Collaborate Disseminate
What are the differences between a Hardware Security Module (HSM) and a Secure Element (SE)? Can both terms be used interchangeably?
I came across various related question (TPM vs. HSM and TPM vs. SE) but the various HSM and SE definition… Continue reading What are the differences between HSM and SE?
What is the most commonly used definition of ‘risk’ in security?
Bruce Schneier’s Beyond Fear defines it as “the likelihood of the threat and the seriousness of a successful attack”, while, for example, the EFF SSD states: “… Continue reading Definition of risk? [on hold]
I searched Google about this term, but the definitions that I found was related to the medical world, and nothing related to IT. I think that is some kind of procedure of documenting something maybe? Note that I heard this wo… Continue reading What is the meaning of Triage in Cybersec world?
Correct me where I’m wrong. There are public and private (or secret) keys. A public and a private key make up a keypair. Some keypairs are bound to the other ones. The former are called subkeys, the latter master (or primary)… Continue reading How do I interpret output that produces gpg listing keys?
This question already has an answer here:
What is the difference between “Incident”, “Attack” and “event”?
3 answers
… Continue reading Confusing terminologies: Incident, alert, event, ticket [duplicate]
I run into this question a lot at work. Someone asks me why I might–from a security perspective–advocate for a high availability implementation versus a singleton implementation.
What’s the answer? I understand we want to en… Continue reading Why is availability considered part of the security triad?
I’ve searched through recent versions of ISO 27000, 27001 and 27002 and couldn’t find definition of “information”. Where can I find it? Is “information” defined anywhere? Or maybe I should look at some other standards?
I’m currently working on the definitions-section of a paper. Therefore I have to define the term “Guideline” and how its relationship to other terms (Standards, Policies, Procedures) looks like.
However, all I can find are … Continue reading What is a Security Guideline and how does it stand in relation with Standards, Policies, Procedures?
This is a term I ran across in a blog post by Troy Hunt (which was linked from an answer on this site):
I heard a perfect example of this just the other day when speaking to a security bod in a bank.
I searched the term… Continue reading What is a "security bod"?
I’m currently writing a paper about security standards. Therefore several terms have to be defined before I can actually start. The problem is that in every resource the term “Framework” is somehow connected to the terms “Sta… Continue reading What’s the relation between a Security Framework & Standards, Guidelines, Procedures and Policies?