Glosar de termeni

• • Cybersecurity: Cybersecurity encompasses a range of practices and technologies used to protect computer systems, networks, and data from unauthorized access, damage, theft, and other cyber threats. It includes measures like firewalls, encryption, and intrusion detection systems.
  • Malware (Malicious Software): Malware is any software designed to harm, infiltrate, or compromise computer systems or data. Common types include viruses, which attach to legitimate files; worms, which self-replicate; Trojans, which disguise themselves as legitimate programs; spyware, which spies on user activities; and ransomware, which encrypts files and demands a ransom for decryption.
  • Firewall: A firewall is a network security device or software that monitors and filters incoming and outgoing network traffic based on established security rules. It acts as a barrier between a trusted internal network and untrusted external networks, helping to prevent unauthorized access.
  • Encryption: Encryption is the process of converting data into a code to protect it from unauthorized access. It involves the use of cryptographic algorithms to scramble data into an unreadable format, which can only be decrypted with the appropriate encryption key.
  • Phishing: Phishing is a social engineering technique where cybercriminals impersonate trustworthy entities, often via email or fake websites, to trick individuals into divulging sensitive information such as usernames, passwords, or credit card details.
  • Cyberattack: A cyberattack is a deliberate, malicious act intended to compromise, damage, or gain unauthorized access to computer systems, networks, or data. Common cyberattacks include DDoS attacks, malware infections, and data breaches.
  • Vulnerability: A vulnerability is a weakness or flaw in a computer system or software that can be exploited by cybercriminals to compromise its security. Vulnerabilities are often patched through software updates.
  • Patch: A patch is a software update released by software vendors to fix security vulnerabilities, bugs, or improve software functionality. Regularly applying patches is crucial for maintaining system security.
  • Zero-day Vulnerability: A zero-day vulnerability is a security flaw in software that is exploited by cyber attackers before the software vendor has had a chance to release a patch. These vulnerabilities are considered high risk because there are zero days of protection against them.
  • Denial of Service (DoS) Attack: A Denial of Service (DoS) attack is an attack in which an attacker floods a target system or network with excessive traffic, causing it to become overwhelmed and unavailable to legitimate users.
  • Cyber Hygiene: Cyber hygiene refers to good practices and habits that individuals and organizations should follow to maintain a strong level of cybersecurity. It includes actions like using strong, unique passwords and keeping software up to date.
  • Endpoint Security: Endpoint security involves protecting individual devices such as computers, smartphones, and tablets from security threats. It includes antivirus software, intrusion detection, and other measures to prevent unauthorized access and malware infections.
  • Penetration Testing (Pen Test): Penetration testing is a controlled, simulated cyberattack exercise conducted by security professionals to identify vulnerabilities and weaknesses in a system’s security. It helps organizations assess and improve their security defenses.
  • Two-Factor Authentication (2FA): Two-Factor Authentication (2FA) is a security process that requires users to provide two different forms of authentication before gaining access to a system or account. This extra layer of security enhances protection against unauthorized access.
  • Cryptography: Cryptography is the science of secure communication through the use of codes and encryption techniques. It ensures that data remains confidential and is not easily readable by unauthorized parties.
  • Botnet: A botnet is a network of compromised computers or devices controlled by a single entity, often a cybercriminal. These compromised devices, known as “bots,” can be used for various malicious activities, including launching coordinated cyberattacks.
  • Incident Response Plan (IRP): An Incident Response Plan (IRP) is a structured approach that organizations follow to address and manage the aftermath of a cybersecurity incident. It outlines steps to mitigate damage and recover from the incident.
  • Ransomware: Ransomware is a type of malware that encrypts a victim’s data and demands a ransom in exchange for the decryption key. It is a highly profitable form of cybercrime and can cause significant data loss if not addressed.
  • Social Engineering: Social engineering is a manipulative technique used by cybercriminals to deceive individuals or employees into revealing confidential information or performing specific actions. It relies on psychological manipulation rather than technical exploits.
  • White-Hat Hacker: White-hat hackers, also known as ethical hackers, are security experts who test and assess systems for vulnerabilities with the permission of the system owner. Their goal is to identify and fix security weaknesses.
  • Black-Hat Hacker: Black-hat hackers are malicious hackers who exploit vulnerabilities for personal gain or to cause harm. They engage in illegal activities, including unauthorized access and data theft.
  • Red Teaming: Red teaming is a controlled exercise in which security professionals simulate cyberattacks on an organization to test its defenses. It helps organizations identify vulnerabilities and weaknesses.
  • Internet of Things (IoT): The Internet of Things (IoT) refers to the network of interconnected physical devices and objects that communicate and share data over the internet. These devices can range from smart thermostats to industrial machinery.
  • Cybersecurity Framework: A cybersecurity framework is a structured set of guidelines and best practices that organizations use to manage and improve their cybersecurity posture. Frameworks like NIST Cybersecurity Framework and ISO 27001 provide a structured approach to cybersecurity.
  • Threat Intelligence: Threat intelligence is information about potential cyber threats and vulnerabilities. It helps organizations proactively identify and defend against cyber threats by providing insights into emerging risks and attack patterns.
  • Packet Sniffing: Packet sniffing is the practice of intercepting and analyzing network traffic to gain insights into data transmission and potential security issues. It is often used for network troubleshooting and security monitoring.
  • Virus: A virus is a type of malware that attaches itself to legitimate files or programs and can replicate itself to spread to other systems. Viruses can cause damage to files and systems.
  • Antivirus Software: Antivirus software is security software designed to detect, prevent, and remove viruses and other malware from computer systems. It regularly scans for known threats and takes actions to quarantine or remove them.
  • Cyber Insurance: Cyber insurance is insurance coverage that helps organizations recover financially from losses and damages caused by cybersecurity incidents. It can cover expenses related to data breaches, legal costs, and more.
  • Cybersecurity Awareness Training: Cybersecurity awareness training involves educating employees and individuals about cybersecurity risks and best practices. It aims to raise awareness about common threats and teach individuals how to protect themselves and their organizations from cyberattacks.
  • Blockchain: Blockchain is a decentralized and distributed ledger technology used to record transactions across multiple computers in a secure and tamper-resistant manner. It’s best known for supporting cryptocurrencies like Bitcoin.
  • Multi-Factor Authentication (MFA): Multi-Factor Authentication (MFA) is a security method that requires users to provide two or more forms of authentication (e.g., password, biometric data, smart cards) before granting access. It adds an extra layer of security beyond traditional username and password.
  • Digital Signature: A digital signature is a cryptographic technique that verifies the authenticity and integrity of digital documents or messages. It provides a way to ensure that a document hasn’t been altered and was signed by the claimed sender.
  • Incident Response Team (IRT): An Incident Response Team is a group of cybersecurity experts within an organization responsible for managing and responding to security incidents. Their role is to coordinate efforts to mitigate the impact of an incident.
  • Advanced Persistent Threat (APT): An Advanced Persistent Threat is a sophisticated and prolonged cyberattack conducted by well-funded and organized threat actors, typically with a specific target in mind. APT attacks often involve stealthy and persistent tactics.
  • Social Engineering Toolkit (SET): The Social Engineering Toolkit is a framework used by ethical hackers and malicious actors to perform social engineering attacks. It provides tools and resources to simulate various social engineering scenarios.
  • Security Information and Event Management (SIEM): SIEM is a technology solution that combines security information management (SIM) and security event management (SEM) to provide real-time analysis of security alerts and events across an organization’s network.
  • Zero Trust Security Model: Zero Trust is a security model that assumes no trust, even within an organization’s network. It enforces strict access controls and authentication measures for all users and devices, regardless of their location.
  • Rootkit: A rootkit is a type of malware that enables unauthorized access to a computer or network while hiding its presence. Rootkits often embed themselves deep within the operating system, making them challenging to detect and remove.
  • Security Token: A security token is a physical or digital device used for two-factor authentication. It generates one-time passwords or authentication codes to provide an additional layer of security when logging into accounts or systems.
  • Digital Forensics: Digital forensics is the process of collecting, analyzing, and preserving digital evidence, such as computer files, to investigate cybercrimes or security incidents. It helps in identifying and attributing cyberattacks.
  • Security Policy: A security policy is a set of rules and guidelines that define an organization’s approach to cybersecurity. It outlines acceptable behaviors, responsibilities, and security measures to protect assets and data.
  • Keylogger: A keylogger is a type of malware that secretly records keystrokes on a computer or mobile device, potentially capturing sensitive information like passwords and credit card numbers.
  • Single Sign-On (SSO): Single Sign-On is an authentication method that allows users to access multiple applications or services with a single set of credentials. It simplifies the login process and enhances security.
  • Virtual Private Network (VPN): A VPN is a technology that creates a secure, encrypted connection between a user’s device and a remote server or network. It ensures privacy and confidentiality while transmitting data over the internet, particularly in public Wi-Fi networks.
  • Deep Web: The Deep Web refers to the part of the internet that is not indexed by standard search engines. It contains websites and resources that are not easily accessible to the public and may include private databases and content.
  • Dark Web: The Dark Web is a small portion of the Deep Web that is intentionally hidden and accessed through specialized software like Tor. It is often associated with illegal activities, such as black markets and cybercrime forums.
  • Cyber Threat Intelligence: Cyber Threat Intelligence is the analysis of data and information about cyber threats and vulnerabilities to inform decision-making and enhance an organization’s security posture.
  • Man-in-the-Middle (MitM) Attack: A Man-in-the-Middle Attack occurs when an attacker intercepts and possibly alters communication between two parties without their knowledge. This type of attack can lead to eavesdropping and data manipulation.
  • Credential Stuffing: Credential stuffing is an attack where cybercriminals use stolen username-password pairs to gain unauthorized access to multiple accounts across different services. It relies on individuals reusing passwords across platforms.
  • Biometric Authentication: Biometric authentication uses unique physical or behavioral characteristics, such as fingerprints, iris scans, or facial recognition, to verify a user’s identity. It offers a high level of security and is difficult to forge.
  • Zero-Day Exploit: A zero-day exploit is an attack that takes advantage of a software vulnerability on the same day it becomes known or “zero days” after the vulnerability is discovered. This leaves no time for the software vendor to develop and release a patch.
  • Digital Certificate: A digital certificate is a cryptographic credential that verifies the identity of a user or system. It is commonly used in secure communications, such as HTTPS, to ensure the authenticity and integrity of data exchanged over the internet.
  • Security Operations Center (SOC): A Security Operations Center is a centralized facility where security experts monitor, detect, respond to, and mitigate cybersecurity threats and incidents in real-time.
  • Supply Chain Attack: A supply chain attack occurs when cybercriminals target vulnerabilities in the software or hardware supply chain to compromise products before they reach end-users. This can lead to widespread security breaches.
  • Zero Trust Network Architecture: Zero Trust Network Architecture is a security framework that requires strict verification of all users and devices, even those inside an organization’s network. It assumes that no entity can be trusted by default.
  • Root Certificate Authority (CA): A Root Certificate Authority is a trusted entity that issues digital certificates to other certificate authorities. The trust chain relies on the security of the root CA, as it is the ultimate source of trust in a public key infrastructure.
  • Security Incident: A security incident is an event that compromises the confidentiality, integrity, or availability of data or systems. Security incidents can include data breaches, malware infections, and unauthorized access.
  • Advanced Encryption Standard (AES): AES is a widely used symmetric encryption algorithm that is considered highly secure. It is used to protect sensitive data and communications.
  • Brute Force Attack: A brute force attack is a trial-and-error method in which an attacker attempts all possible combinations of passwords or encryption keys until the correct one is found. It is time-consuming but can be effective against weak passwords.
  • Threat Vector: A threat vector is the method or pathway that cyber threats use to enter a target system or network. Common threat vectors include email attachments, malicious websites, and infected software downloads.
  • Security Information Sharing: Security information sharing involves the exchange of threat intelligence and cybersecurity information among organizations, government agencies, and cybersecurity communities to enhance collective defense against cyber threats.
  • Security Awareness Training: Security awareness training is an ongoing educational program that helps individuals and employees recognize and respond to cybersecurity threats and best practices. It aims to reduce human-related security risks.
  • Security Token Service (STS): A Security Token Service is a service that issues security tokens, often used in identity and access management systems to provide secure authentication and authorization.
  • Security Policy Framework (SPF): A Security Policy Framework is a structured set of policies and guidelines that govern an organization’s approach to information security. It defines security objectives, responsibilities, and controls.
  • Mobile Device Management (MDM): Mobile Device Management is a set of tools and policies used to manage and secure mobile devices, such as smartphones and tablets, within an organization. It ensures compliance with security policies and allows remote device management.
  • Cyber Resilience: Cyber resilience is an organization’s ability to withstand, adapt to, and recover from cyberattacks or security incidents while maintaining core functions and data integrity.
  • Cross-Site Scripting (XSS): Cross-Site Scripting is a web application vulnerability that allows attackers to inject malicious scripts into webpages viewed by other users. It can lead to data theft or unauthorized actions on a website.
  • Security Operations (SecOps): Security Operations refers to the practices, processes, and tools used by organizations to monitor and respond to cybersecurity threats and incidents in a systematic and coordinated manner.
  • Digital Footprint: A digital footprint is the trail of data and information that individuals or organizations leave behind while using digital technologies and the internet. It includes online activities, social media posts, and interactions.
  • Zero-Day Vulnerability Disclosure: Zero-Day Vulnerability Disclosure is the responsible practice of informing software vendors about a security vulnerability before publicly disclosing it. This allows vendors to develop and release patches to protect users.
  • Security Tokenization: Security tokenization is the process of replacing sensitive data, such as credit card numbers, with unique tokens to protect it from theft or unauthorized access. Tokens have no intrinsic value and are useless to attackers.
  • Security Operations Playbook: A Security Operations Playbook is a documented set of procedures, guidelines, and best practices that security teams follow when responding to specific types of security incidents. It streamlines incident response efforts.
  • Non-Repudiation: Non-repudiation is a security concept that ensures that a user cannot deny the authenticity of their actions or transactions. It is often associated with digital signatures and cryptographic protocols.
  • CISO (Chief Information Security Officer): The Chief Information Security Officer is an executive responsible for overseeing an organization’s information security program, policies, and practices. They play a crucial role in managing cybersecurity risks.
  • Honeypot: A honeypot is a decoy system or network designed to lure cyber attackers and gather information about their tactics and techniques.
  • Data Loss Prevention (DLP): Data Loss Prevention is a set of technologies and practices that aim to prevent unauthorized access, sharing, or leakage of sensitive data.
  • Security Information and Event Management (SIEM) Correlation: SIEM correlation is the process of analyzing security events and logs to identify patterns and relationships that may indicate potential threats.
  • Security Orchestration, Automation, and Response (SOAR): SOAR is a set of technologies and processes that automate and streamline security incident response and management tasks.
  • Rogue Access Point: A rogue access point is an unauthorized wireless access point that provides network access to users without proper authorization, often used for malicious purposes.
  • Security Posture Assessment: A security posture assessment is an evaluation of an organization’s overall cybersecurity readiness and vulnerabilities.
  • Cyber Threat Hunting: Cyber threat hunting is a proactive approach to identifying and mitigating cybersecurity threats within an organization’s network before they can cause harm.
  • Cryptocurrency Wallet: A cryptocurrency wallet is a digital tool used to store, send, and receive cryptocurrencies securely.
  • Cybersecurity Framework: A cybersecurity framework provides guidelines and best practices for organizations to manage and improve their cybersecurity posture.
  • Security Token Offering (STO): An STO is a fundraising method that uses security tokens representing ownership in a company, often used for blockchain-based projects.
  • Cyber Range: A cyber range is a controlled, simulated environment used for training and testing cybersecurity skills and incident response.
  • Shadow IT: Shadow IT refers to the use of unauthorized or unapproved software and devices within an organization, often creating security risks.
  • Bug Bounty Program: A bug bounty program is a formal initiative that rewards security researchers and ethical hackers for discovering and reporting vulnerabilities in software and systems.
  • Security Onion: Security Onion is an open-source cybersecurity monitoring and analysis platform that helps organizations detect and respond to security threats.
  • Firmware: Firmware is software that is embedded in hardware devices, such as computer chips, routers, and IoT devices, and provides essential functionality.
  • Security Tokenization Service: A security tokenization service converts sensitive information into tokens, improving data security and reducing the risk of data breaches.
  • Zero-Knowledge Proof (ZKP): Zero-Knowledge Proof is a cryptographic technique that allows one party to prove knowledge of a secret without revealing the secret itself.
  • Security Posture: An organization’s security posture refers to its overall cybersecurity readiness, including policies, practices, and defenses against threats.
  • Fileless Malware: Fileless malware is a type of malicious software that operates in memory without leaving traditional file traces, making it harder to detect and remove.
  • Security Tokenization: Security tokenization is the process of converting sensitive data into tokens, which can be used in place of the original data for enhanced security.
  • Zero Trust Network Access (ZTNA): Zero Trust Network Access is a security model that provides secure access to network resources based on strict identity verification and least privilege access principles.
  • Security Architecture: Security architecture refers to the design and implementation of security controls and measures within an organization’s IT environment.
  • Blockchain Consensus Mechanism: A blockchain consensus mechanism is a protocol used to achieve agreement among participants in a blockchain network regarding the state of the ledger.
  • Security Token Service (STS): A Security Token Service issues and manages security tokens for authentication and authorization in identity and access management systems.
  • Deception Technology: Deception technology involves deploying decoy assets and lures to mislead and detect cyber attackers within an organization’s network.

Disclaimer:

The terms listed in this glossary are provided for informational purposes and are not presented in any specific order of importance. The field of cybersecurity is constantly evolving, and new terms and concepts emerge over time. This glossary may be updated to include additional terms and explanations in the future.

If you have questions or would like to learn more about a specific topic or concept not covered in this glossary, we invite you to reach out to us via email or participate in relevant discussions on our forum. Your curiosity and engagement are essential in our collective pursuit of knowledge and cybersecurity awareness.

Please note that the information provided in this glossary is intended to serve as a general reference and should not replace professional advice or consultation on specific cybersecurity issues.

Thank you for your interest in enhancing your understanding of cybersecurity!