Collaborate Disseminate
This question is actually divided into two sub-questions:
1- Are there any other attacks beside BruteForce cracking passwords that benefit by having access to massive computational power?
2- The same question, but with cont… Continue reading Taxonomy of Distributed and/or computational attacks
My Sophos antivirus detected what it calls “SpeedSurfing”, and my Google-fu is failing me. The Chrome extension it deleted was Boomerang for Gmail.
I know both are a type of malware, trojans ‘disguise them self as a useful program’ and rootkits ’embed them self in the system to avoid detection’. Technically how do they accomplish such things? I’m confused because all vir… Continue reading What exactly is the meaning of ‘trojan’ and ‘rootkit’?
Consider a chat application where an attacker is able to send messages in any user’s name. This obviously violates the message’s authenticity. But what aspect of CIA would be violated?
Integrity seems closest to me but that … Continue reading Where does authenticity fit into the CIA Triad?
Consider a chat application where an attacker is able to send messages in any user’s name. This obviously violates the message’s authenticity. But what aspect of CIA would be violated?
Integrity seems closest to me but that … Continue reading Where does authenticity fit into the CIA Triad?
I’m preparing for the CCSP examine and am trying to wrap my mind around the concepts of “load testing” and “stress testing” within the context of security.
I think the difference here is that:
Load Testing is a measure of capacity, pu… Continue reading What’s the difference between "load testing" and "stress testing" within the context of a security audit?
I’ve encountered the two terms ‘SIEM’ and ‘Security Analytics’ a lot in the past few weeks, unfortunately I still don’t understand the difference.
According to some research I’ve done about these terms SIEMs aggregate data f… Continue reading SIEM and Security Analytics
I noticed in the literatures that there are no exact boundaries for numerous information security terms such as malware, virus, etc. Some people say malware in the umbrella under which viruses, worms, rootkits, and every harm… Continue reading Unambiguous terminology for different kinds of malware?
I’m learning about different types of viruses, and one category of virus is “crimeware.” I read the wikipedia page for crimeware, and to me it seems that crimeware is just a specific usage of spyware.
Is there anything diffe… Continue reading Is crimeware defined by anything other than intent?
What’s the difference between Non-discretionary access control and Role-based Access Control? In CISSP book both mentioned in the different paragraph as in different entity. But In some other place (Cisco Learning Resource) i… Continue reading Difference between Non-discretionary and Role-based Access control?