A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
the act of manipulating people into performing actions or divulging confidential information.
A description of a state of benevolence that exists between two or more parties. A measurement of the confidence in a benign outcome of a transaction involving two or more parties.
a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.
a mobile device which combines many of the basic features of personal computing such as email, media playback and web browsing, with the traditional features of a telephone.
a way of organizing information on a storage device like a computer hard drive.
Short message (or messaging) service, a system that enables cellular phone users to send and receive text messages.
A Media Access Control address (MAC address) is a unique identifier assigned to network interfaces for communications on the physical network segment.
a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.
Common Vulnerabilities and Exposures (CVE) is a dictionary to describe known vulnerabilities.
a web server application and set of feature extension modules created by Microsoft for use with Microsoft Windows.
The elimination or reduction of the frequency, magnitude, or severity of exposure to risks, or minimization of the potential impact of a threat or warning.
For questions about development of software which takes advantage of exploits (vulnerabilities in security systems).
the act of looking on the processes or systems for performance, supervision and surveillance.
IP spoofing, also known as IP address forgery or a host file hijack, is a hijacking technique in which a cracker masquerades as a trusted host to conceal his identity, spoof a Web site, hijack browser…
DO NOT USE THIS TAG! For questions about CSRF-tokens, use [CSRF]. For questions about session IDs, use [session-management]. For questions about OAuth tokens, use [oauth] and [oauth2]. For questions h…
a set of predefined rules to reversibly transform a piece of information in a certain representation into a completely different representation. The other way round is called decoding.
a process for reporting that a certificate should no longer be trusted to the cert's issuing CA. The CA then places the cert on its CRL, and responds "REVOKED" to any OCSP re…
Simple Mail Transfer Protocol. A protocol for delivering e-mail from an end user to a server for storage and later retrieval by the intended recipient.
Software created with the purpose to spy on users, collecting data, or performing other actions, that might be useful to attackers.
software that enables continued privileged access to a computer while actively hiding its presence from administrators by subverting standard operating system functionality or other appli…
the process of making copies (a backup) of data which may be used to restore the original after a data loss event.
a disk encryption add-on for Windows, Linux and other operating systems. It is no longer maintained.
a collection of computers that are under the control of a person or group, usually facilitated by malware. These computers are often used to take part in DDoS attacks and spamming.
the property of maintaining the secrecy of an asset. In other words, confidentiality means protecting against the threat of disclosure. It is one of the three key security propertie…
An application that allows a user to configure the tables provided by the Linux firewall. iptables is succeeded by nftables as of 2014.
Network packet consisting of routing information and a payload. Most commonly an Internet Protocol (IP) packet. For questions about packet vulnerabilities, or tools like wireshark that directly manipu…
the ability to connect to a remote computer, see an image of that computer's desktop and interact with it as if it were local.
a secure coprocessor found in some x86-based computers that provides cryptographic operations and system integrity measurements.
releasing information about security issues to the general public or a selected group.
a practice used to identify and assess factors that may jeopardize the success of a project or achieving a goal. Security Risk Analysis or Risk Assessment could be Quantitative and Qu…
the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access throughout the environment
elements that prove your identity to a system, for example a username and password or a client-side certificate. It is usually used to describe elements supplied by…