Re:Glossary of Terms

[<websec_lists () hushmail com>]

With repsect I think there are way too many slang terms for that to 
useful outside of the hacker community. They are also mixed verbs 
and nouns and other fundamental information modeling "feau pas's". 
I think for a glossary to be useful it has to be written to a 
development community and that would be taken seriously by a CIO; 
not a hacker community.

I like the idea of the NIST, RFC and other suggestions. There is no 
point in re-inventing the wheel! Maybe mapping the terms from the 
main standards already makes more sense?

____________________________________________________


An existing glossary containing common web application security 
terminology can be found at 
http://www.webappsec.org/projects/glossary/. Also available is the 
Threat Classifications document
located at http://www.webappsec.org/projects/threat/ which serves 
well as a taxonomy of attacks .   


Regards, 

- Robert Auger
[EMAIL PROTECTED]

--------------------------------------------------------------------
-
The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/
 
The Web Security Mailing List Archives
http://www.webappsec.org/lists/websecurity/archive/




Concerned about your privacy? Follow this link to get
secure FREE email: http://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
http://www.hushmail.com/services-messenger?l=434

Promote security and make money with the Hushmail Affiliate Program: 
http://www.hushmail.com/about-affiliate?l=427