Tags
A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
A system whose primary function is to deliver web pages on request to clients.
949 questions
SQL injection is a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.
922 questions
A digital signature (not to be confused with a digital certificate) is an electronic signature that is used to authenticate the identity of a message sender or document signer, and usually to ensure t…
884 questions
The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a l…
855 questions
Key management involves the entire key life-cycle: generation, exchange, storage, safeguarding, use, vetting, revocation, replacement and retirement.
851 questions
A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to a user's browser and for the browser to return the state information t…
814 questions
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
790 questions
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
777 questions
An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possi…
777 questions
GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails
762 questions
Security related aspects of databases and database access.
746 questions
Security controls and features related to an end user's account with a web/mobile based application or an operating system.
743 questions
RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.
737 questions
Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware.
715 questions
Security aspects specific to the Java programming language, libraries, and virtual machine.
715 questions
The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, admi…
707 questions
PGP is short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for sig…
704 questions
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but co…
700 questions
a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to which he is already logged in including the session cookie.
687 questions
An acronym for Payment Card Industry (PCI) Data Security Standard (DSS). A set of rules and policies for protecting information related to card based financial instruments.
680 questions
The Internet Protocol (IP) is the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.
677 questions
Disk encryption is a special case of data at rest protection when the storage media is a sector-addressable device (e.g., a hard disk).
604 questions
A server is a machine running a software daemon that is generally accessed over a network by other machines.
580 questions
A security mechanism which enforces policy describing which requesters may perform operations on specified objects. There are typically multiple types of operations. Common operations include: read, w…
579 questions
For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. Whe…
575 questions
Google is an American multinational corporation which provides Internet-related products and services, including Internet search, cloud computing, software and advertising technologies.
573 questions
prevention of an attack vector (e.g. XSS, HPP, CSRF)
568 questions
Management of semi-permanent interactive information interchange between two or more communicating devices, or between a computer and user
568 questions
Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site whic…
550 questions
A robust and open source security tool for network discovery and security auditing.
531 questions
Questions about the security of Apache open source software, especially Apache HTTP Server
528 questions
Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a use…
521 questions
Popular web browser by Google, see chrome.google.com for more information.
519 questions
Application Programming Interface; a set of routines, protocols, tools or endpoints used in software development.
519 questions
The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.
518 questions
MySQL is an open-source relational database management system.
518 questions