Cybersecurity glossary
Clear definitions of 810 security terms — and how they connect on the interactive map.
The failure of a security system to detect a malicious event. Minimizing false negatives is crucial to prevent security breaches.
False Negative RateThe probability of failing to detect a watermark when one is actually present. A low false negative rate is crucial for effective protection of digit…
False PositiveAn alert generated by a security system that incorrectly identifies a benign event as malicious. Reducing false positives is a key goal of SIEM tunin…
False Positive RateThe probability of incorrectly detecting a watermark when one is not present. A low false positive rate is essential for reliable watermarking system…
File EncryptionFile encryption involves encrypting individual files or folders to protect sensitive data. Symmetric encryption is often used for file encryption due…
File Hash RuleA File Hash Rule in AppLocker allows or denies applications based on the cryptographic hash of the file. This is the most specific type of rule, ensu…
File Integrity Monitoring (FIM)File Integrity Monitoring (FIM) involves monitoring critical system files and registry entries for unauthorized changes. EDR systems use FIM to detec…
FirewallA firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It ac…
Firewall AuditA firewall audit is a systematic review of firewall configurations and logs to ensure they are properly configured and effective. It helps identify p…
Firewall ClusteringFirewall clustering involves grouping multiple firewalls together to provide high availability and scalability. If one firewall fails, the others can…
Firewall Egress FilteringEgress filtering is a firewall configuration that restricts outbound network traffic. By controlling which connections and data are allowed to leave…
Firewall EvasionSSRF can be used to bypass firewalls by making requests from the server's IP address, which may be trusted by the firewall. This is because the reque…
Firewall Log AnalysisThe process of examining firewall logs to identify security incidents, policy violations, and network anomalies. It involves using tools and techniqu…
Firewall Log TamperingThe act of intentionally altering or deleting firewall logs to conceal malicious activity or cover up security breaches. This is a serious security t…
Firewall LoggingFirewall logging records network traffic and events that pass through the firewall. These logs can be used for security analysis, troubleshooting, an…
Firewall LogsRecords of network traffic that passes through a firewall. Firewall logs are a critical data source for SIEM systems, providing insights into network…
Firewall PolicyA firewall policy is a set of rules and configurations that define how a firewall should operate. It includes rules for allowing or denying traffic…
Firewall RuleA firewall rule is a set of conditions that determine how a firewall handles network traffic. Rules specify criteria such as source and destination I…
Firewall Rule AuditingThe process of reviewing firewall rules to ensure they are effective and aligned with security policies. Firewall logs provide valuable information f…
Firewall RulesFirewall rules are configured to allow or deny network traffic based on source, destination, port, and protocol. A default deny firewall configuratio…
Firewall RulesetsFirewall rulesets control network traffic based on source and destination IP addresses, ports, and protocols. Contextualizing these rules with the bu…
Firmware EmulationFirmware emulation allows security researchers to analyze and test firmware images in a virtual environment. This is crucial for identifying vulnerab…
Formal VerificationASTs are used in formal verification tools to mathematically prove the correctness and security of code. This helps ensure that the code behaves as e…
Format String VulnerabilityA format string vulnerability occurs when a program uses user-supplied input as a format string in functions like printf. Attackers can exploit this…
Fragile WatermarkingFragile watermarking is designed to be easily destroyed or altered when the watermarked content is modified. It's used primarily for tamper detection…
FuzzingA software testing technique that involves providing invalid, unexpected, or random data as inputs to a program. Fuzzing is used to identify vulnerab…
Fuzzing with AST TransformationsASTs can be used to guide fuzzing efforts by generating valid code variations based on AST transformations. This helps improve the effectiveness of f…