notes
The process of software engineers checking the flow of user input in application code to determine if unanticipated input can affect program execution in malici…
Also known as a third-party attack or a value-chain attack, advisory groups gain access to a targeted victims network by first infiltrating a business partner's…
A best practice for framing cyber intelligence critical information requirements that recommends collecting and consolidating data from three specific sources: …
Network observation systems designed to monitor globally unreachable but unused Internet address space or the Deep Web in order to study a wide range of interes…
From the intrusion kill chain model, a technique where the hacker compromises sites commonly visited by members of a targeted community in order to deliver a ma…
An undocumented or publicly unknown method to access a computer system undetected or to break a cypher used to encode messages.
An acronym for Advanced Persistent Threat to describe hacker groups or campaigns normally, but not always, associated with nation state cyber espionage and cont…
On-demand pay-as-you-go Internet delivered compute, storage, infrastructure, and security services that are partially managed by the cloud provider and partiall…
Please enjoy this special encore episode of Word Notes. A type of side channel attack in which an attacker with physical access to a computer performs a memory …
Enjoy this encore episode: A cyber attack designed to impair or eliminate access to online services or data.






