Glossário: termo
665 verbetes do tipo termo, em ordem alfabética.
- 307 Temporary Security Conference (307c)
- 5G
- a hacker scene (regional scenes)
- Aaron Swartz
- abstraction
- accounting
- Active Directory
- administrative distance
- Adrian Lamo
- AgileAgile software development (the 2001 Manifesto and its family)
- air gap
- Albert Gonzalez
- Alpine Linux
- amateur radio
- Amplification and reflection attacks
- analog vs digital
- Anchises Moraes
- Android (as a Linux descendant)
- anonymization
- Anonymous
- anycast
- Apache HTTP Server (httpd)
- APIApplication Programming Interface
- APIsec UniversityAPIsec University (free API security training)
- App Connector
- App profile (ZCC)
- Application segment
- archive formats (zip, tar, gz, 7z, rar, iso, cab)
- ARP poisoning
- ARPANET
- assertion
- asset
- asymmetric routing
- attack surface
- attack vector
- attenuation
- attestation
- audit
- audit trail
- authentication
- authentication adapter
- Authentication Policy Contract
- authentication policy tree
- authorization
- autoscaling
- availability zone
- backhaul
- backup
- Banking trojan
- Base64
- bastion host
- BCP 38 (source address validation)
- BGP hijack
- biometric data
- bisection
- Black HatBlack Hat Briefings and Trainings
- blameless postmortem
- block cipher
- block storage
- Blockchain
- blue team
- botnet
- bridge
- broadcast
- broadcast storm
- browser fingerprinting
- Bruce Schneier
- brute force
- BSSIDBasic Service Set Identifier
- buffer overflow
- bug bounty
- bus topology
- Byzantine fault toleranceBFT
- C
- CAA record
- Cable categories (Cat 5e-8)Twisted-pair cable categories per ANSI/TIA-568
- Cable landing station
- Cable repair ship
- cache poisoning
- cache-control
- callsign
- canary
- canary token
- capacity
- captive portal
- Capture the Flag (CTF)
- Carlos Afonso and Alternex
- Carrier
- Carterfone
- CERT.br and the CGI.br system
- certificate
- Certificate authority (CA)
- certificate pinning
- cgroups (control groups)
- chain analysis
- chain of custody
- change management
- change management (ITSM)
- channel width
- Chaos Communication Congress (CCC)
- checksum
- CIA triadConfidentiality, Integrity, Availability
- cipher suite
- circuit breaker
- circuit switching
- Cisco certifications (CCNA / CCNP / CCIE)The Cisco certification ladder
- Cisco LiveCisco Live - the vendor mega-event that began as Networkers
- Citizens Band (CB)
- client-server
- Cliff Stoll
- cloud IAMIdentity and Access Management
- Cloud Security AllianceCloud Security Alliance (CSA)
- cloud VPN
- Co-channel interference (and airtime)
- collision domain
- command and controlC2
- compiler
- compliance
- Computer Inquiry
- Concentration risk (internet infrastructure)
- conditional access
- confused deputy
- congestion control
- consensus
- consent (privacy)
- container
- containment
- control framework
- control plane
- cookie banner
- coordinated disclosure
- Copyleft
- Correlated failure
- CORS preflight
- Cortex
- credential stuffing
- Cristine Hoepers
- cross-border data transfer
- Cross-device authentication (CDA)
- Crossover cableCrossover cable (MDI/MDI-X)
- Cult of the Dead Cow (cDc)
- Cyber EssentialsUK Cyber Essentials (NCSC scheme)
- daemon
- dark fiber
- dark web
- darknet
- data at rest
- data breach notification
- data broker
- Data center tiersUptime Institute data center tiers (I-IV)
- Data centre operator
- data classification
- data controller
- data in transit
- data minimization
- Data PBX
- data portability
- Data Privacy FrameworkEU-U.S. / Swiss-U.S. Data Privacy Framework (DPF)
- data processing agreement
- data processor
- data residency
- data retention
- data store
- dead drop
- debugging
- dedicated interconnect
- deep web
- DEF CON Goons
- default route
- defense in depth
- DEFLATE, gzip and zlib
- demarcation point
- Demi Getschko
- deprovisioning
- Detection engineering
- device driver
- DevSecOps
- DHCP option 82
- DHCP snooping
- differential privacy
- digital signature
- Distributor
- DNS filtering
- Do Not Track
- drift detection
- drop cable
- dual stack
- duplex
- duplex mismatch
- DVD Jon (Jon Lech Johansen)
- Dwell time
- EAP-TLS
- edge computing
- Edward Snowden
- egress cost
- egress fee
- egress filtering
- elastic IP
- Emacs
- Embedded system
- Emmanuel Goldstein (Eric Corley)
- encoding
- end-to-end encryptionend-to-end encryption (E2EE)
- entropy
- envelope encryption
- ephemeral key
- escalation
- escalation (operational)
- ETag
- Ethernet
- event log
- exfiltration
- exit node
- exit scam
- Expect
- exploit
- F5 DevCentralF5 DevCentral community
- Fabio Assolini
- failover
- fault tolerance
- federation
- Federico Kirschbaum
- file inclusionLFI and RFI
- Filipe Balestra
- firewall
- Firmware
- first-call resolution
- five-tuple
- flow logs
- forensics
- Fortinet CommunityFortinet Community (official forums)
- Fórum Brasileiro de CSIRTs
- forward proxy
- forward secrecyPerfect Forward Secrecy (PFS)
- Forwarding profile
- fragmentation
- Frame RelayFrame Relay (packet-switched WAN)
- Francisco Amato
- Free software (software livre)
- full-disk encryption
- Furukawa (Lightera)Furukawa Electric LatAm - Brazil's structured-cabling standard-bearer (cabling brand now Lightera)
- fusion splice
- fuzzing
- Fyodor (Gordon Lyon) and Nmap
- Gary McKinnon
- gateway
- generative AI
- George Hotz (geohot)
- Global Privacy Control
- golden image
- graceful degradation
- GraphQL
- GTS / GTERGTS and GTER - NIC.br's network security and network engineering working groups
- Hacktivism
- handover
- handshake
- hardware implant
- hash collision
- hash function
- Have I Been PwnedHave I Been Pwned (HIBP)
- HD Moore
- health check
- honeypot
- HOPE (Hackers On Planet Earth)
- host-to-host
- host-to-multihost
- hosts file
- Hot / cold aisleHot-aisle / cold-aisle data-center layout and containment
- hotfix
- HTTP QUERY method
- HTTP/2
- HTTP/3
- hub
- hybrid topology
- Hyperlink
- hypervisor
- idempotence
- idempotency key
- idempotent
- identity provider
- IDSIntrusion Detection System
- Immutable backup (and the 3-2-1 rule)
- immutable infrastructure
- incident
- Infovia Brasília
- infrastructure as codeinfrastructure as code (IaC)
- integer overflow
- inter-frame gap
- intermittent fault
- internet exchangeIX
- internet gateway
- Internet shutdown
- IPInternet Protocol
- IP transit
- ISC2ISC2 (formerly (ISC)², the International Information System Security Certification Consortium)
- ISM bandindustrial, scientific and medical band
- IT asset management
- Jaime Andrés Restrepo (DragonJAR)
- Jeff Moss (Dark Tangent)
- jitter
- John Markoff
- Joybubbles (Joe Engressia)
- Jude Milhon (St. Jude)
- Julian Assange (Mendax)
- jumbo frames
- just-in-time access
- k-anonymity
- KanbanKanban (Toyota's pull system, adapted to knowledge work)
- KDC
- Kerberos
- kernel
- Key escrow
- key exchange
- key management
- key rotation
- keytab
- knowledge base
- KubernetesKubernetes (K8s)
- L0pht Heavy Industries
- landing zone
- last mile
- latency
- lateral movement
- LatinowareLatinoware - the Latin American free software congress at Itaipu
- leaf-spine
- least privilegeprinciple of least privilege (PoLP)
- Legion of Doom (LOD)
- legitimate interest
- Lei Carolina Dieckmann (Law 12.737/2012)
- LEO constellation
- Leonardo Pigñer
- Liane Tarouco
- line rate
- link-local address
- Linus Torvalds
- Linux namespaces
- Load balancer
- load balancing
- logging
- longest prefix match
- loopback interface
- LoRa
- LTELong Term Evolution
- LulzSec
- MAC addressMedia Access Control address
- MAC flapping
- maintenance window
- malware
- man-in-the-middle
- Marco Civil da Internet (Law 12.965/2014)
- Marcus Hutchins (MalwareTech)
- martian packet
- Masters of Deception (MOD)
- Max Butler (Iceman)
- Media converterMedia converter (copper to fiber and between fiber types)
- memory leak
- memory safety
- Mente BináriaMente Binária (nonprofit teaching and research institution)
- Merkle tree
- mesh topology
- mesh Wi-Fi
- metadata
- metrics
- Michal Zalewski (lcamtuf)
- Microcode
- microsegmentation
- microservice
- Microtunnel
- Mind the SecMind the Sec
- MITREThe MITRE Corporation
- MITRE ATT&CK
- mixer (tumbler)
- Morse code / CW
- MTAMail Transfer Agent
- Mudge (Peiter Zatko)
- multi-tenancy
- multicast
- multihost-to-host
- Multimode fiberMultimode optical fiber (OM1-OM5)
- nano
- NAT gateway
- NetFlow
- network topology
- NewEdge
- NICE Framework Work Role Categories
- node split
- noncenumber used once
- null pointer dereference
- Nullbyte Security Conference
- number porting
- NX bit / DEPno-execute bit / data execution prevention
- OAuthOAuth 2.0
- object storage
- observability
- observer effect
- OC levels (OC-3 to OC-768)SONET Optical Carrier levels and their SDH STM equivalents
- onion routing
- Open GraphOpen Graph protocol
- open relay
- Open source
- OpenToken
- OpenVPN
- optical power budget
- optical splitter
- overlay network
- oversubscription
- Package manager
- packet
- packet filter
- packet loss
- packet switching
- Pager
- PageRank
- PAMPrivileged Access Management
- Passkey
- Password Credential Validator
- password manager
- passwordless
- PATPort Address Translation
- patch
- patch management
- patch panel
- Paxos
- payload
- peer-to-peer
- peering
- penetration testpenetration test
- pepper
- persistence
- PERÚHACK (and LimaHack)
- Phiber Optik (Mark Abene)
- Phil Zimmermann
- phishing
- Plenum-rated cablePlenum and riser cable ratings (CMP/CMR)
- pod
- PoE injectorPower over Ethernet injector (midspan)
- pole attachment
- Policy sprawl (and the exception register)
- PONPassive Optical Network
- port
- port mirroring (SPAN)
- port security
- Port-block allocation (deterministic NAT)
- post-incident review
- post-quantum cryptographypost-quantum cryptography (PQC)
- postmortem
- Posture profile
- Prisma
- privacy by design
- privacy-enhancing technologies
- private DNS zone
- private endpoint / PrivateLink
- Private Service Edge
- privilege escalation
- problem management
- profiling
- promiscuous mode
- provisioning
- proxy
- pseudonymization
- Public Service Edge
- public-key cryptographyasymmetric cryptography
- purple team
- purpose limitation
- quorum
- race condition
- Rack (19-inch) and rack unit19-inch equipment rack and the rack unit (U)
- radio propagation
- radio spectrum
- Raft
- RAIDRedundant Array of Independent Disks
- rainbow table
- Ransomware
- rate limiting
- RCERemote Code Execution
- RDAPRegistration Data Access Protocol
- red team
- RedditReddit (community platform; the vendor and networking subreddits)
- regexregular expression
- region
- region (cloud)
- regression
- regression testing
- remote desktop
- repeater
- replay attack
- replication
- Reseller
- responsible disclosure
- retention
- reverse proxy
- RFCRequest for Comments
- RFC 1918 addresses
- Richard Stallman (rms)
- right to erasure
- ring topology
- risk
- Rodrigo Montoro (Sp0oKeR)
- Rodrigo Rubira Branco (BSDaemon)
- rollback
- root causeroot cause analysis (RCA)
- Route leak
- route table (cloud)
- router
- RSA ConferenceRSA Conference - from cryptographers' gathering to the industry's biggest trade show
- RTO and RPORecovery Time and Recovery Point Objectives
- runbook
- safe method
- safe mode
- salt
- same-origin policy
- Sandro Süffert
- SANS InstituteSANS Institute (originally SysAdmin, Audit, Network, and Security)
- SCIM
- secrets management
- secure boot
- Security BSides Perú
- Security BSides São Paulo (BSidesSP)
- security group
- security questions
- Segment group
- semantic versioning
- serverless
- service account
- service control policy
- service desk
- service mesh
- service provider
- Services company
- session
- Session persistence (stickiness)
- severity
- severity levels (P1-P4)
- sharding
- Shared address space (100.64.0.0/10)
- shared responsibility
- shared responsibility model
- shared VPC
- shell
- shellcode
- Shielded twisted pairShielded twisted pair (F/UTP, S/FTP and related constructions)
- sidecar
- SIMSubscriber Identity Module
- single point of failure
- Single-mode fiberSingle-mode optical fiber (OS1/OS2)
- Slow start and connection draining
- smishing
- smurf attack
- social engineering
- socket
- Solar Designer (Alexander Peslyak)
- Source-port logging
- Space Rogue (Cris Thomas)
- spam filter
- Spanning Tree Protocol
- special category data
- spectrum
- split horizon
- split tunnelling
- SPNEGO
- spot instance
- SQL injectionSQL injection (SQLi)
- SSIDService Set Identifier
- SSL stripping
- SSL VPN
- SSL/TLS inspection
- stack canary
- stack overflow
- standard contractual clauses
- Standards body
- star topology
- stateful firewall
- stateful inspection
- static route
- Statistical multiplexer
- storm control
- Strata
- stream cipher
- Submarine cable
- subnet
- supernet
- supply-chain attack
- support tiers (L1/L2/L3)
- Surrogate IP
- Susan Headley (Susy Thunder)
- switch
- SYN flood
- syslog
- systemd
- T568A / T568BT568A and T568B termination pinouts (ANSI/TIA-568)
- tabletop exercise
- TACACS+
- Tadao Takahashi
- Tcl
- TCPTransmission Control Protocol
- TCP three-way handshake
- telemetry
- Telemetry selection (log sources)
- test automation
- the Brazilian BSides circuit
- the CAP theorem
- the cyber kill chain
- the Cypherpunks
- the Linux kernel
- The Mentor (Loyd Blankenship)
- the r-commands (rsh, rlogin, rcp, rexec)
- the Two Generals problem
- the Year 2038 problem
- threat model
- Throttling (as censorship)
- throughput
- ticket
- Token Ring
- tokenization
- TorThe Onion Router
- Tor relay
- TPMTrusted Platform Module
- TR-069
- tracing
- tracking pixel
- traffic generation
- Training organisation
- transaction
- Transceiver (pluggable optics)Pluggable transceiver form factors (GBIC to SFP, QSFP, OSFP)
- transformer
- transit gateway
- tree topology
- triage
- trunk
- trunk port
- Trusted network
- Tsutomu Shimomura
- UDPUser Datagram Protocol
- unicast
- Unix
- use-after-free
- Usenet
- user agent
- Vendor
- vi / Vim
- virtual appliance
- virtual machineVM
- VLC (VideoLAN Client)
- VPC peering
- vulnerability
- Wau Holland
- webhook
- WebSocket
- WHOIS
- Wi-FiWi-Fi (IEEE 802.11 wireless LAN)
- Wi-Fi generations (802.11 a/b/g/n/ac/ax/be)
- Wi-Fi site survey
- Willian Caprino
- WireGuard
- Wiring closetWiring closet / telecom room (MDF and IDF)
- workaround
- workload identity
- WPA3
- X.509
- xauth and X11 forwarding
- Z-Tunnel
- zero trustZero Trust Architecture (ZTA)
- Zero Trust Exchange
- zero-day
- ZIdentity