# Infosec Terms

A glossary of Infosec terms and abbreviations.

## \#

* **2FA**: 2 Factor Authentication

## A

* **AD**: Active Directory
* **AES**: Advanced Encryption Standard
* **AMSI**: Anti-Malware Scan Interface
* **AP**: Access Point
* **APT**: Advanced Persistent Threat
* **AV**: Antivirus

## B

* **BoF**: Buffer Overflow

## C

* **C2 (CC)**: Command and Control
* **CBSP**: Cloud-based Security Providers
* **CISA**: Certified Information Systems Auditor
* **CISM**: Certified Information Security
* **CISSP**: Certified Information Systems Security Professional
* **CS**: Cobalt Strike
* **CSP**: Content Security Policy
* **CVE**; Common Vulnerabilities and Exposures
* **CVSS**: Common Vulnerability Scoring System

## D

* **DDoS**: Distributed Denial of Service
* **DES**: Data Encryption Standard
* **DLP**: Data-loss Prevention
* **DOS**: Denial of Service
* **DSA**: Digital Signature Algorithm

## E

* **EDR**: Endpoint Detection and Response
* **EPT**: External Penetration Testing
* **ES**: Enterprise Security

## F

* **FDE**: Full Disk Encryption
* **FW**: Firewall

## G

* **GPG**: GNU Privacy Guard
* **GRE**: Generic Routing Encapsulation
* **GSM**: Global System for Mobile (communications)

## H

* **HIPS**: Host IPS (Intrusion Prevention System)
* **HMAC**: Hash-based Message Authentication Code
* **HPP**: HTTP Parameter Pollution
* **HSTS**: HTTP Strict Transport Security

## I

* **(I)IoT**: (Industrial) Internet of Things
* **IAM**: Identity Access Management
* **IAST**: Interactive Application Security Testing
* **ICE**: Intrusion Countermeasures Electronics
* **ICS**: Incident Command System
* **ICS**: Industrial Control System
* **ID**: Information Disclosure
* **IDS**: Intrusion Detection System
* **IPS**: Intrusion Prevention System
* **IPT**: Internal Penetration Testing
* **IPsec**: Internet Protocol Security
* **IR**: Incident Response
* **ISM**: Information Security Manual
* **ISMS**: Information Security Management System

## J

* **JCE**: Java Cryptography Extension

## K

* **KC**: Kill Chain
* **KLCP**: Kali Linux Certified Professional

## L

* **LE**: Let's Encrypt
* **LOIC**: Low Orbit Ion Cannon
* **LPA**: Least Privilege Access
* **LPE**: Local Privilege Escalation

## M

* **MD5**: Message Digest 5 (hash)
* **MDR**: Managed Detection and Response
* **MFA**: Multi-Factor Authentication
* **MISP**: Malware Information Sharing Platform
* **MSCT**: Microsoft Security Compliance Toolkit
* **MSSP**: Managed Security Service Provider
* **MitM**: Man-in-the-Middle

## N

* **NCSC**: CCPLP NCSC Certified Cybersecurity Professional - Lead Practitioner
* **NCSC**: CCPP NCSC Certified Cybersecurity Professional - Practitioner
* **NCSC**: CCPSP NCSC Certified Cybersecurity Professional - Senior Practitioner
* **NCSC**: National Cyber Security Centre
* **NCS**: National Cybersecurity Strategy
* **NGFW**: Next Generation Firewall
* **NIDS**: Network IDS (Intrusion Detection System)
* **NIPS**: Network IPS (Intrusion Prevention System)
* **NSE**: 4 NSE 4 - FortiNET Network Security Professional
* **NSE**: 7 NSE 7 - FortiNET Network Security Architect
* **NSE**: 8 NSE 8 - Fortinet Network Security Expert

## O

* **OPSA**: ISECOM OSSTMM Professional Security Analyst
* **OPSEC**: Operations Security
* **OPSE**: ISECOM OSSTMM Professional Security Expert
* **OPST**: ISECOM OSSTMM Professional Security Tester
* **OSCE**: Offensive Security Certified Expert
* **OSCP**: Offensive Security Certified Professional
* **OSEE**: Offensive Security Exploitation Expert
* **OSEP**: Offensive Security Experienced Penetration Tester
* **OSINT**: Open Source Intelligence
* **OSSTMM**: Open Source Security Testing Methodology Manual
* **OSWP**: Offensive Security Wireless Professional
* **OTP**: One-time Password
* **OT**: Operational Technology
* **OWASP**: Open Web Application Security Project

## P

* **PACES**: Pentester Academy Certified Enterprise Security Specialist
* **PAM**: Privilege Access Management
* **PCAP**: Packet Capture
* **PCNSA**: Palo Alto Networks Certified Network Security Administrator
* **PCNSE**: Palo Alto Networks Certified Network Security Engineer
* **PE**: Privilege Escalation
* **PEBCAK**: Problem Exists Between Chair and Keyboard
* **PEBKAC**: Problem Exists Between Keyboard And Chair
* **PERSEC**: Personal Security (military)
* **PFS**: Perfect Forward Secrecy
* **PGP**: Pretty Good Privacy
* **PII**: Personally Identifiable Information
* **PIM**: Privilege Identity Management
* **PIN**: Personal Identification Number
* **PKI**: Public Key Infrastructure
* **PLC**: Programmable Logic Controllers
* **PLD**: Payload
* **POA\&M**: Plan of Action & Mitigation
* **PS**: Powershell
* **PT**: Penetration Test
* **PTR**: Penetration Test Request
* **Pentest+**: CompTIA Pentest+
* **PoC**: Point of Concept
* **PrivEsc**: Privilege Escalation

## Q

* **QSA**: Quality Security Assessor

## R

* **RAT**: Remote (Administration/Access) Too
* **RBA**: Risk-based Assessment
* **RCA**: Root Cause Analysis
* **RCE**: Remote Code Execution

## S

* **SAST**: Static Application Security Testing
* **SIEM**: Security Information and EVent Management
* **SOC**: Security Operations Centre
* **SPF**: Sender Policy Framework
* **SQLi**: SQL Injection
* **SSCP** - Systems Security Certified Practitioner
* **SSE**: Server-Side Encryption
* **SSH**: Secure Shell
* **STS**: Security Token Service

## T

* **TI**: Threat Intelligence
* **TLS**: Transport Layer Security
* **TOR**: The Onion Router
* **TPM**: Trusted Platform Module

## U

## V

* **VA**: Vulnerability Assessment
* **VAPT**: Vulnerability Assessment and Penetration Test
* **VDP**: Vulnerability Disclosure Program
* **VLOM**: Vulnerability Lifecycle Management
* **VM**: Vulnerability Management
* **VMP**: Vulnerability Management Program
* **VR**: Vulnerability Research
* **VSA**: Vendor Security Assessment

## W

* **WAF**: Web Application Firewall
* **WAP**: Web Application Protection
* **WAPT**: Web Application Penetration Test
* **WCE**: Windows Credentials Editor
* **WIDS**: Wireless Intrusion Detection System
* **WIPS**: Wireless Intrusion Prevention System
* **WPA**: Wi-Fi Protected Access

## X

* **XXE**: XML External Entities
* **XSS**: Cross-Site Scripting

## Y

## Z

* **ZT**: Zero Trust