information security
Guarding digital assets
Information security is the practice of protecting data from unauthorized access, theft, or damage.
The field encompasses digital safeguards like encryption and firewalls, physical measures like locked server rooms, and organizational policies governing who can view what.
Often shortened to infosec in professional contexts: She works in infosec for a major bank.
Information security differs from cybersecurity, which focuses specifically on threats from networked systems.
Network access control system
- antivirusMalware detection program
- intrusion detectionSpotting unauthorized access attempts
- sandboxingIsolating untrusted code
- honeypotDecoy system catching attackers
air gap · penetration testing · red team · blue team · zero trust · defense in depth
Science of secure messaging
- cipherHidden writing system
- AESSymmetric encryption standard
- RSAPublic-key encryption algorithm
- SSLWeb encryption protocol
TLS · hashing · digital signature · symmetric · asymmetric · certificates · PKI · end-to-end encryption
Adhering to requirements
- auditFormal accounts examination
- risk assessmentEvaluating likelihood of harm
- regulatoryInvolving official oversight
- frameworkUnderlying support system
risk management · training · business continuity · disaster recovery · due diligence
Confirming genuine identity
- authorizationFormal permission granted
- access controlRestricting resource availability selectively
- multi-factor authenticationLogin requiring multiple proofs
- single sign-onOne credential, multiple applications
biometrics · password · credential · identity management · federation · OAuth · account lockout · identity verification
Harmful computer programs
- phishingFraudulent credential harvesting
- ransomwareHostage-taking code
- virusMicroscopic infectious agent
- wormLimbless soil invertebrate
spyware · keylogger · rootkit · backdoor · botnet · DDoS · exploit · zero-day
Securing sensitive information
- GDPREU data protection law
- HIPAAMedical privacy statute
- PIIIdentity-revealing information
- confidentialityQuality of protecting secrets
consent · anonymization · pseudonymization · surveillance · tracking · profiling · opt-out · sensitive data
Unauthorized access to protected information
- unauthorized accessEntry without permission
- intrusionUnauthorized entry into space
- compromiseAgreement through mutual sacrifice
- leakEscape through a breach
exposed · incident · cybercrime · identity theft · fraud · exfiltration · lateral movement · privilege escalation
firewall
Network access control system
- antivirusMalware detection program
- intrusion detectionSpotting unauthorized access attempts
- sandboxingIsolating untrusted code
honeypot · air gap · penetration testing · red team · blue team · zero trust · defense in depth
cryptography
Science of secure messaging
SSL · TLS · hashing · digital signature · symmetric · asymmetric · certificates · PKI · end-to-end encryption · tokenization
compliance
Adhering to requirements
- auditFormal accounts examination
- risk assessmentEvaluating likelihood of harm
- regulatoryInvolving official oversight
framework · risk management · training · business continuity · disaster recovery · due diligence
authentication
Confirming genuine identity
- authorizationFormal permission granted
- access controlRestricting resource availability selectively
- multi-factor authenticationLogin requiring multiple proofs
single sign-on · biometrics · password · credential · identity management · federation · OAuth · account lockout · identity verification
malware
Harmful computer programs
- phishingFraudulent credential harvesting
- ransomwareHostage-taking code
- virusMicroscopic infectious agent
worm · spyware · keylogger · rootkit · backdoor · botnet · DDoS · exploit · zero-day · social engineering
data protection
Securing sensitive information
confidentiality · consent · anonymization · pseudonymization · surveillance · tracking · profiling · opt-out · sensitive data · personal data
data breach
Unauthorized access to protected information
- unauthorized accessEntry without permission
- intrusionUnauthorized entry into space
- compromiseAgreement through mutual sacrifice
leak · exposed · incident · cybercrime · identity theft · fraud · exfiltration · lateral movement · privilege escalation · data loss
- computingcomputer, computers, software, hardware, code
- cybersecurityantivirus, malware, firewall, firewalls, encryption
- security lawcounterterrorism, state secrets, FISA, Patriot Act, war powers
- tech lawinternet law, privacy laws, cybercrime, content moderation, digital privacy
- securityalarm system, lock, safe, alarm, camera
- Military Securitymilitary police, MPs, classified, top secret, restricted area
information securitysecurity breach
Unauthorized penetration of protected systems
information securitycyberattack
Malicious digital intrusion
hacking · cyber warfare · cybercrime · data breach · phishing
information securitydata leak
Unintended exposure of confidential information
whistleblowing · public exposure · doxxing · data breach · transparency
security, information, secured, insecurity, securing, misinformation, uninformed, informative, securely