+1 coinfor reading to the end
+1
Home / Glossary / TOU
Glossary · Security

TOU

Time-of-use

In plain language

The moment a computer actually uses something after checking it was allowed.

The metaphor

Like walking through the door after the bouncer has checked you.

Going deeper

How it works

  • It comes after the check.
  • The gap between the two can be abused.
  • Developers close the gap by checking and using at once.
  • Mostly of interest to software makers.
In practice
  • A program opens a file after checking permission.
  • A researcher shows how an attacker swaps a file in between.
  • A fix removes the delay.

A question owners ask

Do I need to act on it?

No. It is a software design concern.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →