#separator:tab
#html:false
#tags column:4
Cybersecurity	Protecting computers, networks and data from attack		tech-cybersecurity-basics
CIA triad	Confidentiality, Integrity, Availability		tech-cybersecurity-basics
Confidentiality	Only authorized people can see the data		tech-cybersecurity-basics
Integrity	Data is accurate and has not been tampered with		tech-cybersecurity-basics
Availability	Systems and data are usable when needed		tech-cybersecurity-basics
Threat	Something that could cause harm		tech-cybersecurity-basics
Vulnerability	A weakness that can be exploited		tech-cybersecurity-basics
Exploit	A way to take advantage of a vulnerability		tech-cybersecurity-basics
Risk	The chance a threat uses a vulnerability and causes harm		tech-cybersecurity-basics
Malware	Harmful software		tech-cybersecurity-basics
Virus	Malware that attaches to files and spreads		tech-cybersecurity-basics
Worm	Malware that spreads by itself over networks		tech-cybersecurity-basics
Trojan horse	Malware disguised as something useful		tech-cybersecurity-basics
Ransomware	Malware that locks files and demands payment		tech-cybersecurity-basics
Spyware	Software that secretly watches what you do		tech-cybersecurity-basics
Adware	Software that shows unwanted ads		tech-cybersecurity-basics
Keylogger	Malware that records keystrokes		tech-cybersecurity-basics
Botnet	A network of infected computers controlled by an attacker		tech-cybersecurity-basics
Phishing	Fake messages that trick you into giving information		tech-cybersecurity-basics
Spear phishing	Phishing aimed at a specific person		tech-cybersecurity-basics
Smishing	Phishing by text message		tech-cybersecurity-basics
Social engineering	Tricking people rather than breaking technology		tech-cybersecurity-basics
Pretexting	Inventing a story to gain trust		tech-cybersecurity-basics
Brute force attack	Trying many passwords until one works		tech-cybersecurity-basics
Dictionary attack	Trying common words as passwords		tech-cybersecurity-basics
Credential stuffing	Reusing leaked passwords on other sites		tech-cybersecurity-basics
DDoS attack	Flooding a site with traffic to knock it offline		tech-cybersecurity-basics
Man-in-the-middle attack	An attacker secretly intercepts communication		tech-cybersecurity-basics
SQL injection	Sneaking harmful database commands into input		tech-cybersecurity-basics
Cross-site scripting (XSS)	Injecting harmful scripts into web pages		tech-cybersecurity-basics
Zero-day	A vulnerability unknown to the maker, with no fix yet		tech-cybersecurity-basics
Patch	An update that fixes a vulnerability		tech-cybersecurity-basics
Software updates	Install them promptly to close security holes		tech-cybersecurity-basics
Strong password	Long and unique, not reused		tech-cybersecurity-basics
Passphrase	A long password made of several words		tech-cybersecurity-basics
Password manager	A tool that stores unique passwords safely		tech-cybersecurity-basics
Multi-factor authentication	Requiring two or more proofs of identity		tech-cybersecurity-basics
Authentication	Proving who you are		tech-cybersecurity-basics
Authorization	What you're allowed to do after logging in		tech-cybersecurity-basics
Biometrics	Using fingerprints or faces to identify you		tech-cybersecurity-basics
Encryption	Scrambling data so only holders of a key can read it		tech-cybersecurity-basics
Decryption	Unscrambling encrypted data		tech-cybersecurity-basics
Symmetric encryption	Uses the same key to lock and unlock		tech-cybersecurity-basics
Asymmetric encryption	Uses a public key to lock and a private key to unlock		tech-cybersecurity-basics
Public key	A key you can share		tech-cybersecurity-basics
Private key	A key you keep secret		tech-cybersecurity-basics
Hash	A fixed-length fingerprint of data, hard to reverse		tech-cybersecurity-basics
Salt	Random data added to a password before hashing		tech-cybersecurity-basics
Digital signature	Proof that a message came from a certain sender		tech-cybersecurity-basics
Certificate	A digital ID that proves a website is who it claims to be		tech-cybersecurity-basics
HTTPS	Secure web connections that use encryption		tech-cybersecurity-basics
VPN	Creates an encrypted tunnel for your traffic		tech-cybersecurity-basics
Firewall	Blocks unwanted network traffic		tech-cybersecurity-basics
Antivirus	Software that detects malware		tech-cybersecurity-basics
Intrusion detection system	Monitors a network for suspicious activity		tech-cybersecurity-basics
Sandbox	A safe isolated space to run untrusted code		tech-cybersecurity-basics
Backup	A copy of data kept separately		tech-cybersecurity-basics
3-2-1 backup rule	3 copies, 2 types of media, 1 offsite		tech-cybersecurity-basics
Least privilege	Giving users only the access they need		tech-cybersecurity-basics
Defense in depth	Using many layers of protection		tech-cybersecurity-basics
Penetration testing	Authorized hacking to find weaknesses		tech-cybersecurity-basics
White hat hacker	An ethical hacker who helps improve security		tech-cybersecurity-basics
Black hat hacker	A criminal hacker		tech-cybersecurity-basics
Gray hat hacker	A hacker between ethical and criminal		tech-cybersecurity-basics
Bug bounty	A reward for responsibly reporting security flaws		tech-cybersecurity-basics
Data breach	When private data is exposed		tech-cybersecurity-basics
Identity theft	Using someone's personal information without permission		tech-cybersecurity-basics
Public Wi-Fi risk	Others may snoop; avoid sensitive logins		tech-cybersecurity-basics
Suspicious email clues	Urgent threats, odd sender, bad links, requests for passwords		tech-cybersecurity-basics
Hover before clicking	Check where a link really goes		tech-cybersecurity-basics
Never share	Passwords or verification codes with anyone		tech-cybersecurity-basics
Incident response	The plan for handling a security event		tech-cybersecurity-basics
Cipher	A method of encrypting text		tech-cybersecurity-basics
Caesar cipher	Shifts each letter by a fixed number		tech-cybersecurity-basics
Enigma	A cipher machine used by Germany in World War II		tech-cybersecurity-basics
Kerckhoffs's principle	A system should be secure even if everything but the key is public		tech-cybersecurity-basics