A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
Computer forensics works to analyze information on computer systems in an attempt to find evidence regarding certain actions of a process, application, user or computer to determine the source of chan…
an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine
an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory.
a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a use…
Wireless security topics including 802.11, Bluetooth, and others.
the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used …
the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
Apple's operating system for the iPhone, iPad and iPod Touch.
a networking device that routes forwards between networks. A router generally has two or more data connections allowing data to be routed between networks.
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
For questions about the assessment of software, hardware, systems, people, processes, procedures, projects, etc, that are somehow related to the security of an organization or product. Often these are…
Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).
Intrusion Detection System, a system for detecting and alerting based on behavior.
a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks
a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.
Application Programming Interface; a set of routines, protocols, tools or endpoints used in software development.
the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardwa…
the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.
the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Not to be confused with authentication.
the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data…
The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.
a software construct serving as a communications endpoint in a computer's host OS.
a standard for a public key infrastructure used for authentication and access control. X.509 specifies standard formats for certificates, revocation lists, attribute certificates, and path va…
known to the designers, implementers, or operators of the system, but has not been corrected.
A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
The generation of random or pseudorandom data, and the use of randomness in security protocols
Offensive Security's penetration testing Linux distribution.
A runtime, architecture, and libraries for Microsoft Windows used for creating applications.
Specific to logging of alerts, activities and actions. This also covers user's history managed by software such as browsers.
a random addition to a password to make the hashed password less susceptible to a lookup table attack
An abreviation for REpresentational State Transfer. A design pattern for stateless client-server systems. Popular in the implementation of web services.
application that provides a standard means of interoperating between different software applications, running on a variety of platforms and/or frameworks - typically using HTTP or HTT…
a telecommunications device that permits two or more users to conduct a conversation when they are not in the same vicinity of each other to be heard directly.
Programs that map out a network to figure out which computers and services are available to be exploited.
a Web browser that is smaller, faster, and in some ways more secure than the Netscape browser from which much of its code was derived.