SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
802.1X Defines Port Based Authentication (not an acronym, good to know)
an IEEE standard for port-based network access control (NAC). a network
authentication protocol that enhances cybersecurity by controlling access to
wired and wireless networks. It requires devices to authenticate before gaining
access, preventing unauthorized devices from connecting and accessing
sensitive data. 802.1X is a crucial component of network access control (NAC)
and is widely used in enterprise environments and other settings where
network security is a top priority.
AAR After-Action Report
Provides a detailed account of the incident, the response actions taken, and the
outcomes achieved. The after-action report aims to identify the strengths and
weaknesses of the incident management process and makes recommendations
for improvement.
AATM avoid, accept, transfer, mitigate
"Avoid: This involves completely eliminating or foregoing the risky activity or
process. For example, if an organization decides not to use a particular
software due to its known vulnerabilities, they are avoiding the risk associated
with that software.
Accept: This means acknowledging the risk and choosing not to take action to
resolve, transfer, or mitigate it. This might be done when the potential impact of
the risk is minimal, or the cost of mitigation outweighs the benefits.
Transfer: This involves shifting the impact of the risk to a third party, such as by
purchasing cybersecurity insurance. This shifts the financial responsibility and
potential liability to the insurance provider.
Mitigate: This involves reducing the likelihood or impact of the risk. This can be
achieved through various measures, such as implementing security controls,
strengthening firewalls, or conducting regular risk assessments."
ABAC Attribute Based Access Control
It's a method of controlling access to resources based on a set of attributes
related to the user, the resource, and the environment. Unlike traditional access
control models, which rely on predefined roles or rules, ABAC considers
multiple characteristics or attributes to make access decisions.
,SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
ACE Arbitrary Code Execution
The ability of an attacker to run their own code, or commands, on a target
system or within a process. This can happen due to vulnerabilities in software or
hardware, allowing an attacker to exploit those flaws and execute malicious
code. Remote Code Execution (RCE) is a specific type of ACE where the
attacker can execute code from a remote location, typically over a network.
ACID Atomicity, consistency, isolation and durability
"Refers to the set of 4 key properties that define a transaction: Atomicity,
Consistency, Isolation, and Durability.
Atomicity:
A transaction is treated as a single, indivisible unit. Either all changes are
applied, or none are.
Consistency:
A transaction must bring the database from one consistent state to another.
Isolation:
Changes made by one transaction are not visible to other transactions until it's
fully committed.
Durability:
Once a transaction is committed, the changes are permanently saved and
survive even system failures."
ACL Access Control List
A set of rules that determines which users or systems have access to specific
resources on a network or system. ACLs are a fundamental security mechanism
that helps control network traffic and restrict unauthorized access to sensitive
data and resources. Purpose: ACLs are used to control network traffic, restrict
access to sensitive data, and enhance overall system security by preventing
unauthorized access."
ACV Actual Cost Evaluation
Assessing both direct costs like software and personnel, and indirect costs like
potential revenue losses and reputational damage from breaches. A cost-
benefit analysis helps compare the cost of implementing security measures
against the value of reduced risk.
AD Active Directory
A directory service by Microsoft that manages users, computers, and network
resources. It's a centralized system where administrators can manage
permissions, policies, and user accounts, making it a key target for attackers.
Cybersecurity Focuses on protecting the central directory service that
manages user accounts, access controls, and network resources within a
Windows-based network. It's a crucial aspect of cybersecurity because a
compromised AD can lead to wide-ranging data breaches and unauthorized
access to sensitive data. Effective AD security involves implementing measures
like strong password policies, multi-factor authentication, and regular audits to
ensure a secure and robust environment."
,SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
AEAD Authenticated Encryption with Associated Data
A cryptographic technique that provides both confidentiality (through
encryption) and integrity (through authentication) of data, including additional
data that may not be encrypted but still needs to be protected. It's a crucial
element in cybersecurity for ensuring data is not only secure from
unauthorized access but also hasn't been tampered with.
AES Advanced Encryption Standard
A widely used symmetric-key encryption algorithm essential for cybersecurity.
It is used to protect sensitive data by encrypting it into an unintelligible form
(ciphertext), which can only be decrypted with the correct key. AES is
considered highly secure and is used in various applications, including securing
online communications, protecting data stored in databases and cloud storage,
and securing wireless networks.
What is AES? Symmetric-key encryption: AES uses the same key for both
encryption and decryption. This contrasts with asymmetric-key encryption
where different keys are used. Block cipher: AES encrypts data in fixed-size
blocks, typically 128 bits. Key sizes: AES supports key lengths of 128, 192, and
256 bits, with 256-bit keys offering the highest level of security."
AFF Advanced Forensics Format
This open-source format, developed by Simson Garfinkel and Basis
Technology, is specifically designed for digital forensics. A file format designed
for storing and sharing forensic evidence and analysis results. It's used to
capture data from various sources, including disk images, network packets,
memory dumps, and extracted logical evidence.
AH Authentication Header
A protocol used in Internet Protocol Security (IPSec) to verify the sender's
identity and ensure data integrity for IP packets. AH provides packet-level
authentication, verifying the origin and integrity of IP traffic without encrypting
the data itself. We use it to provide connectionless integrity and data origin
authentication for IP datagrams. AH also offers protection against replay
attacks and ensures that no one changes the data during transit."
, SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
AI Artificial Intelligence
Automating tasks, improving threat detection, and enhancing response times.
AI-powered systems can analyze massive amounts of data to identify patterns
and anomalies, alerting security teams to potential threats that might go
unnoticed by traditional methods. Additionally, AI can automate tasks like
vulnerability scanning and incident response, reducing human error and
accelerating the process of securing systems. Using AI and machine learning
algorithms to enable predictive analytics that helps security teams identify,
analyze, and neutralize cyber threats in real-time.
AICPA American Institute of Certified Public Accountants
"is a non-profit organization representing Certified Public Accountants (CPAs)
in the United States. It sets professional standards, advocates for CPAs, and
supports its members globally. The AICPA also develops and grades the
Uniform CPA Examination, sets ethical standards, and establishes auditing
standards. Establishes a SOC for Cybersecurity reporting framework to help
CPAs examine and report on an organization's cybersecurity risk management
program. This framework allows organizations to provide assurance to
stakeholders, including boards, investors, and business partners, about the
effectiveness of their cybersecurity controls. The SOC for Cybersecurity
engagement involves CPAs examining and reporting on an organization's
cybersecurity risk management program (CRMP)."
AJAX Asynchronous JavaScript and XML
A group of technologies that are used to develop web applications. By
combining these technologies, web pages appear more responsive since small
packets of data are exchanged with the server and web pages are not
reloaded each time that a user makes an input change.
ALE Annualized Loss Expectancy
It's a quantitative risk assessment tool used to estimate the potential financial
impact of a specific threat or vulnerability on an asset over a one-year period.
ALE helps organizations understand the potential annual cost of a risk,
enabling them to prioritize security investments and make informed decisions
about risk mitigation.
ANSI American National Standards Institute
A private, non-profit organization that administers and coordinates the U.S.
voluntary standards and conformity assessment system. Plays a key role in
cybersecurity by developing and accrediting standards for information
technology, industrial automation, and other areas. ANSI standards provide a
framework for ensuring consistent and reliable security practices, helping
organizations to protect their systems and data from cyber threats.
API Application Programming Interfaces
The protection of APIs against malicious attacks and vulnerabilities. APIs are the
code that allows different software components to interact and exchange data,
making them a target for attackers seeking to steal sensitive information or
disrupt services. API security focuses on securing the communication channels
between applications and ensuring that only authorized users can access and
utilize the API's functionality.
802.1X Defines Port Based Authentication (not an acronym, good to know)
an IEEE standard for port-based network access control (NAC). a network
authentication protocol that enhances cybersecurity by controlling access to
wired and wireless networks. It requires devices to authenticate before gaining
access, preventing unauthorized devices from connecting and accessing
sensitive data. 802.1X is a crucial component of network access control (NAC)
and is widely used in enterprise environments and other settings where
network security is a top priority.
AAR After-Action Report
Provides a detailed account of the incident, the response actions taken, and the
outcomes achieved. The after-action report aims to identify the strengths and
weaknesses of the incident management process and makes recommendations
for improvement.
AATM avoid, accept, transfer, mitigate
"Avoid: This involves completely eliminating or foregoing the risky activity or
process. For example, if an organization decides not to use a particular
software due to its known vulnerabilities, they are avoiding the risk associated
with that software.
Accept: This means acknowledging the risk and choosing not to take action to
resolve, transfer, or mitigate it. This might be done when the potential impact of
the risk is minimal, or the cost of mitigation outweighs the benefits.
Transfer: This involves shifting the impact of the risk to a third party, such as by
purchasing cybersecurity insurance. This shifts the financial responsibility and
potential liability to the insurance provider.
Mitigate: This involves reducing the likelihood or impact of the risk. This can be
achieved through various measures, such as implementing security controls,
strengthening firewalls, or conducting regular risk assessments."
ABAC Attribute Based Access Control
It's a method of controlling access to resources based on a set of attributes
related to the user, the resource, and the environment. Unlike traditional access
control models, which rely on predefined roles or rules, ABAC considers
multiple characteristics or attributes to make access decisions.
,SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
ACE Arbitrary Code Execution
The ability of an attacker to run their own code, or commands, on a target
system or within a process. This can happen due to vulnerabilities in software or
hardware, allowing an attacker to exploit those flaws and execute malicious
code. Remote Code Execution (RCE) is a specific type of ACE where the
attacker can execute code from a remote location, typically over a network.
ACID Atomicity, consistency, isolation and durability
"Refers to the set of 4 key properties that define a transaction: Atomicity,
Consistency, Isolation, and Durability.
Atomicity:
A transaction is treated as a single, indivisible unit. Either all changes are
applied, or none are.
Consistency:
A transaction must bring the database from one consistent state to another.
Isolation:
Changes made by one transaction are not visible to other transactions until it's
fully committed.
Durability:
Once a transaction is committed, the changes are permanently saved and
survive even system failures."
ACL Access Control List
A set of rules that determines which users or systems have access to specific
resources on a network or system. ACLs are a fundamental security mechanism
that helps control network traffic and restrict unauthorized access to sensitive
data and resources. Purpose: ACLs are used to control network traffic, restrict
access to sensitive data, and enhance overall system security by preventing
unauthorized access."
ACV Actual Cost Evaluation
Assessing both direct costs like software and personnel, and indirect costs like
potential revenue losses and reputational damage from breaches. A cost-
benefit analysis helps compare the cost of implementing security measures
against the value of reduced risk.
AD Active Directory
A directory service by Microsoft that manages users, computers, and network
resources. It's a centralized system where administrators can manage
permissions, policies, and user accounts, making it a key target for attackers.
Cybersecurity Focuses on protecting the central directory service that
manages user accounts, access controls, and network resources within a
Windows-based network. It's a crucial aspect of cybersecurity because a
compromised AD can lead to wide-ranging data breaches and unauthorized
access to sensitive data. Effective AD security involves implementing measures
like strong password policies, multi-factor authentication, and regular audits to
ensure a secure and robust environment."
,SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
AEAD Authenticated Encryption with Associated Data
A cryptographic technique that provides both confidentiality (through
encryption) and integrity (through authentication) of data, including additional
data that may not be encrypted but still needs to be protected. It's a crucial
element in cybersecurity for ensuring data is not only secure from
unauthorized access but also hasn't been tampered with.
AES Advanced Encryption Standard
A widely used symmetric-key encryption algorithm essential for cybersecurity.
It is used to protect sensitive data by encrypting it into an unintelligible form
(ciphertext), which can only be decrypted with the correct key. AES is
considered highly secure and is used in various applications, including securing
online communications, protecting data stored in databases and cloud storage,
and securing wireless networks.
What is AES? Symmetric-key encryption: AES uses the same key for both
encryption and decryption. This contrasts with asymmetric-key encryption
where different keys are used. Block cipher: AES encrypts data in fixed-size
blocks, typically 128 bits. Key sizes: AES supports key lengths of 128, 192, and
256 bits, with 256-bit keys offering the highest level of security."
AFF Advanced Forensics Format
This open-source format, developed by Simson Garfinkel and Basis
Technology, is specifically designed for digital forensics. A file format designed
for storing and sharing forensic evidence and analysis results. It's used to
capture data from various sources, including disk images, network packets,
memory dumps, and extracted logical evidence.
AH Authentication Header
A protocol used in Internet Protocol Security (IPSec) to verify the sender's
identity and ensure data integrity for IP packets. AH provides packet-level
authentication, verifying the origin and integrity of IP traffic without encrypting
the data itself. We use it to provide connectionless integrity and data origin
authentication for IP datagrams. AH also offers protection against replay
attacks and ensures that no one changes the data during transit."
, SecurityX Acronyms & Definitions | CompTIA SecurityX Certification Exam
AI Artificial Intelligence
Automating tasks, improving threat detection, and enhancing response times.
AI-powered systems can analyze massive amounts of data to identify patterns
and anomalies, alerting security teams to potential threats that might go
unnoticed by traditional methods. Additionally, AI can automate tasks like
vulnerability scanning and incident response, reducing human error and
accelerating the process of securing systems. Using AI and machine learning
algorithms to enable predictive analytics that helps security teams identify,
analyze, and neutralize cyber threats in real-time.
AICPA American Institute of Certified Public Accountants
"is a non-profit organization representing Certified Public Accountants (CPAs)
in the United States. It sets professional standards, advocates for CPAs, and
supports its members globally. The AICPA also develops and grades the
Uniform CPA Examination, sets ethical standards, and establishes auditing
standards. Establishes a SOC for Cybersecurity reporting framework to help
CPAs examine and report on an organization's cybersecurity risk management
program. This framework allows organizations to provide assurance to
stakeholders, including boards, investors, and business partners, about the
effectiveness of their cybersecurity controls. The SOC for Cybersecurity
engagement involves CPAs examining and reporting on an organization's
cybersecurity risk management program (CRMP)."
AJAX Asynchronous JavaScript and XML
A group of technologies that are used to develop web applications. By
combining these technologies, web pages appear more responsive since small
packets of data are exchanged with the server and web pages are not
reloaded each time that a user makes an input change.
ALE Annualized Loss Expectancy
It's a quantitative risk assessment tool used to estimate the potential financial
impact of a specific threat or vulnerability on an asset over a one-year period.
ALE helps organizations understand the potential annual cost of a risk,
enabling them to prioritize security investments and make informed decisions
about risk mitigation.
ANSI American National Standards Institute
A private, non-profit organization that administers and coordinates the U.S.
voluntary standards and conformity assessment system. Plays a key role in
cybersecurity by developing and accrediting standards for information
technology, industrial automation, and other areas. ANSI standards provide a
framework for ensuring consistent and reliable security practices, helping
organizations to protect their systems and data from cyber threats.
API Application Programming Interfaces
The protection of APIs against malicious attacks and vulnerabilities. APIs are the
code that allows different software components to interact and exchange data,
making them a target for attackers seeking to steal sensitive information or
disrupt services. API security focuses on securing the communication channels
between applications and ensuring that only authorized users can access and
utilize the API's functionality.
