SECURITY+ BLOG INDEX

 Blog Index

Click on the name or phrase to take you to that post. We will add new links to existing posts on an ongoing basis.

802.1x

AAA

ABAC, DAC, MAC, RBAC+

Access control vestibule

Adware

Amplification Attack

APT (Advance Persistent Threat)

Attack Frameworks

Authentication Factors

Backups Explained, Differential, Incremental, Full

BCP (Business Continuity Plan)

Blockchain

Blue Team

Bluetooth Attacks

Bollards

Bug Bounty

CASB (Cloud Access Security Broker)

Certificates

Certutil Video

Change Management

Clean Desk Policy

Containers (Containerization)

CRL / OCSP

CSRF

CVE / CVSS

CVSS Metrics

Cyber Kill Chain

Dark Web

DATA GOVERNANCE ROLES

Data Controller

Data Custodian

Data Owner

Data Processor

***********************************

DATA PROTECTION

Data at Rest

Data in Transit

Data in Use

***********************************

Data Retention Policy

Data Sovereignty 

Diamond Model of Intrusion Analysis

Diifie Hellman

dig

Digital Signature

Directory Traversal Attack

DKIM

DMARC

DNSENUM

DNS Records

DrDoS

EAP-FAST

EAP-TLS

EAP-TTLS

EDR

Email Attacks

Expansionary Risk Appetite

False Positive / False Negative

Flow Collector

GDPR (General Data Protection Regulation)

GDPR

Right to be Forgotten

***************************************

Geofencing

Geographic Restrictions

Geolocation

GPS Tagging

Guard Rails

Hashing Algorithms - HMAC, MD5, RIPEMD,  SHA

Homomorphic Encryption

Honeyfile

Honeypot / Honeynet

Honeytoken

HSTS

IAM (Identity and Access Management)

IMAP

Impossible Travel

ISACs

ISO

Jailbreaking, Rooting, Sideloading

Juice Jacking

Jump Box - Jump Server

Kerberos

Kerberos, RADIUS, SAML

Key Escrow

Key Stretching

Lateral Movement

Media Sanitization Methods

Metadata

Mimikatz

Mission Essential Functions

MITRE ATT&CK

MTBF

MTTF

Nation-State

NetFlow

Netstat

NFC

NGFW (Next-Generation Firewall)

nslookup

OAuth

OpenID Connect

OSINT (Open-Source Intelligence)

OWASP

PAM (Privilege Access Management)

Pass-the-Hash Attack

Password Attacks - Offline

Password Attacks Online

Password Reuse

Passwordless Authentication

Password Policy

PCI DSS

PEAP

Percent Encoding

Phishing Campaigns

Pivoting

Playbook

POP3 (Post Office Protocol 3)

Port Numbers

Pressure sensors

Pretexting

Purple Team

Quantitative Assessment

Race Condition

Red Team

Regionally Diverse Backups

Right to be Forgotten

Salting Passwords

SCAP (Security Content Automation Protocol)

SDN

SD-WAN

Security Control Categories

SED (Self Encrypting Drive)

SELinux

Sensitive Data

Serverless

SFTP vs SCP

Shadow IT

Side-Channel Attack

SIEM

SMB (Server Message Block)

S/MIME

Smishing

SMTP (Simple Mail Transfer Protocol)

SNMP

SOAR (Security Orchestration, Automation, and Response)

SOC 2 Type 1 and 2

SPF (Sender Policy Framework)

SQL Injection

SSL Stripping / SSL/TLS Downgrade

Steganography

STIX

Supply Chain Security

SWG (Secure Web Gateway)

SY0-701 Acronym Flashcards

SY0-701 Acronyms Video

Syslog

TAXII

TFTP

theHarvester

THREAT ACTORS

Competitor

Hacktivist

Insider

Nation-State / APT

Organized Crime / Criminal Syndicate

Unskilled / Script Kiddie

********************************

Threat Vector

Tokenization

USB Data Blocker

UTM (Unified Threat Management)

Vishing

VM Escape

VM Sprawl

Vulnerable Software

WAF (Web Application Firewall)

WEP

White Team

Whois Command

Wireless Authentication Methods

Wireless Heat Map

WPA

XDR

XSS (Cross-Site Scripting Attack)