A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a use…
Popular web browser by Google, see chrome.google.com for more information.
For questions about the assessment of hardware, software, systems, people, processes, projects, etc, that are somehow related to the security of an organization or product. Often these are related to …
Computer forensics works to analyze information on computer systems in an attempt to find evidence regarding certain actions of a process, application, user or computer to determine the source of chan…
an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory.
an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site whic…
Intrusion Detection System, a system for detecting and alerting based on behavior.
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
a networking device that routes forwards between networks. A router generally has two or more data connections allowing data to be routed between networks.
the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardwa…
Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).
a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks
Security controls and features related to an end user's account with a web/mobile based application or an operating system.
known to the designers, implementers, or operators of the system, but has not been corrected.
a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.
The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.
the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.
the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data…
A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
a standard for a public key infrastructure used for authentication and access control. X.509 specifies standard formats for certificates, revocation lists, attribute certificates, and path va…
a software construct serving as a communications endpoint in a computer's host OS.
The generation of random or pseudorandom data, and the use of randomness in security protocols
application that provides a standard means of interoperating between different software applications, running on a variety of platforms and/or frameworks - typically using HTTP or HTT…
A runtime, architecture, and libraries for Microsoft Windows used for creating applications.
Specific to logging of alerts, activities and actions. This also covers user's history managed by software such as browsers.
a random addition to a password to make the hashed password less susceptible to a lookup table attack
Related to the laws and regulations imposed by governments, the enforcement of those laws, and legal and judicial process including investigation and trial. Note that if your question matches this de…
An abreviation for REpresentational State Transfer. A design pattern for stateless client-server systems. Popular in the implementation of web services.
the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Not to be confused with authentication.
Programs that map out a network to figure out which computers and services are available to be exploited.
A description and set of rules for the ordered exchange of structured information designed with the goal of protecting the security of the system.