Web Security Terms Glossary

If you found yourself confused by some of the terms you've seen, no worries! We know learning all the ins and outs of Websecurity vocabulary and jargon can feel like learning another language. To help you get a handle on all the new terms we're throwing at you, we've compiled a glossary with definitions and helpful links. You might want to bookmark this page for future reference!

• 2FA (Two-Factor Authentication)
• API Security
• Application Level Gateway
• Biometric Security
• Black Hat
• Botnet
• Brute Force Attack
• CAPTCHA
• Certificate Authority (CA)
• Clickjacking
• Cloud Computing Security
• Content Disarm & Reconstruction (CDR)
• Content Security Policy (CSP)
• CORS (Cross-Origin Resource Sharing)
• Credential Stuffing
• CSRF (Cross-Site Request Forgery)
• Cyber Awareness
• Data Breach
• Data Exfiltration
• DDOS or DOS
• Deep Packet Inspection
• Digital Certificate
• Directory Traversal
• DNS Spoofing
• Encryption
• Endpoint Detection and Response (EDR)
• Firewall
• FortiGate
• Fuzzing
• Geo-blocking
• Honeypot
• Identity and Access Management (IAM)
• Incident Response
• Input Validation
• Intrusion Detection System (IDS)
• Intrusion Prevention System (IPS)
• LDAP Injection
• Logic Bomb
• Malware
• Man-in-the-Middle Attack
• Multi-Factor Authentication (MFA)
• Network Firewall
• Network Security
• Network Segmentation
• NIST CSF
• OAuth
• OpenID Connect
• OPNsense
• Password Spraying
• Path Traversal
• pfSense
• Phishing
• Privilege Escalation
• Public Key Infrastructure (PKI)
• Quantum Cryptography
• Ransomware
• Rate Limiting
• Rootkit
• SAML (Security Assertion Markup Language)
• Sandboxing
• Secure Coding Practices
• Secure Cookie
• Secure Shell (SSH)
• Security Headers
• Security Information and Event Management (SIEM)
• Security Misconfiguration
• Security Token
• Session Hijacking
• Side-Channel Attack
• Spoofing
• SQL Injection
• SSL (Secure Sockets Layer) / TLS (Transport Layer Security)
• Threat Modeling
• Tokenization
• Typosquatting
• Unified Threat Management (UTM)
• Vishing (Voice Phishing)
• VPN (Virtual Private Network)
• Vulnerability Scanning
• WAF (Web Application Firewall)
• Web Application Proxy
• Web Shell
• White Hat
• Whitelisting
• Wireless Security
• XSS (Cross-Site Scripting)
• Zero Knowledge Proof
• Zero trust
• Zero-Day Exploit