Authentication and Security Tools

AAA

Authentication, Authorization, and Accounting (AAA) - Security framework that verifies identity, determines permissions, and logs user activity. (Think: Verify → Allow → Log.)

MFA

Multi-Factor Authentication (MFA) - Authentication requiring two or more different factors (something you know, have, or are). (Think: More than one factor.)

PAP

Password Authentication Protocol (PAP) - Authentication protocol that sends passwords in plaintext. Insecure and rarely used today. (Think: Plaintext Passwords.)

CHAP

Challenge-Handshake Authentication Protocol (CHAP) - Uses a challenge-response process to authenticate users without sending passwords in plaintext. (Think: Challenge authentication.)

MS-CHAP

Microsoft Challenge-Handshake Authentication Protocol (MS-CHAP) - Microsoft's version of CHAP used primarily in Windows environments. (Think: Windows CHAP.)

RADIUS

Remote Authentication Dial-In User Service (RADIUS) - Centralized AAA protocol commonly used for VPNs and enterprise Wi-Fi authentication (802.1X). (Think: Wi-Fi/VPN authentication.)

TACACS+

Terminal Access Controller Access-Control System Plus (TACACS+) - Cisco AAA protocol that provides centralized authentication for network administrators and devices. (Think: Admin logins.)

DAC

Discretionary Access Control (DAC) - Resource owners decide who can access their resources. (Think: Owner decides.)

MAC

Mandatory Access Control (MAC) - Access determined by security labels assigned by the system. Common in military/government environments. (Think: Labels decide.)

RBAC

Role-Based Access Control (RBAC) - Permissions are assigned based on a user's job role. (Think: Role decides.)

ABAC

Attribute-Based Access Control (ABAC) - Permissions are based on multiple attributes such as role, location, department, device, and time of day. (Think: Many factors decide.)

IDS

Intrusion Detection System (IDS) - Monitors network traffic for suspicious activity and generates alerts but does not block attacks. (Think: Detect only.)

IPS

Intrusion Prevention System (IPS) - Monitors network traffic and automatically blocks malicious activity. (Think: Detect + Prevent.)

SIEM

Security Information and Event Management (SIEM) - Collects, correlates, analyzes, and stores security logs from multiple systems for monitoring and incident detection. (Think: Logs.)

SOAR

Security Orchestration, Automation, and Response (SOAR) - Automates security workflows and incident response using information from SIEM and other tools. (Think: Automated SOC.)

EDR

Endpoint Detection and Response (EDR) - Monitors endpoints for suspicious behavior and enables rapid detection and response to threats. (Think: Endpoint security.)

XDR

Extended Detection and Response (XDR) - Extends EDR by correlating threat data across endpoints, email, cloud, networks, and servers. (Think: EDR for everything.)

AV

Antivirus (AV) - Detects, quarantines, and removes malware from systems. (Think: Malware protection.)

NGFW

Next-Generation Firewall (NGFW) - Firewall that includes deep packet inspection, application awareness, intrusion prevention, and advanced filtering. (Think: Smart firewall.)

UTM

Unified Threat Management (UTM) - All-in-one security appliance combining firewall, antivirus, intrusion prevention, VPN, web filtering, spam filtering, and more. (Think: Security Swiss Army knife.)

WAF

Web Application Firewall (WAF) - Protects web applications from attacks such as SQL injection and cross-site scripting (XSS). (Think: Protects websites.)

NAC

Network Access Control (NAC) - Restricts devices from accessing a network until they meet security requirements such as antivirus updates or patches. (Think: Checks device health before allowing access.)

DLP

Data Loss Prevention (DLP) - Detects and prevents unauthorized transmission of sensitive information. (Think: Stops data leaks.)

CASB

Cloud Access Security Broker (CASB) - Security solution that sits between users and cloud services to enforce security policies. (Think: Cloud security gatekeeper.)

MDM

Mobile Device Management (MDM) - Manages and secures mobile devices through centralized policies. (Think: Company phones.)

IAM

Identity and Access Management (IAM) - Framework for managing digital identities, authentication, authorization, and user access throughout an organization. (Think: Managing user identities.)

SSO

Single Sign-On (SSO) - Allows users to authenticate once and access multiple applications without signing in again. (Think: One login for everything.)

FIDO

Fast Identity Online (FIDO) - Authentication standard supporting strong passwordless authentication using security keys or biometrics. (Think: Passwordless login.)