Glossary

Multi-factor authentication using something people have that is unlocked by something people know or are. Note, while a memorised secretpassword may be used as part of passwordless multi-factor authentication (e.g. to unlock access to a cryptographic private key stored on a device) it is not a primary authentication factor.

A piece of software designed to remedy vulnerabilities or improve the usability or performance of operating systems, applications, IT equipment or OT equipment.

A metallic (copper) or fibre-optic cable used for routing signals between two components in an enclosed container or rack.

A group of sockets or connectors that allow manual configuration changes, generally by means of connecting patch cables.

The action of updating, fixing, or improving a computer program.

Part of digitally transmitted data that is the fundamental purpose of the transmission. In the cyber security context, normally the part of a malware program that performs a malicious action.

A decentralised file sharing system. Files are stored on and served by the personal computers of the users.

A security assessment designed to exercise real-world scenarios in an attempt to achieve a specific goal, such as compromising critical systems or data.

A property of key establishment whereby compromise of long-term keying material does not enable recovery of previously established session keys.

A device used to share a set of peripherals between multiple computers. For example, a keyboard, video monitor and mouse.