{"id":18896751,"url":"https://github.com/0xsyr0/cybersecurity-glossary","last_synced_at":"2026-01-24T08:31:05.987Z","repository":{"id":147024772,"uuid":"563377481","full_name":"0xsyr0/Cybersecurity-Glossary","owner":"0xsyr0","description":"A summary of the most abbreviations I encountered so far","archived":false,"fork":false,"pushed_at":"2025-12-29T16:47:32.000Z","size":259,"stargazers_count":28,"open_issues_count":0,"forks_count":11,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-01-01T21:34:04.014Z","etag":null,"topics":["abbreviations","cybersecurity"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0xsyr0.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE-OF-CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2022-11-08T13:43:42.000Z","updated_at":"2025-12-29T17:47:06.000Z","dependencies_parsed_at":null,"dependency_job_id":"8f5ae2e3-60cb-428b-a613-d16770f76f18","html_url":"https://github.com/0xsyr0/Cybersecurity-Glossary","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/0xsyr0/Cybersecurity-Glossary","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xsyr0%2FCybersecurity-Glossary","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xsyr0%2FCybersecurity-Glossary/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xsyr0%2FCybersecurity-Glossary/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xsyr0%2FCybersecurity-Glossary/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0xsyr0","download_url":"https://codeload.github.com/0xsyr0/Cybersecurity-Glossary/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xsyr0%2FCybersecurity-Glossary/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28720720,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-24T08:27:05.734Z","status":"ssl_error","status_checked_at":"2026-01-24T08:27:01.197Z","response_time":89,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["abbreviations","cybersecurity"],"created_at":"2024-11-08T08:35:18.967Z","updated_at":"2026-01-24T08:31:05.981Z","avatar_url":"https://github.com/0xsyr0.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"left\"\u003e\n  \u003cimg width=\"150\" height=\"150\" src=\"https://github.com/0xsyr0/Cybersecurity-Glossary/blob/main/images/glossary.png\"\u003e\n\u003c/p\u003e\n\n# Cybersecurity Glossary\n\nA summary of the most abbreviations I encountered so far. Feel free to contribute via `Pull request`.\n\n| Abbreviation | Meaning |\n| --- | --- |\n| 3LOD | Three Lines of Defense |\n| A | Availability |\n| AAA | Authentication, Authorization, Accounting |\n| AAD | Azure Active Directory |\n| ABAC | Attribute-Based Access Control |\n| ABLE | Actor, Behavior, Location, Evidence |\n| ACA | Azure Container App |\n| ACE | Access Control Entry |\n| ACLE | Account Life Cycle Events |\n| ACL | Access Control List |\n| ACM | AWS Certificate Manager |\n| ACME | Automated Certificate Management Environment |\n| ACPI | Advanced Configuration and Power Interface |\n| AC | Attack Complexity |\n| AD DS | Active Directory Domain Service |\n| ADFS | Active Directory Federated Services |\n| ADR | Architecture Design Review |\n| AEP | ATT\u0026CK Emulation Plans |\n| AES | Advanced Encryption Standard |\n| AH | Authentication Header |\n| AitM | Adversary in the Middle |\n| AKS | Azure Kubernetes Service |\n| ALB | Amazon Load Balancer |\n| ALPN | Application-Layer Protocol Negotiation |\n| AMI | Amazon Machine Image |\n| AMQP | Advanced Message Query Protocol |\n| AMSI | Antimalware Scan Interface |\n| ANSI | American National Standards Institute |\n| APAKE | Augmented Password Authenticated Key Exchange |\n| APIPA | Automatic Pricate IP Addressing |\n| API | Application Programming Interface |\n| APT | Advanced Packaging Tool |\n| APT | Advanced Persistent Threat |\n| ARO | Annual Rate of Occurrence |\n| ARP | Address Resolution Protocol |\n| ASC | Azure Security Center |\n| ASLR | Address Space Layout Randomization |\n| ASM | Attack Surface Management |\n| ASPX | Active Server Page Extended |\n| ASR | Attack Surface Reduction |\n| AST | Abstract Syntax Tree |\n| ASVS | Application Security Verification Standard |\n| ATM | Asynchronous Transfer Mode |\n| ATS | Applicant Tracking System |\n| ATT\u0026CK | Adversarial Tactics, Techniques, and Common Knowledge |\n| ATT | App Tracking Transparency |\n| AuthPF | Authentication Packet Filter |\n| AV | Antivirus |\n| AV | Attack Vector |\n| AWL | App White Listing |\n| AXFR | DNS Zone Transfer / DNS Query Type |\n| AXS | API Cross-Site Scripting |\n| AZ | Availability Zone |\n| BAS | Breach and Attack Simulation |\n| BEC | Business Email Compromise |\n| BFLA | Broken Function Level Authorization |\n| BFP | Berkeley Packet Filter |\n| BGP | Border Gateway Protocol |\n| BIOC | Behavioral Indicator of Compromise |\n| BITS | Background Intelligence Transfer Service |\n| BLOB | Binary Large Object |\n| BOLA | Broken Object Level Authorization |\n| BSIMM | Building Security In Maturity Model |\n| BSS | Base Service Set |\n| BYOL | Bring Your Own Land |\n| BYOVD | Bring Your Own Vulnerable Driver |\n| C2 | Command and Control |\n| C3 | Custom Command and Control |\n| C4 | Customizable Command and Control Center |\n| CAM | Content Addressable Memory |\n| CAPE | Collect and Preserve Evidence |\n| CAPE | Config and Payload Extraction |\n| CAPTCHA | Completely Automated Public Turing Test to tell Computers and Humans appart |\n| CAR | Cyber Analytics Repository |\n| CASB | Cloud Access Security Broker |\n| CBC-MAC | Cipher Block Chaining Message Authentication Code |\n| CBC | cypher Block Chaining |\n| CBSP | Cloud-Based Security Provider |\n| ccTLD | Country Code Top-Level Domain |\n| CDC | Cyber Defense Center |\n| CDN | Content Delivery Network |\n| CDP | Certificate Distribution Point |\n| CEH | Certified Ethical Hacker |\n| CERT | Computer Emergency Response Team |\n| CFG | Control Flow Guard |\n| CFP | Call for Papers |\n| CHAP | Challenge-Handshake Authentication Protocol |\n| CIA | Confidentiality, Integrity, Availability |\n| CI/CD | Continuous Integration / Continuous Delivery |\n| CIFS | Common Internet File System |\n| CLM | Constrained Language Mode |\n| CL | Content-Length |\n| CMMI | Mellon Capability Maturity Model |\n| CNA | CVE Numbering Authority |\n| CNAPP | Cloud-Native Application Protection Platform |\n| CNCF | Cloud Native Computing Foundation |\n| CN | Change Notice |\n| COFF | Common Object File Format |\n| COLO | Co-Location |\n| COM | Component Object Model |\n| CONOPS | Concept of Operations |\n| CORS | Cross-Origin Resource Sharing |\n| CPE | Common Platform Enumeration |\n| CPRS | Cross Origin Resource Sharing |\n| CRC | Code Ready Containers |\n| CRI | Container Runtime Interface |\n| CRL | Certificate Revokation List |\n| CRLF | Carriage Return Line Feed |\n| CRUD | Create, Read, Update, Delete |\n| CSAF | Common Security Advisory Framework |\n| CSD | Client-Side Desync |\n| CSIRT | Computer Security Incident Response Team |\n| CSMA/CD | Carrier Sense Multiple Access/Collision Detection |\n| CSPM | Cloud Security Posture Management |\n| CSPT | Client-Side Path Traversal |\n| CSP | Content Security Policy |\n| CSRF | Client-Side Request Forgery |\n| CSRSS | Client Server Runtime Process |\n| CTAP | Client to Authenticator Protocol |\n| CTA | Czberroam Transparent Authentication |\n| CTEM | Continuous Threat Exposure Management |\n| CTI | Cyber Threat Intelligence |\n| CU | Content Update |\n| CVE | Common Vulnerabilities and Exposures |\n| CVRF | Common Vulnerability Reporting Framework |\n| CVSS | Common Vulnerability Scoring System |\n| CWE | Common Weakness Enumeration |\n| CWP | Cloud Workload Protection |\n| C | Confidentiality |\n| D3FEND | Detection, Denial, and Disruption Framework Empowering Network Defense |\n| DAAS | Data, Assets, Applications and Services |\n| DACL | Discretionary Access Control List |\n| DAC | Discretionary Access Control |\n| DAD | Destruction, Alteration, Disclosure |\n| DAPP | Decentralized Applications |\n| DAST | Dynamic Application Security Testing |\n| DCIM | Data Center Infrasctructure Management |\n| DCOM | Distributed Component Object Model |\n| DDNS / DynDNS | Dynamic Domain Name System |\n| DDoS | Distributed Denial of Service |\n| DEFI | Decentralized Finance |\n| DEG | Defender Exploit Guard |\n| DEP | Data Execution Prevention |\n| DES | Data Encryption Standard |\n| DFD | Data Flow Diagram |\n| DFIR | Digital Forensics Incident Response |\n| DFR | Dynamic Function Resolution |\n| DGA | Domain Generation Algorithm |\n| DHCP | Dynamic Host Configuration Protocol |\n| DIG | Domain Information Groper |\n| DI | Dependency Injection |\n| DKIM | DomainKeys Identified Mail |\n| DLP | Data Loss Prevention |\n| DLR | Dynamic Language Runtime |\n| DMARC | Domain-Based Message Authentication Reporting \u0026 Conformance |\n| dMSA | Delegated Managed Service Account |\n| dMSA | Device Managed Service Account |\n| DMZ | Demilitarized Zone |\n| DNF | Dandified YUM |\n| DNSBL | Domain Name System-Based Blackhole List |\n| DNSCAA | DNS Certification Authority Authorization |\n| DNSSEC | Domain Name System Security Extensions |\n| DNS | Domain Name System |\n| DOCSIS | Data Over Cable Service Interface Specification |\n| DOH | DNS over HTTPS |\n| DOM | Document Object Model |\n| DORA | Digital Operational Resilience Act |\n| DOT | DNS over TLS |\n| DPA | Data Processing Agreement |\n| DPAPI | Data Protection Application Programming Interface |\n| DRDoS | DNS Reflection Denial of Service |\n| DREAD | Damage, Reproducibility, Exploitability, Affected Users, Discoverability |\n| DRSUAPI | Directory Replication Service Universal API |\n| DRS | Directory Replication Service |\n| DSA | Digital Signature Algorithm |\n| DSC | Desired State Configuration |\n| DSCP | Differntiated Services Code Point |\n| DSL | Domain Specific Language |\n| DSP | Digital Signal Procesor |\n| DSS | Data Security Standard |\n| DTD | Document Type Definition |\n| DTMF | Dual Tome Multi Frequency |\n| E2EE | End-to-End Email Encryption |\n| EAP-AKA' | EAP Authentication and Key Agreement Prime |\n| EAP-AKA | EAP Authentication and Key Agreement |\n| EAP-EKE | EAP Encrypted Key Exchange |\n| EAP-FAST | EAP Flexble Authentication via Secure Tunneling |\n| EAP-GTC | EAP Generic Token Card |\n| EAP-IKEv2 | EAP Internet Key Exchange v2 |\n| EAP-NOOB | EAP Nimble Out-of-Band Authentication |\n| EAP-POTP | EAP Protected One-Time Password |\n| EAP-PSK | EAP Pre-Shared Key |\n| EAP-SIM | EAP Subscriber Identity Module |\n| EAP-TLS | EAP Transport Layer Security |\n| EAP-TTLS | EAP Tunneled Transport Layer Security |\n| EAP | Extensible Authentication Protocol |\n| EAR | Execution After Redirect |\n| eBGP | External Border Gateway Protocol |\n| EBP | Extended Base Pointer |\n| EBPF | Extended Berkeley Packet Filter |\n| EBS | Elastic Block Storage |\n| EC2 | Elastic Compute Cloud |\n| ECC | Elliptic Curve Cryptography |\n| ECDH | Elliptic Curve Diffie-Hellmann |\n| ECDSA | Elliptic Curve Digitial Signature Algorithm |\n| eCPPTv2 | eLearnSecurity Certified Professional Penetration Tester |\n| ECP | Encryption Control Protocol |\n| ECS | Elastic Container Service |\n| EDR | Endpoint Detection and Response |\n| EDTR | Endpoint Detection and Threat Response |\n| EFS | Elastic File System |\n| EIGRP |  Enhanced Interior Gateway Routing Protocol |\n| EIP | Extended Instruction Pointer |\n| eJPT | eLearnSecurity Junior Penetration Tester |\n| EKS | Elastik Kubernetes Service |\n| ELB | Elastic Load Balancing |\n| ELF | Executable and Linkable Format |\n| EKE | Encrypted Key Exchange |\n| ELK | Elasticsearch, Logstash, Kibana |\n| EM | Exposure Management |\n| EPA | Extended Protection for Authentication |\n| ESAE | Enhanced Security Administrative Environment |\n| ESI | Edge Side Includes |\n| ESP | Encapsulating Security Payload |\n| ESP | Extended Stack Pointer |\n| ESS | Extended Session Security |\n| ETL | Extract, Transform, Load |\n| ETW | Event Tracing for Windows |\n| FAANG | Facebook, Apple, Amazon, Netflix, Google |\n| FAIR | Factor Analysis of Information Risk |\n| FAST | Flexible Authentication Secure Tunneling |\n| FDE | Full Disk Encryption |\n| FIB | Forward Information Base |\n| FIDO | Fast Identity Online |\n| FIFO | First In, First Out |\n| FIM | File Integrity Monitoring |\n| FinTS | Financial Transaction Services |\n| FIPS | Federal Information Processing Standards |\n| FLoC | Federated Learning of Cohorts |\n| FOCI | Family of Client IDs |\n| FOSS | Free and Open Source Software |\n| FPM | FastCGI Process Manager |\n| FTTB | Fiber to the Building |\n| FTTC/K | Fiber to the Curb / Kerb |\n| FTTDP | Fiber to the Distribution Point |\n| FTTD | Fiber to the Desktop |\n| FTTE/Z | Fiber to the Enclosure / Zone |\n| FTTF | Fiber to the Frontage |\n| FTTH | Fiber to the Home |\n| FTTLA | Fiber to the Last-Amplifier |\n| FTTN | Fiber to the Note |\n| FTTO | Fiber to the Office |\n| FTTP | Fiber to the Premises |\n| FTTX | Fiber to the X |\n| FUD | Fully Undetectable |\n| GCM | Galois Counter Mode |\n| GCP | Google Cloud Platform |\n| GDPR | General Data Protection Regulation |\n| gMSA | Group Managed Service Accounts |\n| GOT | Global Offset Table |\n| GPON | Gigabit-Capable Passive Optical Networks |\n| GPO | Group Policy Object |\n| GPP | Group Policy Preferences |\n| GRC | Governance, Risk Management and Compliance |\n| GRE | Generic Routing Encapsulation |\n| GRPC | Google Remote Procedure Calls |\n| GSSAPI | Generic Security Services Application Program Interface |\n| gTLD | Generic Top-Level Domain |\n| GUID | Globally Unique Identifier |\n| HBCI | Home Banking Computer Interface |\n| HFC | Hybrid Fiber-Coaxial |\n| HID | Human Interface Device |\n| HIDS | Host-Based Intrusion Detection System |\n| HIPS | Host-based Intrusion Prevention System |\n| HMAC | Hash-Based Message Authentication Code |\n| HMM | Hunting Maturity Model |\n| HNDL | Harvest Now, Decrypt Later |\n| HOTP | HMAC-Based One-Time Password |\n| HPC | High Performance Computing |\n| HQL | Hybernate Query Language |\n| HSDPA | High-Speed Downlink Packet Access |\n| HSRP | Host Standby Router Protocol |\n| HSTS | HTTP Strict Transport Security |\n| HTA | HTML Application |\n| HTML | Hypertext Markup Language |\n| IAM | Identity Access Management |\n| IAST | Interactive Application Security Testing |\n| IAVM | Information Assurance Vulnerbaility Alert |\n| iBGP | Internal Border Gateway Protocol |\n| IBN | Intent-Based Networking |\n| ICMP | Internet Control Message Protocol |\n| IDN | International Domain Name |\n| IDOR | Insecure Direct Object Reference |\n| IDS | Intrusion Detection System |\n| IDTR | Identity Threat Detection \u0026 Response |\n| IEC | International Electrotechnical Commission |\n| IFS | Internal Field Separator |\n| IGMP | Internet Group Management Protocol |\n| IGRP | Interior Gateway Routing |\n| IKE | Internet Key Exchange |\n| IMAP | Internet Message Access Protocol |\n| IMDS | Instance Metadata Service Version |\n| IMEI | International Mobile Equipment Identity |\n| IMSI | International Mobile Subscriber Identity |\n| IOA | Indicator of Attack |\n| IOC | Indicator of Compromise |\n| IOCTL | Device Input and Output Controls |\n| IOMMU | Input-Output Memory Management Unit |\n| IPAM | IP Address Management |\n| IPC | Inter-Process Communication |\n| IPFIX | Internet Protocol Flow Information Export |\n| IPMI | Intelligent Platform Management Interface |\n| IPSEC | Internet Protocol Security |\n| IPS | Intrusion Prevention System |\n| IP | Internet Protocol |\n| IRDP | ICMP Router Discovery Protocol |\n| IS-IS | Intermediate System to Intermediate System |\n| ISAC | Information Sharing and Analysis Center |\n| ISAMKP | Internet Security Association and Key Management Protocol |\n| ISO | International Organization for Standardization |\n| I | Integrity |\n| JEA | Just Enough Administration |\n| JEA | Just Enough Access |\n| JIT | Just In Time |\n| JSON | JavaScript Object Notation |\n| JSP | Java Server Pages |\n| JS | JavaScript |\n| JSR | JavaScript Registry |\n| JWE | JSON Web Encryption |\n| JWKS | JSON Web Key Set |\n| JWT | JSON Web Token |\n| KASLR | Kernel Address Space Layout Randomization |\n| KDC | Key Distribution Center |\n| KPP | Kernel Patch Protection |\n| KQL | Kibana Query Language |\n| KQL | Kusto Query Language |\n| KWARGS | Keyword Arguments |\n| LAPS | Local Administrator Password Solution |\n| LDAP | Lightweight Directory Access Protocol |\n| LEAP | Lightweight Extensible Authentication |\n| LFI | Local File Inclusion |\n| LFO | Least Frequency of Occurrence |\n| LIFO | Last In, First Out |\n| LINQ | Language-Integrated Query |\n| LKM | Loadable Kernel Module |\n| LLC | Logical Link Layer |\n| LLMNR | Link-Local Multicast Name Resolution |\n| LLM | Large Language Model |\n| LOC | Logistic Operation Center |\n| LOI | Living-Off-Identity |\n| LORAWAN | Long Range Wide Area Network |\n| LOTL | Living of the Land |\n| LPD | Line Printer Daemon |\n| LQL | Lucene Query Language |\n| LSASS | Local Security Authority Subsystem Service |\n| LSA | Local Security Authority |\n| LXC | Linux Container |\n| LXD | Linux Daemon |\n| MAC | Mandatory Access Control |\n| MAC | Medium Access Control |\n| MAC | Message Authentication Code |\n| MCP | Model Context Protocol |\n| mDNS | Multicast DNS |\n| MDR | Managed Detection and Response |\n| MD | Message Digest |\n| MDLC | Malware Development Lifecycle |\n| MEAN | MongoDB, Express.js, AngularJS, Node.js |\n| MFA | Multi-Faktor Authentication |\n| MIB | Management Information Base |\n| MIC | \n| MIME | Multipurpose Internet Mail Extensions |\n| MOK | Machine Owner Key |\n| MPLS | Multiprotocol Label Switching |\n| MQTT | Message Queue Telemetry Transport Protocol |\n| MS-DRSR | Microsoft Directory Replication Service Remote Protocol |\n| MS-NRPC | Microsoft NetLogon Remote Protocol |\n| MSHTA | Microsoft HTML Application |\n| MSSP | Managed Security Service Provider |\n| MSS | Maximum Segment Size |\n| MSTG | Mobile Security Testing Guide |\n| MTASTS | Mail Transfer Agent-Strict Transport Security |\n| MTA | Mail Transfer Agent |\n| MTLS | Mutual TLS |\n| MTTA | Mean Time to Acknowledge |\n| MTTD | Mean Time to Detect |\n| MTTP | Meantime to Production |\n| MTTR | Meantime to Recover |\n| MTTR | Mean Time to Respond |\n| NAK | Negative Acknowledgement |\n| NBNS | NetBIOS Name Server |\n| NBT-NS | NetBIOS Name Service |\n| NCSC | National Cyber Security Centre |\n| NDA | Non-Disclosure Agreement |\n| NDR | Network Detection and Response |\n| NFC | Near-Field Communication |\n| NFS | Network File System |\n| NGAV | Next-Generation Antivirus |\n| NGE | Next Generation Encryption |\n| NGFW | Next-Generation Firewall |\n| NHI | Non-human Identity |\n| NIDS | Network-based Intrusion Detection System |\n| NIPS | Network-based Intrusion Prevention System |\n| NIST | National Institute of Standards and Technology |\n| NLA | Network Level Authentication |\n| NMI | Non-maskable Interrupt |\n| NMS | Network Monitoring System |\n| NOC | Network Operation Center |\n| NONCE | Number used once |\n| NoSQL | Not only SQL |\n| NoTW | Mark-of-the-Web |\n| NSX | Full-Stack Network \u0026 Security Virtuakization |\n| NTDS.DIT | New Technology Directory Services Directory Information Tree |\n| NTFS | New Technology File System |\n| NTLM | New Technology Lan Manager |\n| NX | Non-Executable Stack |\n| OCSF | Open Cybersecurity Schema Framework |\n| OCSP | Online Certificate Status Protocol |\n| OGNL | Object-Graph Navigation Language |\n| OIDC | OpenID Connect |\n| OID | Object Identifier |\n| ONVIF | Open Network Video Interface Forum |\n| OOB | Out-of-Band |\n| OPSEC | Operations Security |\n| OPtH | Overpass-the-Hash |\n| OSCP | Offensive Security Certified Professional |\n| OSINT | Open Source Intelligence Tools |\n| OSPF | Open Shortest Path First |\n| OSSEC | Open Source HIDS Security |\n| OSSEM | Open Source Security Event Metadata |\n| OSSTMM | Open Source Security Testing Methodology Manual |\n| OSWE | Offensive Security Web Expert |\n| OVAL | Open Vulnerability and Assessment Framework |\n| OWASP | Open Web Application Security Project |\n| OXID | Object Exporter Identifier |\n| PAC | Privileged Account Certificate |\n| PAC | Privileged Attribute Certificate |\n| PAKE | Password Authenticated Key Exchange |\n| PAM | Pluggable Authentication Module |\n| PAM | Privileged Access Management |\n| PAP | Password Authentication Protocol |\n| PASTA | Process for Attack Simulation and Threat Analysis |\n| PEAK | Prepare, Execute, Act, Knowledge |\n| PBKDF1 | Password-Based Key Derivation Function 1 |\n| PBKDF2 | Password-Based Key Derivation Function 2 |\n| PCI | Payment Card Industry |\n| PDO | PHP Data Objects |\n| PEAP-MSCHAPv2 | Protected Extensible Authentication Protocol MS-CHAPv2 |\n| PEAP | Protected Extensible Authentication Protocol |\n| PEB | Process Environment Block |\n| PEM | Privacy Enhanced Mail |\n| PFX | Personal Information Exchange |\n| PIE | Position Independent Executable |\n| PII | Personally Identifiable Information |\n| PIM | Privileged Identity Management |\n| PI | Process Instrumentation |\n| PKCS | Public-Key Cryptography Standard |\n| PKI | Public-Key Infrastructure |\n| PNAC | Port-Based Network Access Control |\n| POC | Phone Operation Center |\n| POP | Post Office Protocol |\n| POSIX | Portable Operating System Interface |\n| PPL | Protected Process Light |\n| PQC | Post-Quantum Cryptography |\n| ProgID | Programmatic ID |\n| PR | Privileges Required |\n| PSAD | Port Scan Attack Detector |\n| PSA | Public Service Announcement |\n| PSIA | Physical Security Interoperability Alliance |\n| PTA | Permission-to-Attack |\n| PTK | Pairwise Transient Key |\n| PTK | Penetration Testing Kit |\n| QCR | Quantum Computer Resistant |\n| QEMU | Quick Emulator |\n| QUIC | Quicik UDP Internet Connections |\n| R\u0026D | Research and Development |\n| RACI | Responsible, Accountable, Consulted and Informed |\n| RAG | Retrieval-Augmented Generation |\n| RASP | Runtime Application Self Protection |\n| RAX | Register \"a\" extended |\n| RBAC | Role Based Access Control |\n| RBCD | Resource Based Constrained Delegation |\n| RBL | Realt-Time Blackhole List |\n| RBL | Return Black List |\n| RBP | Register Base Pointer |\n| RBVM | Risk-Based Vulnerability Management |\n| RBX | Register \"b\" extended |\n| RC4 | Rivest Cipher 4 |\n| RCX | Register \"c\" extended |\n| RDI | Register Destination Index |\n| RDNS | REverse Domain Name System |\n| RDP | Responsible Disclosure Policy |\n| RDS | Relational Database Service |\n| RDX | Register \"d\" extended |\n| RELRO | Relocation Read-Only |\n| REPL | Read-Evaluate-Print Loop |\n| REST | Representional State Transfer |\n| RFC | Request for Comments |\n| RFI | Remote File Inclusion |\n| RID | Relative Identifier |\n| RIP | Routing Information Protocol |\n| RNDC | Remote Name Daemon Control |\n| ROE | Rules of Engagement |\n| ROP | Return Oriented Programming |\n| ROSI | Return on Security Investment |\n| RPC | Remote Procedure Calls |\n| RPKI | Resource Public Key Infrastructure |\n| RRDNS | Round Robin Domain Name System |\n| RSA | Rivest-Shamir-Adlemann Algorithm |\n| RSI | Register Source Index |\n| RSP | Register Stack Pointer |\n| RTCO | Red Team Certified Operator |\n| RTP | Real-Time Transport Protocol |\n| RTSP | Real-Time Streaming Protocol |\n| RX | Receiving |\n| S-SDLC | Secure Software Development Lifecycle |\n| S3 | Simple Storage Service |\n| S4U | Service for User | \n| SACL | System Access Control List |\n| SAIF | Secure AI Framework |\n| SAML | Security Assertion Markup Language |\n| SAM | Security Accounts Manager |\n| SAMM | Software Assurance Maturity Model |\n| SASL | Simple Authentication and Security Layer |\n| SAST | Static Application Security Testing |\n| SAS | Secure Attention Sequence |\n| SA | Security Associations |\n| SBOM | Software Bill of Materials |\n| SCA | Software Composition Analysis |\n| SCD | Source Code Disclosure |\n| SCEP | Simple Certificate Enrollment Protocol |\n| SCM | Service Control Manager |\n| SCP | Service Control Policy |\n| SCTP | Stream Control Transmission Protocol |\n| SD-WAN | Software-Defined Wide Area Network |\n| SDDL | Security Descriptor Definition Language |\n| SDLC | Software Development Life Cycle |\n| SDL | Security Development Lifecycle |\n| SDO | Statement of Applicability |\n| SD | Security Descriptor |\n| SE | Search Engine Optimization |\n| SHIM | First Stage Bootloader |\n| SID | Security Identifier |\n| SIEM | Security Information and Event Management |\n| SIKE | Supersingular Isogeny Key Encapsulation |\n| SIM | Subscriber Identity Module |\n| SIP | Session Initiation Protocol |\n| SKEL | Skeleton |\n| SLAAC | Stateless Address Auto-Configuration |\n| SMB | Server Message Block |\n| SMIME | Secure Multipurpose Internet Mail Extension |\n| sMSA | Standalone Managed Service Account |\n| SMSS | Session Manager Subsystem |\n| SMTP | Simple Mail Transfer Protocol |\n| SNI | Server Name Identification |\n| SNMP | Simple Network Management Protocol |\n| SNS | Amazon Simple Notification Service |\n| SOAP | Simple Object Access Protocol |\n| SOAR | Security Orchestration, Automation, and Response |\n| SOA | Statement of Applicability |\n| SOC | Security Operations Center |\n| SoC | System on Chips |\n| SOP | Same Origin Policy |\n| SOP | Standard Operating Procedure |\n| SOQL | Salesforce Object Query Language |\n| SPA | Sender Protocol Address |\n| SPF | Sender Policy Framework |\n| SPI | Security Parameter Index |\n| SPN | Service Principal Name |\n| SPX | Secure PDF Exchange |\n| SQLI | Server-Query Language Injection |\n| SQL | Structured Query Language |\n| SRI | Subresource Integrity |\n| SRS | Software Requirement Specification |\n| SSDLC | Secure Software Development Life Cycle |\n| SSDT | Secondary System Descriptor Tables |\n| SSE | Server-Side Encryption |\n| SSG | Static Site Generation |\n| SSI | Server Side Includes |\n| SSI | Software Security Initiatives |\n| SSID | Service Set Identifier |\n| SSIS | SQL Server Integration Services |\n| SSL | Secure Socket Layer |\n| SSN | Syscall Service Numbers |\n| SSOT | Single Source of Truth |\n| SSO | Single Sign-On |\n| SSP | Security Service Provider |\n| SSPM | SaaS Security Posture Management |\n| SSPR | Self-Service Password Reset |\n| SSR | Server-Side Rendering |\n| SSRF | Server-Side Request Forgery |\n| SSSD | System Security Services Daemon |\n| SSTF | Scroll to Text Fragment |\n| SSTI | Server-Side Template Injection |\n| STAS | Sophos Transparent Authentication Suite |\n| STEM | Systematic, Threat, Evaluation, Methodology |\n| STIG | Security Technical Implementation Guide |\n| STIX | Structured Threat Information Expression |\n| STRIDE | Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege |\n| STS | Security Token Service |\n| SxS | Side-by-Side |\n| S | Scope |\n| TAN | Transaction Authentication Number |\n| TAXII | Trusted Automated Exchange of Intelligence |\n| TCSEC | Trusted Computer System Evalutation Criteria |\n| TDIR | Threat Detection, Investigation, and Response |\n| TEAP | Tunnel Extensible Authentication Protocol |\n| TEE | Trusted Execution Environment |\n| TELNET | Teletype Network |\n| TE | Transfer-Encoding |\n| TGS | Ticket Granting Service |\n| TGT | Ticket Granting Ticket |\n| THA | Target Hardware Address |\n| TIBER-EU | Threat Intelligence-Based Ethical Red-Teaming |\n| TI | Threat Intelligence |\n| TLD | Top-Level Domain |\n| TLP | Traffic Light Protocol |\n| TLPT | Thread Led Penetration Testing |\n| TLS | Transport Layer Security |\n| TLV | Type-Length-Value |\n| TOCTOU | Time Of Check To Time Of Use |\n| TOS | Terms of Service |\n| TOTP | Time-Bases One-Time Password |\n| TPM | Trusted Platform Module |\n| TPS | Testing Procedure Specification |\n| TSIG | Transaction Signatures |\n| TTP | Tactics, Techniques and Procedures |\n| TX | Transmitting |\n| UAF | Use-After-Free |\n| UEBA | User Entity and Behavior Analytics |\n| UIPI | User Interface Privilege Isolation |\n| UI | User Interaction |\n| UI | User Interface |\n| UPN | User Principal Name |\n| URI | Uniform Resource Identifier |\n| URL | Uniform Resource Locator |\n| USART | Universal Synchronous/Asynchronous Receiver-Transmitter |\n| UUID | Universally Unique Identifier |\n| VACM | View-Based Access Control Model |\n| VBA | Visual Basic for Application |\n| VDP | Vulnerbaility Disclosure Program |\n| VICI | Versatile IKE Configuration Interface |\n| VOC | Video Operation Center |\n| VoLTE | Voice over Long-Term Evolution |\n| VPC | Virtual Private Cloud |\n| VPN | Virtual Private Network |\n| VSS | Volume Shadow Copy |\n| WAN | Wide Area Network |\n| WAP | Web Application Protection |\n| WASM | Web Assembly |\n| WAT | Web Assembly Text Format |\n| WCD | Web Cache Deception |\n| WDAC | Windows Defender Application Control |\n| WDM | Wavelength-Division Multiplexing |\n| WEP | Wired Equivalent Privacy |\n| WinRM | Windows Remote Management |\n| WinRS | Windows Remote Shell |\n| WMIC | Windows Management + Instrumentation Command-Line |\n| WMI | Windows Management Instrumentation |\n| WOFF | Web Open Font Format |\n| WORM | Write Once, Read Many |\n| WPA2 | Wi-Fi Protected Access 2 |\n| WPAD | Web Proxy Autodiscovery Protocol |\n| WPA | Wi-Fi Protected Access |\n| WSH | Windows Script Host |\n| WSTG | Web Security Testing Guide |\n| XDP | Express Data Path |\n| XDR | Extended Detection and Response |\n| XHR | XML HTTP Request |\n| XOR | Exclusive or |\n| XSLT | Extensible Stylesheet Language Transformation |\n| XSS | Cross-Site Scripting |\n| XST | Cross-Site Tracing |\n| XXE | XML External Entity |\n| ZTN | Zero Trust Network |\n| ZTNA | Zero Trust Network Access |\n| YAML | YAML Ain't Markup Language |\n| YUM | Yellowdog Updater, Modified |\n| ZTA | Zero Trust Approach |\n| ZTNA | Zero Trust Network Access |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xsyr0%2Fcybersecurity-glossary","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0xsyr0%2Fcybersecurity-glossary","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xsyr0%2Fcybersecurity-glossary/lists"}