Collaborate Disseminate
I’m under the impression that stegonographic manipulation of file names or packet timing would qualify as a storage covert channel and a timing covert channel respectively.
I came across this seemingly contradictory quote (without citation… Continue reading Covert channel definition conflicts regarding steganography
A very simple access model: I have users and resources. Each resource has an owner. Owners can can grant other users read and write permissions to resources they own (and transfer ownership). So essentially each resource has a policy that … Continue reading Term for a access control model based on users sharing resources with each other?
In the OWASP Mobile Application Security Checklist there is a requirement called MSTG-ARCH-3 which describes:
"A high-level architecture for the mobile app and all connected remote
services has been defined and security has been addr… Continue reading MSTG-ARCH-3 What means?
I’ve noticed both "cipher" and "ciphertext" being used to describe text encrypted with a cipher.
Here are some definitions from Merriam Webster:
cipher: a message in code
ciphertext: the enciphered form of a text or of… Continue reading Is there a difference between text described as a cipher or ciphertext?
There seems to be a term for nearly every specific type of hack or theft. Someone brought up the situation of an employee at a drive-thru window stealing credit card info when you make a payment and I was wondering if there was a specific … Continue reading Is there a specific term for when an employee steals your card info when you make a payment?
I know that Phishing attacks try to gain access or sensitive information from the user or victim. This attack comes under the Social Engineering attack, where personal confidential data such as login credentials, credit card details, etc.,… Continue reading Does attaching malware or virus in an email count as Phishing attack
What is the correct name for the 2FA device that is printed codes on a wallet card?
These codes are sequentially numbered from 001 to 224. The log in screen displays 2 numbers in that range and the user is to map those numbers to codes wh… Continue reading What is the name for printed 2FA codes on a wallet card?
I am starting to learn STIX, and the exact meaning of some of the SDOs is not really clear to me.
In particular, can someone give precise guidelines or examples of the differences between the tool, infrastructure, and malware SDOs?
Naively… Continue reading In STIX, what are the differences between tools, infrastructure, and malware
I often hear of black-hat hacking discussed as if it was synonymous with illegal hacking. In other words, an act of hacking is black-hat iff it is illegal. Our own tag wiki for black-hat defines it as "the act of using computer securi… Continue reading Does black hat always equal illegal?
Alice and Bob are communicating frequently via an encrypted overlay network. Eve can observe the timing and length of Alice’s and Bob’s incoming and outgoing ip traffic, but cannot read their ciphertexts. Additionally, the overlay network … Continue reading What is using timing and cryptotext length for deanonymization called?