Security+ Acronyms

Security+ Acronyms w/ Definitions

Authentication, Authorization, Accounting (AAA)

A security framework that controls access to computer resources and tracks user activity.

Access Control List (ACL)

A list of permissions that controls who can access a system resource and what operations they can perform.

Advanced Encryption Standard (AES)

A cryptographic algorithm that encrypts and decrypts data using a symmetric block cipher.

Authentication Header (AH)

A security protocol in IPSec that ensures the integrity of packet headers and data, provides user authentication and offers optional replay protection and access protection.

Automated Indicator Sharing (AIS)

A service provided by the Cybersecurity and Infrastructure Security Agency (CISA) to enable real-time exchange of cyber threat indicators and defensive measures.

Annualized Loss Expectancy (ALE)

A metric used in risk management to estimate the expected monetary loss an organization could face from a specific risk over one year.

Access Point (AP)

A device that connects wireless client devices in an infrastructure to each other and provides access to a distribution system.

Application Programming Interface (API)

A software intermediary that allows two applications to communicate with each other.

Advanced Persistent Threat (APT)

A cyber attack where a hacker gains unauthorized access to a network and remains undetected, typically to steal sensitive data.

Annualized Rate of Occurrence (ARO)

The estimated probability of a specific event happening within a given year.

Address Resolution Protocol (ARP)

A protocol that maps IP addresses to MAC addresses.

ARP Poisoning

An attack that exploits the IP address to MAC resolution to steal, modify, or redirect frames within a local area network.

Adversarial Tactics, Techniques, & Common Knowledge (ATT&CK)

A framework documenting how cyber attackers behave in security incidents to improve detection and response strategies.

Acceptable Use Policy (AUP)

A set of rules governing how a network, website, or service can be used.

Bourne Again Shell (BASH)

A shell program and command language commonly used as the default login shell for multiple Linux distributions.

Business Continuity Plan (BCP)

A strategy for maintaining service delivery and recovering during disruptions.

Business Impact Analysis (BIA)

A process predicting the consequences of a business disruption and the resources needed to recover.

Basic Input/Output System (BIOS)

Firmware pre-installed on a computer's motherboard initiating the computer system.

Bridge Protocol Data Unit (BPDU)

A network packet carrying information between switches to prevent loops and optimize performance.

Certificate Authority (CA)

A trusted third-party issuing digital certificates to verify identities.

Cloud Access Security Broker (CASB)

A software used to ensure data protection and regulatory compliance for cloud services.

Counter Mode/CBC-MAC Protocol (CCMP)

A security protocol that uses the Advanced Encryption Standard (AES) algorithm to encrypt data and provide data integrity and confidentiality. Part of the 802.11i standard for wireless local area networks (WLANs) and was introduced in the Wi-Fi Protected Access 2 (WPA2) wireless security standard.

Confidentiality, Integrity, Availability (CIA)

A model for information security representing three key principles.

Continuity of Operation Planning (COOP)

A process ensuring organizations can perform essential functions during emergencies.

Certificate Revocation List (CRL)

A list of revoked digital certificates not to be trusted.

Cloud Service Provider (CSP)

A company offering cloud-based services like storage and applications.

Certificate Signing Request (CSR)

A message sent by an applicant to a CA to apply for a digital identity certificate.

Cross-Site Request Forgery (CSRF or XSRF)

Exploits applications that use cookies to authenticate users, track sessions, or perform an unwanted action on a user's behalf

Channel Service Unit (CSU)

A hardware device that connects a local area network (LAN) to a wide area network (WAN). It acts as a bridge between the network router and the service provider's equipment.

Common Vulnerability Enumeration (CVE)

A list of publicly known vulnerabilities with unique identifiers.

Common Vulnerability Scoring System (CVSS)

A system assigning numerical scores to CVEs to indicate severity.

Discretionary Access Control (DAC)

A model where the owner controls who can access resources.

Distributed Denial of Service (DDoS)

A cyberattack that overwhelms a target with traffic from multiple sources.

Digital Encryption Standard (DES)

An outdated symmetric key method of data encryption using a 56-bit key.

Dynamic Host Configuration Protocol (DHCP)

A protocol that assigns IP addresses and configuration parameters to devices on a network.

Diffie Hellman Ephemeral (DHE)

A method of securely generating a symmetric key over a public channel.

DomainKeys Identified Mail (DKIM)

Email authentication method verifying sender and integrity using a key pair.

Dynamic Link Library (DLL)

A file containing reusable code and data for multiple programs.

Domain Message Authentication Reporting and Conformance (DMARC)

An email authentication protocol for verifying the legitimacy of email senders.

Domain Name System (DNS)

A system translating domain names into IP addresses.

Denial of Service (DoS)

An attack making a network resource unavailable by overwhelming it with requests.

Data Privacy Officer (DPO)

A professional responsible for compliant and ethical handling of personal data.

Disaster Recovery Plan (DRP)

A document outlining how an organization responds to disasters to maintain operations.

Extensible Authentication Protocol (EAP)

A protocol framework supporting various authentication methods.

Elliptic Curve Cryptography (ECC)

A public-key technique using elliptic curves for generating key pairs.

Elliptic Curve Diffie-Hellman Ephemeral (ECDHE)

A key agreement protocol establishing a shared secret over an insecure channel.

Endpoint Detection and Response (EDR)

Technology monitoring and responding to threats on endpoints.

Encrypted File System (EFS)

Encryption control technique allowing users to control who can read files.

Encapsulated Security Payload (ESP)

An encryption protocol that protects data in transit between computers by encrypting and authenticating data packets.

Full Disk Encryption (FDE)

The process of encrypting all the data on the hard drive used to boot a computer, including the computer's OS, and permitting access to the data only after successful authentication to the encrypted product

File Integrity Management (FIM)

Process verifying the authenticity of files to detect tampering.

False Rejection Rate (FRR)

A metric used to measure how often a biometric system incorrectly denies access to an authorized user.

File Transfer Protocol (FTP)

A standard protocol allowing file transfers between computers.

FTPS

Secure version of File Transfer Protocol.

General Data Protection Regulation (GDPR)

EU law regulating the collection and processing of personal data.

Group Policy Object (GPO)

Settings defining system appearance and behavior for a group of users.

High Availability (HA)

A system characteristic ensuring a high level of operational performance.

Host-based Intrusion Detection System (HIDS)

System monitoring and analyzing internal computing systems and network packets.

Host-based Intrusion Prevention System (HIPS)

Uses behavioral analysis and network filtering to monitor a computer's files, registry keys, and running processes. It can detect suspicious activity by comparing current activity to a baseline of normal activity.

Hardware Security Module (HSM)

Tamper-resistant devices managing cryptographic keys and processes.

Hyper-text Markup Language (HTML)

Foundation of web applications, often exploited for XSS or SQLi attacks.

Infrastructure as a Service (IaaS)

A cloud computing model that provides on-demand access to computing resources such as servers, storage, networking, and virtualization.

Infrastructure as Code (IaC)

Method managing infrastructure through code instead of manual processes.

Identity and Access Management (IAM)

Ensures appropriate access to tools based on job roles.

Internet Key Exchange (IKE)

A secure key management protocol that is used to set up a secure, authenticated communications channel between two devices.

Internet Message Access Protocol (IMAP)

Protocol allowing email clients to retrieve messages from a mail server.

Internet Protocol Security (IPsec)

Protocols encrypting and authenticating IP packets for secure communication.

Incident Response Plan (IRP)

Procedures for detecting and recovering from cybersecurity incidents.

Initialization Vector (IV)

An arbitrary number used with a secret key for secure encryption.

Layer 2 Tunneling Protocol (L2TP)

Protocol creating secure tunnels for data transmission.

Local Area Network (LAN)

Network interconnecting computers within a single physical location.

Lightweight Directory Access Protocol (LDAP)

Standard protocol for accessing distributed directory services.

Mandatory Access Control (MAC)

Security model limiting resource access based on predefined rules.

Media Access Control (MAC)

The layer that controls the hardware responsible for interaction with the wired (electrical or optical) or wireless transmission medium.

Master Boot Record (MBR)

A crucial component of a computer's storage device that contains information about the hard disk partitions and the operating system (OS)

Message Digest 5 (MD5)

Hash function generating a 128-bit value, insecure for cryptographic applications.

Mobile Device Management (MDM)

Software managing, monitoring, and securing mobile devices.

Multi-protocol Label Switching (MPLS)

Technology directing data packets based on labels.

Managed Security Service Provider (MSSP)

Third-party offering outsourced security services.

Mean Time Between Failures (MTBF)

Predicted elapsed time between failures of a system.

Mean Time to Failure (MTTF)

Average time a product functions before its first failure.

Mean Time to Repair (MTTR)

Average time taken for a system to recover from a failure.

Network Access Control (NAC)

System controlling devices accessing a network based on security compliance.

Network Address Translation (NAT)

Mapping multiple private addresses to a public IP address.

Near Field Communication (NFC)

Short-range technology enabling data exchange between devices nearby.

Next-generation Firewall (NGFW)

Advanced firewall processing and blocking dangerous network traffic.

Network-based Intrusion Detection System (NIDS)

Monitors network traffic at strategic points for malicious activity.

Network-based Intrusion Prevention System (NIPS)

Active system analyzing network packets to block threats.

Network Time Protocol (NTP)

Protocol synchronizing computer clocks across a network.

Open Authorization (OAuth)

An open standard protocol that allows third-party applications to access a user's protected resources without requiring the user to share their login credentials.

Online Certificate Status Protocol (OCSP)

Protocol checking if a digital certificate is valid or revoked.

Open-source Intelligence (OSINT)

Insight gained from publicly available data sources.

Open Vulnerability Assessment Language (OVAL)

Standard promoting open security content and information exchange.

PKCS #12 (P12)

File format for storing cryptographic objects in a single file.

Platform as a Service (PaaS)

A cloud computing model where a third-party provider delivers a complete development environment, including servers, operating systems, storage, and development tools, allowing users to build, test, and deploy applications without managing the underlying infrastructure.

Privileged Access Management (PAM)

Focuses on control, monitoring, and protection of privileged accounts.

Password-based Key Derivation Function 2 (PBKDF2)

A widely used cryptographic algorithm designed to securely derive a cryptographic key from a user's password

Private Branch Exchange (PBX)

Phone system managing internal and external calls of a company.

Packet Capture (PCAP)

Technique intercepting data packets over a network.

Payment Card Industry Data Security Standard (PCI DSS)

Guidelines ensuring secure processing, storage, or transmission of credit card information.