Knowledge base

Short, tagged, searchable.

Terms, frameworks, and concepts used on an Australian defensive desk. No exploit steps.

12 entries

network hardening acsc-glossary

Physically isolated. No cable, no Wi-Fi, no 'just this jump host' to the internet. Removable media is still a path if you let it be.

malware network acsc-glossary

A herd of hijacked devices taking orders. Spam, floods, miners, and stuffing logins all rent the same cattle.

network IR acsc-glossary

Many compromised machines, one target, a flood. Availability dies; the data may still be fine. That is not comfort during checkout.

network hardening acsc-glossary

A filter on the way in and out, driven by rules. Default allow is a very expensive switch.

detection network acsc-glossary

Watches for unwanted activity and tells someone. Host or network. Alert without an owner is a screensaver.

detection network acsc-glossary

IDS with a fist. Identifies unwanted traffic and can block it in the moment. Mis-tune it and you become the outage.

network hardening acsc-glossary

Cut the network into smaller pieces. Segregation is the rule set between them. Flat is a gift.

network identity acsc-glossary

Coming in from outside the organisation's network, usually through a gateway. Treat it as privileged even when the user is not.

identity network acsc-glossary

A message or identity dressed as a trusted source. Email, SMS, caller ID, and websites all do this cheaply.

network concepts acsc-glossary

The S in HTTPS. Privacy and integrity for data on the wire. Certificates you actually manage.

network acsc-glossary

A tunnel plus some discipline. Encryption is common. A full-trust badge on the far side is optional and usually a mistake.

network identity concepts

Never trust, always verify. A VPN badge is not a day pass. Identity, device, path, and data each get asked again.

Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary