Security
This cyber security glossary explains the meaning of terms about different types of computer security threats as well as words about application security, access control, network intrusion detection, security awareness training and computer forensics.
Application security
Terms related to application security, including procedural definitions for preventing software vulnerabilities and words and phrases about secure code development.
-
Cybercrime
Cybercrime is any criminal activity that involves a computer, networked device or a network.
-
polymorphic virus
A polymorphic virus is a harmful, destructive or intrusive type of malware that can change or 'morph,' making it difficult to detect with antimalware programs.
-
personal health record (PHR)
A personal health record (PHR) is a collection of health-related information that is documented and maintained by the individual it pertains to.
Authentication
Terms related to authentication, including security definitions about passwords and words and phrases about proving identity.
-
federated identity management (FIM)
Federated identity management (FIM) is an arrangement that can be made among multiple enterprises to let subscribers use the same identification data to obtain access to the networks of all enterprises in the group.
-
credential stuffing
Credential stuffing is the practice of using stolen login information from one account to gain access to accounts on a number of sites through automated login.
-
FIDO (Fast Identity Online)
FIDO (Fast ID Online) is a set of technology-agnostic security specifications for strong authentication. FIDO is developed by the FIDO Alliance, a non-profit organization that seeks to standardize authentication at the client and protocol layers.
Malware
Terms related to malware, including definitions about viruses and Trojans and other words and phrases about malicious software.
-
unified threat management (UTM)
A unified threat management (UTM) system is a type of network hardware appliance, virtual appliance or cloud service that protects businesses from security threats in a simplified way by combining and integrating multiple security services and features.
-
cross-site scripting (XSS)
Cross-site scripting (XSS) is a type of injection security attack in which an attacker injects data, such as a malicious script, into content from otherwise trusted websites.
-
Trojan horse (computing)
In computing, a Trojan horse is a program that appears harmless, but is, in fact, malicious.
Network security
Terms related to network security, including definitions about intrusion prevention and words and phrases about VPNs and firewalls.
-
Cybercrime
Cybercrime is any criminal activity that involves a computer, networked device or a network.
-
Managed security service provider (MSSP)
A managed security service provider (MSSP) is an IT service provider that provides an organization with some amount of cybersecurity monitoring and management, which may include virus and spam blocking, intrusion detection, firewalls and virtual private network (VPN) management.
-
DNS redirection
DNS redirection is the controversial practice of serving a Web page to a user that is different from either the one requested or one that might reasonably be expected, such as an error page.
Security threats and countermeasures
Terms related to security threats, including definitions about anti-virus programs or firewalls and words and phrases about malware, viruses, Trojans and other security attacks.
-
blockchain economy
The blockchain economy is a scenario and potential future environment in which the technology replaces current monetary systems, potentially on a global basis.
-
Cybercrime
Cybercrime is any criminal activity that involves a computer, networked device or a network.
-
Managed security service provider (MSSP)
A managed security service provider (MSSP) is an IT service provider that provides an organization with some amount of cybersecurity monitoring and management, which may include virus and spam blocking, intrusion detection, firewalls and virtual private network (VPN) management.
Spyware
Terms related to spyware, including definitions about malware and words and phrases about online advertising, adware and online privacy.
-
JavaScript
JavaScript is a programming language that started off simply as a mechanism to add logic and interactivity to an otherwise static Netscape browser.
-
firewall
In computing, a firewall is software or firmware that enforces a set of rules about what data packets will be allowed to enter or leave a network.
-
principle of least privilege (POLP)
The principle of least privilege (POLP), an important concept in computer security, is the practice of limiting access rights for users to the bare minimum permissions they need to perform their work.