Clyvexis Glossary

Learn the cybersecurity terms, concepts, attacks, defenses, and technologies that every future cybersecurity professional should know.

#001

Cybersecurity

The practice of protecting computers, networks, systems, applications, and data from digital threats.

Fundamentals
#002

Threat

Anything that has the potential to cause harm to a computer system, network, or piece of data.

Fundamentals
#003

Vulnerability

A weakness in software, hardware, configuration, or procedures that could be exploited.

Fundamentals
#004

Exploit

A technique or piece of code that takes advantage of a vulnerability.

Fundamentals
#005

Risk

The possibility that a threat could take advantage of a vulnerability and cause damage.

Fundamentals
#006

IP Address

A numerical address used to identify a device on a network.

Networking
#007

MAC Address

A hardware identifier assigned to a network interface.

Networking
#008

Router

A device that directs network traffic between different networks.

Networking
#009

Firewall

A security system that monitors and controls network traffic based on rules.

Networking
#010

Port

A logical communication endpoint used by network services and applications.

Networking
#011

Authentication

The process of verifying that someone or something is who they claim to be.

Authentication
#012

Authorization

The process of deciding what an authenticated user or system is allowed to access.

Authentication
#013

MFA

Multi-factor authentication requires multiple forms of verification before access is granted.

Authentication
#014

Biometrics

Authentication using physical or behavioral characteristics such as fingerprints.

Authentication
#015

Passphrase

A password made from multiple words or a longer sequence that can be easier to remember.

Authentication
#016

Encryption

The process of transforming readable information into protected data that requires a key to decrypt.

Cryptography
#017

Decryption

The process of converting encrypted information back into readable information.

Cryptography
#018

Hash

A one-way mathematical result generated from data.

Cryptography
#019

SHA-256

A cryptographic hash function that produces a 256-bit hash value.

Cryptography
#020

Digital Signature

A cryptographic method used to verify the authenticity and integrity of digital information.

Cryptography
#021

Malware

Software intentionally designed to harm, disrupt, spy on, or gain unauthorized access to systems.

Malware
#022

Virus

Malware that attaches itself to files or programs and can spread when they are executed.

Malware
#023

Worm

Malware capable of spreading between systems without needing to attach to another file.

Malware
#024

Trojan

Malware that disguises itself as legitimate software or a useful file.

Malware
#025

Ransomware

Malware that blocks access to information or systems and demands payment from victims.

Malware
#026

Spyware

Software designed to secretly monitor activity or collect information.

Malware
#027

Keylogger

Software or hardware that records keystrokes, sometimes used maliciously to steal information.

Malware
#028

Botnet

A group of compromised devices controlled together by an attacker.

Malware
#029

Rootkit

Malicious software designed to hide unauthorized activity or maintain privileged access.

Malware
#030

Adware

Software that displays unwanted advertisements, sometimes while collecting information.

Malware
#031

Phishing

A social engineering technique that uses deceptive messages to trick people into revealing information.

Social Engineering
#032

Spear Phishing

A targeted phishing attack designed for a specific person or organization.

Social Engineering
#033

Smishing

Phishing attacks delivered through text messages.

Social Engineering
#034

Vishing

Phishing attacks carried out through voice calls or other phone-based communication.

Social Engineering
#035

Pretexting

Creating a believable story or situation to persuade someone to provide information or perform an action.

Social Engineering
#036

Baiting

Using something attractive or interesting as bait to trick someone into taking an unsafe action.

Social Engineering
#037

Tailgating

Following an authorized person into a restricted physical area without permission.

Social Engineering
#038

Impersonation

Pretending to be another person or trusted entity to influence someone's actions.

Social Engineering
#039

Brute Force

An attack that repeatedly tries possible passwords or credentials until one works.

Attacks
#040

DDoS

A distributed denial-of-service attack attempts to overwhelm a service with excessive traffic.

Attacks
#041

DoS

A denial-of-service attack attempts to make a service unavailable to legitimate users.

Attacks
#042

Man-in-the-Middle

An attacker secretly positions themselves between two communicating parties.

Attacks
#043

Credential Stuffing

Using stolen username and password combinations against other accounts.

Attacks
#044

Password Spraying

Trying a small number of commonly used passwords against many accounts.

Attacks
#045

SQL Injection

An attack that attempts to manipulate database queries through unsafe application input.

Attacks
#046

Zero-Day

A vulnerability that is unknown or has no available patch when it is exploited.

Attacks
#047

Patch

A software update designed to fix bugs, vulnerabilities, or security problems.

Defense
#048

Antivirus

Security software designed to detect, block, and remove malicious software.

Defense
#049

EDR

Endpoint detection and response technology monitors devices for suspicious activity.

Defense
#050

IDS

An intrusion detection system monitors activity for potential security threats.

Defense
#051

IPS

An intrusion prevention system can detect and actively block certain malicious activity.

Defense
#052

Zero Trust

A security approach that continuously verifies access instead of automatically trusting users or devices.

Defense
#053

Least Privilege

Giving users and systems only the permissions needed to perform their tasks.

Defense
#054

Backup

A separate copy of data that can be used to restore information after loss or damage.

Defense
#055

HTTPS

A secure version of HTTP that uses encryption to protect web communications.

Web Security
#056

SSL/TLS

Protocols used to protect data exchanged over networks through encryption.

Web Security
#057

XSS

Cross-site scripting is a vulnerability where untrusted scripts can be injected into web pages.

Web Security
#058

CSRF

Cross-site request forgery tricks a user's browser into sending an unwanted request.

Web Security
#059

Cookie

A small piece of information stored by a website in a user's browser.

Web Security
#060

Session

A temporary period of interaction between a user and a web application.

Web Security
#061

Cloud Computing

Using remote computing resources such as servers, storage, and applications over a network.

Cloud
#062

Cloud Security

Protecting cloud systems, services, applications, and data from security threats.

Cloud
#063

IAM

Identity and access management controls who can access resources and what they can do.

Cloud
#064

Virtual Machine

A software-based computer that runs inside another physical computer.

Cloud
#065

Container

A lightweight isolated environment used to run applications and their dependencies.

Cloud
#066

SOC

A security operations center monitors, investigates, and responds to security events.

Security Operations
#067

SIEM

Security information and event management systems collect and analyze security logs and events.

Security Operations
#068

Log

A record of events or activities generated by systems, applications, or devices.

Security Operations
#069

Incident

A security-related event that may threaten the confidentiality, integrity, or availability of systems.

Security Operations
#070

Incident Response

The process of detecting, investigating, containing, and recovering from security incidents.

Security Operations
#071

Threat Intelligence

Information about threats that helps security teams understand and respond to attacks.

Security Operations
#072

IOC

An indicator of compromise is evidence that a system may have been affected by malicious activity.

Security Operations
#073

SIEM Rule

A detection rule used to identify suspicious patterns within collected security events.

Security Operations
#074

Digital Forensics

The process of collecting and analyzing digital evidence during an investigation.

Forensics
#075

Digital Evidence

Information stored or transmitted digitally that may help establish what happened during an incident.

Forensics
#076

Chain of Custody

Documentation showing how evidence was collected, handled, transferred, and stored.

Forensics
#077

Memory Forensics

The analysis of data stored in a computer's volatile memory.

Forensics
#078

Disk Image

A bit-for-bit copy of a storage device used for analysis or investigation.

Forensics
#079

Metadata

Information that describes other data, such as timestamps, file size, or file type.

Forensics
#080

Timeline Analysis

Organizing digital events by time to help reconstruct what happened.

Forensics
#081

Penetration Testing

Authorized security testing designed to identify weaknesses before malicious attackers can exploit them.

Careers & Tools
#082

Ethical Hacker

A security professional who performs authorized testing to help organizations improve security.

Careers & Tools
#083

Red Team

A security team that simulates realistic attacks to test an organization's defenses.

Careers & Tools
#084

Blue Team

A security team focused on defending systems, detecting threats, and responding to incidents.

Careers & Tools
#085

Purple Team

A collaborative approach that combines offensive and defensive security teams.

Careers & Tools
#086

CTF

Capture the Flag competitions provide cybersecurity challenges designed for learning and practice.

Careers & Tools
#087

Command Line

A text-based interface used to interact with a computer by entering commands.

Careers & Tools
#088

Linux

An open-source operating system family widely used in servers, cybersecurity, and development.

Careers & Tools
#089

Virtualization

Technology that allows virtual computers or other resources to run on physical hardware.

Careers & Tools
#090

Open Source

Software whose source code is available for people to inspect, modify, and share under its license.

Careers & Tools
#091

CIA Triad

Confidentiality, integrity, and availability are three foundational goals of cybersecurity.

Fundamentals
#092

Confidentiality

Ensuring information is accessible only to authorized people or systems.

Fundamentals
#093

Integrity

Ensuring information remains accurate and has not been improperly changed.

Fundamentals
#094

Availability

Ensuring authorized users can access systems and information when needed.

Fundamentals
#095

DNS

The Domain Name System translates domain names into IP addresses.

Networking
#096

VPN

A virtual private network creates an encrypted connection between a device and a network service.

Networking
#097

Proxy

A system that acts as an intermediary between a client and another network service.

Networking
#098

Security Policy

A set of rules and guidelines describing how an organization protects information and systems.

Defense
#099

Security Awareness

Training and knowledge that help people recognize and avoid security threats.

Defense
#100

Cybersecurity Analyst

A professional who monitors systems, investigates security events, and helps protect an organization.

Careers & Tools

No terms found

Try a different search or category.