Lukas' Notes
Search
Search
Dark mode
Light mode
Tag: security
198 items with this tag.
A format string walks the stack by counting specifiers, not argument count
security
memory
c
Access Control
security
Access Control List
security
Access Matrix
security
Accountability
security
Active Attack
security
Active Biometric Authentication
security
Address Space Layout Randomization
security
memory
Allow-list Validation
web
security
An origin maps to many UI trees and PWMs guess which
web
security
mobile
Anti-Malware
security
App Attacker Model
web
security
mobile
App-to-Web Interaction (WebView)
web
security
mobile
Attack
security
Authentication
security
Authentication Header
network-protocols
security
Authenticity
security
Authorisation
security
Availability
security
Bell-LaPadula Model
operating-systems
security
Biba Model
security
integrity
Binary Analysis
security
Biometric Authentication
security
Biometry
security
Blind SQL Injection
web
security
databases
Brute-force Attack
security
cryptography
Buffer Over-Read
security
memory
c
Buffer Overflow
security
memory
c
Burp Suite
web
security
Canonical Path
web
security
Capabilities (Linux)
operating-systems
security
Capability
security
Capability List
security
Cascade Hashing
security
cryptography
Challenge-Response Authentication
security
Chinese Wall Policy
security
access-control
Chroot
operating-systems
security
Code Injection
web
security
Command Injection
web
security
Common Intrusion Detection Framework
security
Common Vulnerabilities and Exposures
security
Common Vulnerability Scoring System
security
Common Weakness Enumeration
security
Compartmentalisation (Security)
security
Complete Mediation (Security)
security
Conditional Policy
security
Confidentiality (Security)
security
Container
operating-systems
security
Content Security Policy
web
security
Control-Flow Hijacking
security
memory
Cookie Jar Overflow
web
security
Cookie Prefix
web
security
Cookie Tossing
web
security
Creeper
security
history
Cross-Origin Resource Sharing
web
security
Cross-Site Leak
web
security
Cross-Site Request Forgery
web
security
Cross-Site Scripting
web
security
CSP Bypass
web
security
CVE Numbering Authority
security
Data Availability
security
Data Integrity
security
Defense in Depth (Security)
security
Delegation (Security)
security
Dictionary Attack
security
cryptography
Discretionary Access Control
security
Double Submit Pattern
web
security
Dynamic Binary Analysis
security
effective Top-Level Domain
web
security
Effective User ID (Unix)
operating-systems
security
Ethical Hacking
security
Every mitigation closes one attack class and opens the next
security
memory
External Threat
security
Format String Vulnerability
security
memory
c
Frame Counting
web
security
Hardware Authentication Token
security
Hardware Security Module
security
Heartbleed
security
HTTP Cookie
web
security
Identification
security
Identity of a Subject
security
Incident Response
security
Information Flow Control
security
Inherence-based Authentication
security
Instruction Pointer Hijacking
security
memory
Integrity (Security)
security
Internal Threat
security
Intrusion Detection
operating-systems
security
Intrusion Detection System
security
Intrustion Prevention System
security
JavaScript Bridge
web
security
mobile
Keep it simple stupid
security
Keylogger
security
Knowledge-based Authentication
security
Least Privilege (Security)
security
Logic Vulnerability
security
Macro Virus
security
Malware
operating-systems
security
malware
Mandatory Access Control
security
Maximum Trustworthiness (Security)
security
Melissa
security
Memory Safety (Software)
security
memory
c
Minimum Exposure (Security)
security
Minimum Trust (Security)
security
Mobile Password Manager
web
security
mobile
Mobile TAN
security
Multi-factor Authentication
security
Network Attacker Model
web
security
Non-repudiation
security
NoSQL Injection
web
security
databases
NX (Data Execution Prevention)
security
memory
Object (Security)
security
One-Time Password
security
One-Time Password Generator
security
Open Authorisation 2.0
security
Open Design (Security)
security
OpenID Connect
security
Origin (Web)
web
security
Parser Composition
security
web
Passive Attack
security
Passive Biometric Authentication
security
Password
security
Password Rotation
security
Password Storage in Unix
security
operating-systems
Password-based Authentication
security
Password-based Key Derivation Function
cryptography
security
Password-Based Key Derivation Function 2
cryptography
security
Path Traversal
web
security
Phishing
security
Position-Independent Executable
security
memory
Possession-based Authentication
security
postMessage
web
security
Potentially Unwanted App
web
security
mobile
Prepared Statement
web
security
databases
Protection Domain
security
Rainbow Table
security
cryptography
Real User ID (Unix)
operating-systems
security
Reaper
security
history
Reference Monitor
security
Reflected XSS
web
security
Return-Oriented Programming
security
memory
Return-to-libc
security
memory
Return-to-PLT
security
memory
Reverse-Engineering the password_manager_v2 binary
security
binary-analysis
Revocation (Security)
security
Role (Security)
security
Role-based Access Control
security
Salt (Security)
security
Salt and Pepper
security
cryptography
Same-Origin Policy
web
security
Same-Site Attacker Model
web
security
SameSite Cookie
web
security
Saved User ID (Unix)
operating-systems
security
Scam
security
Seccomp
operating-systems
security
Secure C Coding
security
c
Security
security
Security (OS)
operating-systems
security
Security Design Principles
operating-systems
security
Security Policy
security
Security Question
security
Security Through Obscurity
security
Separation of Code and Data
web
security
Separation of Duty
security
access-control
Server-Side Request Forgery
web
security
Session (Web)
web
security
Session Fixation
web
security
Shellcode
security
memory
Shoulder Surfing
security
Single Sign-On
security
Site (Web)
web
security
Social Engineering
security
SQL Injection
web
security
databases
Stack Canary
security
memory
Stack Corruption
security
memory
c
Stack Pivot
security
memory
Static Binary Analysis
security
Stored XSS
web
security
Subject (Security)
security
Synchronizer Token Pattern
web
security
System Availability
security
System Integrity
security
Taint-Style Vulnerability
security
TAN List
security
The saved return address turns adjacent buffers into control flow
security
memory
c
Threat
security
Threat Actor
security
TOCTOU
security
operating-systems
Totally Blind SQL Injection
web
security
databases
Traceability (Security)
security
Trusted Types
web
security
Unix File System Access Control
operating-systems
security
User Authentication
operating-systems
security
ViewStructure
web
security
mobile
Vulnerability
security
Web Attacker Model
web
security
WebView
web
security
mobile
XSS Sanitisation
web
security
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
Page 1 of 20