Security

Encryption

A method to make data unreadable by scrambling the data using algorithms.

Data in Transit

Data that is actively moving over a network.

Data at Rest

Data that is stored somewhere.

Encryption Key

Used to make encrypted data readable again.

Public Key Infrastructure (PKI)

A method of identity verification. Ensures digital communications are safe.

Certificate

A digital file that proves a website’s identity and enables a secure, encrypted connection between a user’s web browser and the site’s server.

Certificate Authority (CA)

Issues certificates.

Identity & Access Management (IAM)

Keeping track of digital identities and controlling who can access an organization’s resources.

Lightweight Directory Access Protocol (LDAP)

A standard way of getting information from and managing directory services.

LDAP Signing

Ensures data sent between a user and a directory server can’t be changed during the trip. Also proves who sent the message.

Multifactor Authentication (MFA)

Verifying a user’s identity by asking for proof in at least 2 different ways before granting access.

Single Sign-On (SSO)

A method of allowing users to log into multiple apps or websites with one set of credentials.

Terminal Access Controller Access Control Segment (TACACS+)

Protocol used in Cisco systems to provide centralized authentication, authorization, and accounting for users & devices on a network.

Honeypot

A deceptive mechanism used to draw in and catch cyber criminals so security personnel may examine their strategies and prepare their defenses.

Honeynet

A network of honeypots.

Risk

The potential for something bad to happen.

Vulnerabilty

A weakness or flaw that could be used as malicious parties to compromise data or start an attack.

Exploit

A technique used to benefit from a vulnerability or security hole in a system or application.

Threat

A possible bad action or incident that could harm computer systems or a network.

Confidentiality, Integrity, & Availability (CIA Triad)

Acts as a guide in helping people make security rules and policies that keep data and a network safe.

Data Locality

Performing calculations on the same computer where data is stored.

Payment Card Industry Data Security Standard (PCIDSS)

Protocol for keeping user credit card data safe while it is being processed, sent, and stored.

Internet of Things (IoT)

The network of everyday, common devices that are connected.

Industrial Internet of Things (IIoT)

The network of connected industrial devices and processes.