C3P2

implicit deny

A condition that states that unless otherwise given, the permission will be denied.

internet protocol security (IPSec)

A set of protocols that enable encryption, authentication, and integrity over IP. IPSec is commonly used with virtual private networks (VPNs) and operates at Layer 3.

HSM (Hardware Security Module)

A software or appliance stand-alone used to enhance security and commonly used with PKI systems.

key management

The management of all aspects of cryptographic keys in a cryptosystem, including key generation, exchange, storage, use, destruction and replacement

host-based IDS (HIDS)

An intrusion detection system that is host based. An alternative is an intrusion detection system that is network based.

Data Loss Prevention (DLP)

Any systems that identify, monitor, and protect data to prevent it from unauthorized use, modification, destruction, egress, or exfiltration from a location.

intrusion detection system (IDS)

Tools that identify attacks using defined rules or logic and are considered passive. An IDS can be network based or host based.

intrustion prevention system (IPS)

Tools that respond to attacks using defined rules or logic and are considered active. Can be network or host based

firewall

a combination of hardware and software filters placed between trusted and untrusted networks intended to protect a network from attack by hackers who could gain access through public networks, including the internet

false positive

a flagged event that isn't really an event and has been falsely triggered

encapsulating security payload (ESP)

An IPSec header used to provide a mix of security services in IPv4 and IPv6. ESP can be used alone or in combination with the IP Authentication Header (AH).

load balancing

Dividing a load for greater efficiency of management among multiple devices.

false negative

an event that should be flagged but isn't

encapsulation

the process of enclosing data in a packet