CyberMap glossary

Cybersecurity glossary

Clear definitions of 810 security terms — and how they connect on the interactive map.

All categories GeneralNetworkApplicationCryptographyThreat
False Negative

The failure of a security system to detect a malicious event. Minimizing false negatives is crucial to prevent security breaches.

False Negative Rate

The probability of failing to detect a watermark when one is actually present. A low false negative rate is crucial for effective protection of digit…

False Positive

An alert generated by a security system that incorrectly identifies a benign event as malicious. Reducing false positives is a key goal of SIEM tunin…

False Positive Rate

The probability of incorrectly detecting a watermark when one is not present. A low false positive rate is essential for reliable watermarking system…

File Encryption

File encryption involves encrypting individual files or folders to protect sensitive data. Symmetric encryption is often used for file encryption due…

File Hash Rule

A File Hash Rule in AppLocker allows or denies applications based on the cryptographic hash of the file. This is the most specific type of rule, ensu…

File Integrity Monitoring (FIM)

File Integrity Monitoring (FIM) involves monitoring critical system files and registry entries for unauthorized changes. EDR systems use FIM to detec…

Firewall

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It ac…

Firewall Audit

A firewall audit is a systematic review of firewall configurations and logs to ensure they are properly configured and effective. It helps identify p…

Firewall Clustering

Firewall clustering involves grouping multiple firewalls together to provide high availability and scalability. If one firewall fails, the others can…

Firewall Egress Filtering

Egress filtering is a firewall configuration that restricts outbound network traffic. By controlling which connections and data are allowed to leave…

Firewall Evasion

SSRF can be used to bypass firewalls by making requests from the server's IP address, which may be trusted by the firewall. This is because the reque…

Firewall Log Analysis

The process of examining firewall logs to identify security incidents, policy violations, and network anomalies. It involves using tools and techniqu…

Firewall Log Tampering

The act of intentionally altering or deleting firewall logs to conceal malicious activity or cover up security breaches. This is a serious security t…

Firewall Logging

Firewall logging records network traffic and events that pass through the firewall. These logs can be used for security analysis, troubleshooting, an…

Firewall Logs

Records of network traffic that passes through a firewall. Firewall logs are a critical data source for SIEM systems, providing insights into network…

Firewall Policy

A firewall policy is a set of rules and configurations that define how a firewall should operate. It includes rules for allowing or denying traffic…

Firewall Rule

A firewall rule is a set of conditions that determine how a firewall handles network traffic. Rules specify criteria such as source and destination I…

Firewall Rule Auditing

The process of reviewing firewall rules to ensure they are effective and aligned with security policies. Firewall logs provide valuable information f…

Firewall Rules

Firewall rules are configured to allow or deny network traffic based on source, destination, port, and protocol. A default deny firewall configuratio…

Firewall Rulesets

Firewall rulesets control network traffic based on source and destination IP addresses, ports, and protocols. Contextualizing these rules with the bu…

Firmware Emulation

Firmware emulation allows security researchers to analyze and test firmware images in a virtual environment. This is crucial for identifying vulnerab…

Formal Verification

ASTs are used in formal verification tools to mathematically prove the correctness and security of code. This helps ensure that the code behaves as e…

Format String Vulnerability

A format string vulnerability occurs when a program uses user-supplied input as a format string in functions like printf. Attackers can exploit this…

Fragile Watermarking

Fragile watermarking is designed to be easily destroyed or altered when the watermarked content is modified. It's used primarily for tamper detection…

Fuzzing

A software testing technique that involves providing invalid, unexpected, or random data as inputs to a program. Fuzzing is used to identify vulnerab…

Fuzzing with AST Transformations

ASTs can be used to guide fuzzing efforts by generating valid code variations based on AST transformations. This helps improve the effectiveness of f…