Terms

This page contains links to all of the terms in the book, in the order they are being published on this site. The links for future terms will become valid on the publication date shown after each term.

• Vulnerabilities
  • Social Engineering -- 2018-07-31
  • Security Fatigue -- 2018-08-07
  • Shadow Security -- 2018-08-14
  • Data Leak -- 2018-08-21
  • Insider Threat -- 2018-08-28
  • Zero-day Vulnerability -- 2018-09-04
  • Dark Web -- 2018-09-11
• Exploits
  • Phishing -- 2018-09-18
  • Ransomware -- 2018-09-25
  • Botnet -- 2018-10-02
  • Advanced Persistent Threat -- 2018-10-09
  • Buffer Overflow Attack -- 2018-10-16
• Defenses
  • Authentication -- 2018-10-23
  • Endpoint Security -- 2018-10-30
  • Multi-factor Authentication -- 2018-11-06
  • Identity Management -- 2018-11-13
  • Physical Access Control -- 2018-11-20
  • Biometrics -- 2018-11-27
  • Security Awareness -- 2018-12-04
  • Situational Awareness -- 2018-12-11
  • Behavioral Monitoring -- 2018-12-18
  • Non-repudiation -- 2019-01-08
  • Privilege -- 2019-01-15
  • Firewall -- 2019-01-22
  • Encryption -- 2019-01-29
  • Sandboxing -- 2019-02-05
  • Hardening -- 2019-02-12
• Planning, Management, and Controls
  • Governance, Risk Management, Compliance (GRC) -- 2019-02-19
  • Application Risk Governance -- 2019-02-26
  • Vulnerability Assessment -- 2019-03-05
  • Business Impact Assessment (BIA) -- 2019-03-12
  • Business Continuity Plan -- 2019-03-19
  • Incident Response Plan -- 2019-03-26
  • CISO -- 2019-04-09
  • Risk Register -- 2019-04-16
  • Metrics -- 2019-04-30
  • Audit -- 2019-05-07
  • Threat Modeling -- 2019-05-14
  • Static Application Security Testing -- 2019-05-21
  • Penetration Testing -- 2019-05-28
• Compliance
  • Confidentiality -- 2019-06-04
  • Integrity -- 2019-06-11
  • Availability -- 2019-06-18
  • Separation of Duties -- 2019-06-25
  • Policy -- 2019-07-02
  • Standards -- 2019-07-09
  • Regulation -- 2019-07-16
  • Privacy -- 2019-07-23
  • Controls -- 2019-07-30
  • Payment Card Industry Data Security Standard (PCI DSS) -- 2019-08-06
  • General Data Protection Regulation (GDPR) -- 2019-08-13
  • Kill Chain -- 2019-08-20