Security Glossary

A category of security tools that identify misconfiguration issues and compliance risks in cloud infrastructure. CSPM solutions continuously monitor cloud environments to detect security gaps, enforce policies, and maintain compliance across AWS, Azure, and Google Cloud.

A security framework that requires all users, whether inside or outside the organization's network, to be authenticated, authorized, and continuously validated before being granted access to applications and data. The principle is 'never trust, always verify.'

A framework of policies and technologies ensuring the right individuals access the right resources at the right times for the right reasons. IAM includes user authentication, authorization, and access control management.

A security mechanism that requires users to provide two or more verification factors to gain access to a resource. Common factors include passwords, security tokens, biometrics, or one-time codes.

A set of tools and processes designed to ensure sensitive data is not lost, misused, or accessed by unauthorized users. DLP software monitors, detects, and blocks sensitive data while in use, in motion, and at rest.

A type of malicious software designed to block access to a computer system or data until a ransom is paid. Modern ransomware often includes double extortion tactics that threaten to publish stolen data.

A solution that provides real-time analysis of security alerts generated by applications and network hardware. SIEM systems collect, aggregate, and analyze log data from across an organization's infrastructure.

A cyberattack method where attackers impersonate legitimate organizations or individuals to trick victims into revealing sensitive information, downloading malware, or performing actions that compromise security.

The process of converting information or data into a code to prevent unauthorized access. Encryption uses algorithms to transform readable data (plaintext) into an unreadable format (ciphertext) that can only be decoded with the correct key.

An access control method that assigns permissions to users based on their role within an organization. RBAC simplifies administration by grouping users and assigning privileges based on job functions.

The process of identifying, quantifying, and prioritizing vulnerabilities in a system. This involves scanning systems for known security weaknesses and assessing their potential impact.

A centralized unit that monitors, detects, analyzes, and responds to cybersecurity incidents. SOC teams use various security tools and processes to continuously protect an organization's assets.