Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Cybersecurity Glossary of Terms

Welcome to our comprehensive glossary of training terminology. Use the search box or alphabet navigation below to find definitions for key terms and concepts.

Explore 3,093 cybersecurity terms

All
5
6
8
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z

5G Security

5GHz Band

6GHz Band

802.11 Association

802.11 Authentication

802.1D

802.1Q

802.1s

802.1w

802.1X

802.1X Authentication

802.1X Wireless

AAA

AAA Framework

AAIA

AAISM

ABAC Attribute-Based Access Control

Acceptable Risk

Acceptable Use Policy

Access Blocker

Access Control

Access Control List

Access Control Matrix

Access Control Policy

Access Control System

Access Control Tokens

Access Method

Access Point

Access Port

Access Token Manipulation

Access-List

Account Lockout

Account Takeover (ATO)

Accountability

Accounting

Acknowledgment

ACL

ACL Logging

ACL Matching

ACL Optimization

ACL Placement

Active Authentication

Active Directory

Active Router

ActiveX Data Objects

Activex Data Objects (ADO)

AD Integration

Adaptive Authentication

Adaptive Security

Address Resolution Protocol

Address Resolution Protocol (ARP)

Administrative Access

Administrative Distance

ADONET

Advanced Encryption Standard

Advanced Persistent Threat

Advanced Persistent Threat (APT)

Advanced Threat Detection

Advanced Threat Protection

Adversarial Examples

Adversarial Machine Learning

Adversarial Machine Learning Techniques

Adversary

Adversary Emulation

Adversary-in-the-Middle AiTM

Adware

AES

AES Key Size

After-Action Report (AAR)

Agentic AI

AH

AI Bill of Materials (AIBOM)

AI Governance

AI Guardrails

AI Hallucination

AI Red Teaming

AI Safety

Air Gap

Aircrack-Ng

Alert Fatigue

Algorithm

Always-On VPN

AMP for Endpoints

AMP for Networks

Annex A Controls

Annualized Loss Expectancy (ALE)

Annualized Rate of Occurrence (ARO)

Anomaly Detection

Anomaly-Based Detection

Ansible

Ansible Playbook

Antenna Gain

Anti-Forensics

Antivirus

Anycast

Anycast RP

API Call

API Gateway

API Security

API Security Testing

APIPA

Application Filtering

Application Monitoring

Application Object

Application Security

Application Security Posture Management (ASPM)

Application Visibility

Application-Aware Routing

APT

APT Group

Argon2

ARP

ARP Cache Poisoning

ARP Poisoning

ARP Spoofing

ASLR

Asset

Asset Classification

Asset Inventory

Asset Lifecycle

Asset Management

Assurance

Asymmetric

Atomic Red Team

Atomic Test

Attack Chain

Attack Path

Attack Path Analysis

Attack Surface

Attack Surface Management

Attack Tree Analysis

Attack Vector

Attestation

Attribute Based Access Control

Attribute Based Access Control (ABAC)

Audit

Audit Auditing

Audit Logging

Audit Scope

Audit Trail

Auth Token

Authentication

Authentication Assurance Levels

Authentication Factor

Authentication Header

Authentication Policy

Authentication Protocol

Authentication Server

Authenticator

Authorization

Authorization Code Flow

Authorization Header

Authorization Matrix

Authorization Policy

Authorization Server

Authorization to Operate (ATO)

Auto Negotiation

Auto-MDIX

Auto-Summary

Automation Testing

Automation Workflow

Autonomous Access Point

Availability

Availability Zone

Awareness Training

AWS Certified Cloud Practitioner

AWS Certified Security

Azure Administrator Associate

Azure AI Fundamentals (AI-900)

Azure Fundamentals (AZ-900)

Backdoor

Backdoor Detection

Backup

Backup Integrity Verification

Bandwidth Guarantee

Bandwidth Throttling

Banking Trojan

Baseline Configuration Management

Baseline Security

Baselines

Baselining

Bcrypt

Behavior-Based Detection

Behavioral Access Control

Behavioral Analytics

Behavioral Biometrics

Behavioral Biometrics Detection

Behavioral Firewall

Behavioral Threat Intelligence

Benchmarks

Best Effort Traffic

BeyondCorp

BFD Bidirectional Forwarding Detection

BGP

BGP ASN

BGP Communities

BGP Flap

BGP Hijacking

BGP Local Preference

BGP MED

BGP Path Selection

BGP Peering

BGP Security

BGP Weight

Binary

Biometric Authentication Standards

Biometric Policy

Biometrics

BIOS Security

Bit

Black Box Testing

Black Hat

Black Hat Hacker

Blacklisting

Blast Radius

Block Cipher

Block Cipher Mode of Operation

Blockchain

Blockchain Access Control

Blockchain Forensics

Blockchain Security

Blocked Port

Blue Team

BlueJacking

BlueRed Team Integration

BlueSnarfing

Bluetooth

Bluetooth Low Energy (BLE)

Bluetooth Security

Bluetooth Wireless Personal Area Network IEEE 802.15

Boot Sector Virus

Bootkit

BootP

Bot Command and Control

Botnet

Botnet Detection

Boundary Defense

BPDU

BPDU Filter

BPDU Guard

Breach

Breach and Attack Simulation (BAS)

Breach Detection System

Break-Glass Account

Bridge ID

Bridges

Bridging Loop

Bring Your Own Device BYOD Security

Broadcast

Broadcast Domain

Broadcast Storm

Browser Fingerprinting

Browser Isolation

Browser Isolation Technology

Browser Security

Brute Force Attack

BSSID

Buffer

Buffer Management

Buffer Overflow

Bug Bounty

Bug Bounty Program

Business Continuity

Business Continuity (BC)

Business Continuity and Disaster Recovery

Business Continuity Planning

Business Email Compromise (BEC)

Business Impact Analysis

Business Impact Analysis (BIA)

BYOD

Byte

Cable Management

CAM Table

CAN Bus

Capability Maturity Model for Software

Capability Maturity Model For Software Or Software Capability Maturity Model CMM Or SW CMM

CAPM

Captive Portal

CAPWAP

CBWFQ Class-Based Weighted Fair Queuing

CC

CCISO

CCNA

CCNP Security

CCOA

CCPA CPRA Compliance

CCPA Data Rights Management

CCSP

CDP

CDP Cisco Discovery Protocol

CDPSE

cEdge

CEH

CEH

Cellular Network

Centralized Authentication

Certificate

Certificate Authentication

Certificate Authority

Certificate Authority (CA)

Certificate Chain

Certificate Pinning

Certificate Pinning Implementation

Certificate Transparency

CGEIT

CGRC

Chain of Custody

Change Detection

Change Management

Channel Bonding

Channel Group

Channel Overlap

Checksum

CI/CD Pipeline Attack (DevOps Pipeline Compromise)

CIA Triad

CIDR

Cipher

Cipher Block Chaining (CBC)

Cipher Suite

Ciphertext

CIR Committed Information Rate

CIS Benchmarks

CISA

Cisco AMP

Cisco AnyConnect

Cisco ASA

Cisco Catalyst Center

Cisco CCNA

Cisco CCNP Enterprise

Cisco Certified Cybersecurity Associate

Cisco DNA Center

Cisco FMC

Cisco FTD

Cisco IBN

Cisco ISE

Cisco Prime Infrastructure

Cisco pyATS

Cisco Sandbox Lab

Cisco Secure Email

Cisco Secure Endpoint

Cisco Secure Firewall

Cisco SecureX

Cisco Snort

Cisco ThousandEyes

Cisco Threat Grid

Cisco Umbrella

CISM

CISSP

Class Map

Class-Based WFQ

Classification

Clearing

CLI Debugging

Cloud Access Security Broker (CASB)

Cloud Access Security Broker Implementation

Cloud Detection and Response (CDR)

Cloud Edge

Cloud Gateway

Cloud Infrastructure Entitlement Management (CIEM)

Cloud Landing Zone

Cloud Misconfiguration

Cloud NAT

Cloud Networking

Cloud OnRamp

Cloud Security

Cloud Security Alliance STAR Certification

Cloud Security Posture Management (CSPM)

Cloud Workload Protection Platform (CWPP)

Cloud-Native Application Protection Platform (CNAPP)

CND

Co-Channel Interference

CoA Change of Authorization

COBIT

Code Division Multiple Access (CDMA)

Collision Domain

COM

Command and Control

Command and Control C2

Command and Control Channel (C2)

Command Injection

Common Object Request Broker Architecture (CORBA)

Common Vulnerability Scoring System (CVSS)

Compensating Control

Compliance

Compliance Check

Compliance Monitoring

Compliance Report

CompTIA A+

CompTIA Data+

CompTIA Linux+

CompTIA Network+

CompTIA PenTest+

CompTIA Project+

CompTIA Security+

CompTIA Security+

CompTIA SecurityX

Computer Virus

Concentrators

Condition Coverage

Conditional Access

Confederation

Confidential Computing

Confidentiality

Configuration Archive

Configuration Drift

Configuration Management

Configuration Management (CM)

Configuration Standard

Confusion

Congestion Avoidance

Congestion Control

Congestion Management

Consent Management

Consent Phishing

Console Line

Container Breakout (Container Escape)

Container Escape

Container Hardening

Container Orchestration Security

Container Registry

Container Security

Container Vulnerability Scanning

Content Distribution Network (CDN)

Context-Aware Access Control

Continuous Authentication

Continuous Controls Monitoring

Continuous Integration Continuous Deployment CICD Security

Continuous Monitoring Plan

Continuous Security Validation

Control Plane

Control Plane Policing

Control Plane Protection

Control Plane Security

Controlled Unclassified Information (CUI)

Cookie

Cookie Consent

Copy Running-Config

Correlation Policy

CoS

CoS Class of Service

Covert Channel

Covert Security Testing

Cozy Bear APT29

Credential Stuffing

Credential Stuffing Prevention

CRISC

Critical Assets

Critical Infrastructure Protection (CIP)

Critical Security Controls

CRL

Cross Site Request Forgery (CSRF)

Cross Site Scripting (XSS)

Cross-Account Access

Cross-Cloud Policy

Crossover Error Rate (CER)

Cryptanalysis

Crypto Map

Crypto-Agility

Cryptocurrency Security

Cryptographic Strength

Cryptography

Cryptojacking

Cryptology

CSSLP

Curie Temperature

Custodian

Customer Identity and Access Management (CIAM)

Customer Managed Key (CMK)

CVE Common Vulnerabilities and Exposures

CVSS Score

CWE SANS Top 25

Cyber Deception Technology

Cyber Extortion

Cyber Insurance

Cyber Kill Chain

Cyber Physical Systems Security

Cyber Range

Cyber Resiliency

Cyber Risk Quantification

Cyber Threat Hunting

Cyber Threat Intelligence (CTI)

Cyber Threat Intelligence CTI Lifecycle

Cyber Warfare

Cyber-Physical Attack

Cybersecurity

Cybersecurity Maturity Model Certification (CMMC)

CySA+

Dark Web Intelligence

Data Access Layer

Data Anonymization

Data Broker

Data Classification

Data Custodian

Data Diode

Data Encryption

Data Encryption Standard

Data Exfiltration

Data Flow Coverage

Data Governance

Data Handling Policy

Data Integrity Verification

Data Leak Site (DLS)

Data Lifecycle Management

Data Lineage

Data Link Layer

Data Localization

Data Loss Prevention (DLP)

Data Loss Scenario

Data Mapping Classification Tools

Data Masking

Data Minimization

Data Minimization Principle

Data Mining

Data Owner Controller

Data Ownership Policy

Data Plane

Data Plane Protection

Data Plane Security

Data Poisoning

Data Processor

Data Protection Officer (DPO)

Data Retention

Data Security Posture Management (DSPM)

Data Sovereignty

Data Subject

Data Subject Access Rights

Data Tokenization

Data Transformation

Database Management System (DBMS)

Database Model

DCSync Attack

DDoS

DDoS Mitigation Services

De-Identification

Deauthentication Attack

Debug Command

Decapsulation

Decentralized Application

Decision Branch Coverage

Decryption

Deep Packet Inspection (DPI)

Deepfake

Deepfake Detection

Default Credentials

Default Gateway

Default Route

Defense Evasion

Defensible Destruction

DeFi Security

Degaussing

Delay

Delegated Administration

Denial of Service

Dependency Confusion

Designated Port

Detection as Code

Detection Engineering

Detection Engineering Maturity

Device Inventory

Device Trajectory

DevNet Sandbox

DevOps

DevSecOps

DFARS

DFS Channels

DFS Compliance

DHCP

DHCP Exclusion

DHCP Lease

DHCP Relay

DHCP Scope

DHCP Snooping

DIA Direct Internet Access

Diamond Model of Intrusion Analysis

Differential Privacy

Diffusion

Digital Certificate

Digital Footprint

Digital Forensics

Digital Forensics and Incident Response (DFIR)

Digital Rights Management (DRM)

Digital Risk Protection

Digital Signals

Digital Signature Algorithm

Digital Signatures

Direct Connect

Directory Traversal Mitigation

Disassociation Process

Disaster Recovery

Disaster Recovery (DR)

Discretionary Access Control

Discretionary Access Control (DAC)

Disposition of Data

Distance Vector Protocol

Distribute-List

Distributed Control System (DCS)

Distributed Denial Of Service DDOS Attack

Distributed Ledger Technology (DLT)

Distributed Network Protocol 3 DNP3

DKIM

DMARC

DMARC SPF DKIM Email Security

DMVPN

DMZ

DNS

DNS Amplification

DNS Filtering

DNS Lookup

DNS over HTTPS DoH

DNS over TLS DoT

DNS Security

DNS Security Extensions

DNS Security Extensions (DNSSEC)

DNS Server (IP)

DNS Sinkhole

DNS Sinkholing

DNS Spoofing

DNS Tunneling

DNS-Layer Security

DNS64

DNSSEC Implementation

Docker Security

Document Control

Domain Generation Algorithm (DGA)

Domain Lookup

Domain Reputation

Domain Security

DORA Regulation

DoS

Dot1Q

Double Extortion

Double Extortion Ransomware

Downloader

Drive-by Download

Drop Probability

Dropper

DSCP

DUAL

Dual Stack

Due Care

Due Diligence

Duo MFA

Duplex Mismatch

Dwell Time

Dynamic ACL

Dynamic Application Security Testing (DAST)

Dynamic ARP Inspection

Dynamic DNS

Dynamic MAC Entry

Dynamic Malware Analysis

Dynamic or Private Ports

Dynamic Routing

Dynamic Secrets Management

Dynamic Testing

Dynamic Trunking Protocol (DTP)

EAP

EAP Chaining

EAP-FAST

EAP-PEAP

EAP-TLS

East-West Traffic

Eavesdropping Attack

eBGP

ECC

ECIH

Edge Security

Egress Filtering

Egress Queue

EIGRP

EIGRP AS Number

EIGRP Feasible Distance

EIGRP Feasible Successor

EIGRP Hello Packet

EIGRP Metric

EIGRP Reported Distance

EIGRP Successor

EIGRPv6

Election Security

Email Authentication

Email Encryption

Email Security

Email Security Gateway

Email Spoofing

Embedded Event Manager

Embedded Event Manager (EEM)

Emotet

Encapsulation

Encoding

Encryption

Encryption-less Extortion

End to End Encryption

End-to-End Path Visibility

Endpoint Detection And Response (EDR)

Endpoint Detection and Response EDR Implementation

Endpoint Protection Platform (EPP)

Endpoint Security

Endpoint Security Control

Enforced MFA

Engineering Workstation (EWS)

Enterprise Architecture Security

Entropy

Enumeration

Environmental Risk

Ephemeral Environment

Ephemeral Ports

EPSS Exploit Prediction Scoring System

Equal-Cost Multi-Path (ECMP)

Eradication

Eradication Phase

ERSPAN

Escalation of Privileges

Escalation Procedure

ESP

EtherChannel

EU AI Act

EUI-64

EV Certificate

Event Correlation

Evidence Collection

Evidence Gathering

Evil Twin

Evil Twin Attack

Excessive Agency

Executive Risk Tolerance

Exfiltration

EXIF Data

Exploit

Exploit Chaining

Exploit Kit

Exploit Mitigation

Exposure Factor (EF)

Extended ACL

Extended Detection and Response (XDR)

Extended Validation EV Certificate

Exterior Gateway Protocol

External Attack Surface Management (EASM)

External Authentication

External Risk Exposure

External Syslog Server

External Threat

Fabric Border

Fabric Control Plane

Fabric Edge

Factory Reset

Fail Close

Fail Open

Failover Detection

Failover Link

False Acceptance Rate Type (II)

False Flag Operations

False Negative

False Positive

False Rejection Rate Type I

Fancy Bear APT28

Fast Convergence

Fast Secure Roaming

Federated Identity

Federated Learning

FedRAMP

Fibre Channel over Ethernet FCoE

FIDO2 Authentication

File Carving

File Policy

File Reputation

File Sandboxing

File Signature

File Trajectory

Fileless Malware

Fileless Ransomware

Fileless Threat

Filtering

FIPS 140-2 and 140-3

FIPS 199

Firepower Services

Firewall

Firewall as a Service FWaaS

Firewall Rule Optimization

Firewalls

Firmware Reverse Engineering

Firmware Security

Firmware Validation

First Hop Redundancy

First Hop Redundancy Protocol

First Responder

FISMA

Fleet Management

FlexConnect

FlexVPN

Floating Static Route

Flooding

Flow Control

Forensic Chain of Custody

Forensic Image

Forensic Log Aggregator

Forensic Readiness

Forensics

Forward Delay

Forwarding

Fragmentation

Frame

FTP

Full Packet Capture

Full Spectrum Cybersecurity

Full-Scope Penetration Test

Fuzz Testing

Galois Counter Mode (GCM)

Gap Analysis

GAP Assessment

Garbage Collection Security Context

GARP

Gateway

Gateway Firewall

GDPR

GDPR Compliance

GDPR Technical Requirements

Generative AI GenAI

Genie CLI

Geofencing

Geofencing Policy

Geolocation Access Control

Geolocation Enforcement

Geolocation Filtering

Geotagging

Geotagging Policy

Geotagging Risk Mitigation

GETVPN

Ghostware

Git

GLBP

Glitching

Global Config Mode

Global System for Mobiles (GSM)

Global Unicast Address

GNULinux Security

Gold Image

Golden Ticket Attack

Google Hacking

Governance

Governance Committee

Governance Risk Compliance Platform

Governance Structure

GPG GNU Privacy Guard

GPG Key

GPG Key Management

Graceful Degradation

Graceful Restart

Granular Access Control

GraphQL Security

Gray Box Testing

GRC Governance Risk and Compliance

GRC Maturity Model

GRC Tooling

GRE

GRE over IPsec

Grid Security Infrastructure (GSI)

Group Account Control

Group Membership Review

Group Policy

Group Policy Object

Guard Pages

Guest VLAN

Guest Wireless

Guidelines

Hacktivist

Hardcoded Secrets

Hardened Image

Hardened Operating System

Hardening

Hardening Guide

Hardware Root of Trust

Hardware Security Module (HSM)

Hardware Tamper Detection

Hardware Token

Hardware-Based Encryption Module

Harvest Now, Decrypt Later (HNDL)

Hash Based Message Authentication Code (HMAC)

Hash Collision

Hash Collisions

Hash Cracking Prevention

Hash Function

Hashing

Hashing Algorithm

Hashing Algorithm Strength

Hashing Policy

Head Drop

Heartbleed Vulnerability

Heatmap

Hello Time

Heuristic Detection

Hierarchical QoS

High Availability

High Availability Design

High Entropy Secrets

High-Fidelity Alert

HIPAA

HIPAA Compliance

HIPAA Security Rule

HMAC Hash-Based Message Authentication Code

HMAC-Based One-Time Password (HOTP)

Hold-Down Timer

Homomorphic Encryption

Honeynet

Honeypot

Honeypots Honeynets

Honeytoken

Host Firewall Rules

Host Hardening

Host-Based Intrusion Detection

Hostname Resolution

HSRP

HTTP 3

HTTP Security Headers

HTTP Strict Transport Security (HSTS)

HTTPS

HTTPS Server

Human Machine Interface (HMI)

Hybrid Cloud

Hybrid Cloud Security

Hybrid Identity Management

Hybrid Routing Protocol

Hybrid Threat Simulation

Hypervisor Ransomware (ESXi)

Hypervisor Security

Hypothesis-Driven Threat Hunting

IaaS

IAM Governance

IAM Policy

IAM Policy Audit

iBGP

ICMP

ICMP Flood

ICS Security

Identity And Access Management (IAM)

Identity as a Service IDaaS

Identity Broker

Identity Brokering

Identity Claim Verification

Identity Federation Protocols

Identity Governance

Identity Governance and Administration (IGA)

Identity Governance Framework

Identity Lifecycle

Identity Management

Identity Proofing

Identity Provider

Identity Sprawl

Identity Store

Identity Theft

Identity Threat Detection and Response

Identity Verification Process

Identity-Aware Proxy (IAP)

Identity-Based Attack

Identity-Based Policy

IDS

IEC 62443

IGMP

IGMP Querier

IGMP Snooping

IGP

IKE

IKE Phase 1

IKE Phase 2

IKEv1

IKEv2

Immutable Backup

Immutable Infrastructure

Immutable Logs

Impact Flag

Impersonation Attack

Impersonation Protection

Implicit Deny

Implicit Trust Zone

Inbound Filtering

Incident Analysis

Incident Commander

Incident Escalation Matrix

Incident Handling

Incident Management

Incident Playbook

Incident Response

Incident Response (SLA)

Incident Response Plan

Incident Response Workflow

Incident Scenarios

Incident Simulation

Independent Validation

Indicator Enrichment

Indicator of Attack

Indicator of Compromise

Indicators of Attack

Indicators of Attack IoA

Indicators of Compromise

Indicators of Compromise IoC

Indirect Prompt Injection

Industrial Control System

Industrial Control System ICS Security

Industrial Control System Security

Industrial DMZ

Industrial Firewall

Industrial Internet of Things IIoT

Information Classification

Information Classification Policy

Information Flow Control

Information Governance

Information Handling Procedures

Information Lifecycle

Information Protection Strategy

Information Security Management System (ISMS)

Information Security Officer

Information Sharing Policy

Infostealer

Infrastructure as Code IaC

Infrastructure as Code IaC Security

Infrastructure as Code Security

Infrastructure Enumeration

Infrastructure Monitoring

Infrastructure Obfuscation

Infrastructure Threat Modeling

Ingress Filtering

Ingress Traffic

Inherent Risk

Initial Access

Initial Access Broker (IAB)

Initialization Vector (IV)

Inline Mode

Inline Threat Prevention

Inline vs

Input Policy

Input Validation

Insecure Design

Insecure Direct Object References (IDOR)

Inside NAT

Insider Activity Monitoring

Insider Risk Management

Insider Threat

Insider Threat Analytics

Insider Threat Management

Insider Threat Playbook

Insider Threat Simulation

Instance Metadata Service (IMDS)

Integrated Process and Product Development (IPPD)

Integrated Risk Management

Integrated Risk Management Solution

Integrity

Integrity Monitoring Tool

Integrity Verification

Intellectual Property

Intellectual Property Protection

Intellectual Property Risk

Intent-Based Networking

Intent-Based Segmentation

Inter-VLAN Routing

Inter-VLAN Routing Security

Interactive Application Security Testing

Interactive Application Security Testing (IAST)

Interactive Login Restrictions

Interactive Threat Emulation

Interagency Agreement

Interconnection Risk

Interface Config Mode

Interface Control

Interface Description

Interface Loopback

Interface Security Gateway

Interface Segregation

Interface Status

Interior Gateway Protocol

Internal Audit Review

Internal Network Segmentation

Internal Penetration Test

Internal Threat Simulation

Internet Control Message Protocol (ICMP)

Internet Governance

Internet Group Management Protocol (IGMP)

Internet of Things Security

Internet Protocol IPv4

Internet Protocol IPv6

Interoperable Access Control

Intrusion Detection

Intrusion Detection System (IDS)

Intrusion Policy

Intrusion Prevention

Intrusion Prevention System (IPS)

Inventory

Inverse Trust

IOC Indicator of Compromise

IoT Asset Management

IoT Botnet

IoT Device Onboarding

IoT Device Security

IoT Hardening

IOT Security

IP Address Spoofing

IP Addressing

IP Blacklist Monitoring

IP Precedence

IP Reputation

IP Reputation Analysis

IP SLA

IP SLA Responder

IP Source Guard

IP Spoofing

IP Whitelisting

IPFIX

IPS

IPS Event

IPsec

IPsec Profile

IPsec VPN

IPv4

IPv6

IPv6 Security

IPv6 Tunneling

ISAKMP

ISE Guest Portal

ISL

ISO 27001 Control Objective

ISO IEC 27001

ISO IEC 27002

ISO IEC 42001

ISOIEC 27001

Isolation Environment

ISSAP

ISSEP

ISSMP

IT Asset Management

IT General Controls

IT Governance

IT OT Convergence

IT Risk Assessment

IT Security Strategy

ITIL 4 Foundation

Jailbreaking Detection

JDBC

JIT Privilege Management

Job Rotation

JSON

Just in Time JIT Access

Just-in-Time Access

Just-in-Time Access Control

Just-in-Time Authentication

Just-In-Time Privilege Escalation

JWT

JWT Exploit Mitigation

JWT Security

JWT Validation

Kerberoasting

Kerberos Authentication

Key Clustering

Key Compromise Recovery

Key Derivation Function (KDF)

Key Distribution Center

Key Escrow

Key Exchange

Key Length

Key Management

Key Management Lifecycle

Key or Cryptovariable

Key Performance Indicator

Key Recovery

Key Revocation Strategy

Key Risk Indicator (KRI)

Key Rotation Policy

Key Stretching

Key Vault Access Monitoring

Keylogger

Keystore Rotation

Keystroke Dynamics

Keystroke Injection Prevention

Kill Chain

Kill Chain Modeling

Knowledge Discovery in Databases (KDD)

Known Plaintext Attack

Kubernetes Admission Controller

Kubernetes Escape (Container Breakout)

Kubernetes Security

Kubernetes Security Posture Management (KSPM)

L2TP

Label Stack

Label Switching

Label-Based Access Control

LACP

Land Attack

Language-Agnostic Policy Enforcement

Large Language Model (LLM)

Lateral Movement

Lattice Based Cryptography

Lawful Basis for Processing

Layer 2 Switch

Layer 3 Switch

Layer 7 Firewall

Lazarus Group

LDAP

Least Access Principle

Least Functionality

Least Privilege

Least Privilege Access

Least Privilege Enforcement

Least Risk Path

Legacy System Risks

Legacy System Security

Legal Intercept

Legal Risk

Lessons Learned

License Compliance

License Management

Lifecycle

Lifecycle Management

Lightweight Access Point

Lightweight Directory Access Protocol

Line VTY

Link Aggregation

Link-Local Address

Link-State Protocol

Linux Security Modules

LISP

Live Acquisition

Live Response

Living off the Land Binaries (LOLBins)

Living Off the Land Binary LOLBin

Living Off the Land LotL Attack

LLDP

LLDP Link Layer Discovery Protocol

LLM Jailbreak

LLQ Low Latency Queuing

Load Balancing

Load Distribution

Load Sharing

Local Authentication

Local User Database

LockBit

Log

Log Aggregation

Log Anomaly Detection

Log Buffer

Log File Integrity

Log Management

Log Management Policy

Log Management System

Log Parsing

Log Retention

Log Retention Policy

Log Source Normalization

Log Tamper Detection

Log4Shell Vulnerability

Logging

Logging and Auditing

Logging and Monitoring

Logging Facility

Logging Levels

Logging Monitor

Logic Bomb

Logical Access Control System

Logical Access Controls

Login Banner

Login Block-for

Login Delay

Long-Term Retention

Loop Coverage

Loop Guard

Loop Prevention

Loopback Interface

Low and Slow Attack Detection

Low Latency Queue

LSDB

MAC Address

MAC Address Aging

MAC Address Table

MAC Authentication Bypass

MAC Flapping

MAC Flooding

MAC Spoofing

Machine Identity

Machine-Generated Identity

Macro Malware

MACsec

Maintenance Policy

Malicious Certificate Detection

Malicious Domain Blocking

Malicious Insider

Malvertising

Malware

Malware Analysis

Malware Analysis Sandbox

Malware as a Service MaaS

Malware Attachment Blocking

Malware Beaconing

Malware Behavior Analysis

Malware Callback Interruption

Malware Containment Strategy

Malware Detection

Malware Distribution Network

Malware Family Classification

Malware Lifecycle

Malware Payload

Malware Payload Inspection

Malware Repository

Malware Sandbox Analysis

Man in the Browser MitB Attack

Man In The Middle Attack (MITM)

Man-in-the-Browser

Man-in-the-Middle

Managed Detection and Response

Managed Detection and Response (MDR)

Managed Security Service Provider

Management Plane

Management Plane Security

Management Review

Mandatory Access Control

Mandatory Access Controls (MAC)

Mandatory Vacation

Mantrap

Manual Summary

Manual Test

Marking

Masked Data

Master File Table (MFT)

Maximum Allowable Downtime (MAD)

MDIX

MDM Integration

Mean Time to Acknowledge (MTTA)

Mean Time to Detect

Mean Time to Detect (MTTD)

Mean Time to Repair (MTTR)

Mean Time to Respond

Mean Time to Respond (MTTR)

Media

Media Sanitization

Meltdown Spectre Vulnerabilities

Memory Corruption Prevention

Memory Dump Analysis

Memory Forensics

Memory Protection

Memory Safe Programming

Memory Safety Enforcement

Message Authentication

Message Authentication Code

Message Authentication Code (MAC)

Message Digest

Message Integrity

Message Integrity Check

Metadata

Metadata Injection Defense

Metadata Management

Metadata Policy Enforcement

Metadata Scrubbing

Metamorphic Malware

Metric

Metric Manipulation

Metrics and (KPIs)

Metrics Framework

MFA Fatigue

MFA Fatigue Attack

MFA Multi-Factor Authentication

MIB

Microsegmentation

Microsoft 365 Certified: Endpoint Administrator Associate

Microsoft Power BI

MicroVM Isolation

Minimum Password Length

Minimum Viable Secure Product

Mirai Botnet

Misuse Case

Mitigation

MITRE Caldera

Mitre Framework

ML-KEM

Mobile App Penetration Test

Mobile App Shielding

Mobile Application Security

Mobile Code

Mobile Device Control

Mobile Device Forensics

Mobile Device Jailbreak Detection

Mobile Device Management (MDM)

Mobile Device Policy

Mobile Endpoint Control

Mobile Security Posture

Mobile Threat Defense

Mobility Anchor

Mobility Express

Mobility Group

Modbus

Model Context Protocol (MCP)

Model Extraction Attack

Model Poisoning

Monitoring

Monitoring Dashboard

Monitoring Policy

Monitoring Rules

Monitoring Strategy

MOTD

MPLS

MPLS LDP

MPLS TE

MPLS VPN

MQC

Mroute

MSDP

MSS

MST

MTU

Multi Tenancy

Multi-Cloud Security

Multi-Condition Coverage

Multi-Factor Authentication

Multi-Factor Enrollment Policy

Multi-Factor Policy

Multi-Party Risk

Multi-Platform Threat Intelligence

Multi-Tenancy Security

Multicast

Multicast Boundary

Multicast Group

Multicloud

Multipartite Virus

Multiprotocol Label Switching (MPLS)

Multitenancy Risk

Mutual Authentication

Mutual TLS

N-Day Exploit

NAC Network Access Control

NAC Policy Enforcement

Named ACL

NAT

NAT Overload

NAT Pool

NAT Rule

NAT Traversal

NAT64

Nation-State Threat Actor

National Institute of Standards and Technology

National Security Framework

Native Encryption

Native VLAN

Native VLAN Mismatch

NBAR

NDA Compliance

Need-to-Know

Negative Testing

Neighbor Adjacency

NERC CIP Compliance

NETCONF

NetFlow

NetFlow Analysis

Network Access Control

Network Access Control (NAC)

Network Access Device (NAD)

Network Access Policy

Network ACL

Network Address Translation

Network Assurance

Network Behavior Analysis

Network Deception

Network Detection and Response

Network Egress Control

Network Flow Capture

Network Flow Monitoring

Network Forensics

Network Function Virtualization (NFV)

Network Hardening

Network Intrusion Detection System

Network Intrusion Prevention

Network Isolation

Network Monitoring Strategy

Network Object

Network Packet Capture

Network Policy Enforcement

Network Programmability

Network Quarantine

Network Reconnaissance

Network Security

Network Segmentation

Network Segmentation Policy

Network Telemetry

Network Topology

Network Topology Risk

Network Traffic Analysis (NTA)

Never Trust Always Verify

New User Onboarding

Next Generation Firewall (NGFW)

Next Hop

Next-Gen Endpoint Protection

Next-Generation Antivirus

NFT Security

NGIPS

NIS2 Directive

NIST 800-171

NIST 800-53

NIST AI Risk Management Framework AI RMF

NIST Cybersecurity Framework

NIST Cybersecurity Framework Profile

NIST Framework

NIST Privacy Framework

NIST RMF Step

Noise Floor

Non-Disclosure Agreement

Non-Human Identity Management

Non-Persistence

Non-Repudiation

Non-Repudiation Controls

Nonce Usage

Noncompliance Risk

Nonrepudiation

Nonrepudiation Control

Nonstop Forwarding (NSF)

Notification Policy

NotPetya

NTP

Null Cipher

Null0

OAuth

OAuth Abuse

OAuth Misconfiguration

OAuth Scopes

OAuth Security

Obfuscated Payload

Obfuscation Techniques

Object Grouping

Object Permissions

Object Tracking

OCSP

OCSP Stapling

ODBC

Offboarding Security

Offensive Security Tool

Offsite Backup

OID

OLE DB

OMP Overlay Management Protocol

On-Premise Security

One-Time Password (OTP)

Online Certificate Status Protocol

OPC UA

Open Authorization

Open Authorization OAuth

Open Policy Agent (OPA)

Open Redirect Protection

Open Shortest Path First (OSPF)

Open Source Risk

OpenID Connect

OpenVPN

Operating System Hardening

Operational Maturity

Operational Resilience Planning

Operational Risk Assessment

Operational Risk Register

Operational Security

Operational Technology

Option 82

Orchestration Tool

Order of Volatility

Organization-Level Policy

Organization-Wide Policy

Orphaned Account

OSI Layer 1

OSI Layer 2

OSI Layer 3

OSI Layer 4

OSI Layer 5

OSI Layer 6

OSI Layer 7

OSI Model

OSINT Collection

OSPF

OSPF Area

OSPF Authentication

OSPF Cost

OSPF Dead Interval

OSPF DRBDR

OSPF Hello Interval

OSPF LSA

OSPFv3

Out-of-Band Communication

Outbound Filtering

Outbreak Control

Outlier Behavior Detection

Output Encoding

Output Policy

Outside NAT

Over-the-Air Updates

Overlay Network

Overprivileged Access

Overprivileged Account

Overt Security Testing

OWASP ASVS Application Security Verification Standard

OWASP Top 10

OWASP Top 10 for LLM Applications

Ownership

PaaS

Packer

Packet

Packet Capture

Packet Crafting

Packet Filtering

Packet Loss

Packet Sniffing

Packet Sniffing Alert

PAgP

Parameterized Queries

Parity Bits

Pass-the-Cookie Attack

Pass-the-Hash

Pass-the-Hash Mitigation

Pass-the-Ticket PtT

Passive DNS Monitoring

Passive Identity

Passive Interface

Passive Threat Detection

Passkey

Password Aging

Password Audit

Password Complexity

Password Cracking

Password Entropy

Password Expiration

Password Expiration Policy

Password Hashing Scheme

Password Hygiene

Password Management Policy

Password Manager

Password Manager Policy

Password Policy

Password Spray Attack

Passwordless Authentication

Passwordless Strategy

PAT

Patch

Patch Compliance Audit

Patch Distribution

Patch Management

Patch Prioritization

Patch Testing

Patch Validation Process

Patch Verification

Path Cost

Path Coverage

Path Jitter

Path Selection

Path Vector Protocol

Payload Analysis

Payload Obfuscation

Payment Card Industry Data Security Standard

Payment Gateway Security

PBKDF2 Hashing

PCI DSS

PCI DSS Compliance

PEAP

Peer Review

Peer-to-Peer Risk

Pen Test

Penetration Test Scope

Penetration Testing

Penetration Testing as a Service PTaaS

Penetration Testing Framework

Penetration Testing Methodology

Penetration Testing Report

Perfect Forward Secrecy

Performance Monitoring

Perimeter Deception

Perimeter Defense

Persistent Threat

Persistent Threat Actor

Personal Area Network

Personally Controlled Identity

Personally Identifiable Information

Personally Identifiable Information (PII)

Pharming

Phishing

Phishing Attack

Phishing Domain Detection

Phishing Link Detection

Phishing Protection

Phishing Resistant Authentication

Phishing Simulation

Phishing Simulation Platform

Phishing-as-a-Service PhaaS

Physical Access Control

Physical Access Control System

Physical Breach

Physical Isolation

Physical Layer

Physical Safeguards

Physical Security Perimeter

PICERL

PII Protection

PIM

PIM Dense Mode

PIM Sparse Mode

Ping

Ping of Death

Ping Scanning

PIR Peak Information Rate

PKCE Proof Key for Code Exchange

PKI

Plaintext

Plan of Action and Milestones (POAM)

Platform Hardening

Platform Integrity Verification

Platform-as-a-Service Security

Playbook

Playbook Automation

PMI-ACP

PMP

PMTUD

Pod Security Standards

Point To Point Protocol (PPP)

Poison Reverse

Policing

Policy

Policy Based Access Control

Policy Decision Point (PDP)

Policy Enforcement Point

Policy Exception Process

Policy Management Tool

Policy Map

Policy Plane

Policy Set

Policy Violation

Policy Violation Alerting

Policy-as-Code Framework

Policy-Based Automation

Policy-Based Routing

Polymorphic Malware

Port Address Translation (PAT)

Port Channel

Port Knocking

Port Mirroring

Port Numbers

Port Security

PortFast

Positive Testing

Post Quantum Cryptography

Post-Compromise Forensics

Post-Exploitation

Post-Incident Analysis

Post-Mortem Analysis

Postman

Posture Assessment

Potentially Unwanted Program (PUP)

PowerShell Security

Pre-Attack Indicator

Pre-Shared Key

Predictive Risk Intelligence

Preempt

Prefetch Files

Prefilter Policy

Prefix-List

Prescriptive Security

Pretexting

Principle of Least Functionality

Principle of Least Privilege

PrintNightmare Vulnerability

Priority

Priority Level

Priority Queue

Priority Queuing

Priority Setting

Privacy

Privacy by Design

Privacy Compliance

Privacy Enhancing Technologies

Privacy Enhancing Technologies (PETs)

Privacy Impact Assessment

Privacy Officer

Privacy Policy Enforcement

Privacy Program

Privacy Risk Assessment

Privacy Shield Framework

Privacy-Enhancing Computation

Private Certificate Authority

Private Cloud

Private VLAN

Privilege Audit

Privilege Escalation

Privilege Levels

Privilege Management

Privilege Separation

Privileged Access

Privileged Access Management

Privileged Access Management (PAM)

Privileged Account Discovery

Privileged Activity Alerting

Privileged Identity Management

Privileged Session Monitoring

Privileged User Audit

Proactive Threat Hunting

Probe

Procedures

Process Hollowing

Process Hollowing Detection

Process Injection

Process Isolation

Process Monitoring

Product Security Incident Response

Production Environment

Profiling

Program Oversight

Programmable Logic Controller (PLC)

Programmatic Access

Project Governance

Project Risk

Prompt Engineering

Prompt Injection

Proprietary Protocol Security

Protect Surface

Protected Health Information

Protective Monitoring

Protocol Analyzer

Proximity Authentication

Proximity Card

Proximity Card Spoofing

Proxy Access Logging

Proxy ARP

Proxy Chaining

Proxy Inspection

Proxy Re Encryption

Pseudonymization

PSK

PSK Cracking

Public Cloud

Public Cloud Risk

Public Disclosure Risk

Public Key Certificate

Public Key Cryptography

Public Key Fingerprint

Public Key Infrastructure

Public Key Infrastructure (PKI)

Public Threat Feed

Public Wi-Fi Risk

Purdue Model

Purging

Purple Team

Purple Team Automation

Purple Teaming

Purpose Limitation

PVST

Pyramid of Pain

Python

QoE Quality of Experience

QoS

QoS Group

QoS Map

QoS Monitoring

QoS Policy

QR Code Security

Qualitative

Quantitative

Quantitative Risk Management

Quantum Cryptography

Quantum Key Distribution

Quarantine Network

Quarantine VLAN

Queue Overflow Attack

Queuing

QUIC

Quishing

Quorum-Based Approval

Race Condition

RADIUS

RADIUS Authentication

RADIUS over (TLS)

RAG Poisoning

RAID Configuration

Ransomware

Ransomware Affiliate Model

Ransomware as a Service RaaS

Ransomware Detection Logic

Ransomware Recovery

Ransomware Recovery Plan

Ransomware Resilience

Ransomware Simulation

Rapid Response Team

RARP

Rate Limiting

RBAC Role-Based Access Control

Re-Identification

Reactive Security

Real User Monitoring (RUM)

Real-Time Alerting

Real-Time Monitoring

Recertification Process

Reconnaissance Phase

Record Locking

Record Management Policy

Record of Processing Activities (ROPA)

Recovery Point Objective

Recovery Point Objective (RPO)

Recovery Time Objective

Recovery Time Objective (RTO)

Recursive Resolver

Red Team

Red Team Exercises

Red Team Report

Red Team Toolkit

Redistribution

Redundancy

Redundancy Group

Redundant Architecture

Redundant Array of Independent Disks

Redundant DNS Configuration

Redundant Links

Redundant Power Supply

Redundant System

Reflexive ACL

Refresh Token

Registered Ports

Registration Authority (RA)

Regulatory Compliance

Regulatory Framework

Regulatory Gap

Regulatory Requirements

Regulatory Risk

Regulatory Technology RegTech

Reload in

Relying Party

Remanence

Remediation

Remote Access (VPN)

Remote Access Control Policy

Remote Access Trojan

Remote Administration Security

Remote Attestation

Remote Browser Isolation

Remote Code Execution

Remote Desktop Gateway

Remote Desktop Protocol

Remote Device Management

Remote Exploitation Technique

Remote Logging

Remote Terminal Unit (RTU)

Remote User Monitoring

Remote Wipe

Remote Work Risk

Remote Workforce

Replay Attack

Replay Attack Mitigation

Replay Protection

Replay Resistance

Replay-Resistant Token

Reporting Chain

Reputation-Based Detection

Reputation-Based Filtering

Residual Information

Residual Risk

Residual Risk Tolerance

Resilience Engineering

Resilience Metrics

Resilience Planning

Resource Control

Resource Public Key Infrastructure (RPKI)

Resources

Response Coordination

Response Playbook Automation

Responsibility

Responsible AI

REST API

RESTCONF

Restricted Access

Retention Policy Automation

Retention Policy Enforcement

Retention Schedule

Retention Schedule Review

Retrieval-Augmented Generation (RAG)

Retrospective Detection

Reverse Engineering

Reverse Engineering Detection

Reverse Proxy

RF Spectrum

Right to Be Forgotten

RIP

RIPng

Risk

Risk Acceptance

Risk Acceptance Criteria

Risk Aggregation

Risk Appetite

Risk Assessment

Risk Assessment Matrix

Risk Avoidance

Risk Communication

Risk Control

Risk Engine

Risk Evaluation

Risk Exposure

Risk Forecasting

Risk Heat Map

Risk Management

Risk Mitigation

Risk Register

Risk Scoring Algorithm

Risk Tolerance

Risk Transference

Risk-Adaptive Access Control

Risk-Based Vulnerability Prioritization

Risk-Weighted Asset Inventory

Rogue Access Point

Rogue AP

Rogue Device

Role Based Access Control (RBAC)

Role Conflict

Role Engineering

Role Explosion

Role Mining

Role-Based Access Control

Role-Based Authentication

Role-Based Privilege Escalation

Root Account Monitoring

Root Bridge

Root Cause Analysis

Root Certificate Validation

Root Detection

Root Domain Monitoring

Root Guard

Root of Trust

Root Port

Rootkit

Rootkit Detection

Rotating Credentials

Rotating Encryption Key

Round Trip Time

Route Aggregation

Route Aging

Route Convergence

Route Dampening

Route Distinguisher

Route Filtering

Route Optimization

Route Redistribution

Route Reflector

Route Summarization

Route Target

Route-Map

Router-on-a-Stick

Routing Loop

Routing Metric

Routing Protocol Preference

Routing Table

Rowhammer Attack

RP Rendezvous Point

RPVST

RSA

RSA Authentication

RSPAN Remote (SPAN)

RSSI

RSTP

Rule Action

Rule Based Access Control RuBAC

Rule Cleanup

Rule Header

Rule Hit Count

Rule Options

Rule Revision

Rule Shadowing

Rule SID

Runbook Automation

Runtime Application Self Protection (RASP)

Runtime Application Self-Protection

Runtime Container Security

Runtime Policy Enforcement

Runtime Protection Module

Runtime Threat Analytics

Runtime Threat Detection

SaaS

SaaS Access Governance

SaaS Risk

SaaS Security

SaaS Security Posture Management

Safe Harbor Provision

Safety Instrumented System (SIS)

Safety-Critical System

Salt in Cryptography

Salting

Salvage Priority

SameSite Cookie

SAML

SAML Assertion

SAML SSO Integration

SAML Vulnerabilities

Sandbox

Sandbox Analysis

Sandbox Escape Detection

Sandbox Evasion

Sandboxing Technique

Sandworm

Sanitization Policy

Sarbanes-Oxley Act

Satellite Office Security

Save Config

SCADA Security

SCADA System

Scalability Risk

Scalability Threat

Scalable Key Distribution

SCAP Security Content Automation Protocol

Scareware

Scattered Spider

Scenario-Based Testing

Scheduled Security Review

Schema Validation

SCIM System for Cross-Domain Identity Management

Scoping and Tailoring

Scoping Document

SCP

Script Analysis Tool

Script Kiddie

Scrypt

SD-Access

SD-WAN

SD-WAN Overlay

SD-WAN Policy

SD-WAN Underlay

SDA Software Defined Access

Secure Access Gateway

Secure Access Service Edge (SASE)

Secure Application Development

Secure Application Gateway

Secure Architecture Review

Secure Boot

Secure Browsing

Secure Code Review

Secure Code Signing

Secure Coding Guidelines

Secure Configuration

Secure Configuration Management

Secure Container Runtime

Secure Copy Protocol

Secure Credential Storage

Secure Deployment Pipeline

Secure Disposal

Secure DNS

Secure Element

Secure Enclave

Secure Endpoint

Secure Erase

Secure Erasure Verification

Secure File Transfer

Secure File Upload

Secure Hash Algorithm

Secure Infrastructure Management

Secure Internet Gateway

Secure Kubernetes Deployment

Secure Log Transport

Secure Mobile Gateway

Secure Multi Party Computation

Secure Multiparty Computation

Secure NTP

Secure Protocol Enforcement

Secure Protocols

Secure Remote Access

Secure Shell

Secure Shell Configuration

Secure SNMP

Secure Sockets Layer SSL Transport Layer Security (TLS)

Secure Software Development Lifecycle

Secure Software Development Lifecycle (SSDLC)

Secure Software Lifecycle

Secure Storage Policy

Secure Supply Chain

Secure Token Management

Secure Web Gateway

Secure Web Gateway (SWG)

Secure Wipe

Secure Zone

Security Access Review

Security Assertion Markup Language

Security Assertion Markup Language (SAML)

Security Audit

Security Audit Trail

Security Awareness Training

Security Baseline

Security Baseline Control

Security Baseline Enforcement

Security Baseline Mapping

Security Breach

Security Breach Notification

Security Bug Bounty

Security Chaos Engineering

Security Code Review Checklist

Security Configuration Baseline

Security Configuration Benchmark

Security Configuration Validation

Security Content Automation Protocol (SCAP)

Security Control Assessment

Security Control Assessment (SCA)

Security Control Effectiveness

Security Control Family

Security Control Framework

Security Control Validation

Security Culture

Security Data Lake

Security Design Review

Security Documentation Policy

Security Domains

Security Education Training and Awareness (SETA)

Security Event

Security Fuzzing

Security Gap

Security Goals Alignment

Security Governance

Security Governance Committee

Security Hardening Guide

Security Incident and Event Management

Security Incident Response Team (SIRT)

Security Incident Tabletop Exercise

Security Indicator

Security Information And Event Management (SIEM)

Security Integration Testing

Security Intelligence

Security Intelligence Feed

Security Knowledge Graph

Security Labeling

Security Levels

Security Logging Architecture

Security Logging Strategy

Security Metrics

Security Misconfiguration

Security Monitoring Strategy

Security Monitoring Tool

Security Objective

Security Operations Center (SOC)

Security Orchestration

Security Orchestration Automation and Response

Security Orchestration Automation and Response (SOAR)

Security Patch

Security Patch Management

Security Perimeter

Security Policy

Security Policy Exception

Security Posture

Security Program Maturity

Security Questionnaire

Security Requirements Traceability

Security Requirements Traceability Matrix (SRTM)

Security Risk Assessment

Security Risk Register

Security Risk Treatment

Security Roles and Responsibilities

Security Safeguards

Security Scorecard

Security Service Edge (SSE)

Security Services Catalog

Security Stakeholder Engagement

Security Standardization

Security Standards

Security Strategy

Security Telemetry

Security Telemetry Stream

Security Testing

Security Testing and Evaluation (STE)

Security Testing Checklist

Security Threat Model

Security Token

Security Token Service

Security Training Program

Security Training Records

Security Update Management

Security Validation

Security Zone

Segment

Segmented Network Architecture

Segregation of Duties

Selective Disclosure Credential

Self Sovereign Identity

Self-Assessment Questionnaire

Self-Encrypting Drive

Self-Service Password Reset

Sensitive Asset Classification

Sensitive Compartmented Information

Sensitive Data Audit Trail

Sensitive Data Discovery

Sensitive Data Exposure

Sensitive Data Tagging

Sensitive Information Handling

Sensitive System

Sensitivity Classification

Sensitivity Level

Separation of Duties

Sequence Number

Serialization Deserialization Vulnerabilities

Server Hardening

Server Side Request Forgery (SSRF)

Server-Side Request Forgery

Server-Side Template Injection (SSTI)

Serverless Security

Service Account

Service Catalog

Service Chaining

Service Control Policy (SCP)

Service Decommissioning

Service Hardening

Service Identity Rotation

Service Integration and Management

Service Level Agreement (SLA)

Service Mesh Security

Service Object

Service Principal Security

Service VPN

Session Cloning Detection

Session Fixation Mitigation

Session Hijacking

Session Initiation Protocol (SIP)

Session Management

Session Management Token

Session Timeout

Session Timeout Policy

SFTP

SGT Security Group Tag

SHA256 Hash

Shadow AI

Shadow Credential

Shadow Credentials

Shadow Data

Shadow IoT

Shadow IT

Shaping

Shared Responsibility Agreement

Shared Responsibility Matrix

Shared Responsibility Model

Shellcode

Shellshock Vulnerability

Shift Left Security

Short-Lived Credential

Shoulder Surfing

Show Commands

Show Interface

Show IP Route

Show Running-Config

Show Version

Side Channel Attacks

Side Loading

Side-Channel Attack Detection

Side-Loading Protection

SIEM

SIEM Alert Triage

SIEM Correlation Rule

SIEM Correlation Rules

SIEM Deployment

SIEM Integration

SIEM Rule Optimization

SIEM Security Information and Event Management

SIEM Use Case

Sigma Rule

Sigma Rules

Signal Integrity Monitoring

Signal Jamming

Signal Messenger

Signal Strength

Signature Collision Detection

Signature Detection

Signature Evasion

Signature Management

Signature-Based Detection

Silver Ticket Attack

Simulated Attack

Single Factor Authentication

Single Logout Service

Single Loss Expectancy (SLE)

Single Pane of Glass

Single Point of Failure

Single Session Restriction

Single Sign On

Single Sign-On Federation

Site Reliability Engineering

Site Survey

Site-to-Site VPN

Situational Awareness

SLA Compliance

SLA Enforcement

SLA Monitor

SLA Route Tracking

SLA Threshold

SLA Tracking

SLA Violation

Slack Space

Slopsquatting

SLSA Supply-Chain Levels for Software Artifacts

Smart Access Control

Smart Contract Audit

Smart Contract Security

Smart Contract Vulnerability

Smart Device Security

Smart Grid Security

Smart Token

Smartcard Authentication

SMB Security

SMIME Certificate

Smishing

Smurf

Smurf Attack

SNMP

SNMP Trap

SNMPv1

SNMPv2c

SNMPv3

Snort Rules

Snowflake Security

SNR

SOAR Playbooks

SOC 2

SOC 2 Compliance

SOC 2 Type (II)

SOC Audit Readiness

SOC Tiers

Social Engineering

Social Engineering Awareness

Social Engineering Resistance

Social Engineering Simulation

Social Media Policy

Software Assurance

Software Assurance Maturity Model

Software Bill of Materials

Software Bill of Materials (SBOM)

Software Composition Analysis (SCA)

Software Composition Tooling

Software Configuration Management

Software Defined Perimeter

Software Defined Perimeter (SDP)

Software Defined Wide Area Network SD WAN

Software Dependency Management

Software Image Management

Software Integrity

Software Inventory

Software Inventory Management

Software License Compliance

Software Patch Automation

Software Patch Validation

Software Risk Scoring

Software Supply Chain

Software Supply Chain Attack

Software Tampering

Software Tampering Detection

Software Vulnerability Exploits

Software-Defined Networks (SDNs)

Software-Defined Security Policy

Source Code Escrow

Source Code Leak Prevention

Spam

Spam Campaign Attribution

Spam Filtering

Spam Intelligence

Spam Prevention

Spambot Detection

Spamtrap System

SPAN

SPAN Switched Port Analyzer

Spanning Tree Protocol (STP)

Spear Phishing

Special Category Data

Spectrum Analysis

Speed Mismatch

SPF

SPF Algorithm

Split Horizon

Split Tunneling

Spoliation

Spoofed Caller (ID)

Spoofed Domain Defense

Spoofed Email Header

Spoofed SSL Certificate

Spoofing

Spoofing Attack

Spyware

Spyware Containment Strategy

Spyware Detection

Spyware Removal Tool

SQL Injection

SSCP

SSH

SSH Bastion Host

SSH Key

SSH Key Rotation

SSID

SSL Certificate Pinning

SSL Decryption Policy

SSL Inspection

SSL Stripping

SSL Tunnel Detection

SSL VPN

SSLTLS

SSM Source Specific Multicast

SSO Misconfiguration

SSRF Defense

Stack Canary

StackPower

StackWise

Stakeholder Risk Tolerance

Standard Contractual Clauses (SCCs)

Standard Operating Procedure

Standards

Standards Compliance

Standby Router

Stateful Failover

Stateful Firewall

Stateful Switchover (SSO)

Stateless Firewall

Statement Coverage

Statement of Applicability SoA

Static Application Security Testing

Static Credential Detection

Static DNS

Static IP Address

Static MAC Entry

Static Malware Analysis

Static Routing

Static Secrets Detection

Static Source Code Analysis (SAST)

Stealth Malware

Stealth Persistence

Steganography

Steganography Tool

Step-Up Authentication

Sticky MAC

STIX TAXII

Stolen Credential Monitoring

Storage Encryption

Storage Policy

Storm Control

STP Mode

STP Port Roles

STP Port States

STP Root Bridge

STP TCN

STP Timers

Strategic Alignment

Strategic Threat Intelligence

Stream Cipher

STRIDE Threat Modeling

Striping

Strong Authentication

Structured Threat Analysis

Stub Router

Stuxnet

Subdomain Takeover Prevention

Subnet Isolation

Subnetting

Subresource Integrity (SRI)

Substitution

Summarization

Superuser Privilege Restriction

Supervisory Control and Data Acquisition

Supplicant

Supply Chain Assessment

Supply Chain Attack

Supply Chain Mapping

Supply Chain Resilience

Supply Chain Risk Management

Supply Chain Vulnerability

Supply-Chain Levels for Software Artifacts (SLSA)

Surface Area Reduction

Surface Reduction

Suricata

Surveillance Detection

Suspicious Domain Detection

Suspicious Login Pattern

SVIs Switch Virtual Interface

Swimlane Diagram

Switch

Switches

Swivel Authentication

SXP Security Group Tag eXchange Protocol

Symantec Endpoint Protection

Symmetric Algorithm

Symmetric Key

SYN Flood

Synthetic Data

Synthetic Identity Detection

Synthetic Identity Fraud

Synthetic Login

Synthetic Performance Monitoring

Synthetic Threat Generation

Syslog

Syslog Server

System

System Access Review

System Anomaly Detection

System Availability

System Boot Integrity

System Classification

System Configuration Baseline

System Control Audit

System Development Environment

System Development Life Cycle (SDLC)

System Development Lifecycle

System Hardening

System Hardening Baseline

System Hardening Checklist

System High Security Mode

System Integrity Check

System Inventory Tool

System Log Audit

System Log Integrity

System Misconfiguration Detection

System of Record

System Ownership Verification

System Prompt Leakage

System Recovery Procedure

System Security Engineering

System Security Plan (SSP)

System Service Validation

System-Specific Policy

Systems Security Engineering

Tabletop Attack Simulation

Tabletop Exercise

TACACS

Tactical Threat Intelligence

Tagging Routes

Tail Drop

Tailgating

Tamper Detection System

Tamper Evidence

Tamper Evident Logging

Tamper Protection

Tamper Resistance

Tamper-Proof Storage

Tampering

Tap Mode

Target of Evaluation (TOE)

Targeted Attack

Targeted Threat

TCL Scripting

TCN Topology Change Notification

TCP

TCP Reset

TCPIP Model

Teardrop Attack

Technical Assessment

Technical Controls

Technical Safeguards

Telecommunications

Telemetry

Teleworker

Telnet

Temporal Key Integrity Protocol

Terminal Length

Terminal Monitor

TFTP Server

Third-Party Software Assurance

Threat

Threat Actor

Threat Actor Attribution

Threat Actor Playbook

Threat Actor Profiling

Threat Actor Taxonomy

Threat Advisory Correlation

Threat and Vulnerability Management (TVM)

Threat Attribution Report

Threat Automation Framework

Threat Classification Model

Threat Confidence Score

Threat Correlation

Threat Coverage Map

Threat Coverage Matrix

Threat Detection

Threat Emulation

Threat Emulation Lab

Threat Emulation Platform

Threat Enumeration

Threat Exposure Mapping

Threat Feed

Threat Feed Aggregation

Threat Feed Integration

Threat Graph

Threat Grid

Threat Hunting

Threat Hunting Maturity Model (HMM)

Threat Hunting Platform

Threat Hunting Playbooks

Threat Information Sharing

Threat Intelligence

Threat Intelligence Automation

Threat Intelligence Lifecycle

Threat Intelligence Platform

Threat Intelligence Platform (TIP)

Threat Intelligence Taxonomy

Threat Landscape Analysis

Threat Lifecycle Modeling

Threat Management Framework

Threat Mitigation Strategy

Threat Modeling

Threat Modeling Tool

Threat Prevention Posture

Threat Prioritization

Threat Propagation Analysis

Threat Scenario

Threat Sharing Protocol

Threat Simulation Tool

Threat Surface

Threat Taxonomy

Threat Vector

Threat Vector Analysis

Threat Visualization

Thunderbolt PCIe DMA Attacks

Ticketing System

Time of Check Time of Use (TOCTOU)

Time-Based Access Control

Time-Based ACL

Time-Based One-Time Password (TOTP)

Time-Based Token

Time-of-Click Protection

Timeline Analysis

TKIP

TLOC

TLOC Extension

TLS Inspection

Token

Token Binding Enforcement

Token Bucket

Token Expiration

Token Leakage Prevention

Token Replay

Token Reuse Detection

Token Revocation

Token Security Policy

Token Theft

Token-Based Authentication

Tokenization

Tool Poisoning

Tor Network Security

Traceability

Traceability Matrix

Traceroute

Tracking Group

Traffic Class

Traffic Obfuscation

Traffic Policing

Traffic Replay Analysis

Traffic Shaping

Training Completion

Transaction Monitoring

Transborder Data Flow

Transform Set

Transit Gateway

Transitive Trust

Transmission Control Protocol (TCP)

Transmit Power

Transport Control Protocol Internet Protocol TCP IP Model

Transport Layer Exploit

Transport Layer Security

Transport Mode

Transposition

Triple Extortion Ransomware

Trojan Horse

Troubleshooting Flow

True Positive

Trunk Port

Trunking Mismatch

Trust Anchor

Trust Boundary

Trust Boundary Enforcement

Trust Level Assignment

Trust Services Criteria

Trusted Cloud Provider

Trusted Computing Base

Trusted Computing Base (TCB)

Trusted Execution Environment

Trusted Execution Environment (TEE)

Trusted Identity Provider

Trusted Insider

Trusted Platform Module (TPM)

Trusted Recovery

Trusted Software Supply Chain

Trustmark

TrustSec

TTL

TTL Threshold

TTP

Tunnel Interface

Tunnel Mode

Tunneling

Turnstile

Two Factor Authentication 2FA

Two-Factor Authentication

Two-Factor Enrollment Policy

Two-Man Rule

Two-Person Integrity

Twofish

Type I Error

Type II Error

Typo Squatting

UDP

UDP Flood

UEBA

UEBA Threshold Tuning

UEFI Rootkit Detection

UEFI Security

Unallocated Space

Unauthorized Access

Unauthorized Login Alerting

Unclassified System

Underlay Network

Unencrypted Credential Transmission

Unequal-Cost Load Balancing

Unicast

Unified Endpoint Management

Unified Identity Platform

Unified Kill Chain

Unified Threat Management

Uninterruptible Power Supplies (UPS)

Uninterruptible Power Supply

Uninterruptible Power Supply (UPS)

Unique Local Address

Universal 2nd Factor U2F

Unknown Endpoint

Unknown Unicast

Unmanaged Device Detection

Unpatched Vulnerability

Untrusted Entity

Unused Interface Shutdown

Unusual Geolocation Detection

Update

Update Integrity Verification

Update Management Policy

Uptime

URL Filtering

USB Control Policy

Use Cases

User

User Acceptance Testing (UAT)

User Access

User Access Certification

User Access Control

User Agent

User and Entity Behavior Analytics

User and Entity Behavior Analytics (UEBA)

User Behavior Analytics

User Behavior Analytics (UBA)

User Credential Audit

User Credential Management

User Datagram Protocol (UDP)

User Deactivation Workflow

User Deprovisioning

User Identity Graph

User Identity Mapping

User Identity Store

User Lifecycle Management

User Password Reset Log

User Profile Verification

User Provisioning

User Provisioning Tool

User Rights Review

User Risk Profiling

User Role Inventory

User Role Matrix

User Session Management

User Session Timeout

User Training Metrics

User Verification Service

Utility Function

V2X Security

V2X Threat Intelligence

Validation

Validation Rules

Value at Risk

vBond

vEdge

Vendor Access Audit

Vendor Due Diligence

Vendor Email Compromise

Vendor Lock-in Risk

Vendor Management Office

Vendor Risk Assessment

Verification

Version Control

Video QoS

Virtual Asset Inventory

Virtual Desktop Infrastructure

Virtual Desktop Infrastructure (VDI)

Virtual Desktop Isolation

Virtual Environment Integrity

Virtual IP

Virtual LAN VLAN

Virtual Machine Escape

Virtual Patch

Virtual Private Cloud

Virtual Private Cloud (VPC)

Virtual Private Network

Virtual Private Network (VPN)

Virtualization

Virtualization Security

Virus

Virus Definition Update

Virus Hoax

Vishing

Visibility Gap

VLAN

VLAN Access Control

VLAN Hopping

VLAN Mismatch

VLAN Trunk

VLAN Trunking

VLSM

vManage

Voice Biometrics

Voice Cloning

Voice Over Internet Protocol (VOIP)

Voice over IP Security

Voice Phishing

Voice QoS

Voice VLAN

Volatile Data

Volume Shadow Copy

VPN

VPN Certificate

VPN Client

VPN Concentrator

VPN Endpoint Monitoring

VPN Group Policy

VPN Headend

VPN Profile

VPN Rule

VPN to Cloud

VPN Usage Monitoring

VRF

VRRP

vSmart

VTP Client

VTP Modes

VTP Server

VTP Transparent

Vulnerability

Vulnerability Age Analysis

Vulnerability Alerting

Vulnerability Assessment

Vulnerability Chain Analysis

Vulnerability Chaining

Vulnerability Communication Policy

Vulnerability Coordination

Vulnerability Correlation

Vulnerability Disclosure Program

Vulnerability Disclosure Timeline

Vulnerability Enumeration

Vulnerability Exploitation

Vulnerability Intelligence

Vulnerability Intelligence Feed

Vulnerability Management

Vulnerability Management Lifecycle

Vulnerability Management Playbook

Vulnerability Management Process

Vulnerability Mitigation

Vulnerability Prioritization

Vulnerability Reporting Policy

Vulnerability Scanner Tuning

Vulnerability Scanning

Vulnerability Threat Mapping

VXLAN

WAF

WAF Bypass Protection

WAF Web Application Firewall

WannaCry

War Dialing

Wardriving

Warm Site

Waterfall Development Methodology

Waterfall Model

Watering Hole Attack

Watermarking

Web Application Firewall

Web Application Reconnaissance

Web Application Scan

Web Attack Signature

Web Browser Hardening

Web Cache Poisoning Defense

Web Content Filtering

Web Data Leakage Prevention

Web Isolation Policy

Web Isolation Technology

Web Recon Activity

Web Security Gateway

Web Security Testing Tool

Web Server Hardening

Web Session Protection

Web Shell

WebAssembly Sandboxing

WebAuthn

Webhooks Security

Weighted Fair Queue

Well Known Ports

Well-Architected Framework

WFQ Weighted Fair Queuing

Whaling Campaign Simulation

Whaling Email Detection

Whamming

White Box Security Testing

White Box Testing

White Hat Hacker

Whitelist

Whitelist Exception Management

Whitelist Management

Whitelist Policy

Whitelisting

Whole Disk Encryption

Wi-Fi Authentication Protocol

Wi-Fi Beacon Spoofing

Wi-Fi Credential Harvesting

Wi-Fi Eavesdropping

Wi-Fi Encryption Protocol

Wi-Fi Heatmap

Wi-Fi Jamming

Wi-Fi Network Monitoring

Wi-Fi Protected Access

Wi-Fi Protected Setup (WPS)

Wi-Fi Roaming

WIDS

Wimax Broadband Wireless Access IEEE 802.16

Windowing

Windows Registry Forensics

Windows Security Baseline

Wiper

Wiper Malware

WIPS

WireGuard

Wireless Authentication

Wireless Band Steering

Wireless Controller Deployment

Wireless Frame Types

Wireless IDSIPS

Wireless Intrusion Detection

Wireless Intrusion Detection System

Wireless Intrusion Prevention

Wireless Key Rotation

Wireless LAN

Wireless MAC Filtering

Wireless QoS (WMM)

Wireless Rogue Detection

Wireless Security

Wireless Segmentation

Wireless Survey

Wireless Threat Assessment

Wireless Threats

Wireless VLAN Segmentation

Wireshark

WLAN Controller (WLC)

WLC HA

Word

Work Factor

Work from Home Security

Work Profile Isolation

Workflow Automation

Workload Identity

Workspace Separation

Workstation

Worm

WPA

WPA2

WPA2-Enterprise

WPA3

WPA3-Enterprise

WRED

WRED Weighted Random Early Detection

Write Blocker

Write Memory

XDR Integration

XML

XML External Entity (XXE)

XSS Cross Site Scripting

XSS Payload Detection

XSS Protection

XXE Prevention

YAML

YANG Model

YARA Rules

Zero Day

Zero Day Attacks

Zero Day Correlation

Zero Day Exploit

Zero Day Variant Detection

Zero Day Vulnerability

Zero Knowledge Authentication

Zero Knowledge Proofs

Zero Trust

Zero Trust Architecture

Zero Trust Assessment Tool

Zero Trust Control Mapping

Zero Trust Dashboard

Zero Trust Enforcement

Zero Trust Identity

Zero Trust Identity Broker

Zero Trust Maturity Model

Zero Trust Policy

Zero Trust Policy Engine

Zero Trust Segmentation

Zero Trust Verification

Zombie

Zombie Process

Zone Segmentation

Zone Transfer

Zone-Based Firewall

Zone-Based Firewalling

Zoning

Zoning Policy

ZTNA

ZTP Zero Touch Provisioning