Security + Acronyms Flashcards
Need To Study 5, 6
IKE
(Internet Key Exchange)
A protocol used in IPsec VPNs to securely exchange encryption keys and establish a secure tunnel between two devices. It has two versions: IKEv1 (older) and IKEv2 (more secure and efficient).
ATT&CK
(Adversarial Tactics, Techniques, and Common Knowledge)
A cybersecurity framework developed by MITRE that maps out real-world attack techniques used by threat actors, helping organizations defend against cyber threats.
EDR
(Endpoint Detection and Response)
A security solution that provides the capability for detection, analysis, response, and real-time monitoring of cyber threats on endpoints (like laptops, desktops, and servers). It detects suspicious activity, investigates it, and helps remediate attacks. Think of it as a security camera and alarm system for your devices. (Example Tools: CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint)
HSM
(Hardware Security Module)
A physical device designed to generate, store, and manage encryption keys securely. It is tamper-resistant and used in high-security environments like banking and cloud services to protect sensitive data. Think of it as a super-secure USB for encryption keys that ensures no one can steal or tamper with them.
PUP
(Potentially Unwanted Program)
Software that’s not necessarily malicious but unwanted (e.g., toolbars, adware). Like junk mail that clutters your inbox, characteristic are:
* Often installed without clear user consent, but classified as an application downloaded and installed with the user’s consent.
* Can be pre-installed, downloaded, or bundled with other software.
* A type of software that may adversely affect the computer’s security and performance, compromise user’s privacy, or display unsolicited ads.
SCAP
(Security Content Automation Protocol)
A set of standards for automating the management of vulnerabilities and security policies. It’s like a robot that checks your systems for weaknesses and fixes them.
FRR
(False Rejection Rate)
The rate at which a biometric system incorrectly rejects an authorized user. Think of it as a security system mistakenly locking out the right person.
SPF
(Sender Policy Framework)
An email security protocol that helps prevent email spoofing by verifying if a mail server is authorized to send emails on behalf of a domain.
MAC
(Message Authentication Code)
A cryptographic method used to verify the integrity and authenticity of a message, ensuring it was not altered during transmission and came from a trusted source.
MDM
(Mobile Device Management)
A security and management solution that allows organizations to control, monitor, and secure mobile devices like smartphones, tablets, and laptops.
ECDHE
(Elliptic Curve Diffie-Hellman Ephemeral)
A key exchange method that uses ECC and generates new keys for each session, enhancing security and efficiency.
DEP
(Data Execution Prevention)
A security feature that prevents malicious code from executing in certain memory regions meant for data storage, helping to block exploits like buffer overflow attacks.
API
(Application Programming Interface)
A set of rules that allows different software applications to communicate with each other. Think of it as a menu that lets programs request specific functions from another service.
RTBH
(Remotely Triggered Black Hole)
A DDoS mitigation technique that blocks malicious network traffic by rerouting it to a “black hole” (null route) where it is discarded before reaching the target.
SCADA
(Supervisory Control and Data Acquisition)
A supervisory control system used to control industrial processes (e.g., power plants, water treatment). Like a digital dashboard for controlling factories.
AH
(Authentication Header)
A protocol used to provide authentication and integrity for IP packets. It is often used in conjunction with ESP.
AV
(Antivirus)
Software designed to detect, prevent, and remove malware from computer systems and networks. Think of it as a digital immune system that fights off infections.
VDI
(Virtual Desktop Infrastructure)
A technology that hosts desktop environments on a central server, allowing users to access them remotely. Think of it as renting a computer in the cloud.
Bash
(Bourne Again Shell)
A command-line shell and scripting language for Unix/Linux systems. Think of it as the text-based control panel for advanced computer operations.
AP
(Access Point)
A device that allows wireless devices to connect to a wired network (e.g., Wi-Fi router). Think of it as a bridge between your devices and the internet.
COPE
(Corporate-Owned, Personally Enabled)
A mobile device management model where employers provide devices for work and personal use. Think of it as a company phone you can also use for Netflix.
CRC
(Cyclic Redundancy Check)
A method to detect errors in transmitted or stored data. Think of it as a spellchecker for digital files.
IP
(Internet Protocol)
The rules governing how data is sent over networks (e.g., IP addresses). Think of it as the postal system for the internet.
P2P
(Peer-to-Peer)
A network where devices communicate directly without a central server (e.g., torrenting). Think of it as a digital potluck where everyone shares directly.
