Glossary
Find here some terms you may not heard of...
DevOps: "DevOps" combines development and operations to unite people, process and technology in all software lifecycle [source].
GitOps: "GitOps" uses Git repositories as a single source of truth to deliver infrastructure as code [source].
DevSecOps: "DevSecOps" stands for development, security, and operations. It's an approach to culture, automation, and platform design that integrates security as a shared responsibility throughout the entire IT lifecycle [source].
SasS: short for "Software as a Service".
SAST: short for "Static Application Security Testing". Analysing source code to identify vulnerabilities.
DAST: short for "Dynamic Application Security Testing". Analysing the application from the outside using the available outputs and inputs (a black-box approach).
IAST: short for "Interactive Application Security Testing". Combine static and dynamic techniques to improve testing [source].
SDLC: short for "Software Development Lifecycle". Is the cost-effective and time-efficient process that development teams use to design and build high-quality software [source].
SCA: short for "Software Composition Analysis". Analysing dependencies in a codebase to manage exposure to security and/or license compliance issues.
SRE: short for "Site Reliability Engineering".
K8s: short-way to write "Kubernetes".
IaC: short for "Infrastructure as Code", using DevOps methodology and versioning with a descriptive model to define and deploy infrastructure [source].
SBOM: short for "Software Bill Of Materials", is a nested inventory that make up software components. They include critical information about the libraries, tools, and processes used to develop, build, and deploy a sofware artifact [source].
AIO: short for "All In One".
CVE: short for "Common Vulnerabilities and Exposures", is a list of publicly disclosed computer security flaws [source].
VM: short for "Virtual Machine".
AWS: short for "Amazon Web Services".
GCP: short for "Google Cloud Platform".
GH: short for "GitHub".
GHAS: short for "GitHub Advanced Security".
CSPM: short for "Cloud Security Posture Management".
IDS: short for "Intrusion Detection System".
IPS: short for "Intrusion Protection System".
SOC: short for "System and Organization Controls".
CERT: short for "Computer Emergency Response (or readiness) Team".
CSIRT: short for "Computer Security Incident Response Team".
CIRT: short for "Computer Incident Response Team" or (less frequently) "Cybersecurity Incident Response Team".
SOAR: short for "Security Orchestration, Automation and Response".
SIEM: short for "Security Information and Event Management".
SIM: short for "Security Information Management".
SEM: short for "Security Event Management".
DFIR: short for "Digital Forensics and Incident Response".
SCAP: short for "Security Content Automation Protocol".
CSP: short for "Content Security Policy".
OSS: short for "Open Source Software".
XSS: short for "Cross-Site Scripting".
RSS: short for "Really Simple Syndication", a XML format to distribute content in the web.
REST: acronym for "REpresentational State Transfer", an architectural style for distributed hypermedia systems.
E2E: short for "End to End".
SSL: short for "Secure Sockets Layer", to protect connections.
TLS: short for "Transport Layer Security", transport protocol.
JWT: short for "JSON Web Token".
OTP: short for "One Time Password".
OATH: short for "Open Authentication".
X509: standard defining the format of public key credentials.
UFW: short for "Uncomplicated Firewall", a Linux firewall.
DSL: short for "Domain-specific language".
CI: short for "Continuous Integration".
CD: short for "Continuous Delivery".
HW: short for "Hardware".
OCI: short for "Oracle Cloud Infrastructure" or "Open Container Initiative".
MDR: short for "Managed Detection and Response".
MSS: short for "Managed Security Services".
CIS: short for "Cyber Intelligence Services" (also the abbreviation for the "Center of Internet Security").
RTS: short for "Red Team Services".
GRC: short for "Governance, Risk and Compliance".
CTI: short for "Cybersecurity Technology Integration".
Last updated