Cybersecurity Dictionary

Mechanisms that restrict access to resources based on identity and permissions.

The process of verifying the identity of a user, device, or system.

The process of granting or denying access rights to resources after authentication.

The property of being accessible and usable on demand by an authorized entity.

A network of private computers infected with malicious software and controlled as a group.

An attack that tries all possible combinations to find a password or encryption key.

A trusted entity that issues digital certificates for verifying the identity of websites and systems.

The protection of information from unauthorized access or disclosure.

The science of securing information through mathematical algorithms.

A distributed denial-of-service attack that overwhelms a target system with traffic from multiple sources.

The practice of collecting, preserving, and analyzing digital evidence for legal proceedings.

The process of converting readable data into an unreadable format using an algorithm and key.

A network security device that monitors and controls incoming and outgoing network traffic.

The framework of rules, practices, and processes by which an organization is directed and controlled.

A mathematical function that converts data of arbitrary size to a fixed-size value (hash).

The methodology an organization uses to respond to and manage a cyberattack or data breach.

The assurance that data has not been tampered with and remains accurate.

Software intentionally designed to cause damage, gain unauthorized access, or disrupt operations.

The ability to prove that a message was sent and received, preventing either party from denying it.

A simulated cyberattack to evaluate the security of a system and identify vulnerabilities.

A social engineering attack that tricks users into revealing sensitive information via deceptive communication.

A set of roles, policies, and procedures to create, manage, and distribute digital certificates.

Malicious software that encrypts data and demands payment for decryption.

The systematic process of identifying, assessing, and mitigating threats to organizational assets.

Manipulation of people into performing actions or divulging confidential information.

Evidence-based knowledge about cyber threats used to inform security decisions.

A security process requiring two separate forms of identification to access a system.

A weakness in a system that can be exploited to compromise security.

A previously unknown vulnerability that has been disclosed but not yet patched.