🔨
Brute‑Force Attack
Threats
Exhaustive or high-volume credential/key guessing.
strong password
password manager
account takeover
Glossary
Privacy terms glossary
Plain-language explanations for encryption, tracking, compliance, and security concepts.
411 terms
(page 3 of 18)
🏅
Bug Bounty Program
Security
Incentivized vulnerability disclosure with defined scope and process.
responsible disclosure
security audit
exploit
📌
Business Continuity
Data Management
Program ensuring critical operations continue during disruptions, covering people, processes, and technology.
disaster recovery
incident response
information governance
📱
BYOD (Bring Your Own Device)
Security
Policy model allowing personally owned devices to access organizational resources under controls.
shadow it
endpoint security
information security
📷
Camera Permission
Privacy
OS permission gating access to camera APIs.
app permissions
mobile permissions
biometric authentication
🤖
CAPTCHA
Security
Bot mitigation challenge-response mechanism.
bot detection
rate limiting
brute force attack
🇺🇸
CCPA
Privacy
California privacy statute defining consumer rights and business obligations.
opt out
data broker
privacy notice
🏛️
Certificate Authority (CA)
Security
PKI entity that signs and validates X.509 certificates.
tls
https
certificate pinning
🔁
Certificate Lifecycle
Encryption
Management of certificate issuance, renewal, rotation, monitoring, and revocation to maintain secure trust.
pki
certificate authority
certificate revocation
📌
Certificate Pinning
Security
Restricting TLS trust to specific keys/certificates.
certificate authority
tls
https
🧯
Certificate Revocation
Encryption
Mechanisms to invalidate certificates before expiry (CRLs/OCSP), with ecosystem reliability considerations.
pki
certificate authority
ocsp
📜
Certificate Transparency (CT)
Encryption
Public append-only logs for TLS certificates enabling monitoring and detection of CA mis-issuance.
certificate authority
pki
tls
🖱️
Clickjacking
Web Security
UI redressing attacks using overlays/iframes.
xss
security headers
session hijacking
🖱️
Clickwrap
Consent
Contract formation mechanism requiring an affirmative click to accept terms.
consent
privacy notice
terms of service
🧰
Client‑Side Encryption
Encryption
Encryption performed at the endpoint under user control.
zero knowledge encryption
encryption key
cloud encryption
☁️
Cloud Encryption
Encryption
Encryption applied to cloud-stored data and services.
secure storage
client side encryption
zero knowledge encryption
☁️
Cloud Provider
Data Management
Third-party vendor providing compute/storage/networking services, often acting as a processor.
data residency
data processor
cloud encryption
☁️
Cloud Security
Security
Security controls for cloud environments: identity, network segmentation, encryption, monitoring, and governance.
cloud provider
cloud encryption
access control
🗄️
Cloud Storage
Data Management
Remote object/file storage service with access control, durability, and often integrated sharing.
cloud provider
cloud encryption
data residency
✅
Code Signing
Security
Use of digital signatures to authenticate software publishers and ensure integrity of executables and updates.
digital signature
supply chain attack
malware
✅
Consent
Consent
A lawful basis where an individual freely gives informed, specific permission.
user consent
opt out
privacy notice
😵💫
Consent Fatigue
Consent
Decision fatigue caused by repeated consent prompts and complex choices.
cookie banner
consent management platform
dark patterns
🧭
Consent Management Platform (CMP)
Consent
Platform to collect, manage, and propagate consent signals across vendors and purposes.
cookie consent
privacy notice
user consent
↩️
Consent Withdrawal
Consent
Mechanism allowing a user to revoke previously granted consent; should be as easy as giving consent.
consent
opt out
privacy settings