The AI, Cloud & Cybersecurity
Encyclopedia
A reference for AI, cloud and cybersecurity terminology — from foundational concepts to AI-driven threats and defenses.
Cybersecurity
Policy-Based Access Control
Policy-based access control uses central, if-then rules to decide who can access what — based on identity, role, device, location,…
Privileged Access Management
Privileged access management is the set of tools, rules, and processes that control who can access the most critical systems,…
Ransomware
Ransomware locks or steals an organization’s data and demands payment to release it — and modern attacks defeat backups alone.…
Ransomware as a Service
Ransomware as a service (RaaS) is a cybercrime business model where developers lease ransomware tools to affiliates who launch attacks…
Relationship-Based Access Control
ReBAC grants access based on the links between users and resources — like owner, member, or team mate. Google built…
Reverse Proxy
A reverse proxy sits in front of web servers and forwards client requests to the right backend. This guide covers…
Risk Scoring Engines
Risk scoring engines assign a live trust score to every access request based on real-time signals — like user behavior,…
Risk-Based Access Control
Risk-based access control scores every access request in real time — adapting its response based on who is asking, from…
Role-Based Access Control
94.7% of firms have used RBAC — making it the most adopted access model in the world. This guide covers…
Rule-Based Access Control
Rule-based access control grants or denies access based on conditions — like time, IP, device, and location — not on…
SASE (Secure Access Service Edge)
SASE (secure access service edge) is a cloud-based architecture that merges networking and security into a single platform. This guide…
SD-WAN
SD-WAN (software-defined wide area network) uses software-defined networking to route traffic across MPLS, broadband, LTE, and 5G based on real-time…
Secure Web Gateway
A secure web gateway (SWG) sits between users and the internet, filtering web traffic in real time to block malware,…
Security Service Edge
Security service edge (SSE) is the cloud-delivered security half of the SASE framework, combining SWG, CASB, ZTNA, and FWaaS into…
SIEM (Security Information and Event Management)
SIEM (security information and event management) collects, correlates, and analyzes security data from across the IT environment to detect threats…
Single Sign-On
SSO lets users access many apps with one login — cutting password fatigue and boosting security. 70% of firms cite…
SOAR
SOAR (Security Orchestration, Automation, and Response) connects security tools, automates repetitive tasks, and standardizes incident response through playbooks. This guide…
SOC (Security Operations Center)
A security operations center (SOC) is a team of people, tools, and processes that monitors a firm’s digital assets around…
Social Engineering
Social engineering is a cyberattack method that manipulates people into revealing sensitive information or granting unauthorized access by exploiting human…
Spear Phishing
Spear phishing is a social engineering attack that targets a specific individual with a carefully crafted malicious email. This article…
Spyware
Spyware is malicious software that hides on your device and steals data without your knowledge. This article covers the six…
Supply Chain Attack
A supply chain attack targets trusted third-party vendors, open source libraries, or service providers to inject malicious code into software…
Threat Hunting
Threat hunting is the proactive, human-led search for cyber threats that have dodged automated defenses. This guide covers the four-stage…
Threat Intelligence
Threat intelligence turns raw threat data into actionable insight that helps security teams detect, prevent, and respond to cybersecurity threats…
URL Filtering
URL filtering controls which websites your users can reach by blocking or allowing specific URLs based on policy rules and…
Virtual Private Network (VPN)
A virtual private network (VPN) creates an encrypted connection between your device and a remote server, keeping sensitive data hidden…
Vulnerability Assessment
Vulnerability assessment is a structured process for finding, ranking, and fixing security flaws across networks, servers, applications, and databases. This…
Web Application Firewall
A web application firewall filters and monitors HTTP traffic to protect web apps from attacks like SQL injection, cross-site scripting,…
XDR (Extended Detection and Response)
XDR (extended detection and response) unifies threat detection across endpoints, networks, cloud, email, and identity into a single platform. This…
Zero Trust
Zero trust is a security strategy that eliminates implicit trust from every network layer. This guide covers the core principles…
Zero Trust Architecture
Zero trust architecture is a security framework built on one core rule: never trust, always verify. Instead of guarding a…
Zero-Day Exploit
A zero-day exploit targets unknown software flaws before any fix exists, making it one of the most dangerous tools in…
ZTNA
ZTNA (zero trust network access) replaces VPNs by connecting users directly to apps, not networks. This guide covers how ZTNA…
No terms match. Try another word or category.