Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Perimeter

3/6/2017
11:30 AM
Terry Sweeney
Terry Sweeney
Slideshows
Connect Directly
Facebook
Twitter
RSS
E-Mail
50%
50%

7 Hot Security Terms (and Buzzwords) to Know

How the security industry has a conversation with itself is constantly changing and the latest terms as well as buzzwords point us to where the technology is heading.
Previous
1 of 8
Next

Image Source: Flickr, courtesy of Gavin Llewellyn

Image Source: Flickr, courtesy of Gavin Llewellyn

It's tempting to dismiss buzzwords as slang-y, cliché, and overused (and they are … literally). But in the security industry, both buzzwords and the latest terms the industry has coined to describe a new technology or put a new spin on an old one also provide barometer-like clues of where the industry may be heading. What it's excited about. Or how it sorts the jaded veterans from the newbies. 

There were plenty of examples of the latest terms and buzzwords in full view at the RSA Conference in San Francisco last month. Here's a look at some of the more prolific ones seen and heard there; it's not an exhaustive list, so we're counting on you to help us embellish it. What did we forget? Please let us know in the Comments section.

 

Terry Sweeney is a Los Angeles-based writer and editor who has covered technology, networking, and security for more than 20 years. He was part of the team that started Dark Reading and has been a contributor to The Washington Post, Crain's New York Business, Red Herring, ... View Full Bio

Previous
1 of 8
Next
Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
storrmrunner2
100%
0%
storrmrunner2,
User Rank: Apprentice
3/6/2017 | 7:13:32 PM
To Buzzword #7 - Compartmentalization
Have you looked at companies like Fortinet and ISFW (Internal Segmentation Firewall) solution?  They have been running at 100Gb speeds for a couple of years now.  And announced a 1Tb throughput firewall in Jan-2017 (https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2017/the-worlds-first-terabit-firewall-appliance-ngfw.html).

Does this not solve the usability issue of mantaining LAN speeds with Layer-7 inspection services?
T Sweeney
100%
0%
T Sweeney,
User Rank: Moderator
3/7/2017 | 1:55:44 PM
Re: To Buzzword #7 - Compartmentalization
Thanks, stormrunner2... what Fortinet's doing seems to track closely with this intelligent segmentation trend we're seeing from various vendors and startups.
tcritchley07
100%
0%
tcritchley07,
User Rank: Moderator
3/8/2017 | 12:16:25 PM
Cyber Terms
Isn't compartmentalization the same as the more modern 'segmentation' of various entities, not just firewall traffic?
T Sweeney
50%
50%
T Sweeney,
User Rank: Moderator
3/8/2017 | 1:29:02 PM
Re: Cyber Terms
Correct, @tcritchkley07... I used firewalls as just one example of compartmentalization. But the term could also apply to the bucketize slide or the micro-services slide as well, which both try to create similar boundaries in the name of better security.

Was there a specific application of compartmentalization you were thinking of?
tcritchley07
50%
50%
tcritchley07,
User Rank: Moderator
3/8/2017 | 3:30:56 PM
Re: Cyber Terms
No, just trying to get temrmnology straight in my mind in the context of security. Thanks. 
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Our Endpoint Protection system is a little outdated... 
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-10694
PUBLISHED: 2019-12-12
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and 2018.1....
CVE-2019-10695
PUBLISHED: 2019-12-12
When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user�s username and password were exposed in the job�s Job Details pane in the PE console. These issues have been resolved in version 1.2.1 of the ...
CVE-2019-5085
PUBLISHED: 2019-12-12
An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability.
CVE-2019-5090
PUBLISHED: 2019-12-12
An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an out-of-bounds read, resulting in information disclosure. An attacker can send a packet to trigger this vulner...
CVE-2019-5091
PUBLISHED: 2019-12-12
An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability.