In today’s digital world, cybersecurity is more than just a technical field—it’s a crucial aspect of protecting data, privacy, and online systems. As cyber threats continue to evolve, understanding key cybersecurity terms can help individuals and businesses navigate security challenges effectively. This glossary provides clear definitions of essential cybersecurity concepts, ensuring better awareness and preparedness against cyber risks.
ACCESS CONTROLS
- Access Control: It is a security strategy that regulates who can view or use resources in a system, ensuring only authorized users have access.
- Access Control List (ACL): It comprises a list of permissions associated with a system resource, specifying which users or processes can access it and what operations they can perform.
- Access Control Service: It is a security mechanism that protects system resources from unauthorized access using methods like ACLs and tickets.
- Access Management: The process of controlling and monitoring access to data, resources, and systems within an organization to ensure only authorized individuals have appropriate permissions.
- Access Matrix: A table that defines the rights each user has for different resources, specifying allowed actions like read, write, or execute.
- Discretionary Access Control (DAC): A type of access control where the owner of a resource determines who can access it and what permissions they have.
- List-Based Access Control: A method of access control that uses predefined lists to determine access permissions for users or groups.
- Mandatory Access Control (MAC): A security model where access permissions are enforced by a central authority based on classification levels.
- Role-Based Access Control (RBAC): A security model that assigns permissions based on predefined roles rather than individual users.
- Rule-Set-Based Access Control: An access control system that grants access based on predefined rules, such as time, location, or user attributes.
- Star Property: It is a security rule in the Bell-LaPadula model stating that a subject at a given security level cannot write to a lower security level.
- Simple Security Property: It is a rule in the Bell-LaPadula model stating that a subject at a given security level cannot read data at a higher security level.
- Integrity Star Property: It is a rule in the Biba model stating that a subject at a given integrity level cannot write to a higher integrity level.
- Simple Integrity Property: It is a rule in the Biba model stating that a subject at a given integrity level cannot read data from a lower integrity level.
- Strong Star Property: It is a security rule stating that a subject can only read and write at the same security level, preventing unauthorized data flow.
- Least Privilege: A security principle ensuring users have only the minimum access necessary to perform their tasks.
- Separation of Duties: A security principle that prevents fraud and errors by ensuring no single individual has control over all aspects of a critical process.
- Trusted Ports: Designated network ports that are considered secure and follow specified security protocols to prevent unauthorized access.
AUTHENTICATION
- Authenticity: Ensures that an entity (user, device, or system) is genuine and not fraudulent.
- Authorization: Determines what actions or resources a user is permitted to access after authentication.
- Basic Authentication: A simple authentication method where a username and password are sent in plaintext.
- Biometrics: Uses unique physical traits like fingerprints, facial recognition, or iris scans for authentication.
- Certificate-based Authentication: Uses digital certificates issued by a trusted authority to verify identity.
- Challenge Handshake Authentication Protocol (CHAP): A protocol that periodically reauthenticates users during a session.
- Digest Authentication: Encrypts credentials before transmission to enhance security.
- Extensible Authentication Protocol (EAP): A framework supporting multiple authentication methods, commonly used in wireless networks.
- False Rejects: Occurs when an authentication system incorrectly denies access to a legitimate user.
- Form-based Authentication: Uses web forms to collect credentials for authentication.
- Identity: Represents a unique entity in a system, verified through authentication.
- Kerberos: A network authentication protocol using encrypted tickets for secure access.
- Password Authentication Protocol (PAP): A simple authentication protocol that sends passwords in plaintext.
- S/Key: A one-time password system that enhances security by preventing password reuse.
- Smartcard: A physical card with embedded authentication credentials, often used for secure access.
- Token-based Devices: Generate temporary authentication codes for secure login.
ENCRYPTION
- Advanced Encryption Standard (AES): A widely used symmetric encryption algorithm that encrypts data in fixed-size blocks.
- Algorithm: A set of rules or steps used to perform encryption, decryption, or other cryptographic operations.
- Asymmetric Cryptography: Uses a pair of keys (public and private) for encryption and decryption, ensuring secure communication.
- Block Cipher: Encrypts data in fixed-size blocks rather than individual bits.
- Checksum: A value used to verify data integrity by detecting errors or corruption.
- Cipher: A method or algorithm used to encrypt or decrypt data.
- Ciphertext: The encrypted form of plaintext, unreadable without decryption.
- Cryptanalysis: The study of breaking cryptographic systems and uncovering vulnerabilities.
- Cryptographic Hash: A function that converts input data into a fixed-length hash value, commonly used for integrity verification.
- Cyclic Redundancy Check (CRC): An error-detection method used in data transmission.
- Data Encryption Standard (DES): An older symmetric encryption algorithm, now largely replaced by AES.
- Decryption: The process of converting ciphertext back into readable plaintext.
- Diffie-Hellman: A key exchange protocol that allows secure sharing of encryption keys over an insecure channel.
- Digital Envelope: A combination of symmetric and asymmetric encryption used to securely transmit data.
- Digital Signature: A cryptographic method used to verify the authenticity and integrity of digital messages.
- Digital Signature Algorithm (DSA): A standard algorithm for generating digital signatures.
- Digital Signature Standard (DSS): A U.S. government standard for digital signatures.
- Encryption: The process of converting plaintext into ciphertext to protect data.
- Hash Function: A function that generates a unique hash value from input data, commonly used for integrity checks.
- Hybrid Encryption: Combines symmetric and asymmetric encryption for enhanced security.
- MD5: A widely used cryptographic hash function, though now considered weak due to vulnerabilities.
- Non-repudiation: Ensures that a sender cannot deny sending a message, often achieved using digital signatures.
- One-way Encryption: Encryption that cannot be reversed, typically used in hashing.
- One-way Function: A mathematical function that is easy to compute but difficult to reverse.
- Permutation: A rearrangement of elements, often used in cryptographic algorithms.
- Plaintext: The original, readable form of data before encryption.
- Public Key: A key used in asymmetric encryption that can be shared openly.
- Public Key Encryption: Encryption using a public key, with decryption requiring a private key.
- Public Key Infrastructure (PKI): A framework for managing digital certificates and encryption keys.
- Public Key Forward Secrecy: Ensures that past communications remain secure even if encryption keys are compromised.
- Secure Electronic Transactions (SET): A protocol for securing online financial transactions.
- Secure Sockets Layer (SSL): A protocol for encrypting internet communications, now largely replaced by TLS.
- Session Key: A temporary encryption key used for a single communication session.
- Split Key: A cryptographic technique where a key is divided into multiple parts for security.
- Stream Cipher: Encrypts data one bit or byte at a time, rather than in blocks.
- Symmetric Cryptography: Uses the same key for both encryption and decryption.
- Symmetric Key: A single key used in symmetric encryption.
- Transport Layer Security (TLS): A protocol that secures internet communications, replacing SSL.
- Triple DES (3DES): An encryption algorithm that applies DES three times for increased security.
- Triple-Wrapped: A security technique involving multiple layers of encryption.
- Web of Trust: A decentralized model for verifying digital identities.
NETWORKING
- ACK Piggybacking: A technique in networking where acknowledgment packets are combined with data packets to improve efficiency.
- Address Resolution Protocol (ARP): A protocol used to map IP addresses to MAC addresses in a local network.
- ARPANET: The precursor to the modern internet, developed by the U.S. Department of Defense.
- Autonomous System (AS): A collection of IP networks under a single administrative control.
- Bandwidth: The maximum rate of data transfer across a network.
- Banner: A message displayed by a network service, often used for identification or security warnings.
- BIND: A widely used DNS server software.
- Bit: The smallest unit of data in computing, representing a binary value (0 or 1).
- Border Gateway Protocol (BGP): A protocol used to exchange routing information between different networks.
- Bridge: A network device that connects two or more network segments.
- Broadcast: The transmission of data to all devices in a network.
- Broadcast Address: A special address used to send data to all devices in a network.
- Cell: A small unit of data used in certain networking technologies like ATM.
- Circuit-Switched Network: A type of network where a dedicated communication path is established for the duration of a session.
- Client Collision: A situation where multiple clients attempt to access the same network resource simultaneously.
- Computer Network: A system of interconnected devices that communicate with each other.
- Crossover Cable: A type of Ethernet cable used to connect similar devices directly.
- Daemon: A background process that runs on a computer system.
- Datagram: A self-contained packet of data sent over a network.
- Decapsulation: The process of extracting data from an encapsulated packet.
- Demilitarized Zone (DMZ): A network segment that provides an additional layer of security between internal and external networks.
- Distance Vector: A type of routing protocol that determines the best path based on distance metrics.
- Domain: A unique identifier for a group of computers or websites on the internet.
- Domain Name: A human-readable address for a website (e.g., example.com).
- Domain Name System (DNS): A system that translates domain names into IP addresses.
- Dynamic Routing Protocol: A protocol that automatically adjusts routing paths based on network conditions.
- Echo Reply: A response to an ICMP echo request (used in ping operations).
- Echo Request: A network request used to test connectivity.
- Egress Filtering: A security measure that controls outbound traffic from a network.
- Encapsulation: The process of wrapping data in a protocol header for transmission.
- Ephemeral Port: A temporary port used for short-lived network connections.
- Ethernet: A widely used networking technology for local area networks (LANs).
- Exponential Backoff Algorithm: A method used to manage network congestion by gradually increasing wait times.
- File Transfer Protocol (FTP): A protocol used for transferring files over a network.
- Filter: A mechanism for controlling network traffic based on predefined rules.
- Filtering Router: A router that applies security filters to network traffic.
- Fragment Offset: A field in an IP packet that indicates the position of a fragment in the original data.
- Fragmentation: The process of breaking large packets into smaller ones for transmission.
- Frames: Data units used in networking to encapsulate packets.
- Full Duplex: A communication mode where data can be sent and received simultaneously.
- Fully-Qualified Domain Name (FQDN): A complete domain name that specifies its exact location in the DNS hierarchy.
- Gateway: A device or software that connects different networks and facilitates communication between them.
- Get Host by Name: A function used to resolve domain names into IP addresses.
- Hops: The number of intermediate devices a packet passes through before reaching its destination.
- Host: A device connected to a network that provides or consumes services.
- HTTP Proxy: A server that acts as an intermediary for HTTP requests.
- HTTPS: A secure version of HTTP that encrypts data using SSL/TLS.
- Hub: A network device that connects multiple computers and forwards data to all connected devices.
- Hyperlink: A clickable link that directs users to another webpage or resource.
- Hypertext Markup Language (HTML): The standard language used to create webpages.
- Hypertext Transfer Protocol (HTTP): A protocol used for transmitting web pages over the internet.
- Internet: A global network that connects millions of computers and devices.
- Internet Control Message Protocol (ICMP): A protocol used for error reporting and network diagnostics.
- Internet Engineering Task Force (IETF): An organization that develops and maintains internet standards.
- Internet Message Access Protocol (IMAP): A protocol used for retrieving emails from a mail server.
- Internet Protocol (IP): A set of rules for sending and receiving data across networks.
- Internet Protocol Security (IPSec): A protocol suite used to secure internet communications.
- Internet Standard: A specification approved by the IETF for internet technologies.
- Intranet: A private network used within an organization.
- IP Address: A unique numerical identifier assigned to a device on a network.
- IP Forwarding: The process of routing IP packets between different networks.
- ISO (International Organization for Standardization): An organization that develops global standards.
- ITU-T: A sector of the International Telecommunication Union responsible for telecommunications standards.
- Layer-2 Forwarding Protocol (L2F): A protocol used for tunneling network traffic.
- Layer-2 Tunneling Protocol (L2TP): A protocol used for securely transmitting data over networks.
- Lightweight Directory Access Protocol (LDAP): A protocol used for accessing and managing directory services.
- Link State: A type of routing protocol that maintains a map of the network to determine the best path.
- Loopback Address: A special IP address (127.0.0.1) used for testing network interfaces.
- MAC Address: A unique identifier assigned to a network device for communication.
- Multicast: A method of sending data to multiple recipients simultaneously.
- Multi-Homed: A device or network with multiple connections to different networks.
- Multiplexing: A technique that allows multiple signals to share a single communication channel.
- NAT (Network Address Translation): A method of mapping private IP addresses to a public IP address.
- National Institute of Standards and Technology (NIST): A U.S. agency that develops technology standards.
- Netmask: A value used to define the range of IP addresses within a network.
- Netmask Address Translation: A technique used to modify IP address ranges for routing.
- Network Mapping: The process of identifying devices and connections within a network.
- Network Taps: Devices used to monitor network traffic.
- Non-Printable Character: A character that does not have a visible representation.
- Null Session: An unauthenticated network connection used for testing or exploitation.
- Octet: A group of eight bits, commonly used in IP addressing.
- Open Shortest Path First (OSPF): A routing protocol that determines the shortest path between networks.
- OSI (Open Systems Interconnection): A model that defines networking functions in seven layers.
- OSI Layers: The seven layers of the OSI model, including physical, data link, network, transport, session, presentation, and application.
- Packet: A unit of data transmitted over a network.
- Packet-Switched Network: A type of network where data is broken into packets and sent independently.
- Ping Scan: A technique used to check if a host is active by sending ICMP echo requests.
- Ping Sweep: A method of pinging multiple IP addresses to determine which are active.
- Point-to-Point Protocol (PPP): A protocol used for direct communication between two network nodes.
- Poison Reverse: A technique used in routing to prevent loops by advertising a route as unreachable.
- Port: A communication endpoint used for network services.
- Port Scan: A method used to identify open ports on a networked device.
- Post Office Protocol, Version 3 (POP3): A protocol used for retrieving emails from a mail server.
- Preamble: A sequence of bits used to synchronize communication in a network.
- Private Addressing: The use of IP addresses reserved for internal networks.
- Promiscuous Mode: A network mode where a device captures all traffic on a network.
- Protocol: A set of rules governing communication between devices.
- Protocol Stacks: A collection of protocols working together to enable network communication.
- Proxy Server: A server that acts as an intermediary between a client and the internet.
- Radiation Monitoring: The process of detecting and measuring radiation levels.
- Request for Comment (RFC): A document that defines internet standards and protocols.
- Reverse Address Resolution Protocol (RARP): A protocol used to map MAC addresses to IP addresses.
- Reverse Lookup: The process of finding a domain name from an IP address.
- Routing Information Protocol (RIP): A dynamic routing protocol used to determine the best path for data.
- Routing Loop: A situation where packets circulate endlessly due to incorrect routing.
- RPC Scans: A method used to identify remote procedure call services on a network.
- Secure Shell (SSH): A protocol used for secure remote access to networked devices.
- Segment: A portion of a network or data transmission.
- Server: A device or software that provides services to clients on a network.
- Sessions: A communication exchange between two devices.
- Signal Analysis: The process of examining and interpreting network signals.
- Simple Network Management Protocol (SNMP): A protocol used for managing network devices.
- Sniffer: A tool used to capture and analyze network traffic.
- Sniffing: The act of monitoring network traffic for analysis or security purposes.
- Socket: An endpoint for network communication.
- Socket Pair: A pair of sockets used for bidirectional communication.
- SOCKS: A protocol used for routing network traffic through a proxy server.
- Source Port: The port number of the sender in a network communication.
- Spanning Port: A port used for network monitoring and analysis.
- Split Horizon: A routing technique that prevents loops by not advertising routes back to the source.
- Static Host Tables: A manually configured list of hostnames and IP addresses.
- Static Routing: A routing method where paths are manually configured.
- Stimulus: A signal or event that triggers a response in a network.
- Store-and-Forward: A technique where data is temporarily stored before being forwarded.
- Straight-Through Cable: A type of Ethernet cable used to connect different network devices.
- Subnetwork (Subnet): A smaller network within a larger network.
- Subnet Mask: A value used to define the range of IP addresses within a subnet.
- Switch: A network device that connects multiple devices and directs data efficiently.
- Switched Network: A network where data is directed through switches rather than broadcasted.
- Synchronization: The process of coordinating data transmission between devices.
- T1, T3: High-speed digital transmission lines used for telecommunications and networking.
- TCP Fingerprinting: A technique used to identify an operating system based on its response to TCP packets.
- TCP Full Open Scan: A method of port scanning where a full TCP connection is established to determine open ports.
- TCP Half Open Scan: A stealthier scanning method that sends SYN packets but does not complete the TCP handshake.
- TCP Wrapper: A security tool that controls access to network services based on IP addresses.
- TCP/IP: A suite of communication protocols used for networking and the internet.
- TCPDump: A command-line tool used for capturing and analyzing network traffic.
- TELNET: A protocol used for remote access to networked devices, though it is largely replaced by SSH due to security concerns.
- Tiny Fragment Attack: A network attack that uses small packet fragments to bypass security filters.
- Token Ring: A networking protocol where devices pass a token to control access to the network.
- Topology: The physical or logical arrangement of a network.
- Traceroute: A tool used to trace the path packets take to reach a destination.
- Transmission: The process of sending data over a network.
- Trunking: A method of combining multiple network links to increase bandwidth.
- Tunnel: A secure communication channel used for transmitting data over a network.
- UDP Scan: A method of scanning network ports using UDP packets.
- Unicast: A type of network communication where data is sent to a single recipient.
- Uniform Resource Identifier (URI): A string that identifies a resource on the internet.
- Uniform Resource Locator (URL): A specific type of URI that provides the address of a resource.
- Virtual Private Network (VPN): A secure network connection that encrypts data over the internet.
- Voice Firewall: A security system designed to protect voice communication networks.
- Voice Intrusion Prevention System: A system that detects and prevents unauthorized access to voice networks.
- War Chalking: The practice of marking locations with available Wi-Fi networks.
- War Dialer: A tool used to scan phone numbers for modems or network access points.
- War Dialing: The process of dialing multiple phone numbers to find open modems.
- War Driving: The act of searching for open Wi-Fi networks while driving.
- Web Server: A computer or software that hosts websites and serves web pages.
- WHOIS: A protocol used to query domain registration information.
- Windowing: A technique used in TCP to control the flow of data.
- Windump: A Windows-based tool for capturing and analyzing network traffic.
- Wireless Application Protocol (WAP): A protocol used for accessing the internet on mobile devices.
- Wiretapping: The act of intercepting network or phone communications.
- World Wide Web (WWW): A system of interlinked web pages and resources accessible via the internet.
SECURITY CONCEPTS AND PRACTICES
- Auditing: The process of reviewing and evaluating security policies, controls, and procedures to ensure compliance and effectiveness.
- Availability: Ensuring that systems, data, and services are accessible when needed.
- Blue Team: A cybersecurity group responsible for defending an organization\’s systems against attacks.
- British Standard 7799: A security standard that provides guidelines for information security management.
- Chain of Custody: The documented process of handling and tracking evidence to maintain its integrity.
- Competitive Intelligence: The practice of gathering and analyzing information about competitors to make strategic decisions.
- Confidentiality: Protecting sensitive information from unauthorized access.
- Configuration Management: The process of maintaining and controlling system settings and configurations.
- Cost-Benefit Analysis: Evaluating the financial impact of security measures versus their benefits.
- Countermeasure: A security control or action taken to mitigate risks.
- Cyber-Attack: A malicious attempt to disrupt, damage, or gain unauthorized access to systems.
- Cybersecurity Risk Assessment: The process of identifying and evaluating security risks.
- Data Breach: An incident where sensitive data is accessed or exposed without authorization.
- Data Custodian: A person or entity responsible for managing and protecting data.
- Data Owner: The individual or organization that has authority over specific data.
- Defense in Depth: A security strategy that uses multiple layers of protection.
- Due Care: The responsibility to take reasonable security precautions.
- Due Diligence: The process of thoroughly assessing security risks and controls.
- Eavesdropping: The unauthorized interception of communications.
- Emanations Analysis: Examining electronic signals emitted by devices to detect vulnerabilities.
- Event: Any occurrence that affects system security or operations.
- Exposure: The potential risk of data or systems being compromised.
- Forensic Analysis: Investigating security incidents to determine causes and impacts.
- Hardening: Strengthening security by reducing vulnerabilities in systems.
- Honeypot: A decoy system designed to attract and monitor attackers.
- Information Security: The practice of protecting data and systems from threats.
- Information Warfare: The use of information technology to gain a strategic advantage.
- Ingress Filtering: A security measure that controls incoming network traffic.
- Integrity: Ensuring data remains accurate and unaltered.
- Intrusion Detection: Monitoring systems for signs of unauthorized access.
- Issue-Specific Policy: A security policy that addresses a specific concern or risk.
- Lattice Techniques: Methods used in cryptography and security to structure data access based on hierarchical relationships.
- Log Clipping: The process of filtering logs to remove irrelevant or excessive data while retaining important security information.
- Measures of Effectiveness: Metrics used to evaluate the success of security policies and controls.
- Network-Based IDS (Intrusion Detection System): A security system that monitors network traffic for signs of malicious activity.
- Penetration: The act of gaining unauthorized access to a system or network.
- Penetration Testing: A security assessment method where ethical hackers attempt to exploit vulnerabilities to improve security.
- Personal Firewalls: Software that protects individual devices from unauthorized network access.
- Possession: The control or ownership of sensitive data or security credentials.
- Program Policy: A high-level security policy that defines an organization\’s overall security strategy.
- Proprietary Information: Confidential business data that is protected from unauthorized disclosure.
- Race Condition: A software vulnerability where multiple processes attempt to access shared resources simultaneously, leading to unpredictable behavior.
- Reconnaissance: The process of gathering information about a target system before launching an attack.
- Regression Analysis: A statistical method used to identify trends and relationships in security data.
- Reverse Engineering: The process of analyzing software or hardware to understand its design and functionality.
- Risk: The potential for loss or damage due to security threats.
- Risk Assessment: The process of identifying and evaluating security risks.
- Risk Averse: A security approach that prioritizes minimizing risks over potential benefits.
- Safety: Measures taken to protect systems and data from harm.
- Scavenging: The act of recovering discarded data or information from storage devices.
- Security Policy: A set of rules and guidelines that define an organization\’s security practices.
- Sensitive Information: Data that requires protection due to its confidential nature.
- Session Hijacking: An attack where an attacker takes control of an active session between a user and a system.
- Signature: A unique identifier used in security systems to detect malicious activity.
- Social Engineering: A manipulation technique used to trick individuals into revealing confidential information.
- Spoofing: The act of impersonating a trusted entity to deceive users or systems.
- State Machine: A computational model used to define system behavior based on different states.
- Stateful Inspection: A firewall technique that monitors active connections to determine whether packets should be allowed or blocked.
- Steganalysis: The process of detecting hidden messages within digital files.
- Steganography: A technique used to conceal information within images, audio, or other digital media.
- System Security Officer: A professional responsible for overseeing an organization\’s security policies and practices.
- System-Specific Policy: A security policy tailored to a specific system or application.
- Tampering: The unauthorized modification of data or systems.
- Threat: Any potential danger that could compromise security.
- Threat Assessment: The process of evaluating and prioritizing security threats.
- Threat Model: A structured approach to identifying and mitigating security threats.
- Threat Vector: The method or pathway through which a threat can exploit a vulnerability.
- Trust: The confidence in the security and reliability of a system or entity.
- User: An individual who interacts with a system or network.
DIASTER RECOVERY AND BUSINESS CONTINUITY
- Business Continuity Plan (BCP): A strategy that ensures an organization can continue operations during and after a disruption.
- Business Impact Analysis (BIA): The process of assessing the potential effects of disruptions on business operations.
- Cold/Warm/Hot Disaster Recovery Site: Backup locations used for disaster recovery:
- Cold Site: A backup facility with minimal infrastructure, requiring setup before use.
- Warm Site: A partially equipped facility that can be activated more quickly than a cold site.
- Hot Site: A fully operational backup site that can take over immediately in case of failure.
- Disaster Recovery Plan (DRP): A documented strategy for restoring IT systems and business operations after a disaster.
- Incident: An event that disrupts normal operations, potentially causing security or business risks.
- Incident Handling: The process of managing and mitigating security incidents.
- Incident Response: A structured approach to addressing and resolving security breaches or disruptions.
- Incremental Backups: A backup method that saves only the changes made since the last backup.
- Jump Bag: A pre-packed kit containing essential tools and documents for emergency response.
- Natural Disaster: Events like earthquakes, floods, or hurricanes that can disrupt business operations.
- User Contingency Plan: A strategy ensuring users can continue working during system failures or disruptions.
MALWARE AND ATTACKS
- Account Harvesting: The process of collecting valid usernames from a system to facilitate unauthorized access.
- Active Content: Embedded code in web pages that executes automatically, such as JavaScript or ActiveX.
- Activity Monitors: Security tools that track system activity to detect suspicious behavior.
- Applet: A small application designed to run within another program, often used in web browsers.
- Asymmetric Warfare: A conflict where one party uses unconventional tactics to counter a more powerful opponent.
- Backdoor: A hidden method of bypassing authentication to gain unauthorized access to a system.
- Boot Record Infector: A type of malware that infects the boot sector of a storage device.
- Botnet: A network of compromised computers controlled remotely for malicious purposes.
- Brute Force: A hacking method that systematically tries all possible passwords to gain access.
- Buffer Overflow: A vulnerability where excess data overwrites adjacent memory, potentially allowing code execution.
- Cache Cramming: A technique used to overload a system’s cache with excessive data.
- Cache Poisoning: An attack that corrupts cached data to redirect users to malicious sites.
- Corruption: The unintended alteration or destruction of data.
- Covert Channels: Hidden communication paths used to bypass security controls.
- Crimeware: Malicious software designed to facilitate cybercrime.
- Cyber-Attack: A deliberate attempt to disrupt, damage, or gain unauthorized access to systems.
- Day Zero (Zero-Day): A vulnerability that is exploited before the software vendor releases a fix.
- Defacement: An attack that alters the appearance of a website, often for propaganda or vandalism.
- Denial of Service (DoS): An attack that overwhelms a system, making it unavailable to legitimate users.
- Dictionary Attack: A password-cracking method that systematically tries common words and phrases.
- Disruption: Any event that interferes with normal system operations.
- Domain Hijacking: The unauthorized takeover of a domain name, often through credential theft.
- Dumpster Diving: The practice of searching discarded materials for sensitive information.
- Fault Line Attacks: A type of cyberattack that exploits vulnerabilities in system boundaries or weak points.
- Fast Flux: A technique used by botnets to rapidly change IP addresses associated with a domain, making it harder to track malicious activity.
- Flooding: An attack that overwhelms a network or system with excessive traffic, leading to service disruption.
- Fork Bomb: A denial-of-service attack where a process continuously replicates itself, consuming system resources.
- Fragment Overlap Attack: A method of exploiting IP fragmentation to disrupt network communication.
- Hijack Attack: An attack where an attacker takes control of a session or communication channel.
- Hybrid Attack: A combination of different attack techniques, such as brute force and dictionary attacks, to crack passwords.
- Inference Attack: A method of deducing sensitive information by analyzing patterns in seemingly unrelated data.
- Input Validation Attacks: Exploiting weak input validation to inject malicious code or manipulate system behavior.
- IP Flood: A type of denial-of-service attack that overwhelms a target with excessive IP packets.
- IP Spoofing: The act of forging the source IP address in network packets to disguise identity.
- Logic Bombs: Malicious code that triggers harmful actions when specific conditions are met.
- Man-in-the-Middle Attack: An attack where an attacker intercepts and alters communication between two parties.
- Masquerade Attack: An attack where an unauthorized entity pretends to be a legitimate user.
- Monoculture: A security risk where a large number of systems use the same software, making them vulnerable to widespread attacks.
- Morris Worm: One of the first computer worms, which spread rapidly and caused significant disruption.
- Overload: A condition where excessive data or requests overwhelm a system, leading to failure.
- Password Cracking: The process of attempting to guess or decrypt passwords using various techniques.
- Password Sniffing: Capturing passwords from network traffic using specialized tools.
- Pharming: Redirecting users from legitimate websites to fraudulent ones to steal credentials.
- Phishing: A social engineering attack that tricks users into revealing sensitive information.
- Ping of Death: A denial-of-service attack that sends oversized or malformed ping packets to crash a system.
- Polymorphism: A technique used in malware to change its code structure to evade detection.
- Polyinstantiation: A security technique that allows multiple versions of data to exist based on user permissions.
- Program Infector: A type of malware that attaches itself to executable files and spreads when they are run.
- QAZ: A type of early malware that acted as a backdoor, allowing unauthorized remote access.
- Ransomware: Malicious software that encrypts files and demands payment for decryption.
- Resource Exhaustion: An attack that depletes system resources, causing performance degradation or failure.
- Rootkit: A stealthy malware designed to hide its presence and provide unauthorized access.
- Smishing: A phishing attack conducted via SMS messages to steal sensitive information.
- Smurf Attack: A denial-of-service attack that floods a network with spoofed ICMP requests.
- SQL Injection: An attack that exploits vulnerabilities in databases by injecting malicious SQL queries.
- Stack Mashing: A technique used to exploit buffer overflow vulnerabilities by overwriting memory.
- Stealthing: Methods used by malware to evade detection by security software.
- SYN Flood: A denial-of-service attack that overwhelms a system with incomplete TCP connection requests.
- Trojan Horse: Malicious software disguised as a legitimate program to trick users into installing it.
- Vishing: A phishing attack conducted via voice calls to deceive victims into revealing sensitive data.
- Virus: A type of malware that attaches itself to files and spreads when executed.
- Worm: A self-replicating malware that spreads across networks without user intervention.
- Zero-Day: A vulnerability that is unknown to the software vendor and exploited before a fix is available.
- Zero-Day Attack: An attack that targets a zero-day vulnerability before it is patched.
- Zero-Day Exploit: A method used to take advantage of a zero-day vulnerability.
- Zombies: Compromised computers controlled remotely, often used in botnets for cyberattacks.
SYSTEM AND SOFTWARE
- Byte: A unit of digital data typically consisting of 8 bits.
- Cache: A temporary storage area that speeds up data retrieval.
- CGI (Common Gateway Interface): A protocol for web servers to execute scripts and generate dynamic content.
- Cron: A Unix-based scheduling tool for automating tasks.
- Data Aggregation: The process of collecting and summarizing data from multiple sources.
- Data Mining: The practice of analyzing large datasets to discover patterns and insights.
- Data Warehousing: The process of storing and managing large volumes of structured data for analysis.
- Disassembly: The process of converting machine code back into human-readable assembly language.
- DumpSec: A security tool used to analyze Windows permissions.
- Dynamic Link Library (DLL): A file containing reusable code and functions for Windows applications.
- Escrow Passwords: A security measure where passwords are stored with a trusted third party.
- Fast File System (FFS): A high-performance file system used in Unix-based operating systems.
- Finger: A Unix command used to retrieve user information.
- Fingerprinting: The process of identifying systems or users based on unique characteristics.
- Forest: A collection of Active Directory domains that share a common configuration.
- GNU: A free software project that provides Unix-like operating system components.
- Gnutella: A decentralized peer-to-peer file-sharing network.
- Interrupt: A signal that temporarily halts a process to handle an event.
- Inetd: A Unix daemon that manages network services.
- Kernel: The core component of an operating system that manages hardware and system resources.
- Legion: A network scanning tool used for security assessments.
- Loadable Kernel Modules (LKM): Software components that can be dynamically loaded into the operating system kernel.
- Logic Gates: Basic electronic components that perform logical operations.
- Partitions: Divisions of a storage device used to organize data.
- Patch: A software update that fixes bugs or security vulnerabilities.
- Patching: The process of applying updates to software or systems.
- Practical Extraction and Reporting Language (Perl): A programming language used for text processing and automation.
- Registry: A database in Windows that stores system and application settings.
- Response: A reaction to an event or request in computing.
- Root: The highest-level user in Unix/Linux systems with full administrative privileges.
- Shadow Password Files: Secure storage for encrypted user passwords in Unix/Linux systems.
- Share: A network resource that can be accessed by multiple users.
- Shell: A command-line interface for interacting with an operating system.
- Software: Programs and applications that run on a computer.
- Symbolic Links: Special file types that act as shortcuts to other files or directories.
- Syslog: A logging system used to record events in Unix/Linux environments.
- Unix: A family of operating systems known for stability and multitasking.
- Unprotected Share: A shared network resource without security restrictions.