A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.

× 214
the randomness collected by an operating system or application for use in cryptography or other uses that require random data. This randomness is often collected from hardware…
× 213
For questions about names of attacks, vulnerabilities, concepts, etc.
× 212
performed by the client in a client–server relationship in a computer network.
× 210
the industry-standard protocol for access delegation, commonly used to grant applications access to user information on other applications without giving them the passwords. Not backward co…
× 208
Access control based on user, group, or global access.
× 208
Security relative to source-code edition, protection and management.
× 207
a Web application framework developed and marketed by Microsoft to allow programmers to build dynamic Web sites, Web applications and Web services.
× 206
a program that monitors and analyzes network traffic, detecting bottlenecks and problems.
× 201
a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell fro…
× 197
being kept in memory/on disks, most frequently being applied to databases, media banks and backup-recovery solutions.
× 196
A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, t…
× 195
a fingernail-sized integrated circuit that is often embedded in a credit-card-sized plastic sheet. Smart cards are used as identification badges, banking cards, SIM in m…
× 194
the property of an object which allows it to be uniquely specified.
× 193
an open source network intrusion detection and prevention system (NIDS/NIPS).
× 190
Storage drives connected by USB devices known otherwise as flash drive, USB stick, USB key and thumb drive. Also includes larger storage devices such as portable hard drives.
× 190
a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also include…
× 190
Use for questions about security practices used by banks and other financial institutions.
× 190
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
× 188
Secure deletion of data.
× 188
the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.
× 187
Applications or informational pages, distributed via HTTP or HTTPS, using a web server. Pages are typically interconnected by hyperlinks and may contain forms or even entire applications.
× 186
an adaptive cryptographic hash function for passwords. It incorporate a salt to protect against rainbow table attacks and is also an adaptive hash - over time it can be made slower and slowe…
× 185
a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.
× 185
a directory service created by Microsoft for Windows domain networks. It provides a central location for network administration and security.
× 183
an attack technique which sends spoofed Address Resolution Protocol (ARP) messages to Local Area Network (LAN). The idea is to identify attacker's MAC address as the address of another…
× 182
a free e-mail service provided by Google.
× 182
a technique for making web resources available under more than one URL address, or moved to a different location while maintaining compatibility with previously published URLs.
× 181
The art of responding to incidents in an organized and thoughtful manner.
× 181
Tools used by security professionals
× 176
the identification, assessment, and prioritization of risks - defined in ISO 31000 as the effect of uncertainty on objectives, whether positive or negative - followed by coordinated…
× 175
an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.
× 174
a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.
× 174
A description of a state of benevolence that exists between two or more parties. A measurement of the confidence in a benign outcome of a transaction involving two or more parties.
× 174
For questions about the step of the SSL/TLS handshake where the cipher is negotiated between the client and the server. This tag could also be used for questions about which ciphers to support in your…
× 172
One-time password (OTP) protocols and implementations (software and hardware)