Glossary of information security

Glossary of information Security - Information Security Terms

This article "Glossary of information security" is still being written. If there are any incomplete parts, you are welcome to directly edit them. 這篇文章「Glossary of information security」內容還在撰寫中，如果有不完整的部分，歡迎你直接動手修改。

A

• Adware: 使用者端的安全威脅。Symantec::Security Response - (Types of threat:Adware, Dialers, Hack Tools, Hoax, Joke Programs, Remote Access, Spyware, Trojan Horse, Virus, Worm)

• ARP(Address Resolution Protocol, 位址解析通訊協定)病毒 Address Resolution Protocol (ARP)

C

• Code Injection: "a type of attack in which an attacker injects malicious code into an application and causes it to be executed, typically due to the application's lack of proper validation and filtering of external input data."

• Command Injection "an attack technique in which an attacker exploits vulnerabilities in an application to inject and execute malicious operating system commands, typically through unvalidated user input such as forms, cookies, or HTTP headers."

• CORS (Cross-Origin Resource Sharing，跨來源資源共用) ：瀏覽器的安全機制「基於 HTTP 標頭的機制，允許伺服器指示瀏覽器允許從除其自身以外的任何來源（域名、協定或通訊埠）加載資源。」(資料來源：Wikipedia、MDN)

• CORS Proxy：跨來源資源共用的代碼伺服器，透過中間伺服器繞過瀏覽器的跨來源限制（CORS）

D

• DoS (Denial of Service, 阻絕服務攻擊) / DDoS (Distributed Denial of Service, 分散式阻斷服務攻擊) 說明：產生大量封包或資料流，癱瘓網站服務。 (詳: Wikipedia)

K

• Keylogger(鍵盤記錄, Keystroke logging) 記錄使用者電腦的鍵盤操作 資料來源:Keystroke logging - Wikipedia, the free encyclopedia

M

• MalWare (惡意軟體, 流氓軟體) 流氓軟體 - Wikipedia
  • 下載詳細資料： Windows 惡意軟體移除工具(EN)

P

• ;Phishing(網站偽造, Web Forgery) AntiPhishing - 檢舉網站偽造/防制工具

R

• Rootkit Rootkit - Wikipedia
  • 防制工具: AVG Anti-Rootkit Free, Avira AntiVir® PersonalEdition Classic, Panda Anti-Rootkit, Sophos Anti-Rootkit(需提供個人資料)

S

• SpyWare(間諜軟體) 組合國際（Computer Associate）的安全顧問小組（Security Advisor Team）(RSS[1])

• Spoofing (假冒) (E-mail spoofing)郵件假冒/偽造寄信者的電子郵件:
  • Gmail: 說明中心 - Gmail 會要求我提供使用者名稱和密碼嗎？
  • Gmail: Help Center - What should I do about a message that asks for personal information?

more on E-mail spoofing - Wikipedia, the free encyclopedia

• 惡意網站
  • 防範工具: McAfee SiteAdvisor, TrendProtect™

• 軟體供應鏈攻擊 (Supply chain attack) 針對供應鏈中防護較弱的部分進行攻擊
  • 例子：XcodeGhost 風波、Ant Design 的聖誕節彩蛋. 發生了啥事?

使用者端

Symantec::Security Response - (Types of threat:Adware, Dialers, Hack Tools, Hoax, Joke Programs, Remote Access, Spyware, Trojan Horse, Virus, Worm)