● 1282 entries
Glossar
Alle Begriffe, von A bis Z.
$
3
5
A
- AAA-Modell
- Abrechnung / Protokollierung (AAA-Accounting)
- Abuse Case
- Access Token
- Account-Enumeration
- Active Directory
- Adaptive Authentifizierung
- Adaptiver Angriff
- Address Poisoning
- Advanced Persistent Threat (APT)
- Adversariales Beispiel
- Adversary-in-the-Middle-Phishing (AiTM)
- Adware
- AES (Advanced Encryption Standard)
- AES-CBC
- AES-CTR
- AES-GCM
- AI Bill of Materials (AIBOM)
- AI-Incident-Response
- AI-Modellkarte (Model Card)
- AI-Supply-Chain-Risiko
- Air-Gap-Netz
- Aircrack-ng
- Akira-Ransomware
- Aktiv ausgenutzte Schwachstelle (KEV)
- Aktive Verteidigung
- Alert-Fatigue
- Always-On VPN
- Amcache.hve
- AMD SEV / SEV-SNP
- AMSI-Bypass
- Analyse der Windows-Registry
- Android Debug Bridge (ADB)
- Android-Malware
- Angriff auf den Mobile App Store
- Angriffsflache (Attack Surface)
- Angriffsmuster (Attack Pattern)
- Angriffsvektor
- Anomaliebasierte Erkennung
- Anti-Forensik
- Antivirus (AV)
- Anwendungssicherheit (AppSec)
- API-Key
- API-Sicherheit
- App-Berechtigungen unter iOS und Android
- AppArmor
- AppInit_DLLs
- Application Allowlisting (Whitelisting)
- APT-Gruppe
- ARC (Authenticated Received Chain)
- Argon2
- ARM TrustZone
- ARP
- ARP-Spoofing
- Artefaktanalyse
- AS-REP Roasting
- ASLR
- ASN.1
- Asset Management
- Asymmetrische Verschlüsselung
- ATM-Jackpotting
- Atomic Red Team
- Attack Surface Management (ASM)
- Attribut-basierte Verschluesselung
- Attributbasierte Zugriffskontrolle (ABAC)
- Auftragsverarbeitungsvertrag (DPA)
- Ausgabeencodierung
- Auskunftsersuchen der betroffenen Person (DSAR)
- Authentifizierung
- Autopsy
- Autorisierung
- AWS-IMDSv1-Angriff
B
- Backdoor-Angriff (ML)
- BadUSB
- Baiting
- Banking-Trojaner
- Baseband-Angriff
- BB84 Protokoll
- bcrypt
- Bearer Token
- BEAST Attack
- Bedrohungsakteur
- Bedrohungsmodellierung
- Bedrohungsvektor (Threat Vector)
- Besitzfaktor (Etwas, das man hat)
- Beweismittelerfassung
- Beweismittelkette
- Beweissicherung
- BGP-Hijacking
- BGP-Route-Leak
- BIA (Business Impact Analyse)
- BIAS-Angriff
- BIMI
- Biometrische Authentifizierung
- BIOS-Rootkit
- Black-Hat-Hacker
- BlackCat / ALPHV
- BlackEnergy
- BLAKE2
- BleedingTooth
- Bleichenbacher-Angriff
- Blind XSS
- Blockchain-Sicherheit
- Blockchiffre
- BloodHound
- Blowfish
- BLS-Signatur
- Blue Team
- BlueBorne
- Bluebugging
- Bluejacking
- Bluesnarfing
- Bluetooth-LE-Sicherheit
- Bootkit
- Bootsektor-Virus
- Bösartige Browser-Erweiterung
- Bot-Management
- Botnetz
- BPF LSM
- BrakTooth
- BREACH Attack
- Bring Your Own Device (BYOD)
- Bring Your Own Key (BYOK)
- Browser-Fingerprinting
- Browser-Hijacker
- Browser-Sandbox
- Brute-Force-Angriff
- Bug-Bounty-Jäger
- Bug-Bounty-Programm
- Burp Suite
- Business Email Compromise
- BYOVD (Bring Your Own Vulnerable Driver)
C
- C2PA
- CAC (Common Access Card)
- Cache Poisoning
- Callback-Phishing
- Canary Token
- Canvas-Fingerprinting
- CAPEC
- CAPTCHA
- Capture the Flag (CTF)
- Carbanak
- CASB (Cloud Access Security Broker)
- CCPA
- CCSP
- CDN-Sicherheit
- CEH
- Cellebrite UFED
- Censys
- CEO-Fraud
- Certificate Transparency
- ChaCha20
- ChaCha20-Poly1305
- Change-Management
- Chargeback-Betrug
- Chief Information Security Officer (CISO)
- CI/CD-Sicherheit
- CIA-Triade
- CIDR-Notation
- CIEM (Cloud Infrastructure Entitlement Management)
- Cilium
- Cipher (Chiffre)
- Cipher Suite
- Ciphertext
- CIS Controls
- CISA
- CISM
- CISSP
- Citrix Bleed (CVE-2023-4966)
- Cl0p / Clop-Ransomware
- Clickjacking
- Clipboard-Hijacker
- Cloud-Cryptojacking
- Cloud-Datenexfiltration
- Cloud-Fehlkonfiguration
- Cloud-Forensik
- Cloud-Key-Leak
- Cloud-Metadata-SSRF
- Cloud-Sicherheit
- Cloud-Token-Diebstahl
- Cloud-Verschlüsselung
- CMMC
- CNAPP (Cloud-Native Application Protection)
- Cobalt Strike
- COBIT
- Code-Injection
- Codecov-Bash-Uploader-Vorfall
- Cold Wallet
- Cold-Boot-Angriff
- Collection (MITRE-Taktik)
- COM-Hijacking
- Command and Control (C2)
- Command Injection
- Compliance
- CompTIA Security+
- Computervirus
- Computerwurm
- Confidential Computing
- Consent Management
- Container Escape
- Container-Image-Scanning
- Container-Sicherheit
- Content Security Policy (CSP)
- Conti-Ransomware
- Control-Flow Integrity
- Conversation Hijacking
- Cookie Poisoning
- Cookie-Hijacking
- CORS (Cross-Origin Resource Sharing)
- CORS-Fehlkonfiguration
- COSE
- Cosign
- Coverage-Guided Fuzzing
- CPRA
- Credential Access
- Credential Harvesting
- Credential Stuffing
- Credential Vault
- Credential-Stealer
- CRIME Attack
- CRISC
- CRLF-Injection
- Cron-Persistenz
- Cross-Site-Request-Forgery (CSRF)
- Cross-Site-Scripting (XSS)
- Cryptographic Bill of Materials (CBOM)
- Cryptojacking
- Cryptominer
- CRYSTALS-Dilithium
- CRYSTALS-Kyber
- CSPM (Cloud Security Posture Management)
- CSPM-Finding
- CSRF-Token
- CSV-Injection
- Curve25519
- CVE (Common Vulnerabilities and Exposures)
- CVE Numbering Authority (CNA)
- CVSS (Common Vulnerability Scoring System)
- CWE (Common Weakness Enumeration)
- CWPP (Cloud Workload Protection Platform)
- Cyber Kill Chain
- Cyber Threat Intelligence (CTI)
- Cyber-physisches System (CPS)
- Cybercrime-as-a-Service (CaaS)
- Cybersquatting
- Cyberversicherung
D
- DANE
- Darknet
- DarkSide-Ransomware
- DAST (Dynamic Application Security Testing)
- Data Loss Prevention (DLP)
- Dateilose Malware
- Daten-Poisoning
- Datenanonymisierung
- Datenaufbewahrung
- Datenbank-Aktivitatsuberwachung (DAM)
- Datenbank-Firewall
- Datenklassifizierung
- Datenleck
- Datenmaskierung
- Datenminimierung
- Datenresidenz
- Datenschutz-Folgenabschätzung (DPIA)
- Datenschutz-Folgenabschätzung (DSFA / PIA)
- Datenschutzverletzung
- Datensouveränität
- Datenträgerforensik
- dd (Raw-Disk-Image)
- DDoS-Amplifikation
- DDoS-Mitigation
- Deception-Technologie
- Deep Packet Inspection (DPI)
- Deep Web
- Deepfake
- Defekte Authentifizierung
- Defekte Zugriffskontrolle
- Defense Evasion
- Defense in Depth
- DeFi
- Demilitarisierte Zone (DMZ)
- Denial-of-Service-Angriff (DoS)
- DEP
- Dependency Pinning
- Dependency-Confusion-Angriff
- DES (Data Encryption Standard)
- Detection Engineering
- Detektive Kontrollen
- DevSecOps
- Dezentraler Identifier (DID)
- DFIR (Digitale Forensik und Incident Response)
- DHCP
- DHCP-Spoofing
- DHCP-Starvation
- Diameter-Protokoll
- Diamond Model of Intrusion Analysis
- Dienstkonto
- Differenzielle Privatsphäre
- Diffie–Hellman-Schlüsselaustausch
- Digitale Forensik
- Digitale Identität
- Digitale Signatur
- Directory Traversal
- Dirty COW (CVE-2016-5195)
- Dirty Pipe (CVE-2022-0847)
- Discovery (MITRE-Taktik)
- Diskretionäre Zugriffskontrolle (DAC)
- Distributed-Denial-of-Service-Angriff (DDoS)
- DKIM
- DLL-Hijacking
- DLL-Injection
- DMARC
- DNP3
- DNS Hijacking
- DNS over HTTPS (DoH)
- DNS over TLS (DoT)
- DNS Rebinding
- DNS-Amplifikationsangriff
- DNS-Blocklist (DNSBL)
- DNS-Cache-Poisoning
- DNS-Leak
- DNS-Spoofing
- DNS-Tunneling
- DNSSEC
- Docker-Socket-Angriff
- DOM-basierter XSS
- Domain Generation Algorithm (DGA)
- Domain Hijacking
- Domain Shadowing
- DORA
- Double Free
- Downloader
- Doxware
- Doxxing
- DPF
- Dragonblood
- DREAD-Modell
- Drittanbieter-Cookie
- Drittparteien-Risikomanagement (TPRM)
- Drive-by-Download
- Dropper
- DROWN-Angriff (CVE-2016-0800)
- DSGVO
- DTP-Angriff
- Dust Attack
E
- E-Mail-Spoofing
- E01-Forensik-Image-Format (EnCase)
- eBPF-Sicherheit
- ECDH
- ECDSA
- Ed25519
- EDR (Endpoint Detection and Response)
- Eingabevalidierung
- Einmalpasswort (OTP)
- Elastic Stack (ELK)
- ELF-Binarformat
- Elliptische-Kurven-Kryptographie (ECC)
- Embedding-Angriffe
- Emotet
- EnCase
- Ende-zu-Ende-Verschluesselung (E2EE)
- Endpoint-Isolierung
- Enterprise Mobility Management (EMM)
- Entschlüsselung
- Envelope-Verschluesselung
- EPP (Endpoint Protection Platform)
- EPSS (Exploit Prediction Scoring System)
- Equation Group
- Erkennung KI-generierter Inhalte
- Erkennung unmoglicher Reisen
- EternalBlue (CVE-2017-0144)
- Ethical Hacker
- EU-KI-Verordnung
- Eval-Injection
- Evasion-Angriff (ML)
- Evil-Maid-Angriff
- Evil-Twin-Angriff
- Excessive Agency (übermäßige Handlungsmacht)
- Execution (MITRE-Taktik)
- Exfiltration
- Exploit
- Extended-Validation-Zertifikat
- External Attack Surface Management (EASM)
- EZ Tools von Eric Zimmerman
F
- FAIR (Factor Analysis of Information Risk)
- Falco
- Falcon (Signaturverfahren)
- False Negative
- False Positive
- Fast Flux
- Fault-Injection
- FedRAMP
- FERPA
- FIDO-Sicherheitsschluessel
- FIDO2
- File Carving
- File Integrity Monitoring (FIM)
- FIN-Bedrohungsgruppe
- FIPS 140 / FIPS 140-3
- Firewall
- Firmware-Malware
- Firmware-Over-the-Air-Update (OTA)
- FISMA
- Flash-Loan-Angriff
- Föderierte Identität
- Föderiertes Lernen
- Forensik-Toolkit
- Forensische Bereitschaft
- Forensische Hash-Verifikation
- Forensische Imageerstellung
- Fork-Bombe
- Format-String-Schwachstelle
- Formjacking
- Forward-Proxy
- Fraggle-Angriff
- FREAK Attack
- Front-Running (Blockchain)
- FTK
- FTP
- Function as a Service (FaaS)
- Funktionstrennung (SoD)
- Fuzz-Testing
G
- Gegenseitige Authentifizierung
- Geleaktes Passwort (Pwned)
- Geplante-Aufgaben-Persistenz
- Geschenkkarten-Betrug
- GHOST-Schwachstelle (CVE-2015-0235)
- GIAC-Zertifizierungen
- GitOps-Sicherheit
- Gitterbasierte Kryptografie
- Glitch-Angriff
- GnuPG (GPG)
- Golden Ticket
- Google Chronicle SecOps
- Gramm-Leach-Bliley Act (GLBA)
- GrayKey
- Grayware
- Grey-Hat-Hacker
- Greylisting
- Grover-Algorithmus
- gVisor
H
- Hack-Back
- Hacker
- Hacktivist
- Hardcodierte Secrets im Code
- Hardware Security Module (HSM)
- Hardware-Attestation
- Hardware-Token
- Hardware-Trojaner
- Hardware-Wallet
- Harvest Now, Decrypt Later
- Hash-Kollision
- Hashcat
- Headless-Browser
- Heap Feng Shui
- Heap Spraying
- Heap-Overflow
- Heartbleed (CVE-2014-0160)
- Heuristische Erkennung
- hiberfil.sys
- Hintertür
- HIPAA
- HITRUST
- Hive-Ransomware
- HMAC
- HMAC-basiertes Einmalpasswort (HOTP)
- Hold Your Own Key (HYOK)
- Homomorphe Verschlüsselung
- Honey Account
- Honeyfile
- Honeynet
- Honeypot
- Honeytoken
- Honeyuser
- Horizontale Privilegieneskalation
- Host-basiertes IDS (HIDS)
- Host-Header-Injection
- Hot Wallet
- HSRP-/VRRP-Angriff
- HTTP Request Smuggling
- HTTP Response Splitting
- HTTP Strict Transport Security (HSTS)
- HTTP-Desync-Angriff
- HTTP-Sicherheitsheader
- HTTP/2-Sicherheit
- HTTP/3 / QUIC
- HttpOnly-Cookie-Flag
- HTTPS
I
- I2P
- IAM-Fehlkonfiguration (Cloud)
- IAM-Privilege-Escalation
- IAST (Interactive Application Security Testing)
- IcedID / BokBot
- ICMP
- ICO-Betrug
- Identitaetsbasierte Verschluesselung
- Identitaetsdiebstahl
- Identitäts- und Zugriffsverwaltung (IAM)
- IEC 62443
- IEEE 802.1X
- IFEO-Injection
- iframe-sandbox-Attribut
- IMEI (International Mobile Equipment Identity)
- Impact (MITRE-Taktik)
- IMSI (International Mobile Subscriber Identity)
- IMSI-Catcher
- in-toto
- Incident Responder
- Incident Response
- Incident-Response-Plan
- Indicator of Attack (IoA)
- Indicator of Compromise (IoC)
- Indirekte Prompt Injection
- Industrielles Steuerungssystem (ICS)
- Industroyer / CrashOverride
- Info-Stealer
- Infrastructure as a Service (IaaS)
- Inhaerenzfaktor (Etwas, das man ist)
- Inhärentes Risiko
- Initial Access
- Initial Access Broker (IAB)
- Initialisierungsvektor (IV)
- Insider-Bedrohung
- Integer Underflow
- Integer-Überlauf
- Intel CET
- Intel SGX
- Intrusion Detection System (IDS)
- Intrusion Prevention System (IPS)
- iOS-Malware
- IoT-Botnet
- IoT-Sicherheit
- IP-Adresse
- IP-Fragmentierungsangriff
- IP-Spoofing
- IPsec
- ISO/IEC 27001
- ISO/IEC 27002
- Istio-Sicherheit
- ITIL
- Ivanti Connect Secure Zero-Days (CVE-2023-46805, CVE-2024-21887)
J
K
- k-Anonymität
- Kali Linux
- KAPE (Kroll Artifact Parser and Extractor)
- KARMA-Angriff
- Karten-Skimming
- Kaseya-VSA-Lieferketten-Angriff
- KASLR
- Kata Containers
- Kerberoasting
- Kerberos
- Kernel Mode vs User Mode
- Key Escrow
- Keylogger
- KI-Alignment
- KI-generierte Desinformation
- KI-generierte Malware
- KI-Governance
- KI-Halluzination
- KI-Jailbreak
- KI-Red-Team
- KI-Safety
- KI-Watermarking
- KNOB-Angriff
- known_hosts-Datei
- Kompensierende Kontrollen
- Konfigurationsmanagement
- Kontinuierliche Authentifizierung
- Konto-Uebernahme (ATO)
- Kontosperrung
- Koordinierte Schwachstellenoffenlegung (CVD)
- Korrektive Kontrollen
- KRACK-Angriff
- Kreditkartenbetrug
- Kryptografischer Schlüssel
- Kryptographie
- Kryptographische Agilitaet
- Kryptographische Hashfunktion
- Kryptographische Loeschung
- Kryptowaehrungs-Geldwaesche
- Kryptowaehrungs-Mixer / Tumbler
- kube-bench
- Kubernetes Admission Controller
- Kubernetes NetworkPolicy
- Kubernetes-Cluster-Angriff
- Kubernetes-Sicherheit
- Kubescape
- Kyverno
L
- l-Diversität
- LAND-Angriff
- LastPass-Vorfall (2022)
- Lateral Movement
- launchd-Persistenz
- Layer 2
- LD_PRELOAD-Hijacking
- LDAP
- LDAP Injection
- Ledger Wallet
- LGPD
- Lieferantenrisikomanagement
- Linux Capabilities
- Living off the Land
- LLM-Firewall
- LLM-Guardrails
- LLM-System-Prompt-Leak
- LLMjacking
- LLMNR-Poisoning
- Loader
- Local File Inclusion (LFI)
- LockBit
- Locky-Ransomware
- Log-Aggregation
- Log-Analyse
- Log-Korrelation
- Log4Shell (CVE-2021-44228)
- Logische Bombe
- Logjam
- LOLBin / LOLBAS
- Looney Tunables (CVE-2023-4911)
- LoRaWAN-Sicherheit
- LTE-Sicherheit
- Lucky 13
M
- MAC-Adresse
- MAC-Spoofing
- Mach-O
- Magecart-Angriff
- Magic-Link-Anmeldung
- Magnet AXIOM
- Mail Bomb
- Makrovirus
- Malvertising
- Malware-Analyse
- Man-in-the-Middle-Angriff
- Mandantentrennung
- Maschinenidentität
- Mass Assignment
- Massenüberwachung
- Masterschlüssel
- Maze-Ransomware
- MCP-Angriffe
- MD5
- MDR (Managed Detection and Response)
- Medusa-Ransomware
- Meltdown
- Membership-Inference-Angriff
- Memory-Forensik
- Memory-Safe Sprachen
- Mensch-Maschine-Schnittstelle (HMI)
- Message Authentication Code (MAC)
- Metamorphe Malware
- Metasploit
- MEV (Maximal Extractable Value)
- MFA-Fatigue (Push Bombing)
- MFT (Master File Table)
- Microsegmentation
- Microsoft Pluton
- Microsoft Sentinel
- MIME-Sniffing
- Mimikatz
- Mirai-Botnet
- MISP
- Missbrauch von Stored Procedures
- Misuse Case
- mitmproxy
- MITRE ATT&CK
- MITRE D3FEND
- MITRE Engage
- Mixed Content
- MLSecOps
- Mobile Application Management (MAM)
- Mobile Device Management (MDM)
- Mobile Malware
- Mobiles VPN
- Mobilforensik
- Modbus
- Model Context Protocol (MCP)
- Modell der geteilten Verantwortung
- Modell-Extraktion
- Modell-Inversion
- Monte-Carlo-Risikosimulation
- MOVEit Transfer SQLi (CVE-2023-34362)
- MTA-STS
- MTTC (mittlere Eindämmungszeit)
- MTTD (mittlere Erkennungszeit)
- MTTR (mittlere Reaktionszeit)
- MTTR (mittlere Wiederherstellungszeit)
- Müllcontainerdurchsuchen
- Multi-Faktor-Authentifizierung (MFA)
- Multisig-Wallet
- Mutations-Fuzzing
- Mutual TLS (mTLS)
N
- N-Day-Schwachstelle
- NBT-NS-Poisoning
- NDR (Network Detection and Response)
- Need-to-Know-Prinzip
- Nessus
- NetFlow
- Network Access Control (NAC)
- Network Address Translation (NAT)
- Netzwerk-basiertes IDS (NIDS)
- Netzwerkforensik
- Netzwerksegmentierung
- Next-Generation Antivirus (NGAV)
- Next-Generation Firewall (NGFW)
- NFC-Relay-Angriff
- NFT-Betrug
- Nicht-resident Virus
- Nightshade-Angriff
- NIS2-Richtlinie
- NIST Cybersecurity Framework
- NIST Risk Management Framework
- NIST SP 800-171
- NIST SP 800-30
- NIST SP 800-37
- NIST SP 800-53
- NIST SP 800-61
- NIST-PQC-Standardisierung
- Nitrokey
- Nmap
- Nonce
- NoSQL Injection
- NotPetya
- NTLM-Authentifizierung
- NTLM-Relay-Angriff
- NTP-Amplifikationsangriff
- Null-Pointer-Dereferenz
O
- OAuth 2.0
- OCSP (Online Certificate Status Protocol)
- OCTAVE-Methode
- Offene Weiterleitung
- Okta-Support-System-Vorfall (2023)
- one_gadget RCE
- Onion Routing
- OPA (Open Policy Agent)
- OPA Gatekeeper
- OPC UA
- OpenID Connect (OIDC)
- OpenVPN
- Operational Technology (OT)
- Operative Threat Intelligence
- Opportunistisches TLS
- Oracle-Manipulation
- Order of Volatility
- ORM-Injection
- OSCP
- OSSEC
- OSSTMM
- OTP-Abfangen auf Mobilgeraeten
- OTX
- Out-of-Bounds Read
- OWASP API Security Top 10
- OWASP ASVS
- OWASP Dependency-Check
- OWASP LLM Top 10
- OWASP MASVS
- OWASP Mobile Top 10
- OWASP SAMM
- OWASP Top 10
- OWASP WSTG
- OWASP ZAP
Ö
P
- Padding-Orakel-Angriff
- pagefile.sys
- Paketfilterung
- Paketsignatur
- Parameter-Manipulation
- Parametrisierte Abfrage
- Pass-the-Hash
- Pass-the-Ticket
- Passive DNS
- Passkey
- Passphrase
- Password Spraying
- Passwort
- Passwort-Entropie
- Passwort-Manager
- Passwort-Wiederverwendung
- Passwortrichtlinie
- PASTA-Threat-Model
- Patch-Management
- Payload
- PBKDF2
- PCAP
- PCI DSS
- PDF-Exploit
- PE-Executable-Format
- Pegasus-Spyware (NSO Group)
- PEM-Format
- Penetration Tester
- Penetrationstest
- Pepper
- Perfect Forward Secrecy
- Permit2-Phishing
- Persistence
- Personenbezogene Daten (PII)
- PGP
- Pharming
- Phishing
- Phreaking
- Pig-Butchering-Betrug
- Piggybacking
- Ping of Death
- PIPEDA
- PIV-Karte
- Pixie-Dust-Angriff
- PKCS#11
- PKCS#12
- PKCS#7
- Plaintext (Klartext)
- Plaso
- Platform as a Service (PaaS)
- Play-Ransomware
- Playwright-Sicherheit
- PMKID-Angriff
- Pod Security Standards
- Policy as Code
- Polymorphe Malware
- POODLE-Angriff (CVE-2014-3566)
- Port Knocking
- Port-Forwarding
- Post-Mortem
- Post-Quanten-Kryptografie
- Potenziell unerwünschtes Programm (PUP)
- Power-Analysis-Angriff
- Präventive Kontrollen
- Predator-Spyware (Intellexa)
- Prefetch-Dateien
- Pretexting
- PrintNightmare (CVE-2021-34527)
- Prinzip der geringsten Rechte
- Privacy by Design
- Private Set Intersection (PSI)
- Privater Schlüssel
- Privileged Access Management (PAM)
- Privilegieneskalation
- Process Injection
- PROFINET
- Promiscuous-Modus
- Prompt Injection
- Proof-of-Concept-Exploit
- Protestware
- Prototype Pollution
- Provenance-Attestation
- Proxy-Re-Encryption
- Proxy-Server
- ProxyLogon (CVE-2021-26855)
- ProxyShell
- Prozessleitsystem (DCS)
- Pseudonymisierung
- PTES
- Public-Key-Infrastruktur (PKI)
- Public-Key-Kryptographie
- Pufferüberlauf
- Puppeteer-Sicherheit
- Purdue-Referenzarchitektur (PERA)
- Purple Team
- Push-Authentifizierung
- PwnKit (CVE-2021-4034)
- Pyramid of Pain
Q
R
- Race Condition
- RADIUS
- RAG
- RAG-Security
- Rainbow-Table-Angriff
- Ransomware
- Ransomware-as-a-Service (RaaS)
- Ransomware-Bande
- RASP (Runtime Application Self-Protection)
- Rate Limiting
- Rechnungsbetrug
- Recht auf Berichtigung
- Recht auf Datenubertragbarkeit
- Recht auf Vergessenwerden
- Reconnaissance
- Red Team
- Reentrancy-Angriff
- Referrer-Policy
- Reflected XSS
- Refresh Token
- regreSSHion (CVE-2024-6387)
- Relay-Angriff
- Remote Access Trojaner (RAT)
- Remote File Inclusion (RFI)
- Remote-Access-VPN
- Replay-Angriff
- Reproduzierbare Builds
- Responder-Angriff
- Restrisiko
- Return-Oriented Programming
- Reverse Engineering
- Reverse-Proxy
- REvil / Sodinokibi
- RFID-Cloning
- Ring-Signatur
- Risikoappetit
- Risikobasierte Authentifizierung (RBA)
- Risikobehandlung
- Risikobewertung
- Risikomanagement
- Risikoregister
- Risikotoleranz
- ROBOT Attack
- robots.txt
- Rogue Access Point
- Rogue-DHCP-Server
- Rollenbasierte Zugriffskontrolle (RBAC)
- Romance Scam
- Rooting (Android)
- Rootkit
- Rowhammer
- RPO (Recovery Point Objective)
- RSA-Algorithmus
- RTO (Recovery Time Objective)
- Rug Pull
- Run-Schlüssel-Persistenz
- Ryuk-Ransomware
S
- S/MIME
- S3-Bucket-Fehlkonfiguration
- Salsa20
- Salt
- Same-Origin Policy (SOP)
- SameSite-Cookie
- SAML
- Sandbox fuer mobile Apps
- Sandbox-/Emulator-Erkennung
- Sandbox-Escape
- Sandwich-Angriff
- Sandworm Team
- SANS Top 25
- Sarbanes-Oxley Act (SOX)
- SASE
- SAST (Static Application Security Testing)
- SCA (Software Composition Analysis)
- SCADA
- Scareware
- SCC
- Schadsoftware
- Schaedliches npm-Paket
- Schein-Sicherheitssoftware
- Schluesselverwaltungssystem
- Schlüsselableitungsfunktion (KDF)
- Schlüsselrotation
- Schwachstelle
- Schwachstellenbewertung
- Schwachstellenscan
- Schwellenkryptografie
- Screen Scraper
- Script Kiddie
- scrypt
- seccomp
- secp256k1
- Secure Boot
- Secure Email Gateway
- Secure Enclave
- Secure-Cookie-Flag
- Security Analyst (SOC Tier 1/2/3)
- Security Architect
- Security as Code
- Security by Obscurity
- Security Engineer
- Security Onion
- Security Operations Center (SOC)
- Security Playbook
- Security-Awareness-Trainer
- SeDebugPrivilege
- Seed Phrase
- Seitenkanalangriff
- Seitenübergreifendes Tracking
- Selbstsigniertes Zertifikat
- Selbstsouveräne Identität (SSI)
- SELinux
- Server-Side Template Injection
- Server-Side-Request-Forgery (SSRF)
- Serverless-Sicherheit
- Service-Mesh-Sicherheit
- ServiceAccount-Token (Kubernetes)
- Session Fixation
- Session Hijacking
- Session Replay
- Session-Management
- Session-Token
- Sextortion
- SFTP
- SHA-1
- SHA-256
- SHA-3
- Shadow AI
- Shadow Stack
- Shadow-Brokers-Leak
- Shamir's Secret Sharing
- Shellbags
- Shellshock (CVE-2014-6271)
- Shift-Left-Security
- Shimcache (AppCompatCache)
- Shodan
- Shor-Algorithmus
- Shoulder Surfing
- Sichere Mehrparteienberechnung (MPC)
- Sicherer Messenger
- Sicherer Software-Entwicklungslebenszyklus (SSDLC)
- Sicheres Programmieren
- Sicherheit agentenbasierter KI
- Sicherheit mobiler Anwendungen
- Sicherheit von Vektor-Datenbanken
- Sicherheits-Baseline
- Sicherheitsanforderungen
- Sicherheitsbewertung von Lieferanten
- Sicherheitseigenschaften von Rust
- Sicherheitsgerichtetes System (SIS)
- Sicherheitskontrollen
- Sicherheitslage
- SIEM
- SIEM-Regel-Tuning
- Sigma-Regel
- Signal-Protokoll
- Signaturbasierte Erkennung
- Sigstore
- Silver Ticket
- SIM-Klonung
- SIM-Swapping
- Single Point of Failure (SPOF)
- Single Sign-On (SSO)
- SIP-Angriff
- Site Isolation
- Site-to-Site-VPN
- Sitzungsschlüssel
- SLA (Service Level Agreement)
- SLSA Framework
- Smart-Contract-Audit
- Smart-Contract-Sicherheit
- Smartcard
- SMB-Relay-Angriff
- SMEP / SMAP
- Smishing
- Smurf-Angriff
- Snort-Regel
- SOAR
- SOC 2
- SOC-Reifegradmodell
- Social Engineering
- Social Login
- Software as a Service (SaaS)
- Software Bill of Materials (SBOM)
- Software-Supply-Chain-Sicherheit
- SolarWinds Sunburst
- Spam (E-Mail)
- Spanning-Tree-Protokoll-Angriff
- Spear-Phishing
- Spectre
- Speicherkorruption
- Speicherleck
- Speicherprogrammierbare Steuerung (SPS / PLC)
- Speicherresidenter Virus
- Speichersicherheit
- Spekulative-Ausführung-Seitenkanal
- SPF (Sender Policy Framework)
- SPHINCS+
- SPIFFE
- SPIRE-Runtime
- Splunk Enterprise Security
- Splunk-SPL-Abfrage
- Spring4Shell (CVE-2022-22965)
- Spyware
- SQL Injection
- SS7-Angriff
- SSE
- SSH
- SSH-Agent-Forwarding
- SSH-Schlusseltypen
- SSL (Secure Sockets Layer)
- SSL Stripping
- SSL-VPN
- SSL/TLS-Downgrade-Angriff
- SSPM (SaaS Security Posture Management)
- Staatlicher Akteur
- Stack Canary
- Stack-Overflow-Schwachstelle
- Standortfaktor (Wo man ist)
- Starjacking
- STARTTLS
- Stateful Firewall
- Steganalyse
- Step-Up-Authentifizierung
- Stingray
- STIX
- Stored XSS
- Strategische Threat Intelligence
- STRIDE-Modell
- Stromchiffre
- Stuxnet
- Subdomain-Takeover
- Subnetz
- Subresource Integrity (SRI)
- Supercookie
- Supply-Chain-Angriff
- Suricata
- Swatting
- SWG
- Symbolische Ausführung
- Symmetrische Verschlüsselung
- SYN-Flood
- Synthetische Medien
- Sysmon
- Systemhärtung
T
- t-Closeness
- Tabletop-Übung
- Tabnabbing
- TACACS+
- Tactics, Techniques and Procedures (TTPs)
- Tailgating
- Taktische Threat Intelligence
- Tarn-Malware (Stealth)
- TAXII Protocol
- TCP
- TCP-Reset-Injection
- TCP/IP
- Teardrop-Angriff
- Tech-Support-Betrug
- TEMPEST-Angriff
- Tetragon
- The Sleuth Kit
- Threat Hunter
- Threat Hunting
- Threat Intelligence
- Threat Landscape (Bedrohungslage)
- Timeline-Analyse
- Timing-Angriff
- TLP
- TLS (Transport Layer Security)
- TLS-Handshake
- TOCTOU-Schwachstelle
- Token Smuggling
- Token-Impersonation
- Tokenisierung (Datenschutz)
- Tor / Tor Browser
- Tracking-Pixel
- Trackware
- Transparenter Proxy
- Trezor Wallet
- TrickBot
- Trike
- Triple DES (3DES)
- TRITON / TRISIS
- Trivy
- Trojanisches Pferd
- Trusted Execution Environment (TEE)
- Trusted Platform Module (TPM)
- Trusted Types
- Twofish
- Type-Confusion-Schwachstelle
- Typosquatted Package
- Typosquatting
U
- U2F (Universal 2nd Factor)
- UAC-Bypass
- UBA (User Behavior Analytics)
- UDP
- UEBA (User and Entity Behavior Analytics)
- Uebertragbarer Adversarialer Angriff
- UEFI-Rootkit
- UNC-Cluster (Uncategorized)
- Unsichere Deserialisierung
- Unsichere direkte Objektreferenz (IDOR)
- Unsicherer Datei-Upload
- Unternehmensweites Risikomanagement (ERM)
- USB Rubber Ducky
- Use-After-Free
- User Account Control (UAC)
- User-Agent-Spoofing
- Username-Enumeration
- UTM (Unified Threat Management)
V
- Verbindliche Zugriffskontrolle (MAC)
- Verhaltensbiometrie
- Verhaltenserkennung
- Verifiable Credential
- VERIS-Framework
- Verschlüsselung
- Vertikale Privilegieneskalation
- Video-Deepfake-Angriff
- Virtueller CISO (vCISO)
- Vishing
- VLAN
- VLAN-Hopping
- Voice-Cloning-Angriff
- VoIP-Sicherheit
- Volatility Framework
- VoLTE-Sicherheit
- VPN (Virtual Private Network)
- VPN-Kill-Switch
- VPN-Leak
- VPN-Split-Tunneling
W
- WAAP
- Wabbit
- Wallet-Drainer
- WannaCry
- Wardriving
- Watering-Hole-Angriff
- Wazuh
- Weaponized Exploit
- Web Application Firewall (WAF)
- Web Cache Deception
- Web-Skimmer / E-Skimming
- WebAuthn
- WebRTC-IP-Leak
- WEP (Wired Equivalent Privacy)
- Whaling
- White Team
- White-Hat-Hacker
- WHOIS-Abfrage
- Wi-Fi 6E
- Wi-Fi 7
- Wi-Fi Pineapple
- Wi-Fi-Deauthentication-Angriff
- Wiederherstellungsphrase
- Wildcard-Zertifikat
- Wiper-Malware
- WireGuard
- Wireshark
- Wissensfaktor (Etwas, das man weiss)
- WMI-Event-Subscription-Persistenz
- Workforce Identity
- Workload-Identität
- Wörterbuchangriff
- WPA2
- WPA3
- WPS-Angriff
- Write Blocker
X
Y
Z
- Zahlungsbetrug
- Zeek
- Zeitbasiertes Einmalpasswort (TOTP)
- Zeitbombe
- Zeitfaktor (Authentifizierung)
- Zero Trust Network
- Zero-Day-Exploit
- Zero-Day-Schwachstelle
- Zero-Knowledge-Beweis (ZKP)
- Zerologon (CVE-2020-1472)
- Zertifikats-Pinning
- Zertifikatsperrliste (CRL)
- Zertifizierungsstelle (CA)
- Zigbee-Sicherheit
- ZK-Rollup
- zk-SNARK
- zk-STARK
- Zombie-Rechner
- ZTNA
- Zustandslose Firewall
- Zwei-Faktor-Authentifizierung (2FA)