Cybersecurity glossary

Linux capabilities are a set of fine-grained privileges that can be assigned to a process, providing a more granular control over access rights than…

A CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) is a type of challenge-response test used to determine whether…

CERT (Computer Emergency Response Team) coding standards provide guidelines for developing secure and reliable software. Static analysis tools can he…

Certificate pinning is a security mechanism that allows an application to associate a specific certificate with a website or service. This prevents m…

A client honeypot actively searches for malicious servers by visiting websites and interacting with web services. It allows defenders to identify and…

Client-side emulation involves emulating the client-side components of a web application, such as JavaScript code. This allows security analysts to i…

Cloud DLP protects sensitive data stored or processed in cloud environments like AWS, Azure, or Google Cloud. It involves implementing DLP policies a…

Incorrectly configured cloud services used by shadow IT, leading to vulnerabilities like publicly accessible storage buckets or open databases. This…

Code coverage measures the extent to which a program's source code has been tested. While primarily used in dynamic testing, static analysis can help…

Code injection is a type of vulnerability where an attacker can inject malicious code into a running application. Zero-day exploits may utilize code…

Code obfuscation involves transforming code to make it more difficult for attackers to understand and reverse engineer. While not a perfect solution…

Code review is the systematic examination of computer source code, intended to find and fix mistakes overlooked in initial development phases. Static…

Code signing involves digitally signing software applications to verify the identity of the publisher and ensure the integrity of the code. This proc…

A code smell is a characteristic in the source code of a program that possibly indicates a deeper problem. While not always bugs, they can indicate p…

AST transformations can be used to automatically rewrite code to improve its security. Examples include adding security checks, sanitizing inputs, or…

Coinhive was a JavaScript miner that gained notoriety for enabling website owners to monetize their traffic by mining Monero using visitors' CPUs. Wh…

Command injection is an attack where an attacker executes arbitrary commands on the host operating system through a vulnerable application. This can…

Compilers leverage ASTs to apply security hardening techniques such as stack canaries and address space layout randomization (ASLR). These techniques…

Linux capabilities provide a finer-grained control over privileges than the traditional root/non-root model. Containers use capabilities to drop unne…

Container image scanning analyzes the layers of a container image for known vulnerabilities, malware, and configuration issues. This proactive approa…

Container runtime security focuses on securing the container runtime environment, which is responsible for running containers. This includes protecti…

Container security involves securing containerized applications and infrastructure. By default, containers should have limited access to the host sys…

A security context defines the security parameters for a container or pod, such as user ID, group ID, and capabilities. It controls the privileges an…

Content inspection is the process of analyzing the actual content of data, such as files, emails, or network traffic, to identify sensitive informati…

Watermarking can be used to track the origin and history of digital content, providing a means to establish content provenance. This is particularly…

CSP is a security standard that allows web developers to control the resources that a web page is allowed to load. By defining a whitelist of allowed…

Content-aware DLP analyzes the content of data to identify sensitive information based on predefined rules and patterns. This includes techniques lik…

Contextual analysis involves evaluating the surrounding context of data to determine its sensitivity and risk level. This helps DLP systems make more…

Control flow analysis examines the execution paths a program can take to find vulnerabilities related to incorrect logic or unexpected program states…

ASTs are used to generate Control Flow Graphs, which represent the execution paths within a program. CFGs are then analyzed for potential vulnerabili…

Cookies are used to store user-specific information on the client-side. Burp Suite allows testers to intercept and modify cookies to test for vulnera…

Using watermarks to identify unauthorized copies of digital content. The watermark acts as a unique identifier for the original source.

CORS is a mechanism that allows web pages from one origin to access resources from a different origin. While not directly related to JavaScript injec…

Counterfeit detection uses watermarks to verify the authenticity of products or documents. The presence and integrity of the watermark confirm that t…

An attack that forces a user to execute unwanted actions on a web application in which they're currently authenticated. Penetration testers will ofte…

XSS is a type of web security vulnerability that allows an attacker to inject malicious scripts into web pages viewed by other users. These scripts c…

XSS prevention techniques aim to prevent attackers from injecting malicious scripts into web pages viewed by other users. This often involves encodin…