0

Cuz the site is not fully consistent... Most places its "Application Security", as it was in the Area51 proposal, but the logo, the domain name, and the notification email, its IT security.

My vote is to keep this AppSec focused, thats wide enough, though I might understand why @Robert would want to merge them. On the other hand, it's crystal clear that SO could not have included SF - completely different worlds...

4 Answers 4

Reset to default
9

It is IT Security, as we combined a few proposals to get here:

What is the difference between the Security proposals on Area51? Should they be merged?

5
  • Sorry I missed that discussion the first time around, as I mentioned these are really very different fields, with only rarely shared terminology, formulas, methodologies, problems, and solutions. I'm still against merging them (though I do understand why from outside the field you'd want to merge them). I think this is similar to the Linux/Ubuntu debacle... :)
    – AviD Mod
    Nov 12, 2010 at 12:09
  • 1
    And @Jeff, if we are going the way of merging all security-related topics into one mega-security site, then you should probably also merge area51.stackexchange.com/proposals/4500/…, area51.stackexchange.com/proposals/14373/…, area51.stackexchange.com/proposals/18054/white-hat-hacking, and probably area51.stackexchange.com/proposals/11464/code-review and area51.stackexchange.com/proposals/15811/cryptography
    – AviD Mod
    Nov 14, 2010 at 0:52
  • (there was also one on SIEM/security event monitoring, but i cant find it now)
    – AviD Mod
    Nov 14, 2010 at 0:53
  • @avid I closed a few but the latter two don't seem so overlappy to me
    – Jeff Atwood
    Nov 19, 2010 at 9:16
  • Thanks. Yeah I wasnt sure about those two - to me, "code review" is almost synonymous with "security code review", but I guess its not for normal people. Wrt cryptography, to me crypto is part of security, but on the other hand expert cryptographers pretty much define themselves as a completely seperate group.
    – AviD Mod
    Nov 19, 2010 at 9:51
3

Buffer Overflow

3
  • Or Stack smashing
    – user185
    Dec 1, 2010 at 13:49
  • @Graham Lee Or Security Suspicions
    – garik
    Dec 1, 2010 at 19:58
  • +1 for Buffer Overflow as the final site's name.
    – Iszi
    Jan 5, 2011 at 17:22
3

Interestingly, I tend to see IT Security as a wholly enclosed and dependent subset of Information Security. As you can see from some of the answers even on this site, it is evident that the People, Process and Technology areas of security are quite difficult to separate.

I think it is right that this is IT security, but we should be careful not to be too quick to flag as Offtopic questions or answers which end up in the People or Process areas.

2
  • of course not. Au contraire, the mass of questions is already tipped a bit too heavy in the direction of technical. The original question came from the silent merging with other SE proposals. For more updated discussion, see meta.security.stackexchange.com/q/16/33. Again, not a problem of people/process, but of non-professional security.
    – AviD Mod
    Nov 25, 2010 at 22:52
  • Cheers AviD - understood :-)
    – Rory Alsop Mod
    Dec 2, 2010 at 1:13
0

How about "Corporate Security", "Fedral Security", or some variation of those?

1
  • Those are both quite exclusive, really. I'm an app security guy who doesn't work for a corporation or the feds, where would I fit? :)
    – user185
    Dec 7, 2010 at 17:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .