Cybersecurity glossary

Cache invalidation ensures that outdated or compromised content is removed from the CDN cache. Timely cache invalidation is crucial for mitigating th…

Comprehensive logging and monitoring of CDN traffic and events are crucial for detecting security incidents and performance issues. Logs should be an…

The security of the CDN provider itself is critical, as a compromise of the CDN infrastructure can impact all customers using the service. Regular se…

Certificate rotation is the process of replacing existing digital certificates with new ones before they expire. Regularly rotating certificates help…

Cloud security encompasses the practices and technologies designed to protect cloud-based infrastructure, data, and applications. SSRF vulnerabilitie…

CSPM tools automatically identify and remediate security misconfigurations in cloud environments. They help enforce default deny policies by ensuring…

Cloud storage security involves implementing measures to protect data stored in cloud-based services. This includes access controls, encryption, and…

A dictionary of publicly known information security vulnerabilities and exposures. CVE provides a standardized naming convention for vulnerabilities…

Compliance refers to adhering to industry regulations and standards, such as PCI DSS, HIPAA, and GDPR. Network segmentation is often a requirement fo…

A compliance audit assesses whether an organization adheres to regulatory standards, internal policies, and legal requirements. These audits are esse…

The process of generating reports to demonstrate adherence to security regulations and standards (e.g., GDPR, HIPAA, PCI DSS). SIEM systems automate…

Various regulations and standards, such as HIPAA and GDPR, mandate the protection of sensitive data, often requiring log encryption. Compliance with…

Shadow IT often violates regulatory compliance standards (e.g., GDPR, HIPAA) due to lack of oversight and adherence to security policies. This can re…

Ensuring that systems and applications are configured securely and consistently. Proper configuration management helps prevent vulnerabilities arisin…

Container security and VM security are related but distinct concepts. While VMs provide hardware virtualization, containers offer operating system-le…

The process of adding additional information to security events to provide context and improve understanding. SIEM systems contextualize events by en…

Control gap analysis identifies discrepancies between desired security controls and implemented security controls. It helps to understand where vulne…

Control groups (cgroups) are a Linux kernel feature that limits, accounts for, and isolates the resource usage (CPU, memory, disk I/O, network) of pr…

Predefined rules that define how a SIEM should analyze logs and events to identify potential security threats. These rules are critical to the effect…

CPU utilization refers to the percentage of a computer's processing power being used at any given time. High CPU utilization, especially when unexpec…

Cryptographic agility refers to the ability to quickly and easily switch between different cryptographic algorithms and protocols. This is important…

A dictionary of publicly known information security vulnerabilities and exposures. CVEs provide a standardized naming convention for vulnerabilities…

A standardized scoring system for rating the severity of software vulnerabilities. CVSS scores help prioritize remediation efforts based on the poten…

The practice of protecting systems, networks, and programs from digital attacks aimed at accessing, changing, or destroying sensitive information, ex…