Cybersecurity glossary

Secure Boot is a security standard that ensures a device boots using only software that is trusted by the device manufacturer. It prevents malicious…

Properly configuring a CDN involves implementing secure caching policies, enabling HTTPS, and configuring appropriate access controls. Regular securi…

SDLC integrates security considerations into every phase of the software development process. It ensures that security is considered from the initial…

Secure logging practices refer to the policies and procedures that ensure logs are generated, stored, and accessed securely. This includes encrypting…

A security audit is a systematic evaluation of an organization's security policies, procedures, and infrastructure. It provides an independent assess…

Security auditors use AST analysis to manually review source code for potential vulnerabilities and security weaknesses. This helps ensure that the c…

Educating users about cybersecurity threats and best practices to help them avoid becoming victims of attacks. Security awareness training can help p…

Security baselines are a set of recommended security settings and configurations for a system or application. Implementing AppLocker is often part of…

A security descriptor is a data structure that contains the security information associated with an object, such as a file, process, or registry key…

The SDLC is a process for developing secure software. Static code analysis is integrated into the SDLC to identify and address vulnerabilities early…

Security hardening involves configuring systems in the DMZ to minimize vulnerabilities. This includes patching software, disabling unnecessary servic…

SIEM systems aggregate and analyze security logs and events from various sources across an organization's IT infrastructure. This helps security team…

A vulnerability caused by improperly configured security settings. This is a common source of vulnerabilities and can often be easily exploited.

A technology that allows organizations to collect security data from various sources and automate incident response workflows. SOAR platforms often i…

A security policy is a set of rules and guidelines that define how an organization protects its assets. Firewalls are a key component in implementing…

Security policy enforcement involves ensuring that software adheres to predefined security standards and guidelines. Static analysis tools can automa…

A security policy review ensures that security policies are up-to-date, comprehensive, and effectively communicated to employees. It helps maintain a…

A security practice that divides critical tasks among multiple individuals to prevent any single person from having complete control over a process o…

Session monitoring involves actively observing user sessions on jump servers to detect suspicious activity in real-time. This can help identify and p…

Session recording captures all activities performed on a jump server, providing an audit trail for security analysis and compliance. This allows admi…

Unofficial repositories of data created outside of IT's purview, often lacking proper governance and security controls. These can become honeypots fo…

Shadow IT refers to IT systems and solutions built and used inside an organization without explicit organizational approval. DLP solutions need to di…

A platform that collects, analyzes, and manages security logs and events from various sources. SIEM systems provide real-time monitoring, correlation…

The design and structure of a SIEM system, including its components, data flow, and integration points. A well-designed SIEM architecture ensures sca…

The process of connecting firewall logs to a Security Information and Event Management (SIEM) system. This integration enables real-time monitoring…

The process of optimizing a SIEM system to improve its accuracy and reduce false positives. SIEM tuning involves adjusting correlation rules, whiteli…

Steganography aims to conceal the existence of a message, while watermarking aims to protect content ownership or authenticity, even if the watermark…

A standard protocol for message logging. Many devices and applications use syslog to send event notifications, and SIEM systems commonly use syslog t…