A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
the use of security countermeasures to protect the integrity of the information assets in an IT system and/or infrastructure.
A set of rules for employees of a corporation related to the use of information technology equipment and systems.
the act of discovering and/or determining the existence, presence, or fact of something.
performed by the client in a client–server relationship in a computer network.
Access control based on user, group, or global access.
a Web application framework developed and marketed by Microsoft to allow programmers to build dynamic Web sites, Web applications and Web services.
Security relative to source-code edition, protection and management.
a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell fro…
being kept in memory/on disks, most frequently being applied to databases, media banks and backup-recovery solutions.
a program that monitors and analyzes network traffic, detecting bottlenecks and problems.
a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.
Applications or informational pages, distributed via HTTP or HTTPS, using a web server. Pages are typically interconnected by hyperlinks and may contain forms or even entire applications.
the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.
the property of an object which allows it to be uniquely specified.
A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, t…
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
a fingernail-sized integrated circuit that is often embedded in a credit-card-sized plastic sheet. Smart cards are used as identification badges, banking cards, SIM in m…
Secure deletion of data.
a directory service created by Microsoft for Windows domain networks. It provides a central location for network administration and security.
Storage drives connected by USB devices known otherwise as flash drive, USB stick, USB key and thumb drive. Also includes larger storage devices such as portable hard drives.
an adaptive cryptographic hash function for passwords. It incorporate a salt to protect against rainbow table attacks and is also an adaptive hash - over time it can be made slower and slowe…
Use for questions about security practices used by banks and other financial institutions.
a technique for making web resources available under more than one URL address, or moved to a different location while maintaining compatibility with previously published URLs.
a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.
an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.
an attack technique which sends spoofed Address Resolution Protocol (ARP) messages to Local Area Network (LAN). The idea is to identify attacker's MAC address as the address of another…
One-time password (OTP) protocols and implementations (software and hardware)
a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also include…
an open source network intrusion detection and prevention system (NIDS/NIPS).
a free e-mail service provided by Google.
Tools used by security professionals
The art of responding to incidents in an organized and thoughtful manner.
a set of cloud services offered by Amazon.
Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.
For questions about the step of the SSL/TLS handshake where the cipher is negotiated between the client and the server. This tag could also be used for questions about which ciphers to support in your…
Common Vulnerabilities and Exposures (CVE) is a dictionary to describe known vulnerabilities.