Security
This cyber security glossary explains the meaning of terms about different types of computer security threats as well as words about application security, access control, network intrusion detection, security awareness training and computer forensics.
Anti-virus, antimalware
Terms related to spyware, including definitions about malware and words and phrases about online advertising, adware and online privacy.
-
content personalization
Content personalization is a strategy that tailors webpages and other forms of content to individual users' characteristics or preferences.
-
identity theft
Identity theft, also known as identity fraud, is a crime in which an imposter obtains key pieces of personally identifiable information (PII), such as Social Security or driver's license numbers, in order to impersonate someone else.
-
encryption
Encryption is the method by which information is converted into secret code that hides the information's true meaning.
Application security
Terms related to application security, including procedural definitions for preventing software vulnerabilities and words and phrases about secure code development.
-
zero-day (computer)
Zero-day is a flaw in software, hardware or firmware that is unknown to the party or parties responsible for patching or otherwise fixing the flaw.
-
X.509 certificate
An X.509 certificate is a digital certificate that uses the widely accepted international X.509 public key infrastructure standard to verify that a public key belongs to the user, computer or service identity contained within the certificate.
-
DNS over HTTPS (DoH)
DNS over HTTPS (DoH) is a relatively new protocol that encrypts domain name system traffic by passing DNS queries through a Hypertext Transfer Protocol Secure encrypted session.
Authentication, access control
Terms related to authentication, including security definitions about passwords and words and phrases about proving identity.
-
access control
Access control is a security technique that regulates who or what can view or use resources in a computing environment.
-
Microsoft Windows Azure Active Directory (Windows Azure AD)
Microsoft Windows Azure Active Directory (Windows Azure AD or Azure AD) is a cloud service that provides administrators with the ability to manage end-user identities and access privileges.
-
What is identity and access management? Guide to IAM
Identity and access management (IAM) is a framework of business processes, policies and technologies that facilitates the management of electronic or digital identities.
Malware
Terms related to malware, including definitions about viruses and Trojans and other words and phrases about malicious software.
-
Trojan horse (computing)
In computing, a Trojan horse is a program downloaded and installed on a computer that appears harmless, but is, in fact, malicious.
-
identity theft
Identity theft, also known as identity fraud, is a crime in which an imposter obtains key pieces of personally identifiable information (PII), such as Social Security or driver's license numbers, in order to impersonate someone else.
-
phishing
Phishing is a form of fraud in which an attacker masquerades as a reputable entity or person in email or other communication channels.
Network security
Terms related to network security, including definitions about intrusion prevention and words and phrases about VPNs and firewalls.
-
biometrics
Biometrics is the measurement and statistical analysis of people's unique physical and behavioral characteristics.
-
confidentiality, integrity, and availability (CIA triad)
Confidentiality, integrity and availability, also known as the CIA triad, is a model designed to guide policies for information security within an organization.
-
mobile hotspot
A mobile hotspot is an ad hoc wireless access point that is created by a dedicated hardware device or a smartphone feature that shares the phone's cellular data.
Threat management
Terms related to security threats, including definitions about anti-virus programs or firewalls and words and phrases about malware, viruses, Trojans and other security attacks.
-
DevSecOps
SecOps is a management approach that connects security and operations teams, similar to how DevOps unifies software developers and operations professionals.
-
advanced persistent threat (APT)
An advanced persistent threat (APT) is a prolonged and targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period of time.
-
confidentiality, integrity, and availability (CIA triad)
Confidentiality, integrity and availability, also known as the CIA triad, is a model designed to guide policies for information security within an organization.