+1 coinfor reading to the end
+1
Home / Glossary / TOC
Glossary · Security

TOC

Time-of-check

In plain language

The moment a computer checks whether something is allowed, such as a file's permissions.

The metaphor

Like a bouncer checking your ID at the door.

Going deeper

How it works

  • The check happens first.
  • The action happens later.
  • If things change in between, the check may be out of date.
  • Attackers try to exploit that gap.
In practice
  • A program checks permission to open a file.
  • A researcher describes a timing attack.
  • A developer tightens the gap.

A question owners ask

Does it matter to a small business?

Rarely. It is a design topic for software developers.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →