...
| Wiki Markup |
|---|
*security flaw* \[[Seacord 2005|AA. Bibliography#Seacord 05]\]
A software defect that poses a potential security risk. |
| Anchor |
|---|
| sensitive code |
|---|
| sensitive code |
|---|
|
sensitive code : Any code that performs operations that would be forbidden to untrusted code. Also, any code that accesses sensitive data (q.v.). For example, code whose correct operation requires enhanced privileges is typically considered to be sensitive.
| Anchor |
|---|
| sensitive data |
|---|
| sensitive data |
|---|
|
sensitive data : Any data that must be kept secure. Consequences of this security requirement include:
- Untrusted code is forbidden to access sensitive data.
- Trusted code is forbidden to leak sensitive data to untrusted code.
Examples of sensitive data include passwords and personally identifiable information.
| Anchor |
|---|
| sequential consistency |
|---|
| sequential consistency |
|---|
|
...
