Domain 4 (Acronyms)

TLS

Transport Layer Security
Encryption for HTTPS, email, VPN, APIs

EAP

Extensible Authentication Protocol
802.1X authentication (Wifi, VPN, NAC)

PEAP

Protected EAP
Secure authentication tunnel (TLS-wrapped EAP)

CCMP

AES-based encryption for WPA2/WPA3
Modern Wi-Fi security

TKIP

Transitional encryption for WPA
Legacy WPA compatibility
(** note: weak - avoid)

WEP

Old wireless encryption
Legacy networks only
(** note: broken - never use)

AAA

Authentication, Authorization, Accounting
Used for RADIUS, TACACS+, network access control

PFS

Perfect forward secrecy
ensures past sessions stay secure even if keys leak

ECDHE

Elliptic-Curve Diffie-Hellman Ephemeral
key exchange with perfect forward secrecy

IV

Initialization Vector
Randomness in encryption'; prevents pattern attacks

SAE

Simultaneous Authentication of Equals
WPA3 secure handshake replacing PSK

WPA

Wi-Fi protected access
wireless security (WPA2, WPA3)

RFID

Radio frequency identification
Badges, inventory tracking, access cards

PSK

Pre-Shared Key
Shared Wi-Fi password (WPA2-PSK)

AUP

Acceptable Use Policy
Rules for how employees may use company systems

WPS

Wi-Fi Protected Setup
Easy Wi-Fi pairing (PIN/push-button)
(** note: insecure avoid)

NFC

short range communication
tap-to-pay, badge access, device pairing

GPS

Global Positioning System
Location tracking, geofencing

COPE

Corporate Owned, Personally Enabled
Company owned devices employees can personalize

CYOD

Choose Your Own Device
company-approved device list employees choose from

BYOD

Bring your own device
employees use personal devices at work

MDM

Mobile device management
enforcing mobile security policies remote wipe, app control

IoT

internet connected smart devices
home automation, sensors, wearables

RTOS

operating system with strict timing guarantees
medical devices, robotics, embedded systems

SCADA

Supervisory control system for industrial environments
remote monitoring of ICS systems

ICS

Industrial control systems
factories, power plants, industrialautomation

ACL

A list of rules controlling access
Network filtering, permissions, firewall rules

SSH

Encrypted remote access protocol
secure command line access, secure file transfer (SCP/SFTP)

VLAN

a logical network segment
network isolation, reducing broadcast traffic, segmentation

NIST

U.S. standards body that publishes cybersecurity frameworks
security controls, risk frameworks, password guidance

SCAP

A NIST standard for automating vulnerability management
Automated scanning, configuration checks, compliance