Payload (computing)

Content of a message excluding headers and metadata

For other uses, see Payload (disambiguation).

In computing and telecommunications, the payload is the part of transmitted data that is the actual intended message. Headers and metadata are sent only to enable payload delivery[1][2] and are considered overhead.

In the context of a computer virus or worm, the payload is the portion of the malware which performs malicious action.

The term is borrowed from transportation, where payload refers to the part of the load that pays for transportation.

## Networking

[edit]

In computer networking, the data to be transmitted is the payload. It is almost always encapsulated in some type of frame format, composed of framing bits and a frame check sequence.[3][4] Examples are Ethernet frames, Point-to-Point Protocol (PPP) frames, Fibre Channel frames, and V.42 modem frames.

## Programming

[edit]

In computer programming, the most common usage of the term is in the context of message protocols, to differentiate the protocol overhead from the actual data. For example, a JSON web service response might be:

{ "data": { "message": "Hello, world!" } }

The string Hello, world! is the payload of JSON message, while the rest is protocol overhead.

## Security

[edit]

In computer security, the payload is the part of the private user text which could also contain malware such as worms or viruses which performs the malicious action; deleting data, sending spam or encrypting data.[5] In addition to the payload, such malware also typically has overhead code aimed at simply spreading itself, or avoiding detection.

## See also

[edit]

* Protocol data unit – Unit of information transmitted over a computer network
* Service data unit – Data passed down to a lower layer of the OSI model, yet to be encapsulated

## References

[edit]

1. ^ "payload". Pcmag.com. 1994-12-01. Retrieved 2021-04-29.
2. ^ "Payload". Techterms.com. Retrieved 2021-04-29.
3. ^ "RFC 1122: Requirements for Internet Hosts -- Communication Layers". IETF. October 1989. p. 18\. doi:10.17487/RFC1122. RFC 1122. Retrieved 2010-06-07.
4. ^ "Data Link Layer (Layer 2)". The TCP/IP Guide. 2005-09-20. Retrieved 2010-01-31.
5. ^ "Payload". Techopedia.com. 15 December 2016. Retrieved 2018-03-05.

* v
* t
* e

Information security

Threats|

* Adware
* Advanced persistent threat
* Arbitrary code execution
* Backdoors
* Bombs
* Fork
* Logic
* Time
* Zip
* Hardware backdoors
* Code injection
* Crimeware
* Cross-site scripting
* Cross-site leaks
* DOM clobbering
* History sniffing
* Cryptojacking
* Botnets
* Data breach
* Drive-by download
* Browser Helper Objects
* Viruses
* Data scraping
* Denial-of-service attack
* Eavesdropping
* Email fraud
* Email spoofing
* Exploits
* Fraudulent dialers
* Hacktivism
* Infostealer
* Insecure direct object reference
* Keystroke loggers
* Malware
* Payload
* Phishing
* Voice
* Polymorphic engine
* Privilege escalation
* Ransomware
* Rootkits
* Scareware
* Shellcode
* Spamming
* Social engineering
* Spyware
* Software bugs
* Trojan horses
* Hardware Trojans
* Remote access trojans
* Vulnerability
* Web shells
* Wiper
* Worms
* SQL injection
* Rogue security software
* Zombie

vectorial version

Defenses|

* Application security
* Secure coding
* Secure by default
* Secure by design
* Misuse case
* Computer access control
* Authentication
* Multi-factor authentication
* Authorization
* Computer security software
* Antivirus software
* Security-focused operating system
* Data-centric security
* Software obfuscation
* Data masking
* Encryption
* Firewall
* Intrusion detection system
* Host-based intrusion detection system (HIDS)
* Anomaly detection
* Information security management
* Information risk management
* Security information and event management (SIEM)
* Runtime application self-protection
* Site isolation

Related
security
topics|

* Computer security
* Automotive security
* Cybercrime
* Cybersex trafficking
* Computer fraud
* Cybergeddon
* Cyberterrorism
* Cyberwarfare
* Electronic warfare
* Information warfare
* Internet security
* Mobile security
* Network security
* Copy protection
* Digital rights management

*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template