Cybersecurity glossary

Tainted data refers to data that originates from an untrusted source, such as user input or external APIs. Static analysis tools track tainted data t…

Tamper detection mechanisms identify unauthorized modifications to log files. This can be achieved through cryptographic hashing or digital signature…

Tamper resistance, when related to watermarking, describes the degree to which a watermarked system prevents unauthorized alteration or removal of th…

A tarpit is a type of honeypot that intentionally slows down attackers by delaying responses. This wastes the attacker's time and resources, making t…

Trusted Execution Environment (TEE) emulation simulates the secure environment within a processor. This is critical for testing security-sensitive ap…

Telemetry data from honeypots provides insights into attack trends and patterns. This data can be used to improve security defenses and proactively a…

Applications often rely on third-party libraries and frameworks, which can introduce vulnerabilities if they are not properly managed. Regularly upda…

This assessment evaluates the security practices of third-party vendors and service providers. It helps organizations understand and mitigate the ris…

Threat hunting is a proactive security activity that involves searching for threats that have evaded automated detection systems. EDR solutions provi…

Threat intelligence is information about existing or emerging threats that can be used to inform decisions and improve security posture. This include…

Streams of information about known threats, vulnerabilities, and indicators of compromise (IOCs). Integrating threat intelligence feeds with log anal…

TIPs collect, aggregate, and analyze threat data from multiple sources, providing contextual information about threat actors, malware, and vulnerabil…

Threat modeling involves identifying potential threats to a system or application and assessing their likelihood and impact. Contextualizing threats…

This type of SSRF exploits the time it takes for a server to respond to a request. By sending requests to resources that take varying amounts of time…

Time-based firewall rules allow administrators to define rules that are only active during specific times of day or days of the week. This can be use…

Proper TLS/SSL configuration is essential for securing web traffic. Burp Suite can be used to analyze the TLS/SSL configuration of a web server and i…

CDNs often handle TLS/SSL termination, decrypting incoming traffic and encrypting outgoing traffic, which reduces the load on the origin server. Prop…

Token manipulation involves modifying or replacing access tokens in Windows to gain elevated privileges. This technique can be used to impersonate ot…

Token-based authentication can be used to secure access to CDN resources by requiring users to present a valid token before accessing content. This h…

The process of replacing sensitive data with non-sensitive substitutes, referred to as tokens. This protects the actual data from being exposed to in…

The examination of network traffic patterns recorded in firewall logs to understand network usage and identify potential bottlenecks. This can help o…

Traffic emulation involves generating synthetic network traffic to simulate real-world usage patterns. This is used to assess the performance and sec…

Traffic filtering involves inspecting network traffic and blocking packets that match certain criteria, such as spoofed IP addresses or malicious pat…

Traffic flooding involves overwhelming a network or server with a large volume of packets. This can exhaust resources and prevent legitimate traffic…

TLS is a cryptographic protocol that provides secure communication over a network. It is commonly used to encrypt log data during transmission betwee…

3DES is a symmetric block cipher that applies the DES algorithm three times to each data block to enhance security. While more secure than DES, it is…

A trust store is a repository of trusted root certificates. Operating systems, browsers, and applications use trust stores to verify the validity of…

A trust zone is a defined area of a network with a specific level of security and access control. Network segmentation creates multiple trust zones w…

A Trusted Platform Module (TPM) is a hardware security module that provides secure storage for cryptographic keys and supports secure boot processes…

2FA is a security process that requires users to provide two different authentication factors to verify their identity. This adds an extra layer of s…