We use cookies

We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. You can also customize your preferences or reject non-essential cookies. Learn more about our cookie policy

Iniciar sesión en tu bóveda Registrarse

Lexicón de Ciberseguridad

Con la creciente prevalencia de amenazas y ataques cibernéticos, comprender el intrincado mundo de la ciberseguridad es crucial. Para empoderar a individuos y organizaciones por igual, hemos curado y compilado meticulosamente una gran cantidad de conocimiento en esta única página.

Ya sea que sea un entusiasta de la ciberseguridad, un profesional experimentado o un principiante curioso, estas terminologías sirven como un recurso valioso, ofreciendo definiciones claras y concisas de términos clave, acrónimos y conceptos que abarcan el ámbito en constante evolución de la ciberseguridad. Adéntrese en este repositorio de información, ármese con conocimiento y fortalezca sus defensas digitales contra los desafíos del panorama cibernético moderno. Embarquémonos juntos en este viaje de aprendizaje y aseguremos el futuro.

Access control

Access control is the practice of regulating and managing user permissions and privileges to resources, systems, or data.

Advanced Persistent Threat (APT)

An Advanced Persistent Threat (APT) is a sophisticated and targeted cyber attack carried out by skilled and well-resourced adversaries over an extended period.

AES 256-bit encryption

AES (Advanced Encryption Standard) is a symmetric encryption algorithm widely used to secure sensitive data.

Antivirus

Antivirus software is a security program designed to detect, prevent, and remove malware from computer systems.

Application security

Application security focuses on protecting software applications from security threats and vulnerabilities.

Authentication

Authentication is the process of verifying the identity of a user or device to ensure that they are who they claim to be.

Authorization

Authorization is the process of granting or denying access rights and permissions to authenticated users or entities.

Biometric authentication

Biometric authentication is a security mechanism that uses unique biological or behavioral characteristics to verify identity.

Bot

A bot, short for 'robot,' is a program or script that automates tasks on the internet.

Botnet

A botnet is a network of compromised computers, also known as 'bots' or 'zombies,' under the control of a single attacker or a group.

Brute-force attack

A brute-force attack is a trial-and-error method used by attackers to decode encrypted data or passwords.

Buffer overflow

A buffer overflow is a software vulnerability where an application writes more data into a buffer than it can handle.

Cross-site scripting (XSS)

Cross-site scripting (XSS) is a web application vulnerability where attackers inject malicious scripts into web pages viewed by other users.

Cryptography

Cryptography is the practice of securing communication and data by converting it into a non-readable format using encryption techniques.

Cyber threat intelligence

Cyber threat intelligence refers to information about potential or current cybersecurity threats, including threat actors, their motives, tactics, techniques, and indicators of compromise.

Cybersecurity framework

A cybersecurity framework provides a structured approach and guidelines for organizations to manage and improve their cybersecurity posture.

Cybersecurity hygiene

Cybersecurity hygiene refers to the best practices and habits individuals and organizations should follow to maintain a strong security posture.

Cybersecurity policy

A cybersecurity policy is a set of documented guidelines, rules, and procedures that outline an organization's approach to managing and protecting its information assets.

Cybersecurity risk

Cybersecurity risk refers to the potential for harm or loss resulting from cyber threats or attacks.

Data breach

A data breach refers to the unauthorized access, disclosure, or exposure of sensitive or confidential data.

Data classification

Data classification is the process of categorizing data based on its sensitivity, value, or criticality.

Data Encryption Standard (DES)

Data Encryption Standard (DES) is a symmetric encryption algorithm that was widely used in the past.

Data exfiltration

Data exfiltration is the unauthorized extraction or removal of data from a system or network.

Data Loss Prevention (DLP)

Data loss prevention (DLP) refers to a set of technologies, policies, and practices designed to prevent the unauthorized disclosure or loss of sensitive data.

Data protection

Data protection refers to the implementation of measures and practices to safeguard sensitive or confidential data from unauthorized access, disclosure, alteration, or destruction.

Denial of Service (DoS)

Denial of Service (DoS) is an attack where the attacker overwhelms a system, network, or service with a flood of illegitimate requests or traffic.

Distributed Denial of Service (DDoS)

Distributed Denial of Service (DDoS) is a type of DoS attack where multiple compromised systems simultaneously flood a target system or network.

Encryption

Encryption is the process of converting plain text or data into a coded form (ciphertext) to prevent unauthorized access.

Endpoint protection

Endpoint protection refers to the security measures and tools deployed on individual endpoints, such as laptops, desktops, or mobile devices.

Endpoint security

Endpoint security focuses on protecting individual devices or endpoints, such as laptops, desktops, smartphones, or servers, from cybersecurity threats.

Exploit

An exploit is a piece of code or technique that takes advantage of a vulnerability in a system or application.

Firewall

A firewall is a network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Malware

Malware, short for malicious software, is any software designed to harm, exploit, or gain unauthorized access to computer systems or data.

Multi-factor authentication (MFA)

Multi-factor authentication (MFA) is a security mechanism that requires users to provide multiple forms of identification to verify their identity.

Online vault

Un online vault es un repositorio seguro accesible por Internet para contraseñas, secretos y archivos sensibles, normalmente cifrado de extremo a extremo y sincronizado o compartido en equipo.

Phishing

Phishing is a type of social engineering attack where attackers impersonate legitimate entities to trick users into revealing sensitive information.

Ransomware

Ransomware is a type of malware that encrypts a victim's data and demands payment (ransom) in exchange for the decryption key.

Social engineering

Social engineering is the practice of manipulating individuals to gain unauthorized access to sensitive information or systems.

SQL injection

SQL injection is a code injection technique used by attackers to exploit vulnerabilities in web applications that use SQL databases.

SSL certificate

An SSL certificate is a digital certificate that authenticates the identity of a website or server and enables secure communication over HTTPS.

Transport Layer Security (TLS)

Transport Layer Security (TLS) is a cryptographic protocol that succeeds SSL and provides secure communication between clients and servers.

Two-factor authentication (2FA)

Two-factor authentication (2FA) is a security mechanism that requires users to provide two different types of identification factors to verify their identity.

Virtual Private Network (VPN)

A Virtual Private Network (VPN) is a secure network connection that allows users to access and transmit data over the internet while maintaining privacy and security.

Virus

A virus is a type of malware that self-replicates by infecting other files or programs and spreads to other systems.

Vulnerability

A vulnerability is a weakness or flaw in a system, application, or network that could be exploited by attackers to compromise its security.

Web application firewall (WAF)

A web application firewall (WAF) is a security appliance or software that filters and monitors HTTP and web application traffic.

Web security

Web security encompasses measures and practices implemented to protect websites and web applications from cyber threats and vulnerabilities.

What Is a Password Vault?

A password vault is a secure, encrypted digital vault for storing passwords, secrets, and sensitive files. It provides secure password storage and enables team password sharing with enterprise-grade security.

Worm

A worm is a self-replicating malware program that can spread across computer networks without requiring user interaction.

Zero-day vulnerability

A zero-day vulnerability refers to a software vulnerability or weakness that is unknown to the vendor or the public.

Zero-knowledge architecture

Zero-knowledge architecture refers to a security model where a system or service can validate the authenticity of a user's identity or the integrity of data without actually knowing the user's credentials or the content being processed.