Diffusion:
Diffusion: A property of encryption that ensures that changes in plaintext data are widely spread throughout the ciphertext output to make it difficult to recognize patterns or relationships between the plaintext and ciphertext.
Multiprocessing: The use of multiple processors in a computer system to work together on a single task or set of tasks.
IPSec: Internet Protocol Security is a set of protocols used to secure and encrypt communications over IP networks, providing confidentiality, integrity, and authentication.
Authentication Header (AH): An IPSec protocol that provides authentication and integrity for each packet, ensuring that the data has not been modified or tampered with during transmission.
Encapsulation Security Payload (ESP): An IPSec protocol that provides confidentiality, integrity, and authentication for IP packets by encrypting the data payload.
Security Association (SA): A simplex, one-way communication link between two network entities that defines the parameters for the IPSec protocol to be used for secure communication between them.
Internet Key Exchange (IKE): An IPSec protocol that allows two network entities to securely negotiate the parameters of an IPSec security association.
Server hardening: The process of securing a server by applying various security measures such as updating software, configuring firewalls, disabling unnecessary services, and enforcing strong passwords.
Logic bomb: A piece of malicious code that is designed to execute a certain action or set of actions when triggered by a specific event or condition.
Asymmetric encryption: A type of encryption that uses two different keys, one for encryption and one for decryption.
Symmetric encryption: A type of encryption that uses the same key for both encryption and decryption.
Encryption keys: A value or set of values used in the encryption and decryption process to secure and protect data.
Cloud computing: the delivery of computing services (such as servers, storage, databases, software, and more) over the internet ("the cloud") to offer faster innovation, flexible resources, and economies of scale.
Public cloud computing: a type of cloud computing where a third-party cloud service provider makes resources like servers and storage available over the internet to the general public.
IaaS (Infrastructure as a Service): a type of cloud computing service that provides customers with virtualized computing resources like servers, storage, and networking.
Operating system (OS): a software that manages computer hardware and software resources and provides common services for computer programs.
Kernel: the core component of an operating system that is responsible for managing hardware resources and providing services to higher-level software.
Reference monitor: a security model that mediates all access to objects by subjects in a computer system.
WORM Media (Write Once Read Many): a type of storage media where data can be written once and then read many times, but cannot be modified or erased.
Ring model: a hardware protection mechanism that divides the computer's resources into rings or layers of privilege.
Hypervisor: a software layer that allows multiple virtual machines to share a single physical host.
Mandatory Access Control (MAC): a security model that restricts access to resources based on a set of predefined rules or policies.
BIBA: a type of MAC security model that enforces integrity by preventing data from flowing from lower levels of confidentiality to higher levels.
DES (Data Encryption Standard): a symmetric-key block cipher algorithm that encrypts data in 64-bit blocks using a 56-bit key.
3DES (Triple DES): an extension of the DES encryption standard that uses three rounds of encryption with three different keys to improve security.
Dogs: Trained animals used for physical security purposes. Can be used as a deterrent or detective, but liability can be an issue due to potential injuries caused to individuals encountering the dog.
RC4: A symmetric encryption algorithm that uses a pseudorandom keystream. It is no longer considered secure due to weaknesses in its design.
Prime Number Factorization: The process of breaking down a large number into its prime factors, which is a fundamental component of many cryptographic systems.
Programmable Logic Controllers (PLCs): Industrial digital computers used for controlling manufacturing processes such as assembly lines and robotic devices.
Jefferson Disk: An early type of encryption that used a set of disks with random letters to scramble the message. The sender and receiver would agree on the disk order as the cipher key.
Fences and Gates: Physical security measures used to control access to a facility. Fences are used as a deterrent or preventative measure, while gates are placed at control points to ensure access only happens through a few entry points.