A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.
Popular web browser by Google, see chrome.google.com for more information.
For questions about the assessment of hardware, software, systems, people, processes, projects, etc, that are somehow related to the security of an organization or product. Often these are related to …
an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site whic…
Computer forensics works to analyze information on computer systems in an attempt to find evidence regarding certain actions of a process, application, user or computer to determine the source of chan…
Intrusion Detection System, a system for detecting and alerting based on behavior.
an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory.
the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).
a networking device that routes forwards between networks. A router generally has two or more data connections allowing data to be routed between networks.
Security controls and features related to an end user's account with a web/mobile based application or an operating system.
a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks
the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardwa…
known to the designers, implementers, or operators of the system, but has not been corrected.
a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.
The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.
the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data…
the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.
The generation of random or pseudorandom data, and the use of randomness in security protocols
A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
a software construct serving as a communications endpoint in a computer's host OS.
Specific to logging of alerts, activities and actions. This also covers user's history managed by software such as browsers.
a standard for a public key infrastructure used for authentication and access control. X.509 specifies standard formats for certificates, revocation lists, attribute certificates, and path va…
A runtime, architecture, and libraries for Microsoft Windows used for creating applications.
a random addition to a password to make the hashed password less susceptible to a lookup table attack
application that provides a standard means of interoperating between different software applications, running on a variety of platforms and/or frameworks - typically using HTTP or HTT…
An abreviation for REpresentational State Transfer. A design pattern for stateless client-server systems. Popular in the implementation of web services.
Programs that map out a network to figure out which computers and services are available to be exploited.
Related to the laws and regulations imposed by governments, the enforcement of those laws, and legal and judicial process including investigation and trial. Note that if your question matches this de…
the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Not to be confused with authentication.
A description and set of rules for the ordered exchange of structured information designed with the goal of protecting the security of the system.