Managed infrastructure and security Glossary

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

A

Alert Fatigue Alert Fatigue

Anycast Anycast

API Security API Security

Application Security Platform Application Security Platform

Attack Surface Attack Surface

Attack Volume Attack Volume

B

Bandwidth Monitoring Bandwidth Monitoring

Bandwidth vs Throughput Bandwidth vs Throughput

Bastion Host Server Bastion Host Server

BGP (Border Gateway Protocol) BGP (Border Gateway Protocol)

Bulletproof Hosting Bulletproof Hosting

C

C2 Server (Command and Control Server) C2 Server (Command and Control Server)

Cache Hit Rate Cache Hit Rate

Cache Warming Cache Warming

Case Management Case Management

CDN as a Service CDN as a Service

CDN Failover CDN Failover

CDN Performance Metrics CDN Performance Metrics

CDN Security CDN Security

Cloud Security Posture Management (CSPM) Cloud Security Posture Management (CSPM)

Compliance Monitoring Compliance Monitoring

Control Framework Mapping Control Framework Mapping

Coverage Score in SOC Coverage Score in SOC

Cryptography Cryptography

D

Data Loss Prevention (DLP) Data Loss Prevention (DLP)

DDoS Mitigation DDoS Mitigation

DNS Monitoring DNS Monitoring

Dwell Time Dwell Time

E

Edge Node Edge Node

EDR (Endpoint Detection and Response) EDR (Endpoint Detection and Response)

Endpoint Hardening Endpoint Hardening

Escalation Matrix in SOC Escalation Matrix in SOC

Event Normalization Event Normalization

Extended Detection and Response (XDR Security) Extended Detection and Response (XDR Security)

F

False Discovery Rate (FDR) and Precision in Detection False Discovery Rate (FDR) and Precision in Detection

False Negative False Negative

False Positive False Positive

Forensic Analysis Forensic Analysis

G

GDPR Security Monitoring GDPR Security Monitoring

Grafana Grafana

H

Healthcare Data Compliance (HIPAA) Healthcare Data Compliance (HIPAA)

HIPAA Monitoring HIPAA Monitoring

I

Identity and Access Management (IAM) Identity and Access Management (IAM)

Identity Threat Detection and Response (ITDR) Identity Threat Detection and Response (ITDR)

Incident Response Incident Response

Incident Triage Incident Triage

IOA (Indicator of Attack) IOA (Indicator of Attack)

IOC (Indicator of Compromise) IOC (Indicator of Compromise)

L

L1, L2, L3 Analyst Roles L1, L2, L3 Analyst Roles

Latency Monitoring Latency Monitoring

Log Correlation Log Correlation

M

MDR (Managed Detection and Response) MDR (Managed Detection and Response)

Mean Time to Detect (MTTD) Mean Time to Detect (MTTD)

Mean Time to Respond (MTTR) Mean Time to Respond (MTTR)

MITRE ATT&CK Framework MITRE ATT&CK Framework

MTTR in Network Operations MTTR in Network Operations

Multi-CDN Strategy Multi-CDN Strategy

Multi-tenant Architecture Multi-tenant Architecture

N

NetFlow NetFlow

Network Detection and Response (NDR) Network Detection and Response (NDR)

Network Incident Escalation Network Incident Escalation

Network Performance Management Network Performance Management

Network Segmentation Network Segmentation

Network Topology Network Topology

Network Traffic Analysis (NTA) Network Traffic Analysis (NTA)

NIS2 Monitoring NIS2 Monitoring

NOC (Network Operations Center) NOC (Network Operations Center)

NOC vs SOC NOC vs SOC

O

On-Call NOC Operations On-Call NOC Operations

OOM Kill (Out-of-Memory Kill) OOM Kill (Out-of-Memory Kill)

Origin Pull vs Origin Push Origin Pull vs Origin Push

Origin Server Origin Server

P

Packet Loss Packet Loss

PCI DSS Monitoring PCI DSS Monitoring

Peering Peering

Phishing Detection Phishing Detection

Playbooks for SOC Playbooks for SOC

Privileged Access Management (PAM) Privileged Access Management (PAM)

Proactive Monitoring Proactive Monitoring

ProxyJump (SSH ProxyJump) ProxyJump (SSH ProxyJump)

Purge vs Invalidation (Cache Control) Purge vs Invalidation (Cache Control)

R

Ransomware Detection and Response Ransomware Detection and Response

Risk Assessment Risk Assessment

Risk Score Risk Score

Root Cause Analysis Root Cause Analysis

Runbooks for SOC Runbooks for SOC

S

Security Analytics in SOC Security Analytics in SOC

Security Hardening Security Hardening

Security Incident Management Workflow Security Incident Management Workflow

SIEM (Security Information and Event Management) SIEM (Security Information and Event Management)

SIEM Use Cases (Correlation Rules and Alert Triage) SIEM Use Cases (Correlation Rules and Alert Triage)

SOAR (Security Orchestration, Automation, and Response) SOAR (Security Orchestration, Automation, and Response)

SOAR Platforms SOAR Platforms

SOC (Security Operations Center) SOC (Security Operations Center)

SSL/TLS Termination at Edge SSL/TLS Termination at Edge

systemd Override systemd Override

T

Threat Hunting Threat Hunting

Threat Intelligence Threat Intelligence

Threat Intelligence Life Cycle Threat Intelligence Life Cycle

Traffic Engineering Traffic Engineering

TTL (CDN Time to Live) TTL (CDN Time to Live)

U

UFW (Uncomplicated Firewall) Ubuntu firewall UFW (Uncomplicated Firewall) Ubuntu firewall

Uptime SLA Uptime SLA

User and Entity Behavior Analytics (UEBA) User and Entity Behavior Analytics (UEBA)

V

VPN (Virtual Private Network) Infrastructure VPN (Virtual Private Network) Infrastructure

VPN Telemetry VPN Telemetry

Vulnerability Management Vulnerability Management

W

Web Application Firewall (WAF) Web Application Firewall (WAF)

Z

Zero Trust Zero Trust