Payload (computing)

This article is part of a series on
Information security
Information security (main article)
Related security categories
Internet security Cyberwarfare Computer security Mobile security Network security
Threats
Computer crime Vulnerability Eavesdropping Exploits Trojans Viruses and worms Denial of service Malware Payloads Rootkits Keyloggers
Defenses
Computer access control Application security Antivirus software Secure coding Security by design Secure operating systems Authentication Multi-factor authentication Two-factor authentication Authorization Data-centric security Firewall (computing) Intrusion detection system Intrusion prevention system Mobile secure gateway

In computing and telecommunications, the payload is the part of transmitted data that is the actual intended message. The payload excludes any headers or metadata sent solely to facilitate payload delivery.

The term is borrowed from transportation, where "payload" refers to the part of the load that pays for transportation.

Security

In computer security, the payload is the part of malware such as worms or viruses which performs the malicious action; deleting data, sending spam or encrypting data. In addition to the payload, such malware also typically has overhead code aimed at simply spreading itself, or avoiding detection.

Programming

In computer programming, the most common usage of the term is in the context of message protocols, to differentiate the protocol overhead from the actual data. For example, a JSON web service response might be:

{  
   "data":{  
      "message":"Hello, world!"
   }
}

The string "Hello, world!" is the payload, while the rest is protocol overhead.

Networks

In the computer networking, data to be transmitted is the payload, but is almost always encapsulated in some type of a "frame" composed of framing bits and a frame check sequence. Examples are Ethernet frames, Point-to-Point Protocol (PPP) frames, Fibre Channel frames, and V.42 modem frames.