A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Tags

A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.

× 221
A set of rules for employees of a corporation related to the use of information technology equipment and systems.
× 221
the act of discovering and/or determining the existence, presence, or fact of something.
× 221
the use of security countermeasures to protect the integrity of the information assets in an IT system and/or infrastructure.
× 219
For questions about names of attacks, vulnerabilities, concepts, etc.
× 214
Access control based on user, group, or global access.
× 211
a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell fro…
× 210
a Web application framework developed and marketed by Microsoft to allow programmers to build dynamic Web sites, Web applications and Web services.
× 209
a program that monitors and analyzes network traffic, detecting bottlenecks and problems.
× 208
Security relative to source-code edition, protection and management.
× 208
being kept in memory/on disks, most frequently being applied to databases, media banks and backup-recovery solutions.
× 202
the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.
× 202
A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, t…
× 201
the property of an object which allows it to be uniquely specified.
× 199
a directory service created by Microsoft for Windows domain networks. It provides a central location for network administration and security.
× 199
a fingernail-sized integrated circuit that is often embedded in a credit-card-sized plastic sheet. Smart cards are used as identification badges, banking cards, SIM in m…
× 196
Applications or informational pages, distributed via HTTP or HTTPS, using a web server. Pages are typically interconnected by hyperlinks and may contain forms or even entire applications.
× 195
Use for questions about security practices used by banks and other financial institutions.
× 194
an open source network intrusion detection and prevention system (NIDS/NIPS).
× 194
Secure deletion of data.
× 194
a technique for making web resources available under more than one URL address, or moved to a different location while maintaining compatibility with previously published URLs.
× 194
Storage drives connected by USB devices known otherwise as flash drive, USB stick, USB key and thumb drive. Also includes larger storage devices such as portable hard drives.
× 194
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
× 192
a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also include…
× 190
The art of responding to incidents in an organized and thoughtful manner.
× 189
an attack technique which sends spoofed Address Resolution Protocol (ARP) messages to Local Area Network (LAN). The idea is to identify attacker's MAC address as the address of another…
× 189
an adaptive cryptographic hash function for passwords. It incorporate a salt to protect against rainbow table attacks and is also an adaptive hash - over time it can be made slower and slowe…
× 189
a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.
× 188
an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.
× 188
a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.
× 187
a free e-mail service provided by Google.
× 186
Tools used by security professionals
× 184
One-time password (OTP) protocols and implementations (software and hardware)
× 179
Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.
× 179
A description of a state of benevolence that exists between two or more parties. A measurement of the confidence in a benign outcome of a transaction involving two or more parties.
× 179
the identification, assessment, and prioritization of risks - defined in ISO 31000 as the effect of uncertainty on objectives, whether positive or negative - followed by coordinated…