Cybersecurity Reference

Cybersecurity Glossary

Clear, plain-English definitions of the terms you'll meet in security — 221 terms, from SQL injection to zero trust. Search, jump by letter, or filter by category.

221 terms

Account TakeoverAccount Takeover is a core identity & access concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Account Takeover helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Identity & Access
Active Directory AttackActive Directory Attack is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Active Directory Attack helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Active ReconnaissanceActive Reconnaissance is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Active Reconnaissance helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
Address Space Layout Randomization (ASLR)Address Space Layout Randomization (ASLR) is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Address Space Layout Randomization (ASLR) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security
Advanced Persistent Threat (APT)Advanced Persistent Threat (APT) is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Advanced Persistent Threat (APT) helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
AdwareAdware is a core malware & threats concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Adware helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Malware & Threats
AES EncryptionAES Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning AES Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography
Aircrack-ngAircrack-ng is a core security tools concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Aircrack-ng helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Tools
AmassAmass is a core recon & osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Amass helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Recon & OSINT
API SecurityAPI Security is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning API Security helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security
ARP SpoofingARP Spoofing is a core network security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning ARP Spoofing helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Network Security
Asset InventoryAsset Inventory is a core security operations concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Asset Inventory helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Security Operations
Asymmetric EncryptionAsymmetric Encryption is a core cryptography concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Asymmetric Encryption helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Cryptography

Use-After-FreeUse-After-Free is a core system security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Use-After-Free helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.System Security

XML External Entity (XXE) InjectionXML External Entity (XXE) Injection is a core web security concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning XML External Entity (XXE) Injection helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.Web Security

NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a labCodelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

R

S

T

U

V

W

X

Z