Network Security Library
Security Vulnerabilities
ATM Network Security: Vulnerabilities and Risks
Broadband Access Security: Cable Access and xDSL Lines
Communication Security at the Application Layer
Computer
Virus and Antivirus Technologies
Denial of Service (DoS) and Distributed Denial of Service (DDoS)
Ethernet LAN Security
Frame Relay Network Security: Vulnerabilities and Mitigations
ICMP Attacks
IP Spoofing
Land Attack
Network Security at the Data Link Layer (Layer 2) of LAN
Network Security at the Network Layer (Layer 3: IP)
Network Security at the Transport Layer (Layer 4: TCP and UDP)
Network Security of WAN: ATM, Frame Relay an Broadband Access
Pharming and Anti-pharming
Mitigations and Technologies
Phishing and Anti-phishing
Mitigations and Technologies
Port Scan Attack
Public-Key or Asymmetric Cryptography
RIP Routing Attacks
SPAM and Anti-Spam Technologies
Spyware and Anti-Spyware Mitigations and Technologies
Smurf Attack and Fraggle Attack
TCP Connecting Hijacking: MAN-In-The-Middle Attack
TCP "SYN" Attack
TCP/IP Network Vulnerability and Security
UDP Flood Attack Security Technologies
Biometric Technology and Its Application to Information Security
Cryptography, Data Encryption and Decryption Algorithms
Deep Inspection
IPsec Virtual Private Network (IPsec VPN)
L2TP / PPTP Virtual Private Network (VPN)
Layer 2/3 MPLS VPN based on BGP/MPLS
Packet Filtering
PKI: Public-Key Infrastructure
Secret-Key or Symmetric-Key Cryptography
SSL VPN: Secure Socket Layer Virtual Private Network
Stateful Inspection
Policies and Operations
DMZ: DeMilitarized Zone in Networks
Products and Solutions
ATM Network Security: Solutions, Technologies and Specifications
Firewall
IDS: Intrusion Detection System
IPS: Intrusion Protection/Prevention System
Network security related organizations
Information, Computer and Network Security Terms, Glossaries Dictionary
Numbers A B C D E F G H I J K L M N
O P Q R S T U V W X Y Z
0-day
128-bit encryption
128-bit keys
3DES: Triple DES
3-way handshake
40-bit encryption
56-bit encryption
64-bit encryption
64-bit keys
802.11i
802.11x
AAA server
AAA: Access control, Authorization, and Auditing
AAA: Authentication, Authorization, and Accounting
Access Control Service
Access Management
Access Point
Access Point Mapping
Access Token
Account Harvesting
ACF2: Access Control Facility 2
ACK Piggybacking
ACL: Access Control List
Active Attacks
Active Content
ActiveX
Activity Monitors
Add-on Security
Adware
AE: Authenticated Encryption
AES: Advanced Encryption Standard
AFIS: Automated Fingerprint Identification System
AH: Authentication Header
AirSnort
ALBB: Application-Level Behavior Blocking
Alias / Handle
Anna or Anna Kournikova virus
Anomaly Detection
Anonymous FTP
Anti-Adware
AntiGen
Anti-Phishing
AntiSniff
Anti-Spam
Anti-Spyware
Anti-Virus (Antivirus) Software
Anti-X
Applet
Application Filtering
Application Hardening
Application Level Gateway
Application Proxy
ARP Poisoning
ARP Spoofing
ARP: Address Resolution Protocol
ARPANET: Advanced Research Projects Agency Network
Asymmetric Algorithm
Asymmetric Cryptography
Asymmetric Warfare
ATM Security
Attack Vector
AUC: Authentication Centre
Audit Trail
Audit/Auditing
Authentication
Authentication Protocol
Authentication Server
Authentication Spoofing
Authentication Ticket
Authenticator
Authenticity
Authenticode
Authorization
Autonomous System
Availability
Back Orifice
Backdoor
Bandwidth
Banner
Basic Authentication
Bastion Host
Bayesian Analysis
Bayesian Filter
Bayesian Logic
BCP: Business Continuity Plan
Behavior Blocking
Bell-LaPadula Security Model
BGP/MPLS VPN
BIA: Business Impact Analysis
Biba Model
Bifurcation
BIND: Berkeley Internet Name Domain
BinHex
Biometric Verification
Biometrics
Birthday Attack
Birthday Paradox
Black Hat
Blacklist
Blended Attack
Blended Exploit
Blended Threat
Blind Spoofing Attack
Block Cipher
Blowfish
Blue Bomb
Bluejacking
Bluesnarf (Bluesnarfing)
Bluetooth
BO2K: Back Orifice 2000
Boot Record Infector
BOOTP (Bootstrap)
Botnet
Bounce Attack
BPCP: Business Process Contingency Plan
Brain Fingerprinting
Brain Scanning
Brainwave Detector
Brand Spoof or Brand Spoofing
British Standard 7799
Broadcast
Broadcast Address
Browser Hijacker
Brute Force
Brute Force Attack
Brute Force Cracking
Bucket Brigade
Buffer Overflow
Bugbear
BugTraq
C2: Class C2
CA: Certification Authority
CA-ACF2: Computer Associates Access Control Facility
Cache
Cache Cramming
Cache Poisoning
California Security Breach Information Act
Caller ID Spoofing
CAN-SPAM: Controlling the Assault of Non-Solicited Pornography and Marketing Act
Capture
Carding
Carnivore
CBC: Cipher Block Chaining
Cell Phone Spam
CER: Crossover Error Rate
CERT: Computer Emergency Response Team
Certificate-Based Authentication
Certification Request Syntax Standard
CFB: Ciphertext Feedback
CGI: Common Gateway Interface
cgi-bin
Chaffing
Chaffing and Winnowing
Chain of Custody
Challenge-Response
CHAP: Challenge-Handshake Authentication Protocol
Checksum
Chernobyl Virus
Chinese Wall Model
Chosen-Ciphertext Attack
Chosen-Plaintext Attack
CIAC: Computer Incident Advisory Capability
Cipher
Ciphertext
Ciphertext-Only Attack
Circuit Level Gateway/Firewall
CISO: Chief Information Security Officer
CISP: Cardholder Information Security Program
CISSP: Certified Information System Security Professional
CITU: Central Information Technology Unit
Clark-Wilson Model
Clipper
Clipper Chip
Cloud Cover
Cocooning
Cold Site
Collision
Computer Fraud
Confidentiality
Configuration Management
Connection Hijacking
Content Filtering
Content Security
Cookie
Cookie Poisoning
COPPA: Children's Online Privacy Protection Act
Corruption
Covert Channels
CPRM: Content Protection for Removable Media
CPS: Certification Practice Statement
Cracker
Cracking
CRAM: Challenge-Response Authentication Mechanism
CRAMM: CCTA Risk Analysis and Management Method
CRC: Cyclic Redundancy Check
CRL: Certificate Revocation List
Cron
Cryptanalysis
Cryptographic Algorithm
Cryptographic Checksum
Cryptographic Coprocessor
Cryptographic Message Syntax Standard
Cryptographic Token Interface Standard
Cryptography
Cryptoperiod
Cryptosystem: Cryptographic System
CSO: Chief Security Officer
CSS: Content Scrambling System
CSS: Cross Site Scripting (or XSS, cross-site malicious content)
CTCPEC: Canadian Trusted Computer Product Evaluation Criteria
Cyberslacker
Cyberterrorism or Cyberwarfare
Cyberwoozle
DAC: Discretionary Access Control
Daemon
Data Aggregation
Data Custodian
Data Integrity
Data Key
Data Mining
Data Protection Act 1984/1998
Data Retention
Data Splitting
Data Warehousing
Datagram
DDoS: Distributed Denial-of-Service Attack
Decapsulation
Decipher
Decode
Decrypt
Decryption
Deep Inspection
Defacement
Defamation Act, 1997 (UK)
Default ID or Default Password
Defense In-Depth
Deniable Encryption
Deperimeterization
Depository
DERA: Defence Evaluation and Research Agency
DES: Data Encryption Standard
DESX or DES-X
DHA: Directory Harvest Attack
DHCP Starvation
Dictionary Attack
Differential Cryptanalysis
Diffie-Hellman
Diffie-Hellman Key Agreement Standard
Digest Authentication
Digital Certificate
Digital Envelope
Digital Fingerprint
Digital Signature
Digital Silhouettes
DISA: Defense Information Systems Agency
Disassembly
Disaster Recovery
Disruption
Distributed Scans
DLL: Dynamic Link Library
DMCA: Digital Millennium Copyright Act
DMS: Defense Message System
DMZ: DeMilitarized Zone
DNS Attack
DNS Poisoning or DNS Cache Poisoning
DNS Spoofing
DNS: Domain Name System
Domain Hijacking
Domain Name
DomainKeys
Dongle
DoS Attack: Denial-of-Service Attack
DoS: Denial of Service
Drive-by Hacking
Drive-by Spamming
DRM: Digital Rights Management
DRP: Disaster Recovery Plan
DSA: Digital Signature Algorithm
DSO Exploit: Data Source Object Exploit
DSS: Digital Signature Standard
Dual Control
Dual-Homed Gateway
Due Care
Dumb Network
DumpSec
Dumpster Diving
Duress Feature
Dynamic Key Derivation
Dynamic Packet Filter
Dynamic Routing Protocol
E-911
EAP: Extensible Authentication Protocol
EAPoL: Extensible Authentication Protocol over LAN
EAPoW: Extensible Authentication Protocol over Wireless
EAR: Export Administration Regulations
Eavesdropping
ECB: Electronic Code Book
ECC: Elliptical Curve Cryptography
Echelon
Echo Reply
Echo Request
ECSS: Extended-Certificate Syntax Standard
EES: Escrowed Encryption Standard
EFS: Encrypting File System
Egress Filtering
Electrohippies Collective
Elk Cloner
EMAIL Attack
EMAIL Authentication
EMAIL Forgery
EMAIL Spoofing
Emanation Monitoring
Emanations Analysis
Encapsulation
Encryption
Ephemeral Port
Escrow Passwords
E-Signature
Ethical Hacker
Ethical Hacking
Ethical Worm
Evil Twin
Exploit
Exponential Backoff Algorithm
Exposure
False Acceptance
False Negative
False Positive
False Rejection
FAR: False Acceptance Rate
Faraday Cage
Fast File System
Fault Line Attacks
FH-CDMA: Frequency Hopping - Code Division Multiple Access
Filter
Filtering Router
Finger
Finger Image
Fingerprint Scanning
Firewall
Firewall Appliance
Fishing
Flooding Attack
Fluhrer, Martin and Shamir Attack
Footbath
Footprinting
Forensic Analysis
Forensics
Forest
Fork Bomb
Format String Attack
Form-Based Authentication
Forward Lookup
Forward Proxy
Forward Secrecy
Fragment Offset
Fragment Overlap Attack
Fragmentation
Frequency-Hopping Spread Spectrum
FRR: False Rejection Rate
FTP: File Transfer Protocol
Full Disclosure
Fully-Qualified Domain Name
Gethostbyaddr
Gethostbyname
GLBA: Gramm-Leach-Bliley Act
Glitch Attack
Global Spy Network
GNU
Gnutella
Goat
Good Worm
GPO: Group Policy Object
Graphical Password
Graphical User Authentication
Gray Hat
Group Policy Object
GSI: Government Secure Intranet
GTAC: Government Technical Assistance Centre
GUA: Graphic User Authentication
Hacker
Hacktivism
Hacktivist
Half-Open Scanning
Hardening
Harrison-Ruzzo-Ullman Model
Hash
Hash Function
Hashing
Heuristics
Hijack Attack
Hijacking
Hijackware
HIPAA: Health Insurance Portability & Accountability Act
HMAC: Keyed-Hash Message Authentication Code
Hoax Virus
Homeland Security Act
Honey Pot or Honeypot
Honeynet Project
Hops
Host-Based IDS
Hot Site
Hot Site and Cold Site
Hotfixes
HTTP Attack
HTTP Over SSL
HTTP Proxy
HTTPS
Hybrid Attack
Hybrid Encryption
Hybrid Virus
Hyperlink
Hyperlink Spoofing
IceNewk
ICMP Attack
ICMP Bug
ICMP Flood
ICMP Sweep
ICMP: Internet Control Message Protocol
ICV: Integrity Check Value
IDEA: International Data Encryption Algorithm
Identity
Identity Card
Identity Chaos
Identity Theft
IDS: Intrusion detection System
IETF: Internet Engineering Task Force
IKE: Internet Key Exchange
IM Spam
IM Worm
IMAP: Internet Message Access Protocol
Incident Handling
Incremental Backups
Inetd: Internet Daemon
Inference Attack
Information Signature
Information Sniffing
Information Warfare
Infranet Initiative
Ingress Filtering
Input Validation Attacks
Instant Spam
Integrity
Integrity Checker
Integrity Star Property
Internet Trail
Intrusion
Intrusion Detection
|
