Collaborate Disseminate
I’m a Cybersecurity enthusiast who recently started learning the ATT&CK Framework tactics
I came across two different terms, Collection and Exfiltration, which I think generally refers to the act of data breaching.
Unfortunately, I can… Continue reading What is the difference between the terms "data collection" and "data exfiltration" in adversary tactics? [closed]
Is there a term for when you a particular system design might prove to have some advantages, but doesn’t actually qualitatively change the potential attacks on the system and thus ends up as redundant, excessive, misleading, costly, and/or… Continue reading What is a term for ineffective security measures that don’t prevent any realistic attack?
On the Wikipedia page of threat (in textbooks too) various definitions are given where almost all agree in defining a threat as a "circumstance or event".
I’m having trouble understanding the subtle difference between event and c… Continue reading Difference between "circumstance" and "event" in the definitions of threat
Something you know (password), something you are (biometrics), something you have (key card/security key) are the typical authentication factors.
Several years ago I’ve seen a paper in which the users authenticated via interaction. In that… Continue reading Authentication via User Interaction (Game play, using ML)
ATT&CK defines process injection sub-technique 012 Process Hollowing different from sub-technique 008 Ptrace system calls.
With this in mind, if I write some fancy shellcode into the .text segment in a suspended process, which, unless … Continue reading Is it wrong to refer to ptrace process injection as process hollowing
I’m under the impression that stegonographic manipulation of file names or packet timing would qualify as a storage covert channel and a timing covert channel respectively.
I came across this seemingly contradictory quote (without citation… Continue reading Covert channel definition conflicts regarding steganography
A very simple access model: I have users and resources. Each resource has an owner. Owners can can grant other users read and write permissions to resources they own (and transfer ownership). So essentially each resource has a policy that … Continue reading Term for a access control model based on users sharing resources with each other?
In the OWASP Mobile Application Security Checklist there is a requirement called MSTG-ARCH-3 which describes:
"A high-level architecture for the mobile app and all connected remote
services has been defined and security has been addr… Continue reading MSTG-ARCH-3 What means?
I’ve noticed both "cipher" and "ciphertext" being used to describe text encrypted with a cipher.
Here are some definitions from Merriam Webster:
cipher: a message in code
ciphertext: the enciphered form of a text or of… Continue reading Is there a difference between text described as a cipher or ciphertext?
There seems to be a term for nearly every specific type of hack or theft. Someone brought up the situation of an employee at a drive-thru window stealing credit card info when you make a payment and I was wondering if there was a specific … Continue reading Is there a specific term for when an employee steals your card info when you make a payment?