CYBER SECURITY TERMINOLOGY

1. IP Address

IP Address An internet version of your computer’s home address that is used to identify it when it communicates across a network, such as when connecting to the internet (a network of networks).

2. Virus

Malware that aims to damage, destroy, or change data on a computer before spreading to others. Viruses like Stuxnet, on the other hand, have caused actual harm in recent years.

3. The Domain

A collection of networked computers, printers, and other devices that are managed as a unit. At work, for example, your computer is normally part of a domain.

4. Virtual Private Network (VPN)

By disguising the user’s location and encrypting traffic, this program helps them to remain anonymous while accessing the internet.

5. Cloud

A technology that allows us to access our data and/or services from anywhere in the globe via the internet. It’s a cluster of computers with massive storage capacities that service requests through the internet.

6. Exploit

A malicious program or script that may be used to exploit a computer’s vulnerability.

7. Breach

When a hacker successfully exploits a computer or device’s vulnerability and obtains access to its files and network.

8. Firewall

A type of protective technology that keeps the bad guys out. Hardware or software-based firewalls are available.

9. Malware

A catch-all word for all types of malicious software meant to cause havoc on a computer. Viruses, trojans, worms, and ransomware are some of the most common types.

10. Software

A collection of programs that instruct a computer to carry out a certain activity. These instructions have been put together as a package that users may download and install. Microsoft Office, for example, is a piece of application software.

11. Ransomware

A type of virus that blocks you from accessing files on your computer, thereby enslaving your data. It will usually encrypt data and demand a ransom to be paid to decode or restore them. Consider the WannaCry ransomware.

12. Trojan horse

A piece of software that, through a “back door,” allows a hacker to obtain remote access to a computer.

13. Worm

A piece of malware that can duplicate itself to propagate an an infection to other systems linked to it.

14. Bot/Botnet

An attacker can gain total control of a computer by using a type of software program or script that conducts operations on demand. A “botnet” is a cluster of compromised computers that is managed by a hacker or “bot-herder.”

15. Spyware

A sort of virus that monitors users’ activities without their awareness. Activity tracking, keystroke collection, data harvesting (account information, logins, financial data), and other features are included.

16. Rootkit

Another type of malware that enables attackers to take control of your machine from afar. Rootkits are particularly dangerous since they are difficult to detect, making it possible for this form of malware to remain on your computer for an extended period.

17. DDoS

DDoS is an abbreviation for distributed denial of service, which is a type of cyber assault. By “flooding” a service, such as a website, with malicious traffic or data from various sources, this attack seeks to render it useless (often botnets).

18. Spear Phishing or Phishing

Hackers utilize this method to get sensitive information. For example, utilizing carefully prepared email messages to persuade victims to reveal personal or secret information such as passwords and bank account numbers.

19. Encryption

The technique of encrypting data such that it can only be accessed with a key to avoid theft.

20. BYOD (Bring Your Own Device)

Refers to a firm security policy that permits workers to use their own devices for work. A BYOD policy establishes the conditions under which a personal phone or laptop can connect to the company network.

21. Pen testing

This method of analyzing security utilizing hacker tools and tactics with the goal of uncovering vulnerabilities and evaluating security weaknesses is known as “penetration testing.

22. Social Engineering

A method of manipulating and deceiving individuals to get sensitive and confidential information. Scams based on social engineering are designed to manipulate people’s thoughts and actions. As a result, if a hacker learns what drives a person’s activities, they can typically find exactly what they’re searching for, such as financial information and passwords.

23. Clickjacking

A hacking assault in which the target is tricked into clicking on an unwanted link or button, which is frequently disguised as a benign element.

24. Access control

Requests for access to systems, applications, and data are granted or denied through this procedure. It can also refer to the process of approving or rejecting requests for facility access.

24. Deepfake

A sound or video cut that has been altered and controlled to appear to be genuine or conceivable. The most perilous outcome of the ubiquity of deepfakes is that they can without much of a stretch persuade individuals into accepting a specific story or hypothesis that might bring about client conduct with a greater effect as in political or monetary.

25. Cascaded connections

Cascaded connections happen when one organization is associated with another, which is then associated with another, etc.

26. Chief Information Security Officer

A senior executive who oversees the deployment of security rules and associated security risk management procedures, as well as managing communication between security and business divisions.

27. Classified data

Data that, if compromised, would cause harm, serious harm, or exceptionally grave harm to the national interest, organizations, or individuals.

28. Classified system

A system that processes, stores, or communicates classified data is known as a classified system.

29. Coercivity

A feature of magnetic material, used as a measure of the amount of coercive force necessary to reduce the magnetic induction to zero from its residual condition.

30. Commercial Grade Cryptographic Equipment

Cryptographic components are found in a subset of ICT equipment.

31. Common Criteria

An worldwide standard for evaluating products.

32. communications security

The safety efforts applied to shield media communications from unapproved block attempt and double-dealing, just as guarantee the legitimacy of such broadcast communications.

33. White Hat / Black Hat

When talking in network safety terms, the distinctions in programmer “caps” alludes to the goal of the programmer. For instance:

White cap: Breaches the organization to acquire touchy data with the proprietor’s assent – making it totally lawful. This technique is typically utilized to test framework weaknesses.

Dark cap: Hackers that break into the organization to take data that will be utilized to hurt the proprietor or the clients without assent. It’s totally illicit.

34. Cryptographic algorithm

Calculation used to fill cryptographic roles like encryption, honesty, verification, advanced marks or key foundation.

35. Cryptographic equipment

A conventional term for Commercial Grade Cryptographic Equipment and High Assurance Cryptographic Equipment.

36. Cryptographic hash

The hash function is an algorithm that takes a string of any length (the message) as input and outputs a fixed length string (the message digest or fingerprint). The approach is meant to make finding any input that maps to a particular digest, or two distinct messages that map to the same digest, computationally impossible.

37. Cryptographic protocol

A cryptographic protocol is a standard for secure communication between two or more parties that ensures data confidentiality, integrity, authentication, and non-repudiation.

38. Cryptographic software

Cryptographic software is software that is used to execute cryptographic tasks.

39. Cryptographic system

A collection of hardware or software for cryptographic communication, processing, or storage, as well as the administrative structure in which it runs.

40. Cyber resilience

The capacity to respond to disturbances caused by cyber security issues while keeping corporate operations running smoothly. This involves the capacity to identify, handle, and recover from cyber-attacks.

41. Cyber security

Systems and data are protected by measures that ensure their confidentiality, integrity, and availability.

42. Cyber security event

A system, service, or network condition that indicates a probable security policy breach, a failure of safeguards, or a previously unforeseen circumstance that may be significant to security.

43. Cyber security incident

An unwelcome or unexpected cyber security incident, or a sequence of similar occurrences, with a high likelihood of jeopardizing corporate operations.

44. Cyber threat

Any situation or event that has the potential to cause harm to systems or data.

UK Cyber Security Group Ltd is here to help

If you would like to know more, do get in touch as we are happy to answer any questions. Looking to improve your cybersecurity but not sure where to start? Begin by getting certified in Cyber Essentials, the UK government’s scheme that covers all the technical controls that will provide the protection that you need to help guard against criminal attacks. Or just get in touch by clicking contact us