Difference between revisions of "Vulnerability (computing)"

From Wiki @ Karl Jones dot com
Jump to: navigation, search
(Created page with "In computer security, a '''vulnerability''' is a weakness which allows an attacker to reduce a system's information assurance. == Description == Vulnerability is the...")
 
(See also)
Line 18: Line 18:
  
 
* [[Attack surface]]
 
* [[Attack surface]]
 +
* [[Computer science]]
 
* [[Computer security]]
 
* [[Computer security]]
 +
* [[Computing]]
 
* [[Information assurance]]
 
* [[Information assurance]]
 
* [[Security]]
 
* [[Security]]

Revision as of 13:11, 18 February 2016

In computer security, a vulnerability is a weakness which allows an attacker to reduce a system's information assurance.

Description

Vulnerability is the intersection of three elements:

  • A system susceptibility or flaw
  • Attacker access to the flaw
  • And attacker capability to exploit the flaw

Attack surface

To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness.

In this frame, vulnerability is also known as the attack surface.

See also

External links