Security
This cyber security glossary explains the meaning of terms about different types of computer security threats as well as words about application security, access control, network intrusion detection, security awareness training and computer forensics.
Anti-virus, antimalware
Terms related to spyware, including definitions about malware and words and phrases about online advertising, adware and online privacy.
-
phishing kit
A phishing kit is a collection of tools assembled to make it easier for people with little technical skill to launch a phishing exploit.
-
keylogger (keystroke logger or system monitor)
A keylogger, sometimes called a keystroke logger or system monitor, is a type of surveillance technology used to monitor and record each keystroke typed on a specific computer's keyboard.
-
bot (robot)
A bot (short for 'robot' and also called an internet bot) is a computer program that operates as an agent to either simulate a human activity or for a user or another program.
Application security
Terms related to application security, including procedural definitions for preventing software vulnerabilities and words and phrases about secure code development.
-
ransomware
Ransomware is a subset of malware in which the data on a victim's computer is locked -- typically by encryption -- and payment is demanded before the ransomed data is decrypted and access is returned to the victim.
-
Pen Testing as a Service (PTaaS)
Pen testing as a service (PTaaS) is a cloud service that provides information technology (IT) professionals with the resources they need to conduct and act upon point-in-time and continuous penetration tests.
-
cybercrime
Cybercrime is any criminal activity that involves a computer, networked device or a network.
Authentication, access control
Terms related to authentication, including security definitions about passwords and words and phrases about proving identity.
-
OAuth
OAuth (Open Authorization) is an open standard authorization framework for token-based authorization on the internet.
-
two-factor authentication (2FA)
Two-factor authentication (2FA), sometimes referred to as two-step verification or dual-factor authentication, is a security process in which users provide two different authentication factors to verify themselves.
-
identity theft
Identity theft, also known as identity fraud, is a crime in which an imposter obtains key pieces of personally identifiable information (PII), such as Social Security or driver's license numbers, in order to impersonate someone else.
Malware
Terms related to malware, including definitions about viruses and Trojans and other words and phrases about malicious software.
-
phishing kit
A phishing kit is a collection of tools assembled to make it easier for people with little technical skill to launch a phishing exploit.
-
Evil Corp
Evil Corp is an international cybercrime network that uses malicious software to steal money from its victims' bank accounts.
-
ransomware
Ransomware is a subset of malware in which the data on a victim's computer is locked -- typically by encryption -- and payment is demanded before the ransomed data is decrypted and access is returned to the victim.
Network security
Terms related to network security, including definitions about intrusion prevention and words and phrases about VPNs and firewalls.
-
Amazon VPC traffic mirroring
Traffic mirroring is a feature for Amazon Virtual Private Cloud (Amazon VPC). The feature is used to monitor the network-level traffic of workloads.
-
asymmetric cryptography (public key cryptography)
Asymmetric cryptography, also known as public-key cryptography, is a process that uses a pair of related keys -- one public key and one private key -- to encrypt and decrypt a message and protect it from unauthorized access or use.
-
island hopping attack
In this type of backdoor attack, the threat actor exploits a weakness downstream from the actual target and uses it as a launching point to reach the intended target. The label 'island hopping' is inspired by a military strategy used in the Pacific theater during World War II.
Threat management
Terms related to security threats, including definitions about anti-virus programs or firewalls and words and phrases about malware, viruses, Trojans and other security attacks.
-
Plundervolt
Plundervolt is a method of hacking that involves depriving an Intel chip of power so that processing errors occur.
-
juice jacking
Juice jacking is a security exploit in which an infected USB charging station is used to compromise connected devices. The exploit takes advantage of the fact that a mobile device’s power supply passes over the same USB cable the connected device uses to sync data.
-
DNS attack
A DNS attack is an exploit in which an attacker takes advantage of vulnerabilities in the domain name system (DNS).