is a symmetric key block cipher that operates on 128-bit blocks and supports key sizes of 128, 192, and 256 bits. It is a joint development by NTT and Mitsubishi Electric Corporation.

is a symmetric key block cipher that operates on 64-bit blocks and supports key sizes of 128 bits.

is a stream cipher known for its simplicity and speed. It operates on variable-length keys and generates a keystream that is XORed with the plaintext to produce the ciphertext.

Is a stream cipher that is widely used in applications such as TLS. It operates on 512-bit blocks and supports key sizes of 128, 256 bits.

is one of the most widely used asymmetric encryption algorithms. It relies on the difficulty of factoring large prime numbers. The algorithm generates a public-private key pair, where the public key is used for encryption, and the private key is used for decryption. is often employed in secure email communication, SSL/TLS protocols, digital signatures, and key exchange.

is a key exchange algorithm that allows two parties to establish a shared secret key over an insecure communication channel. It enables secure communication even if an eavesdropper intercepts the exchange. is used in various protocols such as SSL/TLS, IPsec, and secure email.

is a family of asymmetric algorithms based on the mathematics of elliptic curves over finite fields.provides the same level of security as RSA but with smaller key sizes, making it computationally efficient. It is commonly used in resource-constrained environments such as mobile devices and Internet of Things (IoT) devices, is utilized in SSL/TLS, digital signatures, and secure key exchange.

is a widely used algorithm for creating and verifying digital signatures. It provides authentication, integrity, and non-repudiation of digital documents.uses the mathematics of modular exponentiation and discrete logarithms. It is commonly used in digital certificates, secure email, and secure file transfers.

ensures that you are communicating with the correct website or service

was the original security protocol used for wireless networks. However, it is now considered weak and easily compromised. Its use is strongly discouraged.

A is an improvement over WEP and provides stronger security. It uses TKIP (Temporal Key Integrity Protocol) for encryption and includes authentication mechanisms like WPA-PSK (Pre-Shared Key) and WPA-Enterprise, using an authentication server

s the current standard for wireless network security. It uses the AES (Advanced Encryption Standard) algorithm for encryption and offers stronger security than WPA. It supports both WPA2-PSK and WPA2-Enterprise authentication modes

is the latest iteration of Wi-Fi security protocols. It enhances security by introducing new features like SAE (Simultaneous Authentication of Equals) and stronger encryption methods

is an authentication framework used in wireless networks. It allows for different authentication methods to be used, such as EAP-TLS (Transport Layer Security), EAP-TTLS (Tunneled TLS),

(Flexible Authentication via Secure Tunneling

rules or protocols for secure connections over a network

authenticates the origin of packets

provides confidentiality, integrity, and authentication

only encrypts payload

- entire packet encryption

one-way incoming mail protocol that downloads emails onto a local device

a security feature on network switches that mitigates the risk of rogue DHCP serves and unauthorized network access

- security solutions designed to detect and respond to threats and malicious activities on endpoints

acts as the middle man between an organization’s on prem infrastructure and cloud, to ensure that both are secure

provides organizations with visibility, control, and protection for web traffic.

- network protocol that focuses on AAA, and managing user access to network resources

provides organizations with visibility, control, and protection for web traffic.

one-way incoming mail protocol that downloads emails onto a local device

facilitates the collection of information about devices on a network

facilitates the collection of information about devices on a network

a TCP/IP protocol used in sending and receiving mail

is responsible for delivery, while IP is responsible for the correct address to which the data is sent

- high level of access control security that requires all access to be predefined based on system classification, configuration, and authentication

- vulnerability assessment tool that assesses vulnerabilities in computer networks, systems, and apps

networking tool that manages network connections

- vulnerability assessment tool that assesses vulnerabilities in computer networks, systems, and apps

- a suite of network security tools for assessing the security of Wi-Fi networks, capturing network packets, and conducting various attacks on Wi=Fi encryption protocols

are cryptographic hash functions, which means they take any length input and produce a fixed-size output called a hash value or digest

wireless security protocol designed to secure Wi-Fi networks, more secure than WEP

a command line tool that allows you to trace the route a network packet takes from your computer to a destination IP address or hostname

federal law that requires financial institutions to share how they share and protect customer’s private information

- U.S. federal law that sets requirements for all US public company boards

- the range of IP addresses that are able to be assigned to devices within a network

technology that provides hardware-based encryption to protect data that is stored on the drive

- measure to estimate the average time between the failures of a system

the amount of time it’ll take to repair a system

the amount of time until a system is expected to fail

the maximum amount of time that is tolerable to have the systems down

- an authentication framework that controls access to a network, ensures that only authorized devices are granted access to the network resources

access to a resource is outlined by the owner

MDM strategy where organizations provide devices, while allowing limited personal use

- technology that allows OS and apps to be hosted and delivered to end-user devices over a network

manipulating DNS responses to redirect traffic from malicious domains to a non-existent or controlled destination

the process of capturing the contents inside of a computer’s RAM at a specific moment

- tests performed by a computer system to verify hardware components are functioning properly during start up

- a network authentication protocol that provides secure authentication for client-server applications over an untrusted network, helps prevent eavesdropping, replay attacks, and unauthorized access

tamper-resistant hardware device designed for secure key management, used to safeguard sensitive information like cryptography keys, certificates, and other critical data

- a network architecture design that separates the internal network from the internet (like a network air gap)

- networking device that enables secure remote access to a private network over the internet

- email retrieval protocol that allows clients to manage emails stored on the mail server

a standard for securing email messages with encryption and digital signatures

a team or individual responsible for the storage, management, and protection of data

the expected financial impact of a specific risk over one year

the expected loss of revenue from a specific risk

the frequency of the specific event occurring within a one-year period

- a process that involves measuring and recording the integrity of various boot components during startup like firmware, bootloader, OS kernel by the TPM

verifies the measured components’ integrity against a known set of trusted values

security feature that prevents the execution of malicious software during the boot process

data protection and privacy for individuals in the EU

- a standard for protecting credit cards

data protection and privacy for individuals in the EU

- security controls and best practices frameworks for secure cloud computing environments

- U.S. federal law framework that protects gov. info, ops, and assets

requires financial institutions to explain how they share and protect their customer’s private information

US federal law that sets requirements for US public company boards, management, and public accounting firms

This standard specifies the requirements for an information security management system (ISMS). It provides a framework for implementing and managing security controls to protect information assets.

: This standard provides a code of practice for information security controls. It offers guidance on selecting, implementing, and managing security controls to address specific risks identified in an organization. PII

This standard focuses on information security risk management. It provides guidelines for identifying, assessing, and treating information security risks in a systematic and consistent manner.

This standard offers specific guidelines for information security controls in cloud computing environments. It addresses security considerations related to the use of cloud services and provides guidance for both cloud service providers and cloud customers

This standard focuses on information security risk management. It provides guidelines for identifying, assessing, and treating information security risks in a systematic and consistent manner.

This standard focuses on privacy protection in public cloud computing environments. It provides guidelines for the implementation of controls to protect personal data in cloud-based services.

This standard addresses business continuity management for information and communication technology (ICT) systems. It provides guidelines for planning, establishing, implementing, operating, monitoring, reviewing, and maintaining ICT continuity.This standard addresses business continuity management for information and communication technology (ICT) systems. It provides guidelines for planning, establishing, implementing, operating, monitoring, reviewing, and maintaining ICT continuity.

tool that performs port scanning or reconnaissance

a command that is used for searching and filtering text files or streams based on patterns or regular expressions

open source network scanning tool, identifies open ports, and gathers information about hosts and services that are running in a network

command line tool that is used for making HTTP requests and interacting with web servers, can be used to download files, send data to web servers, and test APIs

command used to display the first few lines of a file or beginning of a stream

command that is used to trace the route a packet takes from the source device to the destination device

command used to view active network connections, listening ports, routing tables, network interface stats

- command that is used to establish and interact with network connections, can be used for data transmission, port scanning, file transfer, and testing

command used for querying DNS servers to get information about domain names, IP addresses, and more.

combines the features of ping and tracert

used for security auditing and testing of firewalls and networks

sets permissions of files or directories

a network protocol used to prevent loops in Ethernet networks

) - the maximum size of a data packet that can be transmitted over a network protocol without fragmentation

- unit of communication in STP protocol

- a dedicated system used as an access point for connecting and managing other systems in a network

process for translating IP address between different network domains, Layer 3, used to overcome IPv4 limitations by allowing multiple devices with private IP address to share a single public IP address

- technology that allows the creation of virtual boundaries around realworld geographic area

- enables direct USB connection between devices

manages the authentication and authorization process for users within a network

(Knowledge-Based Authentication)

Windows group policy settings that defines what a system looks like and how it behaves to a group of users

centralized log management system

- vulnerability scanning tool that helps identify vulnerabilities, and take appropriate actions to mitigate them

Port numbers FTP (File Transfer Protocol)

SSH (Secure Shell):

Telnet

SMTP (Simple Mail Transfer Protocol):

SMTP (Simple Mail Transfer Protocol):

DNS (Domain Name System)

DHCP

DNS (Domain Name System)

HTTP (Hypertext Transfer Protocol)

HTTPS (Hypertext Transfer Protocol Secure):

HTTP (Hypertext Transfer Protocol)

RDP (Remote Desktop Protocol)

SNMP (Simple Network Management Protocol):

NTP (Network Time Protocol):

LDAP (Lightweight Directory Access Protocol):

IMAP (Internet Message Access Protocol)

POP3 (Post Office Protocol version 3)

SMB Server Message Block

AFP (Apple Filing Protocol):

RADIUS (Remote Authentication Dial-In User Service):

SIP (Session Initiation Protocol):

FTPS (FTP Secure)

TFTP (Trivial File Transfer Protocol):