Sec+ Acronyms

Uses ephemeral keys, which are re-created for each session.

Multiple disks added together to increase performance or provide protection against faults.

A firewall specifically designed to protect web application, such as a web server.

A group of applications and/or technologies used to manage mobile devices.

A protocol used to monitor and manage network devices such as routers and switches.

Network of physical devices connected to the net; typically smart devices with an IP address.

A system that controls large systems such as power plants or water treatmeant facilities.

A policy defining proper system usage and the rules of behavior for employees.

Amount of data you can afford to lose by IDing a point in time where data loss is acceptable.

Access control model - all objects have owners & owners can modify permission for the objects.

A written agreement that details the relationship between business partners.

Popular standard used to secure mail. Provides CIA and non-repudiation.

XML-based standard used to exchange authentication and authorization info between parties.

An operating system that reacts to input within a specific time.

A physical security control that regulates airflow within data centers and server rooms.

Hashing algorithm used to verify integrity and authenticity with use of a shared secret.

A short burst of energy that can potentially damage electronic equipment.

A system that inspects clients to ensure they are healthy.

A group of technologies used to prevent data loss by blocking and monitoring data.

Agreement that is designed to prohibit personnel from sharing proprietary data.

Information about individuals that can be used to trace a persons identity.

Protocol used to communicate with directories such as Active Directory.

An attack from a single source that attempts to disrupt services.

A basic text messging service.

Uses elliptic curve cryptography to generate encryption keys.

A legacy mode of operation used for encryption. It is weak and should not be used.

One of the most secure encryption standards and is widely implemented.

A device that can generate, store, and manage RSA keys used in asymmetric encryption.

Hardware chip on the motherboard included with many laptops and some mobile devices.

Employees can connect their personally owned devices to the network.

A service used to resolve host names to IP adresses.

(wi-fi protected access) a legacy wireless security protocol. it has been superseded by WPA2

Web application attack; tricks users into performing actions on sites without their knowledge.

A cisco-designed replacement for lightweight EAP. Supports certificates, but they are optional.

Software installed on a system to detect attacks. Protects local resources on the host.

A security system that attempts to look at security events throughout the organization.

Logically groups different computers together without regard to their physical location.

Format for PKI certs. Can use either CER or DER formats for almost any type of certificates.

Employees can connect their personally owned device to the network.

Verifies a user's ID, determines if a user should have access, and tracks a user`s access.

Metric providing a measure of system reliability. Identifies the average time between failures.

Alternative to using a CRL. Allows entities to query a CA with serial number of a certificate.

An extension of SMS used to send text messages. It is a supports sending multimedia content.

A method of requesting a certificate from a CA.

Device that detects attacks & raises alerts. Installed on network devices & monitors traffic.

(unmanned aerial vehicles) flying vehicles piloted by remote control or onboard computers

A software tool or service that enforces cloud-based security requirements.

An authentication framework that provides general guidance for authentication methods.

An option within IPSec to provide authentication and integrity.

An authentication mechanism where a server challenges a client.

Agreement that specifies tech and sec requirements for connections between 2 or more entities.

Symetric algorithm block cipher used to encrypt data & provide confidentiality in 64-bit blocks

Method that allows users to easily configure a wireless network, often by using only a PIN.

A protocol used to store and manage email on servers. Uses TCP port 143.

Drive that includes the hardware and software necessary to encrypt a hard drive.

Users access a server hosting virtual desktops; run the desktop OS from the server.

The name of a wireless network. Can be set to broadcast so users can easily see it.

Protocol used to encrypt and provide authentication for real-time transport protocol.

Identifies the % of times a biometric authentication system incorrectly rejects a valid match.

A suite of protocols that provide CIA within windows systems.

Part of the Kerberos protocol used for network authentication. Issues timestamped tickets.

A cable used to connect mobile devies to other devices.

Metric that indentifies the average time it takes to restore a failed system.

A key stretching technique that adds additional bits to a password as a salt.

A type of agreement that defines responsibilities of each party.

A part of the U.S. Department of Commerce. Includes an information technology laboratory.

Translates public IP addresses to private IP addresses and vice versa.

A method to encrypt an entire disk.

An asymmetric algorithm used to encrypt data digitally sign transmission.

Identifies the % of times a biometric authentication system incorrectly indicates a match.

An extenstion of Secure Shell (SSH) used to encrypt FTP traffic. Uses TCP port 22.

Cloud computing model providing customers with a preconfigured computing platform.

Method of using software and virtualization technologies to replace hardware routers.

A legacy wireless security protocol. CCMP is the recommended replacement.

A specialized type of smart card used by the U.S. Department of Defense.

A protocol used to encrypt HTTP traffic. Encrypts traffic with TLS using TCP port 443.

Access control model that uses rules to define access based on a set of approved instructions.

A process that helps an organization identify critical systems and components.

A mode of operation used for encryption that combines an IV with a counter.

A security feature that prevents code from executing in memory regions marked as nonexecutable.

Interference cause by motors, power lines, and flourescent lights.

The maximum amount of time it should take to restore a system after an outage.

An open source standard similar to HOTP. It uses a timestamp instead of a counter.

An access control model that grants access to resources based on attributes.

A technology used within Windows to manage users and computers.

Wireless security protocol. Supports CCMP for encryption.

Cloud computing model that rents access to hardware in a self-managed platform.

Used by routers and firewalls to control traffic based on networks, subnets, IP adresses, etc.

A symetric cipher that encrypts data in 128-bit blocks. Use key sizes of 128, 192, & 256 bits.

Microsoft implementation of CHAP. Provides mutual authentication.

Method that provides access to a private network over a public network such as the internet.

An authentication service that provides central authentication for remote access clients.

System used to control an ICS such as a power plant or water treatment facility.

A device that detects and stops attacks in progress. Placed inline with traffic.

An attack on a system launched from multiple sources.

Monetary value of a single loss. Measures risk w/ ALE and ARO in a quantitative risk assessment

Hashing function used to provide integrity by creating 128-bits hashes. Considered cracked.

An option within IPSec to provide confidentiality, integrity, and authentication.

A satellite-based navigation system that identifies the location of a device or vehicle.

The predecessor to TLS. Used to encrypt data-in-transit with the use of certificates.

A hashing function used to provide integrity. Versions include 1, 2, & 3.

Suite of protocols used to encrypt data-in-transit. Operates in tunnel mode or transport mode.

An open standard used for creating one-time passwords.

The number of times a loss is expected to occur in a year.

Computer firmware used to manipulate different settings, eg date, time, boot drive, & password.

The expected loss for a year.

Language used by many databases for entering or exporting data.

An authentication service that provdies central authentication for remote access clients.

Encryption using CTM w/ hashing techniques for data authenticity and confidentiality.

A device that connects wireless clients to wireless networks.

A wireless mode that uses a pre-shared key for security. (Similar to a password or passphrase)

A base format for PKI certificates. They are base64 ASCII encoded files.

A group of security controls combined in a single solution.

An access control model that uses roles based on jobs and functions to define access.

The procedures documented in an incident response policy.

An older authentication protocol where passwords are sent across the network in cleartext.

Specialized smart card used by Federal agencies. Includes photo. Provides CIA & non-repudiation

Devices that perform multiple functions, eg many printers because they can print, scan, & copy.

A type of agreement that defines responsibilities of each party.

A base format for PKI certificates. They are binary encoded files.

An access control model that uses sensitivity labels assigned to objects and subjects.

A buffer zone between the internet and an internal network.

A method used to boot some systems and intended to replace older firmware.

Replacement for SSL. Used to encrypt data-in-transit. Uses certificates issued by CAs.

An arbitrary number that can be used along with a secret key for data encryption.

A common format for PKI certificates. It is the predecessor to p12 certificates.

Malware that allows an attacker to control of a system from a remote location.

Uses TLS to encrypt FTP traffic. Some implementations of use TCP ports 989 and 990.

A group that has both the capability and intent to launch sophisticated and targeted attacks.

Authentication method. Users can access multiple resources on a network using a single account.

An ecrypted hash of a message used for authentication, non-repudiation, and integrity.

A Hash function used for integrity. Creates fixed-length hashes of 128, 160, 256, or 320 bits.

Agreement between a company and vendor that stipulates performance expectation.

Integrated circuits including a computing system within the hardware; on many mobile devices.

Legacy symmetric encryption standard used to provide confidentiality. It has been compromised.

An organization that manages, issues, and signs certificates. Main element of a PKI

A protocol enabled on most switches that protects against switching loops.

An asymmetric algorithm used to privately share symmetric keys.

An extension of EAP sometimes used with 802.1x. Requires a certificate on the 802.1x server.

(person health information).PII that includes health information.

A 48-bit address used to identify network interface cards.

A cloud computing model that provides applicatIons over ther internet.

An extension of a HIDS, it is software installed on a system to detect and blocks attacks.