Glossary entry (derived from question below)
English英语 term or phrase:
Horizontal Attack Profile (HAP)
Chinese汉语 translation:
横向攻击剖面/视图
Added to glossary by
Patrick Cheng
Jul 16, 2018 05:19
6 yrs ago
English英语 term
Horizontal Attack Profile (HAP)
English英语译成Chinese汉语
技术/工程设计
IT(信息技术)
securityy
James Bottomley, an IBM Research Distinguished Engineer and top Linux kernel developer, writes: "One of the biggest problems with the current debate about Container vs Hypervisor security is that no-one has actually developed a way of measuring security, so the debate is all in qualitative terms (hypervisors 'feel' more secure than containers because of the interface breadth) but no-one actually has done a quantitative comparison." To meet this need, Bottomley created {Horizontal Attack Profile (HAP)}, designed to describe system security in a way that it can be objectively measured. Bottomley has discovered that "a Docker container with a well crafted seccomp profile (which blocks unexpected system calls) provides roughly equivalent security to a hypervisor."
横向攻击配置文件?
感觉不像是配置文件。
横向攻击配置文件?
感觉不像是配置文件。
Proposed translations
(Chinese汉语)
3 | 横向攻击剖面/视图 |
Patrick Cheng
![]() |
Change log
Jul 18, 2018 01:51: Patrick Cheng Created KOG entry
Proposed translations
17分钟
Selected
横向攻击剖面/视图
不知道有没有固定译法,但是读到Bottomley的下面这一段文字,感觉这里的profile是指受攻击的整个软件/运行环境(stack)的一个视图或者说是剖面:
From the measurement point of view, we look at the vertical stack: all code that is traversed to provide a service all the way from input web request to database update to output response potentially contains bugs; the bug density is variable for the different components but the more code you traverse the higher your chance of exposure to exploitable vulnerabilities. We’ll call this the Vertical Attack Profile (VAP) of the stack.
From the measurement point of view, we look at the vertical stack: all code that is traversed to provide a service all the way from input web request to database update to output response potentially contains bugs; the bug density is variable for the different components but the more code you traverse the higher your chance of exposure to exploitable vulnerabilities. We’ll call this the Vertical Attack Profile (VAP) of the stack.
4 KudoZ points awarded for this answer.
Comment: "谢谢!"
Discussion
----------------------------------------------------
仔细看了一下有关的原文,发现“配置文件”确实不适合。这里的Profile是用来描述/测量HA的,有点类似“customer profile”里面的用法。而“customer profile"往往译作“客户档案”,那这里“HA Profile"是不是可以译作“横向/水平攻击档案”呢?
HAP中的profile即上面链接中的profile。