{"id":1481,"date":"2025-05-15T09:42:31","date_gmt":"2025-05-15T09:42:31","guid":{"rendered":"https:\/\/www.somniacsecurity.com\/?page_id=1481"},"modified":"2025-05-15T09:42:31","modified_gmt":"2025-05-15T09:42:31","slug":"cyber-glossary","status":"publish","type":"page","link":"https:\/\/test.somniacsecurity.com\/?page_id=1481","title":{"rendered":"Cyber Glossary"},"content":{"rendered":"

[av_textblock fold_type=” fold_height=” fold_more=’Read more’ fold_less=’Read less’ fold_text_style=” fold_btn_align=” textblock_styling_align=” textblock_styling=” textblock_styling_gap=” textblock_styling_mobile=” size=” av-desktop-font-size=” av-medium-font-size=” av-small-font-size=” av-mini-font-size=” font_color=” color=” fold_overlay_color=” fold_text_color=” fold_btn_color=’theme-color’ fold_btn_bg_color=” fold_btn_font_color=” size-btn-text=” av-desktop-font-size-btn-text=” av-medium-font-size-btn-text=” av-small-font-size-btn-text=” av-mini-font-size-btn-text=” fold_timer=” z_index_fold=” id=” custom_class=” template_class=” av_uid=’av-ma54o0m3′ sc_version=’1.0′ admin_preview_bg=”]<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Term or Phrase<\/span><\/td>\nDefinition<\/span><\/td>\n<\/tr>\n
Threat<\/span><\/td>\nA potential cause of an unwanted incident, which may result in harm to a system or organisation.<\/span><\/td>\n<\/tr>\n
Vulnerability<\/span><\/td>\nA weakness in a system that can be exploited by a threat to cause harm or loss.<\/span><\/td>\n<\/tr>\n
Risk<\/span><\/td>\nThe potential for loss or damage when a threat exploits a vulnerability.<\/span><\/td>\n<\/tr>\n
Exploit<\/span><\/td>\nA method or code that takes advantage of a vulnerability in a system.<\/span><\/td>\n<\/tr>\n
Attack<\/span><\/td>\nAn intentional act to harm or gain unauthorised access to systems.<\/span><\/td>\n<\/tr>\n
Mitigation<\/span><\/td>\nSteps taken to reduce the severity or likelihood of a threat or vulnerability.<\/span><\/td>\n<\/tr>\n
Patch<\/span><\/td>\nA fix or update to software that closes a vulnerability or bug.<\/span><\/td>\n<\/tr>\n
Incident<\/span><\/td>\nAn event that may indicate a breach or failure in security measures.<\/span><\/td>\n<\/tr>\n
Remediation<\/span><\/td>\nActions taken to fix or resolve a security issue after an incident.<\/span><\/td>\n<\/tr>\n
Asset<\/span><\/td>\nSomething valuable (like data, systems, or networks) that needs protection.<\/span><\/td>\n<\/tr>\n
Phishing<\/span><\/td>\nA fraudulent email meant to trick users into revealing sensitive information.<\/span><\/td>\n<\/tr>\n
Spear Phishing<\/span><\/td>\nA targeted phishing attack aimed at a specific individual or organization.<\/span><\/td>\n<\/tr>\n
Whaling<\/span><\/td>\nA phishing attack aimed at high-level executives or key personnel.<\/span><\/td>\n<\/tr>\n
Smishing<\/span><\/td>\nA phishing attack sent via text messages.<\/span><\/td>\n<\/tr>\n
Vishing<\/span><\/td>\nA phishing scam conducted over the phone.<\/span><\/td>\n<\/tr>\n
Malware<\/span><\/td>\nMalicious software designed to damage, disrupt, or gain access to a computer system.<\/span><\/td>\n<\/tr>\n
Ransomware<\/span><\/td>\nMalware that encrypts a victim\u2019s data and demands payment for the decryption key.<\/span><\/td>\n<\/tr>\n
Spyware<\/span><\/td>\nSoftware that secretly gathers user information without their consent.<\/span><\/td>\n<\/tr>\n
Adware<\/span><\/td>\nUnwanted software designed to throw ads at users, often intrusive.<\/span><\/td>\n<\/tr>\n
Trojan Horse<\/span><\/td>\nMalicious software disguised as legitimate software.<\/span><\/td>\n<\/tr>\n
Worm<\/span><\/td>\nA type of malware that spreads itself across networks.<\/span><\/td>\n<\/tr>\n
Keylogger<\/span><\/td>\nSoftware that records keystrokes to steal sensitive data.<\/span><\/td>\n<\/tr>\n
Botnet<\/span><\/td>\nA network of infected computers controlled remotely by an attacker.<\/span><\/td>\n<\/tr>\n
Man-in-the-Middle (MitM)<\/span><\/td>\nAn attack where the attacker secretly intercepts and possibly alters communication.<\/span><\/td>\n<\/tr>\n
Denial-of-Service (DoS)<\/span><\/td>\nAn attack that makes a system or service unavailable by overwhelming it with traffic.<\/span><\/td>\n<\/tr>\n
Distributed Denial-of-Service (DDoS)<\/span><\/td>\nA coordinated DoS attack launched from multiple computers.<\/span><\/td>\n<\/tr>\n
Zero-Day<\/span><\/td>\nA previously unknown vulnerability that is exploited before a fix is available.<\/span><\/td>\n<\/tr>\n
SQL Injection<\/span><\/td>\nAn attack that inserts malicious SQL code into a query to access data.<\/span><\/td>\n<\/tr>\n
Cross-Site Scripting (XSS)<\/span><\/td>\nAn attack where hackers inject scripts into webpages viewed by others.<\/span><\/td>\n<\/tr>\n
Brute Force Attack<\/span><\/td>\nAn attempt to crack passwords by trying many combinations rapidly.<\/span><\/td>\n<\/tr>\n
Multi-Factor Authentication (MFA)<\/span><\/td>\nAn authentication method requiring more than one verification factor.<\/span><\/td>\n<\/tr>\n
Two-Factor Authentication (2FA)<\/span><\/td>\nA type of MFA using two distinct forms of identity verification.<\/span><\/td>\n<\/tr>\n
Password Manager<\/span><\/td>\nSoftware that helps create and store strong, unique passwords.<\/span><\/td>\n<\/tr>\n
Single Sign-On (SSO)<\/span><\/td>\nA login system that lets users access multiple applications with one set of credentials.<\/span><\/td>\n<\/tr>\n
Access Control<\/span><\/td>\nRules and systems that determine who can access what resources.<\/span><\/td>\n<\/tr>\n
Role-Based Access Control (RBAC)<\/span><\/td>\nAn access control system based on a user\u2019s role in an organisation.<\/span><\/td>\n<\/tr>\n
Least Privilege<\/span><\/td>\nGranting users only the access they need to perform their job duties.<\/span><\/td>\n<\/tr>\n
Privileged Access Management (PAM)<\/span><\/td>\nTools and policies to control and monitor access by high-privilege users.<\/span><\/td>\n<\/tr>\n
Firewall<\/span><\/td>\nA security device or program that monitors and filters incoming\/outgoing network traffic.<\/span><\/td>\n<\/tr>\n
Intrusion Detection System (IDS)<\/span><\/td>\nA tool that monitors network traffic for suspicious activity or policy violations.<\/span><\/td>\n<\/tr>\n
Intrusion Prevention System (IPS)<\/span><\/td>\nA system that detects and blocks potential threats in real time.<\/span><\/td>\n<\/tr>\n
Virtual Private Network (VPN)<\/span><\/td>\nA secure connection over the internet that hides a user\u2019s data and location.<\/span><\/td>\n<\/tr>\n
Proxy<\/span><\/td>\nA server that acts as a go-between for a user and the internet.<\/span><\/td>\n<\/tr>\n
Port Scanning<\/span><\/td>\nScanning a system for open ports to identify possible vulnerabilities.<\/span><\/td>\n<\/tr>\n
IP Address Spoofing<\/span><\/td>\nFaking an IP address to disguise the source of network traffic.<\/span><\/td>\n<\/tr>\n
MAC Address<\/span><\/td>\nA hardware address that uniquely identifies a device on a network.<\/span><\/td>\n<\/tr>\n
Network Segmentation<\/span><\/td>\nDividing a network into segments to contain and limit threats.<\/span><\/td>\n<\/tr>\n
Encryption<\/span><\/td>\nThe process of converting data into a secure format to prevent unauthorized access.<\/span><\/td>\n<\/tr>\n
Decryption<\/span><\/td>\nThe process of converting encrypted data back into its original form.<\/span><\/td>\n<\/tr>\n
Hashing<\/span><\/td>\nA way to convert data into a fixed-length string to verify its integrity.<\/span><\/td>\n<\/tr>\n
Data Breach<\/span><\/td>\nAn incident where sensitive or confidential data is accessed or disclosed without authorization.<\/span><\/td>\n<\/tr>\n
Personally Identifiable Information (PII)<\/span><\/td>\nInformation that can be used to identify an individual.<\/span><\/td>\n<\/tr>\n
Personal Data<\/span><\/td>\nAny information that can be used to directly or indirectly identify a person.<\/span><\/td>\n<\/tr>\n
Special Category Data<\/span><\/td>\nA specific type of personal data that is more sensitive and requires extra protection.<\/span><\/td>\n<\/tr>\n
Data Loss Prevention (DLP)<\/span><\/td>\nTools and strategies used to prevent unauthorized sharing or access to data.<\/span><\/td>\n<\/tr>\n
Tokenisation<\/span><\/td>\nReplacing sensitive data with non-sensitive placeholders.<\/span><\/td>\n<\/tr>\n
Anonymisation<\/span><\/td>\nThe process of removing personal identifiers from data to protect privacy.<\/span><\/td>\n<\/tr>\n
SIEM (Security Information and Event Management)<\/span><\/td>\nSoftware that aggregates and analyses security data in real time for threat detection.<\/span><\/td>\n<\/tr>\n
EDR (Endpoint Detection and Response)<\/span><\/td>\nA tool that detects and responds to threats on individual devices.<\/span><\/td>\n<\/tr>\n
XDR (Extended Detection and Response)<\/span><\/td>\nAn advanced security system combining data across multiple security layers.<\/span><\/td>\n<\/tr>\n
SOC (Security Operations Centre)<\/span><\/td>\nA team or facility that monitors and responds to security incidents.<\/span><\/td>\n<\/tr>\n
Penetration Testing (Pen Test)<\/span><\/td>\nSimulated attacks to test an organisation\u2019s security defences.<\/span><\/td>\n<\/tr>\n
Vulnerability Scanner<\/span><\/td>\nSoftware that scans systems for known vulnerabilities.<\/span><\/td>\n<\/tr>\n
Red Team<\/span><\/td>\nSecurity experts who simulate attacks to test defences.<\/span><\/td>\n<\/tr>\n
Blue Team<\/span><\/td>\nSecurity professionals who defend systems from attacks.<\/span><\/td>\n<\/tr>\n
Purple Team<\/span><\/td>\nTeams that blend offensive and defensive security roles.<\/span><\/td>\n<\/tr>\n
Bug Bounty<\/span><\/td>\nPrograms that pay individuals for finding and reporting bugs.<\/span><\/td>\n<\/tr>\n
Threat Intelligence<\/span><\/td>\nInformation about potential or existing threats used to improve security.<\/span><\/td>\n<\/tr>\n
Security Posture<\/span><\/td>\nAn organisation\u2019s overall cybersecurity health and readiness.<\/span><\/td>\n<\/tr>\n
Log Analysis<\/span><\/td>\nReviewing system logs to detect unusual or suspicious behaviour.<\/span><\/td>\n<\/tr>\n
GDPR (General Data Protection Regulation)<\/span><\/td>\nA law regulating data privacy and protection in the EU.<\/span><\/td>\n<\/tr>\n
HIPAA (Health Insurance Portability and Accountability Act)<\/span><\/td>\nA U.S. law that protects health data privacy and security.<\/span><\/td>\n<\/tr>\n
PCI-DSS (Payment Card Industry Data Security Standard)<\/span><\/td>\nSecurity standards for companies that process credit card information.<\/span><\/td>\n<\/tr>\n
ISO 27001<\/span><\/td>\nAn international standard for managing information security.<\/span><\/td>\n<\/tr>\n
NIST (National Institute of Standards and Technology)<\/span><\/td>\nA U.S. agency providing cybersecurity frameworks and guidance.<\/span><\/td>\n<\/tr>\n
SOC 2<\/span><\/td>\nA security standard used in auditing cloud service providers.<\/span><\/td>\n<\/tr>\n
Audit Trail<\/span><\/td>\nA record showing who accessed or modified data and when.<\/span><\/td>\n<\/tr>\n
Governance<\/span><\/td>\nOversight and control mechanisms for managing security policies and processes.<\/span><\/td>\n<\/tr>\n
Policy<\/span><\/td>\nA set of rules and guidelines used to protect its digital systems, data, and users.<\/span><\/td>\n<\/tr>\n
Security Awareness Training<\/span><\/td>\nTraining programs to help employees understand and practice good security habits.<\/span><\/td>\n<\/tr>\n
Alert Fatigue<\/span><\/td>\nOverwhelm from too many security alerts, making real threats hard to spot.<\/span><\/td>\n<\/tr>\n
False Positive<\/span><\/td>\nA harmless activity wrongly flagged as malicious.<\/span><\/td>\n<\/tr>\n
Indicators of Compromise (IOC)<\/span><\/td>\nSigns that a system has been compromised.<\/span><\/td>\n<\/tr>\n
Indicators of Attack (IOA)<\/span><\/td>\nSigns that an attack is currently happening or in progress.<\/span><\/td>\n<\/tr>\n
Kill Chain<\/span><\/td>\nThe stages of a cyberattack from planning to execution.<\/span><\/td>\n<\/tr>\n
MITRE ATT&CK Framework<\/span><\/td>\nA knowledge base of adversary tactics and techniques.<\/span><\/td>\n<\/tr>\n
Playbook (Incident Response)<\/span><\/td>\nA documented procedure for handling specific security incidents.<\/span><\/td>\n<\/tr>\n
Containment<\/span><\/td>\nContaining a security breach to stop it from spreading.<\/span><\/td>\n<\/tr>\n
Eradication<\/span><\/td>\nRemoving the root cause of a security incident.<\/span><\/td>\n<\/tr>\n
Recovery<\/span><\/td>\nRestoring systems and data to normal after an incident.<\/span><\/td>\n<\/tr>\n
Social Engineering<\/span><\/td>\nTricking people into giving up confidential information through manipulation.<\/span><\/td>\n<\/tr>\n
Security Hygiene<\/span><\/td>\nBasic steps and practices to maintain good digital security.<\/span><\/td>\n<\/tr>\n
Security by Design<\/span><\/td>\nBuilding systems with security in mind from the start.<\/span><\/td>\n<\/tr>\n
Shadow IT<\/span><\/td>\nUnauthorised use of applications or devices within an organisation.<\/span><\/td>\n<\/tr>\n
Insider Threat<\/span><\/td>\nA threat that originates from someone inside the organisation.<\/span><\/td>\n<\/tr>\n
Attack Surface<\/span><\/td>\nThe total set of points where an attacker can try to enter a system.<\/span><\/td>\n<\/tr>\n
Security Culture<\/span><\/td>\nThe values and behaviours that prioritise and support cybersecurity within an organisation.<\/span><\/td>\n<\/tr>\n
Risk Appetite<\/span><\/td>\nThe level of risk an organisation is willing to tolerate.<\/span><\/td>\n<\/tr>\n
Defence in Depth<\/span><\/td>\nUsing multiple layers of defence to protect information systems.<\/span><\/td>\n<\/tr>\n
Zero Trust<\/span><\/td>\nA security model that assumes no user or system is trustworthy by default.<\/span><\/td>\n<\/tr>\n
Threat Modelling<\/span><\/td>\nA process of identifying and assessing potential threats and vulnerabilities.<\/span><\/td>\n<\/tr>\n
Security Baseline<\/span><\/td>\nA minimum set of security settings and practices all systems must follow.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/av_textblock]<\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1481","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/pages\/1481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1481"}],"version-history":[{"count":0,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/pages\/1481\/revisions"}],"wp:attachment":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}