Set 6: Security

ACL

Access Control List – a list of rules that says who or what is allowed or blocked from using a network resource

AH

Authentication Header – an IPSec protocol that proves a packet is real and unchanged, but does not encrypt it

ESP

Encapsulating Security Payload – an IPSec protocol that encrypts data and can also check that it is genuine

IKE

Internet Key Exchange – sets up the secure connection and shares keys for IPSec

IPSec

Internet Protocol Security – a set of protocols that encrypts and authenticates IP traffic, often used for VPNs

VPN

Virtual Private Network – an encrypted tunnel that securely connects you to another network over the internet

IDS

Intrusion Detection System – watches network traffic and alerts you to suspicious activity, but does not block it

IPS

Intrusion Prevention System – detects suspicious traffic and actively blocks it

UTM

Unified Threat Management – one device that combines several security features like a firewall, antivirus, and content filtering

DLP

Data Loss Prevention – tools and policies that stop sensitive data from leaving an organization

SIEM

Security Information and Event Management – collects and analyzes logs from many devices to spot security problems

NAC

Network Access Control – checks a device's identity and health before letting it onto the network

MFA

Multifactor Authentication – proving who you are with two or more different types of proof, like a password plus a phone code

SSO

Single Sign-on – log in once and get access to many apps without signing in again

SAML

Security Assertion Markup Language – an XML-based standard that lets you sign in once and use multiple services (SSO)

RADIUS

Remote Authentication Dial-in User Service – a central server that checks logins for people connecting to a network

TACACS+

Terminal Access Controller Access Control System Plus – a Cisco-created server that checks logins and controls what admins can do on network devices

EAPoL

Extensible Authentication Protocol over LAN – carries login information between a device and a switch or access point in 802.1X

IAM

Identity and Access Management – systems that control who users are and what they are allowed to access

PKI

Public Key Infrastructure – the system of certificates, keys, and authorities that makes encryption and digital trust work

SSL

Secure Socket Layer – an older encryption protocol for web traffic, now replaced by TLS

ZTA

Zero Trust Architecture – a security approach that trusts no user or device by default and verifies every request

SASE

Secure Access Service Edge – a cloud service that combines networking (like SD-WAN) and security in one package

SSE

Security Service Edge – the security half of SASE, delivered from the cloud

CIA

Confidentiality, Integrity, and Availability – the three main goals of security: keep data private, keep it accurate, and keep it accessible

DoS

Denial-of-service – an attack that overwhelms a system so real users can't use it

DDoS

Distributed Denial-of-service – an attack where many hacked devices flood a target so it goes offline