Resources

Vulnerability Management is the process of identifying, assessing, and prioritizing vulnerabilities ...

Vulnerability is a state of being open to potential harm, either physically, emotionally, or psychol...

Information Security Risk Treatment is the process of identifying, assessing, and responding to secu...

Vulnerability scanning is a process of identifying, quantifying, and prioritizing (ranking) the vuln...

Security Testing Requirements refer to the specific criteria that must be met in order to ensure tha...

Threat Modeling is a structured approach to identifying, analyzing, and responding to potential secu...

Threat Modeling Frameworks and Methodologies are a set of concepts, processes, and techniques used t...

Buffer overflow is a type of software vulnerability that occurs when a program attempts to write mor...

Security Metrics are measurements used to assess the effectiveness of an organization's security pos...

An attack vector is a path or means by which a hacker (or cracker) can gain access to a computer or ...

Attack Surface is the total sum of potential points of attack in a system, network, or application. ...

A passive attack is a type of cyber attack that does not involve the direct manipulation of an infor...