New pages
From Encyclopedia of Cybersecurity
- 22:24, 7 May 2024 Symmetric Algorithm (hist | edit) [2,998 bytes] Ccocrick (talk | contribs) (Created page with "== Symmetric Algorithm == A '''Symmetric Algorithm''' is a type of encryption algorithm that uses the same key for both encryption and decryption of data. In symmetric encryption, the sender and receiver share a secret key that is used to encrypt and decrypt messages. Symmetric algorithms are widely used for securing data communication and storage. === Operation === Symmetric algorithms operate by applying mathematical operations to plaintext using a secret key to pro...")
- 22:21, 7 May 2024 Supply Chain Attack (hist | edit) [2,650 bytes] Ccocrick (talk | contribs) (Created page with "== Supply Chain Attack == A '''Supply Chain Attack''' is a cyber attack that targets the software supply chain to compromise software or hardware before it reaches the end user. This type of attack aims to exploit the trust between suppliers and consumers, allowing attackers to infiltrate systems and networks through trusted channels. === Operation === In a Supply Chain Attack, attackers target vulnerabilities in the software development lifecycle or the distribution...")
- 22:19, 7 May 2024 Supervisory Control and Data Acquisition (hist | edit) [2,760 bytes] Ccocrick (talk | contribs) (Created page with "== Supervisory Control and Data Acquisition == '''Supervisory Control and Data Acquisition''' (SCADA) is a system used to monitor and control industrial processes, such as manufacturing, power generation, and water treatment. SCADA systems combine hardware and software to collect and analyze real-time data, allowing operators to monitor processes, make decisions, and control equipment remotely. === Components === SCADA systems consist of several key components, includ...")
- 22:09, 7 May 2024 Structural Metadata (hist | edit) [2,271 bytes] Ccocrick (talk | contribs) (Created page with "== Structural Metadata == '''Structural Metadata''' is data that describes the structure of a document, file, or information resource. It provides information about the organization of the content, such as the sequence of pages in a document, the arrangement of chapters in a book, or the hierarchy of sections in a webpage. Structural metadata is used to facilitate the navigation, retrieval, and presentation of information. === Types === There are several types of stru...")
- 22:08, 7 May 2024 Stream Ciphers (hist | edit) [2,425 bytes] Ccocrick (talk | contribs) (Created page with "== Stream Ciphers == '''Stream Ciphers''' are a type of encryption algorithm that encrypts plaintext one bit or one byte at a time, continuously streaming through the data. Unlike block ciphers, which encrypt fixed-size blocks of data, stream ciphers encrypt data in a continuous stream, making them suitable for encrypting real-time data streams, such as voice or video communication. === Operation === Stream ciphers generate a stream of pseudorandom bits, known as a ke...")
- 22:06, 7 May 2024 Steganography (hist | edit) [2,263 bytes] Ccocrick (talk | contribs) (Created page with "== Steganography == '''Steganography''' is the practice of concealing messages, images, or files within other non-secret data. Unlike encryption, which hides the contents of a message, steganography hides the existence of the message. This technique is often used to covertly transmit sensitive information or to protect information from being detected. === Operation === Steganography works by embedding secret data within a carrier file, such as an image, audio, or vide...")
- 22:04, 7 May 2024 SQL Injection (hist | edit) [2,398 bytes] Ccocrick (talk | contribs) (Created page with "== SQL Injection == '''SQL Injection''' is a type of cyber attack that targets the SQL (Structured Query Language) database management system. In an SQL Injection attack, an attacker inserts malicious SQL statements into input fields or URLs to manipulate a database and gain unauthorized access to sensitive data or execute malicious operations on the database. === Operation === SQL Injection attacks exploit vulnerabilities in web applications that use SQL databases. A...")
- 22:03, 7 May 2024 Spyware (hist | edit) [2,519 bytes] Ccocrick (talk | contribs) (Created page with "== Spyware == '''Spyware''' is malicious software designed to secretly gather information about a person or organization and send it to a third party without the user's consent. Spyware can track keystrokes, capture screenshots, monitor browsing activity, and collect other sensitive information. It is often used for spying, identity theft, and unauthorized surveillance. === Operation === Spyware typically infects a device through malicious downloads, email attachments...")
- 22:01, 7 May 2024 Spear Phishing (hist | edit) [2,469 bytes] Ccocrick (talk | contribs) (Created page with "== Spear Phishing == '''Spear Phishing''' is a targeted form of phishing attack where cybercriminals tailor their messages to a specific individual or organization to increase the likelihood of success. Unlike regular phishing attacks, which are more generic and widespread, spear phishing attacks are highly personalized and often use information gathered from social media or other sources to make the messages more convincing. === Operation === In a spear phishing atta...")
- 22:00, 7 May 2024 Software Composition Analysis (hist | edit) [3,045 bytes] Ccocrick (talk | contribs) (Created page with "== Software Composition Analysis == '''Software Composition Analysis''' (SCA) is a process and set of tools used to identify and manage open-source components and third-party libraries used in software development. SCA helps organizations identify security vulnerabilities, licensing issues, and other risks associated with using third-party code. === Operation === Software Composition Analysis tools scan software projects to identify the open-source components and thir...")
- 21:58, 7 May 2024 Social Media Security (hist | edit) [2,609 bytes] Ccocrick (talk | contribs) (Created page with "== Social Media Security == '''Social Media Security''' refers to the measures and practices used to protect the security and privacy of individuals and organizations on social media platforms. As social media has become a prevalent communication and networking tool, it has also become a target for various cyber threats, including phishing, malware, and identity theft. === Risks === Some common risks associated with social media use include: * '''Phishing Attacks''':...")
- 21:57, 7 May 2024 Social Engineering (hist | edit) [2,820 bytes] Ccocrick (talk | contribs) (Created page with "== Social Engineering == '''Social Engineering''' is a technique used by cybercriminals to manipulate individuals into divulging confidential information, performing actions, or giving access to systems or physical locations. Unlike traditional hacking methods that rely on exploiting technical vulnerabilities, social engineering exploits human psychology and behavior to deceive victims. === Operation === Social engineering attacks typically involve the following steps...")
- 21:54, 7 May 2024 Smishing (hist | edit) [2,231 bytes] Ccocrick (talk | contribs) (Created page with "== Smishing == '''Smishing''' is a type of phishing attack where attackers use SMS (Short Message Service) or text messages to deceive individuals into providing sensitive information or downloading malicious software onto their mobile devices. The term "smishing" is a combination of "SMS" and "phishing." === Operation === In a typical smishing attack, the attacker sends a text message that appears to be from a legitimate source, such as a bank, government agency, or...")
- 21:37, 7 May 2024 Smart Contract (hist | edit) [2,802 bytes] Ccocrick (talk | contribs) (Created page with "== Smart Contract == A '''Smart Contract''' is a self-executing contract with the terms of the agreement between buyer and seller being directly written into lines of code. The code and the agreements contained therein exist across a distributed, decentralized blockchain network. The code controls the execution, and transactions are trackable and irreversible. === Operation === Smart contracts operate on blockchain technology, which allows them to be decentralized, se...")
- 21:36, 7 May 2024 Side-Channel Attack (hist | edit) [2,339 bytes] Ccocrick (talk | contribs) (Created page with "== Side-Channel Attack == A '''Side-Channel Attack''' is a type of cyber attack that targets the implementation of a cryptographic system rather than the algorithm itself. Instead of directly attacking the encryption algorithm, side-channel attacks exploit weaknesses in the physical implementation of the algorithm or in the way it interacts with the physical environment. === Operation === Side-channel attacks typically involve monitoring the physical characteristics o...")
- 21:34, 7 May 2024 Shadow IT (hist | edit) [2,642 bytes] Ccocrick (talk | contribs) (Created page with "== Shadow IT == '''Shadow IT''' refers to the use of information technology (IT) systems and solutions within an organization without the explicit approval or knowledge of the IT department. Shadow IT can include software, hardware, and services that are used by employees to perform their work but are not sanctioned by the organization's IT policies. === Causes === Shadow IT often arises due to several factors, including: * '''Ease of Access''': Employees may use clo...")
- 21:27, 7 May 2024 Session Hijacking (hist | edit) [2,097 bytes] Ccocrick (talk | contribs) (Created page with "== Session Hijacking == '''Session Hijacking''' is a type of cyber attack where an attacker takes control of a user's session on a computer system. By hijacking a session, the attacker can impersonate the user and perform actions as if they were the legitimate user. Session hijacking is typically carried out to gain unauthorized access to sensitive information or perform malicious activities. === Operation === Session hijacking exploits vulnerabilities in the way sess...")
- 21:24, 7 May 2024 Sender Policy Framework (hist | edit) [2,181 bytes] Ccocrick (talk | contribs) (Created page with "== Sender Policy Framework (SPF) == '''Sender Policy Framework''' (SPF) is an email authentication protocol that helps prevent email spoofing and phishing by verifying that incoming mail from a domain is sent from an authorized mail server. SPF allows domain owners to specify which mail servers are allowed to send emails on their behalf, and receiving mail servers can check SPF records to verify the authenticity of incoming emails. === Operation === SPF works by publi...")
- 21:22, 7 May 2024 Security Posture Assessment (hist | edit) [2,656 bytes] Ccocrick (talk | contribs) (Created page with "== Security Posture Assessment == '''Security Posture Assessment''' (SPA) is a process of evaluating an organization's security posture to identify and mitigate risks. SPA involves assessing the effectiveness of security controls, policies, and procedures to ensure that they are adequate to protect against threats and vulnerabilities. === Operation === SPA typically involves several steps, including: * '''Asset Inventory''': Identifying and cataloging all assets, inc...")
- 21:20, 7 May 2024 Security Orchestration, Automation, and Response (hist | edit) [2,988 bytes] Ccocrick (talk | contribs) (Created page with "== Security Orchestration, Automation, and Response (SOAR) == '''Security Orchestration, Automation, and Response''' (SOAR) is a set of technologies and practices designed to improve the efficiency and effectiveness of security operations. SOAR combines security orchestration, automation, and incident response into a single platform to help organizations detect, respond to, and remediate security incidents more quickly and efficiently. === Operation === SOAR platforms...")
- 21:18, 7 May 2024 Security Operations Center (hist | edit) [2,789 bytes] Ccocrick (talk | contribs) (Created page with "== Security Operations Center (SOC) == A '''Security Operations Center''' (SOC) is a centralized facility that houses an organization's cybersecurity team, tools, and processes to monitor, detect, analyze, and respond to cybersecurity incidents. SOCs are critical for maintaining the security of an organization's information assets and protecting against cyber threats. === Operation === The SOC operates 24/7 and is responsible for monitoring the organization's network,...")
- 21:17, 7 May 2024 Security Information and Event Management (hist | edit) [2,769 bytes] Ccocrick (talk | contribs) (Created page with "== Security Information and Event Management (SIEM) == '''Security Information and Event Management''' (SIEM) is a technology that provides real-time analysis of security alerts generated by network hardware and applications. SIEM collects, aggregates, and analyzes log data from various sources to identify and respond to security threats. === Operation === SIEM systems collect and store log data from various sources, such as firewalls, antivirus software, and intrusio...")
- 21:16, 7 May 2024 Security Assertion Markup Language (hist | edit) [2,984 bytes] Ccocrick (talk | contribs) (Created page with "== Security Assertion Markup Language (SAML) == '''Security Assertion Markup Language''' (SAML) is an XML-based open standard for exchanging authentication and authorization data between parties, particularly between an identity provider (IdP) and a service provider (SP). SAML is commonly used for single sign-on (SSO) authentication to allow users to access multiple applications with a single set of credentials. === Operation === SAML works by allowing the identity pr...")
- 21:15, 7 May 2024 Secure Web Gateway (hist | edit) [2,812 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Web Gateway == A '''Secure Web Gateway''' (SWG) is a security solution that protects users from web-based threats by filtering and monitoring web traffic. SWGs are commonly used in enterprise environments to enforce security policies, prevent data loss, and ensure compliance with regulatory requirements. === Operation === SWG operates as a proxy server between users and the internet, intercepting and inspecting web traffic to identify and block malicious con...")
- 21:11, 7 May 2024 Secure Socket Layer (hist | edit) [2,492 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Socket Layer (SSL) == The '''Secure Socket Layer''' (SSL) is a cryptographic protocol designed to provide secure communication over the internet. SSL encrypts data transmitted between a client and a server, ensuring that it remains confidential and protected from eavesdropping and tampering. === Operation === SSL uses a combination of asymmetric and symmetric encryption algorithms to secure data transmission. When a client connects to a server over SSL, the...")
- 21:10, 7 May 2024 Secure Shell (hist | edit) [2,689 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Shell (SSH) == '''Secure Shell''' (SSH) is a cryptographic network protocol used for secure communication and remote access over unsecured networks. SSH provides a secure way to access and manage remote systems, encrypting data transmitted between the client and server to protect it from eavesdropping and tampering. === Operation === SSH uses public-key cryptography to authenticate the remote computer and allow it to authenticate the user, if necessary. Once...")
- 21:09, 7 May 2024 Secure Enclave (hist | edit) [2,746 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Enclave == A '''Secure Enclave''' is a hardware-based security feature found in some processors, such as Apple's A-series chips, that provides a secure and isolated environment for storing and processing sensitive information. Secure Enclaves are designed to protect sensitive data, such as cryptographic keys and biometric information, from unauthorized access and tampering. === Operation === Secure Enclaves operate independently of the main processor and ope...")
- 21:08, 7 May 2024 Secure Communication (hist | edit) [2,639 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Communication == '''Secure communication''' refers to the transmission of data between two parties in a way that ensures the confidentiality, integrity, and authenticity of the data. Secure communication is essential for protecting sensitive information from unauthorized access and tampering, especially when transmitted over untrusted networks, such as the internet. === Encryption === Encryption is a key component of secure communication. It involves encodin...")
- 21:06, 7 May 2024 Secure Coding Practices (hist | edit) [3,028 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Coding Practices == '''Secure coding practices''' refer to a set of programming techniques and guidelines designed to enhance the security of software applications by preventing vulnerabilities that can be exploited by attackers. Secure coding practices are essential for developing software that is resistant to malicious attacks and protects sensitive information. === Importance === Secure coding practices are important for several reasons: * '''Vulnerabili...")
- 21:04, 7 May 2024 Secure Boot (hist | edit) [3,251 bytes] Ccocrick (talk | contribs) (Created page with "== Secure Boot == '''Secure Boot''' is a security feature implemented in modern computer systems, including PCs, servers, and embedded devices, to ensure that only trusted software components are loaded during the boot process. Secure Boot helps protect against malware that might attempt to tamper with the boot process or load unauthorized operating systems. === Operation === Secure Boot works by verifying the digital signature of each software component loaded during...")
- 21:00, 7 May 2024 Sarbanes-Oxley Act (hist | edit) [2,631 bytes] Ccocrick (talk | contribs) (Created page with "== Sarbanes-Oxley Act == The '''Sarbanes-Oxley Act''' (SOX) is a United States federal law enacted in 2002 in response to a series of corporate accounting scandals, most notably the Enron scandal. The purpose of the Sarbanes-Oxley Act is to improve transparency and accountability in corporate governance and financial reporting, and to restore public trust in the financial markets. === Key Provisions === Some key provisions of the Sarbanes-Oxley Act include: * '''Corp...")
- 20:58, 7 May 2024 Sandboxing (hist | edit) [2,301 bytes] Ccocrick (talk | contribs) (Created page with "== Sandboxing == '''Sandboxing''' is a security mechanism that isolates software programs from the rest of the system, preventing them from accessing or affecting other parts of the system. Sandboxing is commonly used to run untrusted or potentially malicious code in a controlled environment, reducing the risk of damage to the system and protecting sensitive information. === Operation === Sandboxing works by placing restrictions on the software program's access to sys...")
- 20:57, 7 May 2024 Sandbox (hist | edit) [2,833 bytes] Ccocrick (talk | contribs) (Created page with "== Sandbox == A '''sandbox''' is a controlled environment where software programs can be executed without affecting the underlying system or other programs. Sandboxes are commonly used for testing, development, and running untrusted or potentially malicious code in a safe manner. By isolating the execution of code, sandboxes help prevent damage to the system and ensure the security and stability of the environment. === Operation === In a sandbox environment, the softw...")
- 20:24, 7 May 2024 Running Key Cipher (hist | edit) [2,261 bytes] Ccocrick (talk | contribs) (Created page with "== Running Key Cipher == The '''Running Key Cipher''' is a cryptographic algorithm that encrypts plaintext by combining it with a random keystream. Unlike traditional ciphers that use a fixed key, the Running Key Cipher uses a key that is as long as the plaintext itself, making it more secure. The key is typically generated from a book, passage, or other text, which is known to both the sender and the receiver. === Operation === To encrypt a message using the Running...")
- 20:22, 7 May 2024 Rogue Access Point (hist | edit) [2,310 bytes] Ccocrick (talk | contribs) (Created page with "== Rogue Access Point == A '''Rogue Access Point''' is an unauthorized wireless access point that has been installed on a network without the knowledge or approval of the network administrator. Rogue access points can pose a significant security risk, as they can be used by attackers to intercept sensitive information, launch attacks, and gain unauthorized access to network resources. === Operation === Rogue access points operate by broadcasting a wireless signal that...")
- 20:20, 7 May 2024 Wireless Security (hist | edit) [2,916 bytes] Ccocrick (talk | contribs) (Created page with "== Wireless Security == '''Wireless security''' refers to the measures taken to secure wireless networks and devices from unauthorized access and potential security threats. With the widespread use of wireless networks, ensuring their security is crucial to protect sensitive information and prevent unauthorized access to network resources. === Importance === Wireless security is important for several reasons: * '''Data Protection''': Wireless networks transmit data o...")
- 20:19, 7 May 2024 Conficker (hist | edit) [2,925 bytes] Ccocrick (talk | contribs) (Created page with "== Conficker == '''Conficker''' is a notorious computer worm that spread rapidly across the Internet in the late 2000s, infecting millions of computers worldwide. Conficker, also known as Downup, Downadup, or Kido, exploited vulnerabilities in Microsoft Windows operating systems to spread and perform malicious activities, such as stealing sensitive information, launching denial-of-service attacks, and creating botnets. === Spread and Infection === Conficker spread thr...")
- 20:16, 7 May 2024 Morris Worm (hist | edit) [2,113 bytes] Ccocrick (talk | contribs) (Created page with "== Morris Worm == The '''Morris Worm''' is one of the earliest and most well-known examples of malicious software (malware) that spread through the early Internet, causing significant disruption. Created by Robert Tappan Morris in 1988, the worm was designed to gauge the size of the Internet by exploiting vulnerabilities in Unix systems. However, due to a coding error, the worm spread much faster than intended, infecting thousands of computers and causing widespread con...")
- 20:14, 7 May 2024 Worm (hist | edit) [3,064 bytes] Ccocrick (talk | contribs) (Created page with "== Worm == A '''worm''' is a type of malicious software (malware) that is designed to spread rapidly from one computer to another over a network, typically without any user intervention. Unlike viruses, worms do not need to attach themselves to existing files or programs to spread; instead, they replicate themselves and use network protocols to infect other computers. Worms can spread quickly and can cause significant damage to computer systems and networks. === Charac...")
- 20:12, 7 May 2024 Written Information Security Policy (hist | edit) [3,435 bytes] Ccocrick (talk | contribs) (Created page with "== Written Information Security Policy == A '''Written Information Security Policy''' (WISP) is a document that outlines an organization's approach to information security. A WISP typically includes policies, procedures, and guidelines that define how the organization will protect its information assets and respond to security incidents. WISPs are essential for ensuring that all employees understand their roles and responsibilities regarding information security and tha...")
- 20:11, 7 May 2024 X.509 Certificate (hist | edit) [3,012 bytes] Ccocrick (talk | contribs) (Created page with "== X.509 Certificate == An '''X.509 certificate''' is a digital certificate that uses the X.509 standard to establish the identity of an entity, such as a website, server, or individual, and to enable secure communication over the Internet. X.509 certificates are commonly used in the Transport Layer Security (TLS) protocol to encrypt data transmitted between clients and servers and to authenticate the identity of servers to clients. === Components === An X.509 certifi...")
- 20:09, 7 May 2024 XSS Filter Evasion (hist | edit) [2,701 bytes] Ccocrick (talk | contribs) (Created page with "== XSS Filter Evasion == '''Cross-Site Scripting''' (XSS) Filter Evasion is a technique used by attackers to bypass XSS filters and security mechanisms implemented in web applications. XSS filters are designed to detect and prevent XSS attacks by sanitizing user input and encoding output to prevent malicious scripts from being executed in the context of a web page. However, attackers can use various techniques to evade these filters and successfully execute XSS attacks....")
- 20:05, 7 May 2024 YAML (hist | edit) [2,609 bytes] Ccocrick (talk | contribs) (Created page with "== YAML == '''YAML''' (YAML Ain't Markup Language) is a human-readable data serialization format used for configuration files and data exchange in software applications. YAML is often used in contexts where data needs to be easily readable by humans and can also be easily parsed by machines. YAML files use a simple syntax that is designed to be easy to understand and write, making it a popular choice for configuration files and data storage in many programming languages...")
- 19:57, 7 May 2024 XSS Protection (hist | edit) [2,323 bytes] Ccocrick (talk | contribs) (Created page with "== XSS Protection == '''Cross-Site Scripting''' (XSS) is a type of security vulnerability commonly found in web applications. It allows attackers to inject malicious scripts into web pages viewed by other users. XSS Protection refers to the measures taken to prevent or mitigate the impact of XSS attacks. === Operation === In an XSS attack, attackers exploit vulnerabilities in web applications that allow user input to be interpreted as code by the web browser. This can...")
- 19:56, 7 May 2024 YAML Bomb (hist | edit) [2,593 bytes] Ccocrick (talk | contribs) (Created page with "== YAML Bomb == A '''YAML Bomb''', also known as a '''resource exhaustion attack''', is a type of cyberattack that exploits the way YAML (YAML Ain't Markup Language) parsers process data to consume excessive system resources, such as memory or CPU, leading to denial-of-service (DoS) conditions. YAML is a human-readable data serialization format used in configuration files and data exchange protocols, and YAML Bombs are designed to exploit the recursive nature of YAML st...")
- 19:52, 7 May 2024 Zero Trust Model (hist | edit) [3,656 bytes] Ccocrick (talk | contribs) (Created page with "== Zero Trust Model == The '''Zero Trust Model''' is a cybersecurity approach that emphasizes the principle of "never trust, always verify" when it comes to network security. In a Zero Trust Model, all users, devices, and applications attempting to access resources on the network are treated as potential threats, regardless of whether they are inside or outside the network perimeter. This model aims to prevent data breaches and improve security posture by requiring stri...")
- 19:39, 7 May 2024 Zero-Day Attack (hist | edit) [3,435 bytes] Ccocrick (talk | contribs) (Created page with "== Zero-Day Attack == A '''Zero-Day Attack''' is a cyberattack that exploits a software vulnerability or security flaw that is unknown to the software vendor or developer. Zero-day attacks occur when attackers discover and exploit these vulnerabilities before a patch or fix is available, giving developers zero days to address the issue. Zero-day attacks are considered highly dangerous because they can be used to launch targeted attacks, spread malware, or compromise sys...")
- 19:38, 7 May 2024 Zero-Day Vulnerability (hist | edit) [3,396 bytes] Ccocrick (talk | contribs) (Created page with "== Zero-Day Vulnerability == A '''Zero-Day Vulnerability''', also known as a '''zero-day exploit''', is a software vulnerability or security flaw that is unknown to the software vendor or developer and for which no patch or fix is available at the time it is discovered. Zero-day vulnerabilities are called "zero-day" because developers have zero days to fix the issue before attackers can exploit it. Zero-day vulnerabilities are considered highly dangerous because they ca...")
- 19:36, 7 May 2024 Free Software Foundation (hist | edit) [3,829 bytes] Ccocrick (talk | contribs) (Created page with "== Free Software Foundation == The '''Free Software Foundation''' (FSF) is a nonprofit organization founded in 1985 by Richard Stallman to promote and defend the principles of free software. The FSF is dedicated to advocating for the freedom to use, study, modify, and distribute software, with the goal of ensuring that computer users have the freedom to control their computing and digital lives. The FSF is best known for its role in promoting the GNU operating system an...")
- 19:34, 7 May 2024 GNU Free Documentation License (hist | edit) [3,189 bytes] Ccocrick (talk | contribs) (Created page with "== GNU Free Documentation License == The '''GNU Free Documentation License''' (GNU FDL or simply GFDL) is a copyleft license designed for the free documentation of software and other creative works. It is a part of the GNU Project, initiated by the Free Software Foundation (FSF), and is similar to the GNU General Public License (GPL) used for software. The GFDL allows anyone to freely copy, modify, and distribute a work, as long as the modified version is also distribut...")
