Resources
Cybersecurity glossary
The words that keep coming up in IT security, explained simply.
- Agent
- Lightweight software installed on a device that applies security rules and reports its status to a console.
- Patch
- An update released by a vendor to fix a defect, often a security flaw.
- DNS
- The Internet's directory, which translates a site name into an address. Filtering it makes it possible to block a dangerous site before any connection.
- DoH and DoT
- Encrypted DNS, over HTTPS or TLS, so that queries cannot be read or altered along the way.
- EDR
- Endpoint detection and response: collecting events, detecting suspicious behaviour and taking response actions.
- Payment fraud (BEC)
- An email scam in which the attacker poses as a manager or supplier to obtain a payment.
- MSP (managed service provider)
- A provider that manages the IT, and often the security, of several client businesses.
- NGAV
- Next-generation antivirus, which combines signatures, rules and machine learning.
- NIS2
- A European directive that requires cybersecurity measures from many organisations. Software can contribute to it, but cannot be enough on its own to comply.
- PEDM
- Privilege elevation and delegation management: granting administrator rights only when they are needed.
- Phishing
- An attempt to obtain credentials or a payment by imitating a trusted service.
- Quarantine
- Isolating a suspicious file so that it can no longer run, with the option of restoring it.
- Ransomware
- Malicious software that encrypts files and demands a ransom to restore them.
- GDPR
- The European regulation on the protection of personal data.
- Sigma
- An open format for detection rules, shared by the security community.
- Typosquatting
- Registering a domain name close to a well-known brand to deceive visitors.