Collaborate Disseminate
If the suppliers of your business are all located in North America, but your supplier web portal suddenly receives a lot of traffic from elsewhere, you should investigate. Therefore, IP geolocation data sounds like threat int… Continue reading Is IP geolocation threat intelligence?
I decided to start learning “web application penetration testing”. But while I am learning I find there is another term “web penetration testing”. Can someone tell me what’s the difference between both of them?
Insofar as terminology, what exactly is “microcode” and if it can be updated, how does it differ from firmware?
This question is not a duplicate of this question (as far as I can tell) which I’ve also asked about modifying m… Continue reading What exactly is microcode and how does it differ from firmware?
I’m struggling to understand what is an indicator of compromise.
I found different definitions on the web but I still don’t know.
The definitions I found are:
1 – Something (file, network connection) that indicates a system … Continue reading What is an indicator of compromise?
I’m struggling to understand what is an indicator of compromise.
I found different definitions on the web but I still don’t know.
The definitions I found are:
1 – Something (file, network connection) that indicates a system … Continue reading What is an indicator of compromise?
I’ve noticed that certain security professionals use the term “ciphertext” while others use “cryptogram”. Is there any meaningful difference between those terms? Or can they be used interchangeably?
I’m looking to secure my PC and cannot decided whether to get anti-virus software or to get anti-malware software since I don’t understand the difference between them.
What are the main differences between anti-virus and ant… Continue reading What’s the difference between Anti-virus and Anti-malware software? [on hold]
What is the terminology used in computer security where you need at least two admins at the same time to login/access a database/resources? Maybe by each having part of the password or key. This used in access-control sometim… Continue reading More than one admin required on site to login to a database/resources
What is the terminology used in computer security where you need at least two admins at the same time to login/access a database/resources? Maybe by each having part of the password or key. This used in access-control sometim… Continue reading More than one admin required on site to login to a database/resources
FIPS 140-2 allows FIPS approved algorithms to be either tested by CAVP or to be vendor affirmed. What does “vendor affirmed” imply here? Can I say my AES implementation as vendor affirmed and get it added to the FIPS certific… Continue reading What are vendor affirmed algorithms in FIPS 140-2