Terminology Index

Glossary

2953 terms

Burnout

The exhaustion, cynicism, and reduced effectiveness that affect security analysts after prolonged stress, high alert volume, and relentless pace. It is a serious operational risk because it degrades detection quality and drives staff turnover.

Burp Suite Workflow

The practical way a web application tester uses Burp Suite, an intercepting proxy and testing toolkit, to capture, inspect, modify, and replay HTTP traffic during an authorized assessment.

Burst Detection

Burst detection identifies a rapid increase in events or volume relative to an appropriate historical, seasonal, or peer baseline.

Business Associate Agreement (BAA)

A business associate agreement is a HIPAA-compliant contract that defines permitted uses and disclosures of protected health information and requires a business associate to safeguard it and perform specified duties.

Business Continuity

Planning that helps critical operations continue during or after disruption.

Business Email Compromise

A fraud scheme where an attacker uses a compromised or spoofed business email account to trick someone into sending money or sensitive data, often by impersonating an executive or vendor. It relies on deception more than malware.

Business Impact Analysis

A structured process that identifies an organization's critical processes, what they depend on, and the consequences of disruption over time, producing the recovery priorities and objectives that drive continuity planning.

Business Impact Coordination

Business impact coordination connects technical incident actions with safety, critical services, customers, dependencies, recovery objectives, and authorized business owners.

Business Logic Abuse Testing

Business logic abuse testing challenges application-specific invariants governing value, eligibility, approvals, ownership, limits, sequencing, entitlements, and one-time actions.

Business Logic Assessment

Business logic assessment tests whether important workflows preserve authorized actors, valid state transitions, value limits, ordering, approvals, uniqueness, concurrency, and rollback rules.

Business Logic Testing Methodology

A testing approach that targets flaws in an application's intended workflow and rules, rather than technical bugs, such as skipping a payment step, abusing discount logic, or bypassing an intended sequence. These flaws evade automated scanners.

Business Process and Data Scope

Business process and data scope identifies the services, workflows, data, systems, identities, vendors, people, locations, and dependencies relevant to an objective or obligation.

Business Risk Integration

Connecting cybersecurity risk to the organization's broader enterprise and business risks so cyber is managed as one element of overall risk, not in a silo. It lets leaders weigh cyber risk alongside financial, operational, and strategic risks.

Business-Impact Coordination

Business-impact coordination brings service, operations, continuity, safety, legal, communications, and security owners into response decisions that can affect essential functions.

C2 Behavioral Detection

C2 behavioral detection combines endpoint, network, DNS, TLS, proxy, identity, prevalence, and threat context to identify communication patterns consistent with command and control.

C2 Communication Detection

Detections that identify command-and-control traffic, the channel a compromised host uses to receive attacker instructions, by spotting patterns like regular beaconing, suspicious destinations, or anomalous protocols.

C2 Hunts

Threat hunts specifically aimed at finding command-and-control activity that detections missed, by searching telemetry for beaconing patterns, rare external connections, and other signs of an attacker's hidden communication channel.

Because attackers tune C2 to evade automated detection, hunters proactively look for it using techniques like frequency analysis of outbound connections and stacking of rare destinations. A successful C2 hunt uncovers an active foothold and feeds new detections back to the SOC.

Introduced in: Threat Hunting Fundamentals

Examples

Hunting for low-and-slow beaconing hidden among normal web traffic.
Stacking outbound connections to find rare, suspicious destinations.
Searching for jittered check-ins that evaded interval-based detection.

Frequency Analysisrelates_to C2 Communication Detectionrelates_to Data-Driven Huntingrelates_to Campaign Trackingrelates_to C2 Communication Detectionrelates_to Beaconsprerequisite_of Hunt Hypothesisprerequisite_of Defense Evasion Huntsrelates_to

CI/CD Compromise Response

CI/CD compromise response scopes and contains attacks across source control, workflows, runners, dependencies, artifacts, signing keys, deployment identities, infrastructure state, and deployed cloud resources.

CI/CD Credential Management

Securing the secrets, API keys, tokens, and credentials, used by continuous integration and deployment pipelines. Because pipelines are powerful and automated, their credentials are a prime target and must be vaulted, scoped, and rotated.

CI/CD Identity Security

CI/CD identity security limits and records what each workflow, job, runner, and deployment stage can read, modify, publish, sign, or deploy.

CI/CD Security Integration

Building security checks directly into continuous integration and deployment pipelines, so issues like vulnerabilities, misconfigurations, and exposed secrets are caught automatically before code reaches production.

CIA Triad

The CIA triad is a model for thinking about confidentiality, integrity, and availability.

CIAM Authenticator Strategy

A CIAM authenticator strategy matches password, passkey, security key, one-time code, push, out-of-band, and federation methods to service risk, populations, enrollment, reauthentication, recovery, and support.

CIAM Availability and Scale

CIAM availability and scale engineering supports measured legitimate and hostile demand across sign-in, token, verification, recovery, revocation, administration, messaging, and dependency failure.

CIAM Build Buy Boundary

The CIAM build-buy boundary identifies what a provider operates and what the customer organization still owns across architecture, configuration, authorization, linking, recovery, data, fraud, monitoring, support, testing, and vendor risk.

CIAM Build vs Buy

The decision of whether to build a custom customer identity system or adopt a commercial CIAM platform. It weighs control and customization against the cost, time, and security burden of building and maintaining identity in-house.

CIAM Consent Management

Capturing, recording, and honoring customers' choices about how their personal data is collected and used, in a customer identity system. It is essential for privacy compliance and for maintaining customer trust.

CIAM Data Retention and Deletion

CIAM data retention and deletion assign justified schedules and disposal actions to profiles, authenticators, sessions, events, consents, support, fraud, tenants, tokens, and verification data.

CIAM Data Subject Rights

The mechanisms a customer identity system provides to fulfill individuals' privacy rights, such as accessing, correcting, deleting, or exporting their personal data, as required by privacy regulations.

CIAM Distinct from IAM

The recognition that customer identity (CIAM) differs fundamentally from workforce identity (IAM): it serves millions of external, untrusted users who self-register, demands privacy and consent handling, and prioritizes a low-friction experience over administrative control.

CIAM Evaluation Criteria

The factors used to compare and select a customer identity platform, such as scalability, authentication options, fraud and bot defense, privacy and consent features, developer experience, and total cost. They turn a vague 'which CIAM?' into a structured decision.

CIAM Fraud Integration

Connecting a customer identity platform with fraud-detection signals and systems so that risk, device intelligence, behavior, and reputation, can shape authentication and account decisions in real time, blocking abuse without burdening legitimate customers.