Explore tens of thousands of sets crafted by our community.
Cybersecurity Acronyms
20
Flashcards
0/20
IAM
Identity and Access Management - a framework for business processes that facilitates the management of electronic or digital identities.
SIEM
Security Information and Event Management - a solution that aggregates and analyzes activity from many different resources across your IT infrastructure.
PCI DSS
Payment Card Industry Data Security Standard - a set of security standards designed to ensure that ALL companies that accept, process, store, or transmit credit card information maintain a secure environment.
WAF
Web Application Firewall - a security system that monitors and controls network traffic to and from a web application.
CSP
Cloud Service Provider - a company that offers some component of cloud computing — typically Infrastructure as a Service (IaaS), Software as a Service (SaaS) or Platform as a Service (PaaS) — to other businesses or individuals.
IDS
Intrusion Detection System - a device or software application that monitors a network or systems for malicious activity or policy violations.
APT
Advanced Persistent Threat - a stealthy threat actor, typically a nation state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period.
SASE
Secure Access Service Edge - a cloud-based security model that integrates different security services together to support the dynamic secure access needs of organizations.
IPS
Intrusion Prevention System - a network security/threat prevention technology that examines network traffic flows to detect and prevent vulnerability exploits.
SDN
Software-Defined Networking - an approach to networking that uses software-based controllers or application programming interfaces (APIs) to direct traffic on the network and communicate with the underlying hardware infrastructure.
AES
Advanced Encryption Standard - a symmetric encryption algorithm widely used across the globe to secure data.
SOC
Security Operations Center - a centralized unit that deals with security issues on an organizational and technical level.
NIST
National Institute of Standards and Technology - a non-regulatory agency of the United States Department of Commerce that promotes and maintains measurement standards.
PaaS
Platform as a Service - a category of cloud computing services that provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app.
TLS
Transport Layer Security - a cryptographic protocol designed to provide communications security over a computer network.
GDPR
General Data Protection Regulation - a regulation in EU law on data protection and privacy for all individual citizens of the European Union and the European Economic Area.
VPN
Virtual Private Network - a service that encrypts your internet traffic and protects your online identity.
ISO
International Organization for Standardization - an independent, non-governmental international organization that develops voluntary, consensus-based, market relevant International Standards.
DDoS
Distributed Denial of Service - an attack that aims to overwhelm a website or service with traffic from multiple sources, rendering it unavailable.
PKI
Public Key Infrastructure - a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption.
© Hypatia.Tech. 2024 All rights reserved.