106 Security terms

Showing 1–60, alphabetical

  1. Oauth

    OAuth is an open standard that allows a user to grant a third-party application limited access to their resources on…

  2. Oauth Attack Surface

    The OAuth attack surface encompasses all points where an OAuth system could be vulnerable to attack. This includes misconfigurations, weak…

  3. Oauth Authorization

    OAuth Authorization is an open standard protocol that enables secure delegated access. It allows a user to grant a third-party…

  4. Oauth Authorization Server Security

    Oauth Authorization Server Security involves safeguarding the server responsible for issuing access tokens in an OAuth flow. This server verifies…

  5. Oauth Client Security

    Oauth Client Security refers to the measures taken to protect applications, known as OAuth clients, that request access to user…

  6. Oauth Consent Management

    Oauth Consent Management is the process of obtaining and managing user authorization for third-party applications to access their data. It…

  7. Oauth Misconfiguration

    OAuth misconfiguration refers to errors in setting up the OAuth protocol, which is used for delegated authorization. These errors can…

  8. Oauth Refresh Token Security

    OAuth refresh token security refers to the measures taken to protect long-lived tokens. These tokens allow applications to obtain new,…

  9. Oauth Scope Abuse

    OAuth Scope Abuse happens when a client application, authorized via OAuth, requests or is granted excessive permissions beyond its legitimate…

  10. Oauth Security

    Oauth Security refers to the practices and controls used to protect the Oauth authorization framework. Oauth allows users to grant…

  11. Oauth Token Introspection

    OAuth Token Introspection is a standard method for a resource server to determine the active state and associated metadata of…

  12. Oauth Token Leakage

    OAuth token leakage happens when an OAuth access token is unintentionally exposed to unauthorized parties. These tokens grant specific permissions…

  13. Oauth Token Rotation

    OAuth token rotation is a security practice where access tokens are regularly invalidated and replaced with new ones. This process…

  14. Oauth Token Security

    Oauth Token Security refers to the measures taken to protect access tokens issued through the OAuth framework. These tokens grant…

  15. Oauth Trust Boundary

    An OAuth trust boundary defines the perimeter where trust is established and maintained between different entities in an OAuth transaction.…

  16. Obfuscated Malware

    Obfuscated malware uses various techniques to conceal its code and functionality, making it difficult for security tools and analysts to…

  17. Obfuscation

    Obfuscation is a cybersecurity technique that intentionally makes code, data, or network traffic difficult to understand or analyze. Its primary…

  18. Object Access Control

    Object Access Control is a security mechanism that regulates how users and processes interact with specific digital resources, known as…

  19. Object Authorization Model

    An Object Authorization Model is a framework that dictates who can perform what actions on specific digital assets or data…

  20. Object Level Authorization

    Object Level Authorization is a security mechanism that grants or denies users specific permissions to individual data objects or resources…

  21. Object Ownership Enforcement

    Object ownership enforcement is a security mechanism that assigns a specific owner to a digital object, such as a file,…

  22. Object Privilege Escalation

    Object privilege escalation is a type of access control abuse where a user or process gains unauthorized access to specific…

  23. Object Security Model

    An Object Security Model is a framework that specifies how access to individual data objects or resources is controlled within…

  24. Object Storage Access Control

    Object Storage Access Control defines and enforces permissions for data stored in object storage systems, such as Amazon S3 or…

  25. Object Storage Attack Surface

    The object storage attack surface includes all points where an attacker might gain unauthorized access to or compromise data stored…

  26. Object Storage Encryption

    Object storage encryption is a security measure that protects data stored in object storage systems by converting it into an…

  27. Object Storage Exposure

    Object storage exposure refers to a security vulnerability where data stored in cloud-based object storage systems, such as Amazon S3…

  28. Object Storage Misconfiguration

    Object storage misconfiguration refers to incorrect security settings applied to cloud-based object storage services. These errors can inadvertently expose data…

  29. Object Storage Security

    Object storage security refers to the measures and practices implemented to protect unstructured data stored in object storage systems, typically…

  30. Object Storage Threat Modeling

    Object storage threat modeling is a structured process to identify potential security threats and vulnerabilities within object storage systems. It…

  31. Object Trust Boundary

    An object trust boundary is a conceptual perimeter that defines the security context and access rules for a specific data…

  32. Observability Access Control

    Observability access control defines and enforces permissions for accessing monitoring data and tools. It ensures that only authorized personnel can…

  33. Observability Data Exposure

    Observability data exposure occurs when operational data, such as logs, metrics, and traces, becomes accessible to unauthorized individuals or systems.…

  34. Observability Pipeline Security

    Observability pipeline security involves safeguarding the entire process of collecting, transporting, and storing monitoring data. This data includes logs, metrics,…

  35. Observability Security

    Observability security combines system monitoring with security practices to gain deep insight into an organization's IT environment. It involves collecting…

  36. Offensive Security

    Offensive Security is a proactive approach to cybersecurity that involves simulating real-world cyberattacks against an organization's systems, networks, and applications.…

  37. One Time Password

    A One Time Password, or OTP, is a unique, automatically generated string of characters used to authenticate a user for…

  38. One Time Password Interception

    One Time Password Interception is a type of cyberattack where an unauthorized third party gains access to a user's one-time…

  39. One Time Password Phishing

    One Time Password Phishing, or OTP phishing, is a social engineering attack. Attackers create fake websites or messages to trick…

  40. One Time Password Replay

    One Time Password Replay is a cyberattack where an unauthorized party intercepts a legitimate one-time password OTP and then reuses…

  41. Online Fraud

    Online fraud refers to any deceptive activity carried out using the internet to unlawfully gain financial benefit, personal data, or…

  42. Open Api Security

    Open API Security refers to the practices and controls implemented to protect Application Programming Interfaces APIs that adhere to the…

  43. Open Redirect Vulnerability

    An open redirect vulnerability occurs when a web application accepts user-controlled input to determine the destination of a redirect. Attackers…

  44. Open Source Attack Surface

    The open source attack surface includes all potential entry points or weaknesses in software components derived from publicly available source…

  45. Open Source Component Analysis

    Open Source Component Analysis OSCA is the process of identifying and evaluating open source software components used in an application.…

  46. Open Source Dependency Risk

    Open source dependency risk involves the potential security vulnerabilities or operational issues that arise from incorporating third-party open source software…

  47. Open Source Exposure

    Open source exposure describes the security risks an organization faces due to its reliance on open source software components. These…

  48. Open Source Governance

    Open source governance refers to the set of policies, processes, and practices an organization implements to manage the use of…

  49. Open Source Intelligence

    Open Source Intelligence OSINT is the practice of collecting and analyzing information from publicly available sources. This includes data found…

  50. Open Source License Risk

    Open source license risk refers to the potential legal and compliance issues that arise from using software governed by open…

  51. Open Source Posture Management

    Open Source Posture Management is the process of continuously monitoring, assessing, and improving the security and compliance of open source…

  52. Open Source Risk Management

    Open source risk management is the process of identifying, assessing, and mitigating potential security vulnerabilities, licensing compliance issues, and operational…

  53. Open Source Threat Intelligence

    Open Source Threat Intelligence refers to cybersecurity information gathered from publicly available sources. This includes data on known vulnerabilities, malware…

  54. Open Source Vulnerability

    An open source vulnerability is a security flaw found within software whose source code is publicly accessible. These weaknesses can…

  55. Operating System Access Control

    Operating System Access Control refers to the security mechanisms within an operating system that regulate user and process access to…

  56. Operating System Hardening

    Operating system hardening is the process of securing an operating system by reducing its attack surface. This involves configuring settings,…

  57. Operating System Patching

    Operating system patching is the process of applying software updates to an operating system. These updates fix bugs, improve performance,…

  58. Operating System Security

    Operating System Security refers to the measures taken to protect an operating system from unauthorized access, misuse, and cyber threats.…

  59. Operational Attack Simulation

    Operational Attack Simulation is a cybersecurity practice that involves emulating real-world cyberattacks against an organization's systems and networks. It goes…

  60. Operational Attack Surface

    The operational attack surface refers to all points within an organization's active systems, applications, and processes that are exposed and…