Perimeter

3/6/2017
11:30 AM
Terry Sweeney
Terry Sweeney
Slideshows
Connect Directly
Facebook
Twitter
RSS
E-Mail
50%
50%

7 Hot Security Terms (and Buzzwords) to Know

How the security industry has a conversation with itself is constantly changing and the latest terms as well as buzzwords point us to where the technology is heading.
Previous
1 of 8
Next

Image Source: Flickr, courtesy of Gavin Llewellyn

Image Source: Flickr, courtesy of Gavin Llewellyn

It's tempting to dismiss buzzwords as slang-y, cliché, and overused (and they are … literally). But in the security industry, both buzzwords and the latest terms the industry has coined to describe a new technology or put a new spin on an old one also provide barometer-like clues of where the industry may be heading. What it's excited about. Or how it sorts the jaded veterans from the newbies. 

There were plenty of examples of the latest terms and buzzwords in full view at the RSA Conference in San Francisco last month. Here's a look at some of the more prolific ones seen and heard there; it's not an exhaustive list, so we're counting on you to help us embellish it. What did we forget? Please let us know in the Comments section.

 

Terry Sweeney is a Los Angeles-based writer and editor who has covered technology, networking, and security for more than 20 years. He was part of the team that started Dark Reading and has been a contributor to The Washington Post, Crain's New York Business, Red Herring, ... View Full Bio

Previous
1 of 8
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
tcritchley07
50%
50%
tcritchley07,
User Rank: Moderator
3/8/2017 | 3:30:56 PM
Re: Cyber Terms
No, just trying to get temrmnology straight in my mind in the context of security. Thanks. 
T Sweeney
50%
50%
T Sweeney,
User Rank: Moderator
3/8/2017 | 1:29:02 PM
Re: Cyber Terms
Correct, @tcritchkley07... I used firewalls as just one example of compartmentalization. But the term could also apply to the bucketize slide or the micro-services slide as well, which both try to create similar boundaries in the name of better security.

Was there a specific application of compartmentalization you were thinking of?
tcritchley07
100%
0%
tcritchley07,
User Rank: Moderator
3/8/2017 | 12:16:25 PM
Cyber Terms
Isn't compartmentalization the same as the more modern 'segmentation' of various entities, not just firewall traffic?
T Sweeney
100%
0%
T Sweeney,
User Rank: Moderator
3/7/2017 | 1:55:44 PM
Re: To Buzzword #7 - Compartmentalization
Thanks, stormrunner2... what Fortinet's doing seems to track closely with this intelligent segmentation trend we're seeing from various vendors and startups.
storrmrunner2
100%
0%
storrmrunner2,
User Rank: Apprentice
3/6/2017 | 7:13:32 PM
To Buzzword #7 - Compartmentalization
Have you looked at companies like Fortinet and ISFW (Internal Segmentation Firewall) solution?  They have been running at 100Gb speeds for a couple of years now.  And announced a 1Tb throughput firewall in Jan-2017 (https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2017/the-worlds-first-terabit-firewall-appliance-ngfw.html).

Does this not solve the usability issue of mantaining LAN speeds with Layer-7 inspection services?
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-6499
PUBLISHED: 2019-01-21
Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account (in viewpoint-portal\conf\server.xml) that could potentially be exploited by malicious users to compromise the affected system.
CVE-2019-6500
PUBLISHED: 2019-01-21
In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.
CVE-2019-6498
PUBLISHED: 2019-01-21
GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused.
CVE-2019-6497
PUBLISHED: 2019-01-20
Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter.
CVE-2018-18908
PUBLISHED: 2019-01-20
The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle (MiTM) attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the requ...