.

× 771
A weakness or flaw in computer software and hardware which allows an attacker to take advantage of (exploit) a targeted system.
× 754
a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.
× 721
Key management involves the entire key life-cycle: generation, exchange, storage, safeguarding, use, vetting, revocation, replacement and retirement.
× 716
a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a l…
× 693
A digital signature (not to be confused with a digital certificate) is an electronic signature that is used to authenticate the identity of a message sender or document signer, and usually to ensure t…
× 643
An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possi…
× 623
Security related aspects of databases and database access.
× 617
Security aspects specific to the Java programming language, libraries, and virtual machine.
× 613
An acronym for Payment Card Industry (PCI) Data Security Standard (DSS). A set of rules and policies for protecting information related to card based financial instruments.
× 611
A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to a user's browser and for the browser to return the state information t…
× 610
short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for sig…
× 608
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
× 604
a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.
× 598
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
× 587
an open source implementation of PGP, a file encryption and signature tool widely used for emails
× 575
mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, admi…
× 570
used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.
× 536
a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to which he is already logged in including the session cookie.
× 511
A security mechanism which enforces policy describing which requesters may perform operations on specified objects. There are typically multiple types of operations. Common operations include: read, w…
× 501
prevention of an attack vector (e.g. XSS, HPP, CSRF)
× 491
the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.
× 487
For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. Whe…
× 479
a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
× 478
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but co…
× 468
a machine running a software daemon that is generally accessed over a network by other machines.
× 467
Questions about the security of Apache open source software, especially Apache HTTP Server
× 457
an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
× 453
A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enha…
× 446
Management of semi-permanent interactive information interchange between two or more communicating devices, or between a computer and user
× 440
an open-source relational database management system.
× 440
Security controls and features related to an end user's account with a web/mobile based application or an operating system.
× 434
A robust and open source security tool for network discovery and security auditing.
× 433
Wireless security topics including 802.11, Bluetooth, and others.
× 423
The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.
× 421
an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site whic…
× 420
an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.