All pages
1010 notes, connected by curiosity.
Browse all pages below. Type to search.
- A word weighs a ton
- AAA (Identification, Authentication, Authorization, Accounting)
- about
- Acceptance Testing
- Access Badge
- Access Control List (ACL)
- Access Control Vestibule
- access-token
- Account Lockout
- Accounting
- achievements
- Active Directory
- Active Monitoring
- Adaptive Identity
- Additive Group Diffie-Hellman Break (Trivial Discrete Log in Additive Groups)
- Address Space Layout Randomization (ASLR)
- Adversary
- AES
- AES CBC Bit-Flipping
- AES-GCM Forbidden Attack (Nonce Reuse Tag Forgery)
- AES-IGE Padding Oracle Attack (CBC-Equivalence)
- Agreement Type
- Alert Tuning
- Algebraic Attack via Boolean Polynomial Ring (Gröbner Basis Key Recovery)
- Allow List - Deny List
- Analysis Modeling
- Analysis Modeling Principles
- Analysis Plan
- Annihilator Attack on Filtered LFSRs (Quadratic Linearization)
- Anonymity
- Antitheism
- Appeal to Popularity
- Application Containerization
- Application Security Monitoring
- Arbitrary Read via Pointer Overwrite
- Architectural Design
- Argument from Sincerity
- Arney Nova
- ASCII
- Asset (concept)
- Asset Management
- Asset Versioning
- Association (Domain Model)
- Asymmetric Encryption
- Attack Game
- Attack Surface
- Attribute-based Access Control (ABAC)
- Attributes (Data Modeling)
- Attributes of Good Software
- Audits and Assessments
- Aug 19th, 2025
- Aug 26th, 2025
- Authentication
- Authorization
- Availability
- Baby-Step Giant-Step Algorithm
- Backdoor-Assisted Info Leak (Recursive Self-Leak)
- Backout Plan
- Backup
- Bad Character Filtering Bypass
- Base64
- Batch GCD Attack (Shared RSA Prime Across Keys)
- Behavioral Design Description
- Behavioral Modeling
- Benchmark (Security)
- Berlekamp-Massey Algorithm
- Binary (Base 2)
- Binary Exploitation
- Binary-Dichotomus Data
- Biology
- Birthday Attack
- Birthday Paradox
- Bit-Guessing Game
- Black Box Testing
- Bloatware
- Block Cipher Mode of Operation
- Blockchain
- Bollards
- Boneh-Durfee Attack (Lattice Attack on Small RSA Private Exponent)
- Boolean Functions and Algebraic Normal Form (ANF)
- Boundary Value Analysis
- Box Plot
- Bring Your Own Device (BYOD)
- Broken Axis
- Brute Force (Password Attack)
- Buffer Overflow
- build-context
- Business Communication
- Business Domain Data Sources & Applications
- Business Email Compromise
- Business Impact Analysis
- Byte-Integer Encoding (bytes_to_long - long_to_bytes)
- cache-archaeology
- Cache-Control
- Caching
- Capacity Planning
- Cardinality
- Catastrophic Cancellation
- Categorical Data
- Cayley-Hamilton Reduction of Matrix Exponentiation to Polynomial Coefficients
- CBC Decryption via ECB Oracle
- CBC IV=Key Recovery Attack
- CBC Padding Oracle Attack (Vaudenay)
- Censorship (Online)
- Centralized vs. Decentralized Security
- Certificate Authority
- Certificate Revocation List (CRL)
- Certificate Signing Request (CSR)
- Certificate Transparency & SPKI Fingerprinting
- Certification (Software)
- Chain of Custody
- Chain of Trust
- Change Approval Process
- Change Management
- Childhood Indoctrination
- Chinese Remainder Theorem
- Choice Architecture
- Chopping vs Rounding
- CIA Triad
- Class Boundaries
- Class Limit
- Class Width
- Class-based Modeling
- Cloud Responsibility Matrix
- Cloud-specific Vulnerability
- Cloudflare Pages
- Code Review Report
- Code Signing
- Coefficient of Variation
- Cohesion
- Cold Site
- Collision (Hashing)
- commit-echo
- Common Vulnerabilities and Exposures (CVE)
- Common Vulnerability Scoring System (CVSS)
- Communication
- Communication Models
- Communication Noise
- communication-basics-polban
- Compartmentalization
- Compassion vs Complicity
- Compensating Control
- compfest-coin
- compfest18-quals
- Complex Multiplication (CM) Prime Factorization Backdoor
- Compliance
- Component Design Principles
- Component Diagram
- Component Packaging Principles
- Component-Based Design (CBD)
- Component-Level Design
- Composite-Modulus Key Exchange Break (CRT Projection Attack)
- comptia-security-plus-701-coursera
- comptia-security-plus-701-professormesser
- Computational Cipher
- Computational Indistinguishability
- Computational Reproducibility
- Computer Literacy
- Computer Vision
- Computer-Aided Software Engineering (CASE)
- Conceptual Class
- Conceptual Framework
- Concurrency (Software Design)
- Conditional Acceptance
- Confidentiality
- Configuration Enforcement
- Conflict in Communication
- Conic-Non-Elliptic Curve DLP Reduction (Fake ECC)
- Connectivity (Secure Infrastructure)
- Content Analysis
- Content Filtering
- Content Scrambling System (CSS)
- Context
- Context Diagram
- Continuity of Operations Planning (COOP)
- Continuous Variable
- Control Plane
- Coping with Change
- Coppersmith's Method for Stereotyped-Partially-Known Messages
- Corrective Control
- Correlation Attack on Filtered LFSRs (Belief Propagation)
- Coupling
- course
- Course Status
- Course Type
- Coursera
- CRIME Attack (Compression Oracle Side-Channel)
- Cross-Frame Buffer Over-Read via Recursion (Nested Frame Leak)
- Cross-Origin Resource Sharing (CORS)
- Cross-site Request Forgery (CSRF)
- Cross-site Scripting (XSS)
- Cross-Validation
- Cryptography
- cryptography-1-boneh
- cryptohack
- ctf
- Cumulative Frequency
- curl
- Data
- Data at Rest
- Data Dictionary
- Data Encryption Standard (DES)
- Data Flow Diagram (DFD)
- Data in Transit
- Data in Use
- Data Leakage (Machine Learning)
- Data Loss Prevention (DLP)
- Data Masking
- Data Modeling
- Data Object
- Data Plane
- Data Portability
- Data Roles and Responsibilities
- Data Sovereignty
- Data Subject
- Data Types and Classifications
- Data-Centered Design
- Database Encryption
- Database History
- Databases
- Dataset Splitting
- date
- DDoS Reflection and Amplification
- Debugging
- Deception and Disruption
- Decimal (Base 10)
- Decision Support System (DSS)
- Decommissioning
- Decorator Pattern
- Default Credentials
- Denial of Service (DoS)
- Dependencies (Change Management)
- Deployment Diagram
- DES-3DES Weak Keys
- Descriptive Statistics
- Design Audit
- Design Pattern
- Design Review
- Design Thinking
- Detailed Design
- Detective Control
- Deterrent Control
- dev
- Device Placement
- Diffie-Hellman (Textbook Construction)
- Diffie-Hellman Downgrade Attack (Export-Grade - Weak Group Negotiation)
- Diffie-Hellman Exchange
- Diffie-Hellman Parameter-Public-Value Injection (MITM)
- Digital Certificate
- Digital Forensics
- Digital Signature
- digital-image-processing-polban
- DIKW Hierarchy
- Directive Control
- Directory Traversal
- Disaster Recovery Testing
- Discrete Log Reduction via Chosen Composite Modulus n=q² (Paillier's Trick)
- Discrete Log Signature Forgery via Smooth-Order Modulus Lifting (n=p², Pohlig-Hellman + Hensel Lift)
- Discrete Logarithm Problem (DLP)
- Discrete Variable
- Discretionary Access Control (DAC)
- Distributed Denial of Service (DDoS)
- Divine Command Theory
- DLL Injection
- DMARC
- DNS Poisoning
- Documentation (Change Management)
- Dogmatism
- Domain Hijacking
- Domain Keys Identified Mail (DKIM)
- Domain Model
- Domain Requirements
- Domain-Specific Language (DSL)
- Downgrade Attack
- Downtime
- Dual EC-Style PRNG Backdoor (Chosen Related Points)
- Duplicate Signature Key Selection (DSKS) Attack
- Dynamic Analysis (Fuzzing)
- E-discovery
- ECB Byte-at-a-Time Decryption Attack
- ecb-cbc-wtf
- ECDH (Elliptic Curve Diffie-Hellman) — Textbook Construction
- Economics
- Electromagnetic Spectrum and Visible Light
- ElGamal (Subgroup and Quadratic-Residue Leakage)
- Eliciting Information
- Elliptic Curves (Group Law Basics)
- Embedded System
- Emotional Blackmail
- Encapsulation
- Encryption
- End-of-Life (EOL)
- End-of-Service-Life (EOSL)
- End-To-End Encryption (E2Ee)
- Endpoint Detection and Response (EDR)
- Enshittification
- Environmental Attack
- Epistemic Gatekeeping
- Equivalence Partitioning
- Error Guessing
- Error Propagation
- Error Taxonomy (Numerical Methods)
- essay
- Ethnography (Requirements Engineering)
- Event (Probability)
- Event Handling (Software Design)
- Event List
- Executive Information System (EIS)
- Exit Guard Bypass (Magic Value on Stack)
- Experiment (Probability)
- Exploitation
- Exponent Recovery via Repeated Eigenvalue (Logarithmic Derivative Trick)
- Extended Detection and Response (XDR)
- Extended Euclidean Algorithm
- Extensible Authentication Protocol (EAP)
- External Data Integration for Decision-Making (IS)
- FactorDB (Pragmatic Factorization Lookup)
- Factoring Products of Mersenne-Form Numbers (2^a-1)(2^b-1)
- Factory Pattern
- Failover
- Failure Modes
- False Positive - False Negative
- Fault Tolerance
- Fault Tree Analysis
- Feasibility Study
- Federation
- Felony Contempt of Business Model
- Fencing
- Fermat's Factorization Method (Close Primes)
- Fermat's Little Theorem
- Figma
- File Encryption
- File Integrity Monitoring (FIM)
- Fileless Malware
- Final Contract Agreement
- Finite Fields (Galois Fields: GF(p) and GF(2^n))
- Fire Suppression Paradox
- Firewall
- Firmware
- Flow-oriented Modeling
- Fooling Fixed-Basis Miller-Rabin (Arnault Strong Pseudoprimes)
- Forensic Acquisition
- fragmented-query
- Framework Activities
- Franklin-Reiter Related Message Attack
- Freedom of Conscience
- Frequency Distribution
- Frequency Histogram
- Full RELRO
- Full-Disk Encryption
- Function-Oriented Design (FOD)
- Function-Oriented Design Metric
- Functional Requirements
- Functional Testing (Software)
- Gap Analysis
- garden
- Geffe Generator (Nonlinear LFSR Combination via Multiplexer)
- Gendered Modesty Norms
- General Design Strategies
- Generator
- GitHub
- Global Offset Table (GOT-PLT)
- Good Design Principles (Dieter Rams)
- Governance Structure
- Grade
- Gray Box Testing
- Group Policy
- Groups (Group Theory Basics)
- Hacktivist
- Handover Certificate
- Hardening Target
- Hardware Security Module (HSM)
- Hardware Vulnerability
- Harm Normalization
- Hash Digest
- Hashing
- Hashing Algorithms
- Hastad's Broadcast Attack
- Header Manipulation
- hello
- Heuristic Evaluation
- Hexadecimal
- Hidden Subset Sum - Knapsack Recovery via Lattice Reduction (LLL)
- High Availability
- High-Control Groups
- High-Level Design
- History
- Honeyfile
- Honeynet
- Honeypot
- Honeytoken
- Host-based Firewall
- Host-based Intrusion Prevention System (HIPS)
- Hot Site
- HTTP (Hypertext Transfer Protocol)
- HTTP Caching
- HTTP Content Negotiation
- HTTP Headers
- HTTP Messages
- HTTP Methods
- Hybrid Cloud
- Identification
- Identity and Access Management (IAM)
- Identity Fraud
- Identity Proofing
- IEEE 754 Floating-Point Standard
- IEEE 802.1X
- IEEE Std 830-1998
- Image Formation Components
- Impact Analysis (Change Management)
- Impersonation
- In-band Key Exchange
- Incident Response
- Incremental Delivery
- Incremental Development
- Independence (Probability)
- Indicators of Compromise
- Inferential Statistics
- Information
- Information Literacy
- Information System
- Information Systems Hierarchy
- information-systems-polban
- Infrared Sensors
- Infrastructure as Code
- Infrastructure Considerations
- Input Validation
- Insider Threat
- Integer Factorization via ECM - Sage's factor()
- Integer Overflow (Signedness Bypass)
- Integration and Configuration Model
- Integration Testing
- Integrity
- Interface Design Golden Rules
- Internalized Oppression
- Internet of Things (IoT)
- Interoperability
- Interval Scale
- Interview
- Interviewee Types
- intranet-shadow
- Intrusion Prevention System (IPS)
- Invertible Permutation via Missing Feed-Forward (ARX Stream Ciphers)
- IPOS Cycle
- Jailbreaking-Rooting
- journal-rights
- Jul 22nd, 2026
- Jump Server
- Just-in-time Permissions
- Key Escrow
- Key Exchange
- Key Length
- Key Management
- Key Stretching
- Keylogger
- kmipnviii-final
- Known-Plaintext Keystream Recovery (Many-Time Pad)
- Known-Plaintext XOR Key Recovery (Crib Dragging)
- Lateral Movement
- Law and Policy
- Layered Technology (Software Engineering)
- LDAP (Lightweight Directory Access Protocol)
- Legacy Application
- Legacy Platform
- Legacy Software
- Legal Hold
- Legendre Symbol
- Levels of Encryption
- LFSR State via Companion Matrix (Time-Reversal)
- license-gate
- Light and Color
- Lighting (Security)
- Linear Congruential Generator (State and Parameter Recovery)
- Linear Feedback Shift Register (LFSR)
- Linear S-Box Cryptanalysis (Affine Cipher Break)
- Link
- Literature Matrix
- Literature Review
- Live Site
- LLL Algorithm (Lattice Basis Reduction)
- Load Balancing
- Log Aggregation
- Log Data
- Logic Bomb
- Logical Segmentation (VLANs)
- Logseq
- Low-Exponent Cube-Root Attack (Unpadded RSA)
- Machine Epsilon
- Magical Thinking
- Maintenance Window
- Malicious Code
- Malicious Updates
- Malleability
- Malware
- Management Information System (MIS)
- Managerial Control
- Mandatory Access Control (MAC)
- Many-Time Pad (Multi-Message Keystream Reuse)
- Mass Surveillance
- Mathematics
- Matrix Discrete Log via Characteristic Polynomial Factorization (Extension Fields + CRT)
- Matrix Groups & Textbook-RSA-Style Attacks over Matrices
- MD5
- Mean
- Mean Deviation
- Measurement Reliability
- Measurement Validity
- Measures of Central Tendency
- Measures of Dispersion
- Measures of Non-central Location
- Media Sanitization
- Median
- Memory Disclosure (Info Leak)
- Memory Injection
- memory-trace
- Message Recovery Attack
- Metadata
- Microservices
- Microwave Sensors
- Midpoint (Class)
- Miller-Rabin Primality Test
- Misconfiguration Vulnerability
- Misinformation-Disinformation
- Mobile Device Management (MDM)
- Mobile Device Vulnerabilities
- Modality
- Mode
- Model-Based Design (MBD)
- Modular Binomial Equation Attack
- Modularity
- Multi-cloud Systems
- Multifactor Authentication
- music
- my happy ending by avril lavigne
- Nation State
- Negligible Function
- NetFlow
- Network Effects
- Network-based Firewall
- Networking
- Next-Generation Firewall (NGFW)
- NIST SP 800-61 (Incident Response Lifecycle)
- Noisy Padding Oracle Attack (Statistical Amplification)
- Nominal Scale
- Non-functional Requirements
- Non-functional Testing
- Non-repudiation
- Non-Verbal Communication
- Nonce
- Nov 11th, 2025
- Nov 4th, 2025
- Number System
- Numerical Computation
- Numerical Differentiation
- numerical-methods-polban
- NX-DEP (No-eXecute)
- OAuth
- Obfuscation
- Object-Oriented Design Metric
- Observer Pattern
- OCSP Stapling
- Oct 14th, 2025
- OFB Mode Encryption-Decryption Symmetry
- On-path Attack
- On-path Browser Attack
- On-premises Security
- One-Time Pad
- Onion Routing
- Online Certificate Status Protocol (OCSP)
- Open Service Ports
- Operating System Vulnerabilities
- Operational Control
- Operational Definition
- operations-trail
- Optimal Step Size
- Ordinal Scale
- Organized Crime
- Out-of-band Key Exchange
- Out-of-Bounds Array Access (Index Manipulation)
- Outsider Test
- Ownership (Change Management)
- Package Diagram
- Package Monitoring
- packet-story
- Paradox of Tolerance
- Parameter (Statistics)
- Parental Responsibility
- Partial-Match RSA Verification Exploit (Suffix Forgery via Small Modulus)
- Partition Encryption
- Pass the Hash
- Passive Attack
- Passive Monitoring
- Password Hashing
- Password Security
- Patching
- Patriot Missile Failure
- PEM & DER (ASN.1 Encoding)
- Penetration Test
- Percentiles
- Perfect Security
- Performance Testing
- Persistence (Penetration Testing)
- phantom-ledger
- Philosophy
- Phishing
- Physical Attack (Brute Force)
- Physical Isolation
- Physical Security
- Physical Segmentation
- Piggybacking
- piyakcrypt
- PKM
- Plaintext Recovery via Rejection-Sampling Oracle (Process of Elimination)
- Plan-driven vs Agile
- Platform Diversity
- Playbook
- Pohlig-Hellman Algorithm
- Point Compression (Elliptic Curve X-Coordinate + Parity Bit)
- POLBAN
- Policy Enforcement Point (PEP)
- Population
- Port Security
- Posture Assessment
- Power Resiliency
- Predictability (PRG)
- Presentation
- Preservation (Digital Forensics)
- Pressure Sensors
- Pretexting
- Preventive Control
- Privacy
- Privacy Vs Secrecy
- Private Certificate Authority
- Private Key
- Privilege Escalation
- Probability
- Probability Distribution
- Problem Statement (UX)
- Process Improvement
- Process Specification
- Procurement Statement of Work (SOW)
- product-notes
- Professor Messer
- programming-language-pragmatics-polban
- project
- Project Management
- Project Procurement Management
- Proposal Evaluation Document
- Prototyping
- Prototyping (Software Process)
- provenance-gatekeeper
- Proxy
- Pseudonymity
- Pseudorandom Generator (PRG)
- Psychology
- Public Exposure
- Public Key
- Public Key Infrastructure (PKI)
- pwn-college
- Quadratic Residue
- Qualitative Data Synthesis (UX Research)
- Quality Function Deployment
- Quantitative vs Qualitative Data
- Quartile Deviation
- Quartiles
- Race Condition
- RADIUS
- Random Variable
- Randomized Algorithm
- Range (Statistics)
- Ransomware
- Rapid Application Development (RAD)
- Ratio Scale
- Rational Unified Process (RUP)
- RC4
- RC4 Weak-IV Key Recovery (FMS Attack)
- Read-Counter Manipulation (Canary Skip)
- Real-Time Operating System (RTOS)
- Record Encryption
- Recovering an Unknown Modulus via GCD (Successive Powers)
- Recovery Testing
- Recursive RSA-Style Factorization via Known φ(N) (Multi-Prime Moduli)
- Regulatory Capture
- Relationships (Data Modeling)
- Relative Frequency
- Religious Exceptionalism
- Religious Tribalism
- render-vault
- Replay Attack
- report-archive
- Repository
- Request for Proposal
- Requirement (Software Engineering)
- Requirements Analysis
- Requirements Elicitation
- Requirements Engineering
- Requirements Management
- Requirements Specification
- Requirements Tracing
- Requirements Validation
- Research Canvas
- Research Contribution
- Research Design
- Research Ethics
- Research Gap
- Research Hypothesis
- Research Problem
- Research Process (Statistics)
- Research Proposal
- Research Question
- Research Reporting
- research-methodology-polban
- Resilience
- resolver-trail
- Resource Reuse
- Responsible Disclosure Program
- Restricted Activities
- ret2win Technique
- Retina
- review
- RF Jamming
- RFID Cloning
- Richardson Extrapolation
- Right-to-Audit Clause
- Risk
- Risk Analysis
- Risk Management
- Risk Management Strategies
- Risk Tolerance
- Risk Transference
- ROCA Vulnerability (Infineon RSA Key Generation Weakness)
- Role-based Access Control (RBAC)
- Root Cause Analysis
- Root of Trust
- Rootkit
- Roots of Unity mod N (Non-Trivial Roots Reveal Factors)
- ROT13
- Rotor Machine
- RSA (Textbook Construction)
- RSA Blinding Attack (Signature Malleability)
- RSA Factorization from Known (N, e, d)
- RSA Fixed-Point Leakage (Unconcealed Messages) → Factorization
- RSA Padding Schemes (PKCS-1 v1.5 vs OAEP vs Unpadded)
- RSA Sign = Decrypt When Keys Are Shared (Unrestricted Signing Oracle)
- RSA with Non-Coprime Exponent (e Shares a Factor with φ(N))
- RSA with p = q (Repeated Prime Factor)
- Rule-based Access Control
- Salsa20
- Salting
- Same-Origin Policy
- Sample (Statistics)
- Sampling (Statistics)
- Sandbox Testing
- Sandboxing
- SASE
- SCADA - ICS
- Scale of Data
- Scenario
- Scenario-based Modeling
- Screened Subnet
- Scripting and Automation
- Scriptural Inerracy
- Scriptural Interpretation
- SD-WAN
- Secular Humanism
- Secularism
- Secure Baseline
- Secure Cookie
- Secure Enclave
- Secure Protocol
- Security
- Security Assertion Markup Language (SAML)
- Security Awareness Training
- Security Consideration (Regulatory, Legal, Industry, Geographic)
- Security Content Automation Protocol (SCAP)
- Security Control Categories
- Security Control Types
- Security Guard
- Security Information and Event Management (SIEM)
- Security Orchestration, Automation, and Response (SOAR)
- Security Policy
- Security Procedure
- Security Reduction
- Security Standard
- Security Testing
- Security Zone
- Security-Enhanced Linux (SELinux)
- Segmentation (Data Protection)
- Segmentation (Network)
- Self-Modifying Shellcode
- Self-Referential GOT Overwrite (Target Depends on Corrupted Slot)
- Self-Signed Certificate
- Semantic Security
- Semester
- Sender Policy Framework (SPF)
- Sensors and Alarms
- Sep 23rd, 2025
- Sep 2nd, 2025
- Sep 9th, 2025
- Separation of Concerns
- Sequential Confidence Amplification for Noisy Binary Oracles (SPRT-style)
- Server Clustering
- Serverless Architecture
- Service Level Agreement
- Session Hijacking
- Session Key
- SHA-256
- SHA-512
- Shadow IT
- Shannon Cipher
- Shannon's Theorem
- Shellcode
- Shellcode Chunking (Short Jumps)
- Sideloading
- Signed Loop Counter Steering (Branch Selection via Negative Modulo)
- signed-session-vault
- silent-oracle
- Simple Network Management Protocol (SNMP)
- Single Sign-On (SSO)
- Site Resiliency
- Site Survey
- Site-to-site IPsec VPN
- Small-Subgroup - Smooth-Prime Static-Key Extraction Attack (Diffie-Hellman)
- Smishing
- Smoke Testing
- Smooth Numbers & Constructing Smooth Primes
- Software
- Software Application Domains
- Software Characteristics
- Software Defined Networking (SDN)
- Software Design Metric
- Software Design Quality Attribute
- Software Development Life Cycle (SDLC)
- Software Development Tools
- Software Engineering
- Software Engineering Challenge
- Software Engineering Principles
- Software Engineering Role
- Software Evolution
- Software Process
- Software Process Framework
- Software Process Models
- Software Project Failure
- Software Requirement Specification (SRS)
- Software Testability
- Software Testing
- software-analysis-and-design-polban
- Source
- Spiral Model
- Spraying Attack
- Spyware
- SQL Injection
- SQLite
- SSH Public-Private Key Format
- SSL Stripping
- SSL-TLS VPN
- Stack Canary
- Stack Frame Layout
- Stakeholder
- Stakeholders (Change Management)
- Stale Stack Data Leak (Frame Reuse)
- Standard Deviation
- Standard Operating Procedure (SOP)
- Start Date
- Static Analysis (Design)
- Static Application Security Testing (SAST)
- static-boundary
- Static-Key Generator Substitution Attack (Diffie-Hellman)
- Statistic (Value)
- Statistical Test
- Statistics
- statistics-and-probability-polban
- Steganography
- Stem-and-Leaf Diagram
- Stream Cipher
- Stress Testing
- Structural Design Description
- Subject Alternative Name (SAN)
- Subnormal Numbers and Underflow
- Substitution Cipher
- Supply Chain Attack
- Supply Chain Vulnerability
- Surveillance Capitalism
- Switching Costs
- Symlink Path Shortening
- Symmetric Encryption
- Syscall Mechanics (x86-64)
- System Sequence Diagram (SSD)
- System Testing
- Systems Design
- Tabletop Exercise
- Tailgating
- Task Analysis
- Taylor Series
- Technical Change Management
- Technical Control
- Technical Writer
- Technical Writing
- Test Case Design Techniques
- Testing Levels
- Testing Principles
- The lid is still there
- The Pivot
- the-67th-line
- Theories of Vision
- Third-Party Certificate Authority
- Third-party Risk Assessment
- Threat
- Threat Actor
- Threat Hunting
- Threat Intelligence
- Threat Modeling
- Three States of Data
- Time-of-day Restrictions
- Time-Seeded Encryption Key Weakness (Coarse Timestamp-Derived Keys)
- Timing Side-Channel Attack (Computational Cost as an Oracle)
- Tokenization
- Tonelli-Shanks Algorithm
- Transaction Processing System (TPS)
- Transport Encryption
- Trojan Horse
- Truncation Error
- Trusted Platform Module (TPM)
- Trustworthiness (Qualitative Research)
- Two-Person Integrity-Control
- Two-Time Pad (XOR Key Reuse)
- Two-Time Pad Attack
- Types of Data
- Types of Data Collection
- Types of Requirements
- Typosquatting
- UAT Test Cases & Results
- UI-UX
- Ultrasonic Sensors
- Umbrella Activities
- Ungrouped Data
- Unified Modeling Language (UML)
- Unified Threat Management (UTM)
- Uninterruptible Power Supply (UPS)
- Union Bound
- Unit of Analysis
- Unit Testing
- Unsecure Network Vector
- Unskilled Attacker
- Unsupported Systems Vector
- upload-review
- URL Scanning
- USB Blocking
- Use Case
- Use Case Diagram
- Use Case Relationships
- User Analysis
- User Behavior Analytics
- User Interface Design
- User Persona
- User Story
- User-Centered Design (UCD)
- user-interface-design-polban
- V-Model
- Variable (Statistics)
- Variance
- Veil of Ignorance
- Vendor Scorecard
- Verbal Communication
- Verification and Validation (Design)
- Version Control
- Video Surveillance
- Vigenère Cipher
- Virtualization
- Virtualization Vulnerability
- Virus
- Vishing
- Visual Perception
- VM Escape
- Volume Encryption
- VPN Concentrator
- Vulnerability
- Vulnerability Classification
- Vulnerability Remediation
- Vulnerability Scanning
- Vulnerable Software Vector
- Warm Site
- Waterfall Model
- Watering Hole Attack
- Web
- Web Application Firewall (WAF)
- web-development-polban
- White Box Testing
- Who is being protected?
- Wiener's Attack (Continued Fractions, Small Private Exponent)
- Wildcard Certificate
- Wilhoit's Law
- Wireframe
- Wireless Deauthentication Attack
- Wireless Security Mode
- Wisdom
- Work Environment Analysis
- Work Performance Report
- world-cup
- Worm
- writeup
- X.509 Certificate
- XOR Uniformity Lemma
- XOR-Instead-of-Exponentiation Notation Bug (Diffie-Hellman)
- Yao's Next-Bit Theorem
- You must reach the answer
- Zero Trust
- Zero-Day Vulnerability
- Zerologon (AES-CFB8 Zero-State Keystream Collision)
- Zones of Comfort