A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
Computer forensics works to analyze information on computer systems in an attempt to find evidence regarding certain actions of a process, application, user or computer to determine the source of chan…
Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine
Application Programming Interface; a set of routines, protocols, tools or endpoints used in software development.
A router is a networking device that routes forwards between networks. A router generally has two or more data connections allowing data to be routed between networks.
A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enha…
A buffer overflow, or buffer overrun, is an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory.
Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used …
Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
iOS is Apple's operating system for the iPhone, iPad and iPod Touch.
Wireless security topics including 802.11, Bluetooth, and others.
macOS (formerly Mac OS X and OS X) is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.
For questions about the assessment of software, hardware, systems, people, processes, procedures, projects, etc, that are somehow related to the security of an organization or product. Often these are…
Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).
Authorization is the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Not to be confused with authentication.
Denial of Service (DoS) is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) by flooding a target with useless packets, connections or tasks.
X.509 is a standard for a public key infrastructure used for authentication and access control. X.509 specifies standard formats for certificates, revocation lists, attribute certificates, and path va…
Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data…
Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.
Intrusion Detection System, a system for detecting and alerting based on behavior.
The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardwa…
OAuth2 is the industry-standard protocol for access delegation, commonly used to grant applications access to user information on other applications without giving them the passwords. Not backward co…
In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
A JSON Web Token (JWT) is a signed token provided by a server to a client which can be used to validate certain claims, e.g. identity, that can be used for a third party, e.g. a service provider.
The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.
A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
High-level dynamic language developed by Guido van Rossum, particularly popular for server-side web programming and scripting.
The generation of random or pseudorandom data, and the use of randomness in security protocols
Specific to logging of alerts, activities and actions. This also covers user's history managed by software such as browsers.
An abreviation for REpresentational State Transfer. A design pattern for stateless client-server systems. Popular in the implementation of web services.
The process of decoding data that has been encrypted into a secret format.
A runtime, architecture, and libraries for Microsoft Windows used for creating applications.
A vulnerability which is known to the designers, implementers, or operators of the system, but has not been corrected.
A salt is a random addition to a password to make the hashed password less susceptible to a lookup table attack
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.