Revision of it-security-terms-explained.txt

scusi revised this gist 9 hours ago · af0c113

1 file changed, 25 insertions, 2 deletions

it-security-terms-explained.md

scusi revised this gist 2 weeks ago · 6b933ed

2 files changed, 8 insertions, 7 deletions

it-security-terms-explained.md (file created)

it-security-terms-explained.txt (file deleted)

scusi revised this gist 2 weeks ago · 6818e35

1 file changed, 7 insertions

it-security-terms-explained.txt (file created)

			@@ -1,8 +1,31 @@
	1	+	## IT-Sec terms explained
	2	+
	3	+	threat actor = someone who wants to punch you in the face
1	4
2		-	* threat actor = someone who wants to punch you in the face
3	5		* threat = the punch being thrown
4	6		* vulnerability = your inability to defend against the punch
5	7		* risk = the likelihood of getting punched in the face
6	8		* acceptable risk = your willingness to be punched in the face
	9	+	* attack surface = every part of you that can be hit, plus every place you hang out where someone could take a swing
	10	+	* attack vector = the route the fist takes to reach you: from the front, from behind, or via your buddy who holds you still
	11	+	* exploit = the specific technique that takes advantage of the gap in your guard, like the hook that lands right when you drop your hands
	12	+	* zero-day = a punch you didn't know existed, so you never trained against it
	13	+	* social engineering = someone kindly asks you to lower your hands for a sec, and you do
	14	+	* control / mitigation = keeping your guard up, keeping your distance, learning to box
	15	+	* defense in depth = guard, helmet, mouthguard, and a friend who steps in
	16	+	* residual risk = it still hurts despite the helmet and the guard
	17	+	* risk transfer = health insurance paying for your new teeth
	18	+	* risk avoidance = staying out of the bar where fights break out every night
	19	+	* reducing the attack surface = not going to every bar, not arguing with everyone, not getting into every fight
	20	+	* threat intelligence = knowing who in town likes to punch people, where he hangs out, and that he's left-handed
	21	+	* detection = seeing the punch coming before it lands
	22	+	* dwell time = the time between the first punch and the moment you realize you're being beaten up
	23	+	* lateral movement = after the face, he goes for the liver
	24	+	* persistence = he's waiting outside your front door again tomorrow
	25	+	* incident response = stopping the bleeding, getting away, calling the police, looking for your tooth
	26	+	* red team = a friend who attacks you with permission so you can find your gaps
	27	+	* false positive = ducking because someone just wanted to wave
	28	+	* security awareness = you've finally realized that "could you lower your hands for a sec?" is not an innocent request
	29	+
7	30
8		-	source: https://danielmiessler.com/blog/explaining-threats-threat-actors-vulnerabilities-and-risk-using-a-real-world-scenario/
	31	+	inspired by: https://danielmiessler.com/blog/explaining-threats-threat-actors-vulnerabilities-and-risk-using-a-real-world-scenario/

		@@ -0,0 +1,8 @@
1	+
2	+	* threat actor = someone who wants to punch you in the face
3	+	* threat = the punch being thrown
4	+	* vulnerability = your inability to defend against the punch
5	+	* risk = the likelihood of getting punched in the face
6	+	* acceptable risk = your willingness to be punched in the face
7	+
8	+	source: https://danielmiessler.com/blog/explaining-threats-threat-actors-vulnerabilities-and-risk-using-a-real-world-scenario/

		@@ -1,7 +0,0 @@
1	-	threat actor = someone who wants to punch you in the face
2	-	threat = the punch being thrown
3	-	vulnerability = your inability to defend against the punch
4	-	risk = the likelihood of getting punched in the face
5	-	acceptable risk = your willingness to be punched in the face
6	-
7	-	source: https://danielmiessler.com/blog/explaining-threats-threat-actors-vulnerabilities-and-risk-using-a-real-world-scenario/

		@@ -0,0 +1,7 @@
1	+	threat actor = someone who wants to punch you in the face
2	+	threat = the punch being thrown
3	+	vulnerability = your inability to defend against the punch
4	+	risk = the likelihood of getting punched in the face
5	+	acceptable risk = your willingness to be punched in the face
6	+
7	+	source: https://danielmiessler.com/blog/explaining-threats-threat-actors-vulnerabilities-and-risk-using-a-real-world-scenario/