Terminology dictionary

234 terms

• A RecordA name-system entry that maps a host name to a 32-bit address.
  Beginnernot startedMark for review
• AAAThe framework that separates identity proof, permission, and audit records.
  Intermediatenot startedMark for review
• Acceptable Use PolicyA written policy for acceptable use of organizational systems and data.
  Beginnernot startedMark for review
• Access ControlThe rules and mechanisms that decide who may use a resource.
  Beginnernot startedMark for review
• AccountingRecording who did what, and when, for later review.
  Beginnernot startedMark for review
• Active DirectoryMicrosoft's directory of users, computers, and policies for a Windows domain.
  Intermediatenot startedMark for review
• Aircrack-ngA suite for assessing wireless networks you are allowed to test.
  Advancednot startedMark for review
• AllowlistingAllowing only approved items and denying everything else.
  Intermediatenot startedMark for review
• APIPAA self-assigned 169.254 address used when no configuration server answers.
  Intermediatenot startedMark for review
• ARPResolves a local 32-bit address to a hardware address.
  Intermediatenot startedMark for review
• arp commandShows the local cache of protocol-to-hardware address mappings.
  Intermediatenot startedMark for review
• Asymmetric EncryptionCryptography that uses a public key and a related private key.
  Advancednot startedMark for review
• Attack SurfaceEvery point where an unauthorized person could try to get in or take data.
  Intermediatenot startedMark for review
• AuthenticationProving that a claimed identity is genuine.
  Beginnernot startedMark for review
• AuthorizationDeciding what an accepted identity is allowed to do.
  Beginnernot startedMark for review
• AvailabilityKeeping systems and information usable when authorized people need them.
  Beginnernot startedMark for review
• BackupA restorable copy of data kept for recovery after loss or corruption.
  Beginnernot startedMark for review
• BandwidthThe maximum data-carrying capacity of a link over time.
  Beginnernot startedMark for review
• BGPThe routing protocol that exchanges reachability between large networks.
  Advancednot startedMark for review
• BIOSLegacy firmware that initializes hardware and starts the boot process.
  Beginnernot startedMark for review
• Blue TeamThe defensive group that detects, responds, and hardens systems.
  Beginnernot startedMark for review
• BridgeA device that joins segments and forwards frames by hardware address.
  Intermediatenot startedMark for review
• BroadcastDelivery to every interface in one local network segment.
  Beginnernot startedMark for review
• Broadcast DomainThe group of interfaces that all receive the same broadcast.
  Intermediatenot startedMark for review
• Brute-Force AttackTrying secrets exhaustively until one works or the possibilities run out.
  Intermediatenot startedMark for review
• Burp SuiteAn intercepting proxy for authorized web-application testing.
  Intermediatenot startedMark for review
• Change ManagementApproving, scheduling, and reviewing changes before they reach production.
  Beginnernot startedMark for review
• chmodChanges read, write, and execute permissions on a Unix file.
  Beginnernot startedMark for review
• chownChanges the user and group that own a Unix file.
  Beginnernot startedMark for review
• CIA TriadCIAThe three goals of privacy, trustworthiness, and timely access.
  Beginnernot startedMark for review
• CIDRSlash notation that states how many bits belong to the network prefix.
  Intermediatenot startedMark for review
• Cloud ComputingOn-demand shared computing resources, usually delivered over the Internet.
  Beginnernot startedMark for review
• Collision DomainA network section where two transmissions can interfere with each other.
  Intermediatenot startedMark for review
• ConfidentialityKeeping information from parties who are not allowed to see it.
  Beginnernot startedMark for review
• ContainerA packaged application that shares the host kernel but has its own files.
  Intermediatenot startedMark for review
• CPUThe chip that executes a computer's program instructions.
  Beginnernot startedMark for review
• Cross-Site Request ForgeryCSRFA malicious site that reuses your existing login to submit a request.
  Advancednot startedMark for review
• Cross-Site ScriptingXSSUntrusted content that a browser can be tricked into treating as code.
  Advancednot startedMark for review
• curlTransfers data from a URL, including headers or a response body.
  Beginnernot startedMark for review
• CVEA public identifier for one known vulnerability.
  Beginnernot startedMark for review
• CVSSA 0.0 to 10.0 standard score for the severity of a vulnerability.
  Intermediatenot startedMark for review
• Default GatewayThe router a host uses for destinations outside its own subnet.
  Beginnernot startedMark for review
• Defense in DepthSeveral independent layers so one failure does not expose everything.
  Beginnernot startedMark for review
• Denial of ServiceDoSA condition that keeps legitimate users from reaching a service.
  Intermediatenot startedMark for review
• DHCPLeases addresses and basic network settings to clients automatically.
  Beginnernot startedMark for review
• DHCP ScopeThe pool of addresses and settings a lease server may hand out on one subnet.
  Intermediatenot startedMark for review
• Dictionary AttackTrying likely words and leaked passwords from a list.
  Intermediatenot startedMark for review
• digA detailed name-lookup utility that shows the question and the answer.
  Intermediatenot startedMark for review
• Digital CertificateA signed document that binds an identity to a public key.
  Intermediatenot startedMark for review
• Digital SignatureA private-key value that lets others verify the signer and detect changes.
  Intermediatenot startedMark for review
• Disaster RecoveryThe plan and capability for restoring technology after a severe disruption.
  Intermediatenot startedMark for review
• DMZA buffer zone for public-facing services, separated from the internal network.
  Intermediatenot startedMark for review
• DNSThe directory that translates names into addresses and other records.
  Beginnernot startedMark for review
• DNS RecordOne published name-system entry, such as an address, alias, or mail destination.
  Beginnernot startedMark for review
• Domain ControllerA Windows server that answers domain logons and directory queries.
  Intermediatenot startedMark for review
• Dynamic PortsShort-lived source ports a client chooses for one conversation.
  Intermediatenot startedMark for review
• EDREndpoint software that records activity and helps responders investigate.
  Intermediatenot startedMark for review
• EncapsulationWrapping data with the headers each network layer needs.
  Intermediatenot startedMark for review
• EncryptionTransforming data so only someone with the proper key can read it.
  Beginnernot startedMark for review
• EnumerationAsking in-scope systems for details such as users, shares, or services.
  Intermediatenot startedMark for review
• Ethernet CableTwisted-pair copper cabling commonly used for Ethernet links.
  Beginnernot startedMark for review
• ExploitA method that uses a weakness to cause an unintended effect.
  Intermediatenot startedMark for review
• ExploitationUsing a weakness, inside a written scope, to prove an unintended effect.
  Advancednot startedMark for review
• ffufA fast web fuzzer that filters responses by status, size, or words.
  Advancednot startedMark for review
• Fiber-Optic CableCabling that carries data as light through glass or plastic fiber.
  Beginnernot startedMark for review
• File SystemThe method used to organize and retrieve files on a storage device.
  Beginnernot startedMark for review
• findWalks directories and lists files that match conditions you set.
  Beginnernot startedMark for review
• FirewallA policy enforcement point that permits or denies traffic.
  Beginnernot startedMark for review
• FootprintingMapping the names, addresses, and technologies an organization exposes.
  Beginnernot startedMark for review
• FrameA data-link unit that carries a packet across one local segment.
  Beginnernot startedMark for review
• FTPA file-transfer protocol with a separate control connection on port 21.
  Beginnernot startedMark for review
• FTPSClassic file transfer wrapped in transport encryption.
  Intermediatenot startedMark for review
• Get-ProcessA PowerShell cmdlet that lists processes and their resource use.
  Beginnernot startedMark for review
• GobusterA wordlist tool for finding hidden web paths or DNS names.
  Intermediatenot startedMark for review
• grepPrints lines in a file or stream that match a pattern.
  Beginnernot startedMark for review
• Group PolicyGPOCentrally managed Windows settings applied to users and computers.
  Intermediatenot startedMark for review
• HashcatA GPU tool for offline audits of password hashes you are allowed to test.
  Advancednot startedMark for review
• HashingA one-way fingerprint of data that cannot be reversed into the original.
  Beginnernot startedMark for review
• hostnamePrints the computer's own host name.
  Beginnernot startedMark for review
• HTTPThe web transfer protocol, unencrypted unless it is wrapped in encryption.
  Beginnernot startedMark for review
• HTTPSWeb traffic protected by transport encryption and a certificate.
  Beginnernot startedMark for review
• HubA legacy device that repeats every signal out all ports.
  Beginnernot startedMark for review
• HydraA tool that tries authorized logins against a live service.
  Advancednot startedMark for review
• HypervisorThe layer that creates virtual machines and allocates them hardware resources.
  Intermediatenot startedMark for review
• ICMPThe diagnostic and error protocol used by connectivity tests. It has no ports.
  Beginnernot startedMark for review
• IDSA detector that alerts on suspicious traffic or host activity.
  Beginnernot startedMark for review
• ifconfigAn older Unix command for interface addresses and status.
  Intermediatenot startedMark for review
• IMAPA mailbox protocol that keeps messages and folders on the server.
  Beginnernot startedMark for review
• Incident ResponseThe organized process for handling a security incident from detection through lessons learned.
  Intermediatenot startedMark for review
• Indicator of CompromiseIoCAn observable clue that a system may already be compromised.
  Intermediatenot startedMark for review
• Infrastructure as a ServiceIaaSRented virtual machines, networks, and storage that you administer above the hardware.
  Intermediatenot startedMark for review
• IntegrityKeeping data and systems free from unauthorized changes.
  Beginnernot startedMark for review
• ipThe modern Linux utility for addresses, links, and routes.
  Intermediatenot startedMark for review
• IP AddressIPA numeric label that identifies a network interface for delivery.
  Beginnernot startedMark for review
• ipconfigShows Windows address, mask, gateway, and related settings.
  Beginnernot startedMark for review
• IPSAn inline control that can block activity matching a prevention rule.
  Intermediatenot startedMark for review
• IPsecA network-layer suite that authenticates and encrypts packets.
  Advancednot startedMark for review
• IPv4The 32-bit Internet Protocol, usually written as four dotted decimals.
  Beginnernot startedMark for review
• IPv6The 128-bit Internet Protocol, written in hexadecimal groups.
  Beginnernot startedMark for review
• JitterVariation in packet delay that disrupts real-time audio and video.
  Intermediatenot startedMark for review
• John the RipperA CPU tool for offline audits of password hashes you are allowed to test.
  Intermediatenot startedMark for review
• KerberosA ticket-based authentication system built around a trusted key-distribution center.
  Advancednot startedMark for review
• LatencyThe delay before data arrives, often measured as round-trip time.
  Beginnernot startedMark for review
• Lateral MovementMoving from one internal system to another after an initial foothold.
  Advancednot startedMark for review
• LDAPA protocol for querying and updating a directory of identities.
  Intermediatenot startedMark for review
• LDAPSDirectory access wrapped in transport encryption.
  Intermediatenot startedMark for review
• Least PrivilegeGranting only the access a task actually needs.
  Beginnernot startedMark for review
• Load BalancerA service that spreads client requests across multiple servers.
  Intermediatenot startedMark for review
• Log AnalysisExamining activity records to explain what happened.
  Beginnernot startedMark for review
• Loopback AddressAn address that delivers traffic to the same host, such as 127.0.0.1.
  Beginnernot startedMark for review
• MAC AddressMACA hardware address used to deliver frames on a local link.
  Beginnernot startedMark for review
• MalwareSoftware built to do unwanted or harmful things on a system.
  Beginnernot startedMark for review
• Man-in-the-MiddleMITMAn on-path attacker who can read or change unprotected traffic.
  Intermediatenot startedMark for review
• MetasploitA framework that organizes authorized security tests into modules.
  Advancednot startedMark for review
• MITRE ATT&CKATT&CKA public matrix of adversary tactics and techniques used as shared vocabulary.
  Advancednot startedMark for review
• ModemA device that converts a provider's signal for local network use.
  Beginnernot startedMark for review
• MTUThe largest unit a link will carry, often 1500 bytes on Ethernet.
  Intermediatenot startedMark for review
• Multi-Factor AuthenticationMFAA login that requires two different kinds of evidence.
  Beginnernot startedMark for review
• MulticastDelivery from one sender to a group that asked to receive it.
  Intermediatenot startedMark for review
• NATRewriting addresses as packets cross between networks.
  Intermediatenot startedMark for review
• NessusTenable's commercial scanner for known flaws and missing patches.
  Intermediatenot startedMark for review
• NetcatA simple utility for reading and writing a network connection.
  Intermediatenot startedMark for review
• netstatLists network connections, listening ports, and routes.
  Intermediatenot startedMark for review
• Network ApplianceA purpose-built device dedicated to a network function.
  Intermediatenot startedMark for review
• Network Interface CardNICThe hardware that connects a host to a network link.
  Beginnernot startedMark for review
• Network SegmentationDividing a network so one zone cannot freely reach the others.
  Intermediatenot startedMark for review
• Network TopologyThe physical or logical arrangement of links and nodes.
  Beginnernot startedMark for review
• NiktoA scanner for outdated web servers and common dangerous files.
  Intermediatenot startedMark for review
• NmapA scanner that discovers hosts and the ports that respond.
  Beginnernot startedMark for review
• Non-repudiationEvidence that makes it hard for someone to deny what they did.
  Intermediatenot startedMark for review
• nslookupA simple utility that asks a name server for records.
  Beginnernot startedMark for review
• NTPA protocol that synchronizes computer clocks over the network.
  Beginnernot startedMark for review
• OpenVASThe open-source vulnerability scanner from the Greenbone project.
  Intermediatenot startedMark for review
• Operating SystemSoftware that manages hardware, processes, memory, and files for applications.
  Beginnernot startedMark for review
• OSI ModelOSIA seven-layer reference model for describing network communication.
  Beginnernot startedMark for review
• OSINTInformation gathered from sources that are already public.
  Beginnernot startedMark for review
• OSPFAn interior link-state routing protocol that builds a map of an area.
  Advancednot startedMark for review
• PacketA network-layer unit carrying source and destination protocol addresses.
  Beginnernot startedMark for review
• Password AttackAn attempt to learn or bypass a password by guessing or testing a hash.
  Intermediatenot startedMark for review
• Password SaltA unique random value stored with a password hash to make guessing harder.
  Intermediatenot startedMark for review
• Patch ManagementTesting, deploying, and confirming software updates.
  Beginnernot startedMark for review
• Patch PanelA passive panel where permanent cables are terminated and patched.
  Beginnernot startedMark for review
• Penetration TestingAn authorized exercise that demonstrates impact and reports the fixes.
  Intermediatenot startedMark for review
• PermissionsRules that state who may read, change, or execute a resource.
  Beginnernot startedMark for review
• PersistenceKeeping unauthorized access across a reboot or a password change.
  Advancednot startedMark for review
• PhishingA deceptive message that impersonates a trusted party to steal a secret or prompt a click.
  Beginnernot startedMark for review
• pingSends an echo request to test whether a host replies.
  Beginnernot startedMark for review
• PKIThe system for issuing, distributing, and revoking public-key certificates.
  Advancednot startedMark for review
• Platform as a ServicePaaSA managed application environment where you deploy code, not guest operating systems.
  Intermediatenot startedMark for review
• POP3A mailbox protocol that downloads messages to the client.
  Beginnernot startedMark for review
• Port ScanningProbing an authorized host to see which ports respond.
  Beginnernot startedMark for review
• Power over EthernetPoEA standard that delivers power and data on the same Ethernet cable.
  Beginnernot startedMark for review
• Private IP AddressAn address reserved for internal networks, not public Internet routing.
  Beginnernot startedMark for review
• Privilege EscalationGaining more access than an account or process was supposed to have.
  Advancednot startedMark for review
• ProcessA running instance of a program, with its own identifier and memory.
  Beginnernot startedMark for review
• Public IP AddressA globally routable address used on the public Internet.
  Beginnernot startedMark for review
• QUICAn encrypted transport over UDP that carries the newest major web version.
  Advancednot startedMark for review
• RADIUSA central authentication and accounting service for network access.
  Intermediatenot startedMark for review
• RAIDA combination of disks for speed, capacity, or survival of a disk failure.
  Intermediatenot startedMark for review
• RAMFast temporary memory that clears when power is removed.
  Beginnernot startedMark for review
• RansomwareMalicious software that locks data and pressures the victim to pay.
  Beginnernot startedMark for review
• RDPA graphical remote-desktop protocol, commonly on port 3389.
  Beginnernot startedMark for review
• ReconnaissanceGathering information before an authorized assessment goes further.
  Beginnernot startedMark for review
• Red TeamAn authorized group that simulates an adversary to test defenses.
  Intermediatenot startedMark for review
• Registered PortsPorts 1024 through 49151, available for registered applications.
  Intermediatenot startedMark for review
• RepeaterA device that regenerates a signal to extend a link.
  Beginnernot startedMark for review
• RiskThe potential for loss, based on likelihood and impact.
  Beginnernot startedMark for review
• routeShows the table a host uses to choose the next hop.
  Intermediatenot startedMark for review
• RouterA device that forwards packets between different networks.
  Beginnernot startedMark for review
• RoutingForwarding packets from one network toward another using a route table.
  Beginnernot startedMark for review
• Rules of EngagementThe written permission that defines scope, timing, and emergency contacts.
  Beginnernot startedMark for review
• Secure and Insecure ProtocolsThe contrast between encrypted protocols and cleartext predecessors.
  Beginnernot startedMark for review
• Security ControlA safeguard that prevents, detects, or corrects a security problem.
  Beginnernot startedMark for review
• Security MonitoringThe ongoing practice of watching security signals and alerts.
  Beginnernot startedMark for review
• Security Operations CenterSOCThe function that monitors security alerts and coordinates response.
  Beginnernot startedMark for review
• ServiceA background program that waits for requests, often starting at boot.
  Beginnernot startedMark for review
• Service Level AgreementSLAA commitment that defines the service level a provider must meet.
  Intermediatenot startedMark for review
• SFTPFile transfer that runs inside an encrypted secure shell.
  Intermediatenot startedMark for review
• SIEMA platform that collects, correlates, and searches security logs.
  Intermediatenot startedMark for review
• SMBA file- and printer-sharing protocol common on Windows networks.
  Intermediatenot startedMark for review
• SMTPThe protocol that transfers email between mail servers.
  Beginnernot startedMark for review
• SNMPA protocol for monitoring network devices and receiving their alerts.
  Intermediatenot startedMark for review
• Social EngineeringManipulating a person into revealing information or taking an unsafe action.
  Beginnernot startedMark for review
• SocketAn endpoint of a conversation, identified by address, port, and protocol.
  Intermediatenot startedMark for review
• Software as a ServiceSaaSA finished application delivered over the Internet and run by the provider.
  Beginnernot startedMark for review
• Spanning Tree ProtocolA switching protocol that blocks loops while allowing redundant links.
  Intermediatenot startedMark for review
• SQL InjectionSQLiUntrusted input that changes the meaning of a database query.
  Advancednot startedMark for review
• sqlmapA tool that detects SQL injection in an application you may test.
  Advancednot startedMark for review
• ssA Linux utility that lists sockets and listening ports.
  Intermediatenot startedMark for review
• SSHAn encrypted protocol for remote login and command execution.
  Beginnernot startedMark for review
• SSLThe obsolete predecessor of modern transport encryption.
  Intermediatenot startedMark for review
• Storage DrivePersistent storage that keeps data after power is removed.
  Beginnernot startedMark for review
• Subnet MaskThe value that splits an address into network and host portions.
  Beginnernot startedMark for review
• SubnettingSplitting one network prefix into smaller network prefixes.
  Intermediatenot startedMark for review
• SwitchA device that forwards local frames to a specific port.
  Beginnernot startedMark for review
• SwitchingForwarding local frames to the specific port that reaches the destination.
  Beginnernot startedMark for review
• Symmetric EncryptionEncryption where the same secret key locks and unlocks the data.
  Intermediatenot startedMark for review
• SyslogA standard for sending log messages to a collector.
  Intermediatenot startedMark for review
• System HardeningReducing a system's exposure by removing what it does not need.
  Beginnernot startedMark for review
• systemctlControls and inspects services on Linux systems that use systemd.
  Intermediatenot startedMark for review
• TACACS+A device-administration protocol that separates authentication, authorization, and accounting.
  Advancednot startedMark for review
• tasklistLists running processes on Windows.
  Beginnernot startedMark for review
• TCPA reliable, ordered transport protocol that retransmits lost data.
  Beginnernot startedMark for review
• TCP/IP ModelTCP/IPThe four-layer model commonly used to describe Internet communication.
  Beginnernot startedMark for review
• tcpdumpA command-line tool that captures packets matching a filter.
  Intermediatenot startedMark for review
• TelnetA legacy remote terminal that sends keystrokes in the clear.
  Beginnernot startedMark for review
• Test-NetConnectionA PowerShell cmdlet that tests reachability and a specific TCP port.
  Intermediatenot startedMark for review
• TFTPA minimal unauthenticated file transfer, used on trusted local networks.
  Intermediatenot startedMark for review
• ThreatA potential cause of an unwanted incident that could cause harm.
  Beginnernot startedMark for review
• Threat ActorA person, group, or automation that may cause a security event.
  Intermediatenot startedMark for review
• Threat IntelligenceAnalyzed threat information that helps a defender make a decision.
  Intermediatenot startedMark for review
• Threat ModelingA structured way to ask what can go wrong before you build or change a system.
  Intermediatenot startedMark for review
• Three-Way HandshakeThe SYN, SYN-ACK, and ACK exchange that starts a reliable connection.
  Intermediatenot startedMark for review
• ThroughputThe amount of data actually transferred, not the advertised capacity.
  Intermediatenot startedMark for review
• TLSA protocol that encrypts a session and checks the server's certificate.
  Intermediatenot startedMark for review
• tracerouteLists the routers a packet passes through on the way to a destination.
  Beginnernot startedMark for review
• TransceiverA module that matches a device port to a copper or optical medium.
  Intermediatenot startedMark for review
• Troubleshooting MethodologyA repeatable order for finding a cause, applying a fix, and documenting it.
  Beginnernot startedMark for review
• UDPA connectionless transport protocol that does not retransmit lost datagrams.
  Beginnernot startedMark for review
• UEFIModern motherboard firmware that starts the computer and can check boot signatures.
  Intermediatenot startedMark for review
• UnicastDelivery from one sender to one specific destination.
  Beginnernot startedMark for review
• VirtualizationRunning virtual computers, each with its own operating system, on shared hardware.
  Beginnernot startedMark for review
• VLANA logical split that puts switch ports into separate broadcast domains.
  Intermediatenot startedMark for review
• VulnerabilityA weakness that could be used to cause harm.
  Beginnernot startedMark for review
• Vulnerability AssessmentA systematic search for known weaknesses on systems in scope.
  Intermediatenot startedMark for review
• Vulnerability ManagementThe repeating cycle of finding, prioritizing, fixing, and verifying weaknesses.
  Intermediatenot startedMark for review
• Well-Known PortsPorts 0 through 1023, reserved for standard services.
  Beginnernot startedMark for review
• wgetDownloads a file from a URL and saves it locally.
  Beginnernot startedMark for review
• WhatWebA tool that identifies technologies a website appears to use.
  Beginnernot startedMark for review
• whoamiPrints the user identity of the current session.
  Beginnernot startedMark for review
• Wireless Access PointWAPA device that connects wireless clients to a wired network.
  Beginnernot startedMark for review
• WiresharkA graphical analyzer for captured network packets.
  Beginnernot startedMark for review
• XDRDetection that correlates endpoint, identity, email, and network telemetry.
  Advancednot startedMark for review
• Zero TrustA design that verifies every access instead of trusting a network location.
  Advancednot startedMark for review