Security
This cyber security glossary explains the meaning of terms about different types of computer security threats as well as words about application security, access control, network intrusion detection, security awareness training and computer forensics.
Anti-virus, antimalware
Terms related to spyware, including definitions about malware and words and phrases about online advertising, adware and online privacy.
-
spyware
Spyware is a type of malicious software -- or malware -- that is installed on a computing device without the end user's knowledge.
-
firewall
A firewall is software or firmware that enforces a set of rules about what data packets will be allowed to enter or leave a computer network.
-
encryption
Encryption is the method by which information is converted into secret code that hides the information's true meaning. The science of encrypting and decrypting information is called cryptography.
Application security
Terms related to application security, including procedural definitions for preventing software vulnerabilities and words and phrases about secure code development.
-
Web application firewall (WAF)
A web application firewall (WAF) is a firewall that monitors, filters and blocks data packets as they travel to and from a website or web application.
-
application whitelisting
Application whitelisting is the practice of specifying an index of approved software applications or executable files that are permitted to be present and active on a computer system.
-
cybersecurity
Cybersecurity is the protection of internet-connected systems -- including hardware, software and data -- from cyberattacks.
Authentication, access control
Terms related to authentication, including security definitions about passwords and words and phrases about proving identity.
-
identity provider
An identity provider is a system component that is able to provide an end user or internet-connected device with a single set of login credentials that will ensure the entity is who or what it says it is across multiple platforms, applications and networks. When a third-party website prompts end users to log in with their Google Account, for example, Google Sign-In is the identity provider.
-
unique identifier (UID)
A unique identifier (UID) is a numeric or alphanumeric string that is associated with a single entity within a given system.
-
continuous authentication
Continuous authentication is a method of verification aimed at providing identity confirmation and cybersecurity protection on an ongoing basis.
Malware
Terms related to malware, including definitions about viruses and Trojans and other words and phrases about malicious software.
-
spyware
Spyware is a type of malicious software -- or malware -- that is installed on a computing device without the end user's knowledge.
-
computer worm
A computer worm is a type of malicious software program whose primary function is to infect other computers while remaining active on infected systems.
-
Trojan horse (computing)
In computing, a Trojan horse is a program downloaded and installed on a computer that appears harmless, but is, in fact, malicious.
Network security
Terms related to network security, including definitions about intrusion prevention and words and phrases about VPNs and firewalls.
-
Port Scan
A port scan is a series of messages sent by someone attempting to break into a computer to learn which computer network services -- each associated with a "well-known" port number -- the computer provides.
-
DMZ (networking)
In computer networks, a DMZ (demilitarized zone), also sometimes known as a perimeter network or a screened subnetwork, is a physical or logical subnet that separates an internal local area network (LAN) from other untrusted networks -- usually the internet.
-
application whitelisting
Application whitelisting is the practice of specifying an index of approved software applications or executable files that are permitted to be present and active on a computer system.
Threat management
Terms related to security threats, including definitions about anti-virus programs or firewalls and words and phrases about malware, viruses, Trojans and other security attacks.
-
Port Scan
A port scan is a series of messages sent by someone attempting to break into a computer to learn which computer network services -- each associated with a "well-known" port number -- the computer provides.
-
DMZ (networking)
In computer networks, a DMZ (demilitarized zone), also sometimes known as a perimeter network or a screened subnetwork, is a physical or logical subnet that separates an internal local area network (LAN) from other untrusted networks -- usually the internet.
-
application whitelisting
Application whitelisting is the practice of specifying an index of approved software applications or executable files that are permitted to be present and active on a computer system.