12.11. Common terms

12.11.1. System related

• WMI (Windows Management Instrumentation)

12.11.2. Network related

12.11.2.1. Network Protocols

• Lightweight Directory Access Protocol (LDAP)

• Distinguished Name (DN)

• Relative Distinguished Name (RDN)

• Server Message Block (SMB)

• Common Internet File System (CIFS)

• SMTP (Simple Mail Transfer Protocol)

• Simple Network Management Protocol (SNMP)

• POP3 (Post Office Protocol 3)

• IMAP (Internet Mail Access Protocol)

• HTTP (HyperText Transfer Protocol)

• HTTPS (HyperText Transfer Protocol over Secure Socket Layer)

• Dynamic Host Configuration Protocol (DHCP)

• Remote Procedure Call (RPC)

• Java Debug Wire Protocol (JDWP)

• Network File System (NFS)

• Service Principal Names (SPNs)

• Simple Authentication and Security Layer (SASL)

• Link-Local Multicast Name Resolution (LLMNR)

12.11.2.2. Routing System

• QUIC (Quick UDP Internet Connections)

• Autonomous System (AS)

• Interior Gateway Protocol (IGP)

• External Gateway Protocol (EGP)

• Interdomain routing

• Intradomain routing

• Routing Information Protocol (RIP)

• Open Shortest Path First (OSPF)

• Dynamic Routing Protocols (DRP)

• First Hop Redundancy Protocols (FHRP)

• Hot Standby Router Protocol (HSRP)

• Virtual Router Redundancy Protocol (VRRP)

• Gateway Load Balancing Protocol (GLBP)

• Network Address Translation (NAT)

• Point-to-Point Protocol (PPP)

• Spanning Tree Protocol (STP)

• QUIC (Quick UDP Internet Connections)

12.11.2.3. Web Applications

• Certificate Transparency (CT)

• DNS Certification Authority Authorization (CAA)

• Application Level Gateway (ALG)

12.11.2.4. Kerberos

• Key Distribution Center (KDC)

• Authentication Server (AS)

• Ticket Granting Server (TGS)

12.11.3. Development related

• REST (Representation State Transformation)

12.11.4. Security related

• defect / mistake

  • Weaknesses in software implementation and design

  • Weakness is a collective term for defects and flaws

• bug

  • Implementation-level software shortcomings

  • Easy to find and fix

  • For example: buffer overflow

• flaw

  • A design flaw that is hard to detect

  • Defects often require manual analysis to find

  • Error handling or recovery modules in the software system, causing the program to be unsafe or invalid

• vulnerability

  • Defects or flaws that can be used to violate security policies

• Interactive Application Security Testing (IAST)

• Dynamic Application Security Testing (DAST)

• Static Application Security Testing (SAST)

• ATT&CK™ (Adversarial Tactics, Techniques, and Common Knowledge, ATT&CK)

• Lateral Movement

12.11.4.1. Secure Development

• Security Information Event Management (SIEM)

• (Security Orchestration, Automation and Response (SOAR)

• SDL (Security Development Lifecycle)

12.11.4.2. Security Policy

• Cross-Origin Resource Sharing, (CORS)

• Sender Policy Framework, (SPF)

• DomainKeys Identified Mail, (DKIM)

• Domain-based Message Authentication, Reporting and Conformance, (DMARC)

• DNSSEC (The Domain Name System Security Extensions)

• DNS-based Authentication of Named Entities, (DANE)

12.11.4.3. Security Model

• Building Security In Maturity Model (BSIMM)

12.11.5. Attack related

12.11.5.1. Vulnerability Types

• Cross Site Scripting (XSS)

• Cross-Site Request Forgery (CSRF)

• Man-in-the-middle (MITM) attack

• Server Side Request Forgery (SSRF)

• Advanced Persistent Threat (APT)

• Remote Command Execute (RCE)

• Remote Code Execute (RCE)

• Out-Of-Band (OOB)

12.11.5.2. Attack Mode

• Spear Phishing

• Water Holing

• Distributed Denial of Service (DDoS)

12.11.6. Defense related

• IoC (Indicators of Compromise)

12.11.6.1. Defense Technology

• Network-based Detection and Response (NDR)

• Endpoint Detection and Response (EDR)

• Managed Detection and Response (MDR)

• Extended Detection and Response (XDR)

• Adaptive Security Architecture (ASA)

• Zero Trust Network Access (ZTNA)

• Cloud Security Posture Management (CSPM)

12.11.6.2. Protective facilities

• Intrusion Detection System (IDS)

• Host-based Intrusion Detection System (HIDS)

• Host Intrusion Prevent System (HIPS)

• RASP (Runtime Application Self-protection)

• Unified Endpoint Management (UEM)

12.11.7. Operation and maintenance

• Artificial Intelligence for IT Operations (AIOps)

• Risk and Vulnerability Assessments (RVA)

• Computer Emergency Response Team (CERT)

12.11.8. Authentication

• Single Sign-On (SSO)

• Two-Factor Authentication (2FA)

• Multi-Factor Authentication (MFA)

• One-Time Password (OTP)

12.11.8.1. Kerbose

• Authentication Server (AS)

• Key Distribution Center (KDC)

• Ticket Granting Ticket, TGT

• Ticket Granting Server (TGS)

• Specific service provider (Service Server, SS)

12.11.9. Trusted Computing

• Trusted Platform Module (TPM)

12.11.10. Cloud

12.11.10.1. Containers

• Container Runtime Interface (CRI)

• Open Container Initiative (OCI)

• Open Container Format (OCF)

12.11.10.2. Compute

• Elastic Compute Cloud (EC2)

• Alibaba Cloud Elastic Compute Service (ECS)

• Cloud Server (Cloud Virtual Machine, CVM)

12.11.10.3. Storage

• Simple Storage Service (S3)

• Object Storage (Cloud Object Storage, COS)

12.11.10.4. XaaS

• Function as a Service (FaaS)

• Container as a Service (CaaS)

• Software as a Service (SaaS)

• Platform as a Service (PaaS)

• Infrastructure as a Service (IaaS)

12.11.10.5. Platform-specific

• OCI (Oracle Cloud Infrastructure)

12.11.10.6. Other Services

• Instance Metadata Service (IMDS)

• Continuous Integration (CI)

• Continuous Delivery (CD)

• Edge Computing Machine (ECM)