Glossary of Terms

TermDefinition
CVECommon Vulnerabilities and Exposures — a public catalog of known security flaws.
FirewallA system that monitors and filters incoming/outgoing network traffic.
IDS/IPSIntrusion Detection/Prevention System — detects or blocks malicious traffic.
MFAMulti-Factor Authentication — requires two or more verification methods.
Penetration TestingAuthorized simulated attack to evaluate system security.
SIEMSecurity Information and Event Management — aggregates and analyzes security logs.
VPNVirtual Private Network — encrypts traffic over a public network.
Zero TrustSecurity model that never implicitly trusts any user or device.