Cybersecurity glossary

A data diode is a network security device that allows data to flow in only one direction. This can be used to protect highly sensitive systems by pre…

Data exfiltration is the unauthorized transfer of sensitive data from an organization's network. EDR systems monitor network traffic and file access…

DDoS mitigation services provide specialized protection against DDoS attacks. These services typically use a combination of techniques, such as traff…

DPI is a technique that examines the data part of network packets, not just the headers, to identify applications, content, and potential threats. NG…

A DMZ is a network segment that sits between the internal network and the external network, typically the Internet. It hosts publicly accessible serv…

DNS amplification is a type of amplification attack that exploits DNS servers. Attackers send small DNS queries with a spoofed source address, causin…

A DNS firewall protects against DNS-based attacks, such as DNS tunneling, DNS spoofing, and domain generation algorithms (DGAs). It monitors DNS traf…

Logs generated by DNS servers that record DNS queries and responses. Analyzing DNS logs helps identify malicious domains, command-and-control (C2) co…

DNS rebinding is a technique where an attacker manipulates DNS records to make a server connect to an initially approved domain and then switch to a…

A DNS security audit verifies the configuration of DNS servers and records to prevent DNS-based attacks such as DNS spoofing and cache poisoning. It…

DNSSEC helps to prevent DNS spoofing and cache poisoning attacks by digitally signing DNS records. Integrating DNSSEC with a CDN ensures that users a…

A DNS sinkhole is a server configured to provide incorrect DNS resolution for malicious domains. This redirects traffic from infected machines to a c…

DNS tunneling is a technique used to exfiltrate data by encoding it within DNS queries and responses. Attackers can bypass firewalls and other securi…