Collaborate Disseminate
According to a book that I am reading, an impersonation attack is a more active attack than masquerading but I thought they are the same thing. How is this so.
Continue reading Difference between impersonation and masquerading attacks
A definition from impreva of an Insider Threat in enterprises/organizations context:
"An Insider Threat typically involves a current or former employee or business associate who has access to sensitive information or privileged accou… Continue reading Generalization of The Term "Insider Threat"
This morning the Open Source Hardware Association (OSHWA) announced a resolution for changing the way SPI (Serial Peripheral Interface) pins are labelled on hardware and in datasheets. The protocol originally included MOSI/MISO references that stand for “Master Out, Slave In” and “Master In, Slave Out”. Some companies and individuals have …read more
Continue reading Updating the Language of SPI Pin Labels to Remove Casual References to Slavery
What is the difference in anti malware like malwarebytes premium and an anti virus? Do I need both or would malwarebytes be enough?
SCENARIO:
A web page shows an error login page using these javascript lines
<script>
let queryParams = new URLSearchParams(window.location.search);
document.getElementById(“message”).innerText = queryParams.get(“message”);
… Continue reading Is this considered DOM-XSS or self-XSS or both?
I work in infosec and as such, have read many whitepapers and been to many conference talks. I hear all the time, especially in conversation and literature about malware, the term “nation state” used to refer to a government entity or gove… Continue reading Why is the term "nation state" used to refer to a government-sponsored effort in infosec, and is it accurate? [closed]
I’m searching for the right terminology for this element of cyber security.
If I want to secure something like a PaaS for other applications to use, how is this usually called? It’s not application security, because we are talking about t… Continue reading What is securing an application platform called?
I’m learning from the “Information Security” book and already know what the two terms policy and procedure mean.
While these two terms are quite easy to distinguish:
policy is what to do to secure the data and the information system, wh… Continue reading Difference between Process and Practice in Information Security
How should I understand the word “hijack” in network security?
In Cloudflare’s page about the Mirai botnet, there is a sentence:
The Mirai botnet employed a hundred thousand hijacked IoT devices to bring down Dyn.
Does the word “hij… Continue reading What does "hijack" mean in networking security?
I remember learning about an attack against sequential cipher locks – ones that don’t have a ‘reset’ or ‘enter’, you just enter digits and as soon as the last n consecutive entries match, the lock opens. So, if the code is ‘1234’, the sequ… Continue reading Name of ‘smart brute force’ attack against sequential cipher lock [duplicate]