security

CIA Triad

Confidentiality, Integrity, and Availability.

Confidentiality

Ensuring information is accessible only to authorized parties.

Integrity

Ensuring information remains accurate and is not improperly altered.

Availability

Ensuring systems and information are accessible when needed.

Authentication

Verifying who a user or device is.

Authorization

Determining what an authenticated user or device is allowed to access.

Least Privilege

Giving users or systems only the permissions required for their duties.

MFA

Multi-factor authentication requiring multiple types of verification.

Firewall

A security system that controls network traffic using defined rules.

ACL

Access Control List containing rules that permit or deny traffic.

VPN

An encrypted connection used to securely access a remote network.

Phishing

A social-engineering attack designed to trick users into revealing information or taking actions.

Ransomware

Malware that encrypts or restricts access to data and demands payment.

Patch Management

The process of deploying updates to fix vulnerabilities and bugs.

Endpoint Protection

Security controls and software designed to protect endpoint devices.

Rogue Access Point

An unauthorized wireless AP connected to an organization's network.

Rogue DHCP Server

An unauthorized DHCP server distributing potentially incorrect network settings.

MAC Filtering

Allowing or denying network access based on a device's MAC address.

Port Security

A switch feature restricting which MAC addresses can use a switch port.

Sticky MAC

Dynamically learned MAC addresses that are retained as secure port entries.