Security & Observability Glossary

The study and practice of crafting inputs that intentionally cause ML models to produce incorrect outputs — including ev…

The potential impact — in terms of systems, data, and services affected — of a security breach or failure propagating th…

The approach of expressing, automating, and continuously verifying compliance controls as machine-readable policy script…

A technology that protects data in use by performing computation inside a hardware-based Trusted Execution Environment (…

A publicly disclosed identifier assigned to a specific security vulnerability or exposure by the CVE Program (maintained…

The legal and regulatory principle that data is subject to the laws and governance of the country or jurisdiction where …

Mechanisms to detect and absorb or deflect volumetric (L3/L4) and application-layer (L7) denial-of-service attacks, incl…

A mathematical framework for sharing information about a dataset while providing formal guarantees that the privacy of i…

A revolutionary technology that runs sandboxed programs in the Linux kernel without changing kernel source code or loadi…

A distributed ML training technique where model gradients — not raw data — are aggregated across decentralized devices o…

A form of encryption that allows mathematical operations to be performed directly on ciphertexts. The result, when decry…

A service that creates, maintains, and manages digital identities and provides authentication as a service to relying ap…

Observable artifacts — such as malicious IP addresses, file hashes, domain names, registry keys, or network signatures —…

A privileged access management pattern where elevated permissions are granted on-demand for a specific task window (minu…

A managed cryptographic service that generates, stores, rotates, and audits encryption keys using hardware security modu…

A prompt injection or manipulation technique that bypasses the safety guardrails of a Large Language Model, causing it t…

A globally accessible knowledge base of adversary tactics, techniques, and procedures (TTPs) based on real-world observa…

The set of practices that ensure ML model artifacts — from training datasets and base models to fine-tunes and inference…

A mutual authentication protocol where both the client and the server authenticate each other using X.509 certificates b…

The practice of dividing a computer network into subnetworks or zones to improve performance and security — limiting the…

A standardized list of the most critical API vulnerability categories, including Broken Object Level Authorization (BOLA…

A phishing-resistant FIDO2 credential that replaces passwords with cryptographic public/private key pairs stored on the …

An authorized, simulated cyberattack performed by security professionals to identify exploitable vulnerabilities in syst…

A machine-readable, formal record of all components, libraries, and dependencies in a software artifact — including vers…

A dedicated infrastructure layer for service-to-service communication that handles traffic management, mutual TLS, obser…

The practice of embedding security testing, threat modeling, and policy enforcement earlier in the SDLC — at the IDE, PR…

An attack that extracts secrets from a system by analyzing incidental physical signals — such as timing differences, pow…

A category of security platforms that collect alerts from multiple tools, orchestrate cross-tool workflows, and automate…

An open standard for securely identifying software workloads in dynamic and heterogeneous environments. SPIFFE IDs (in U…

The behavior patterns of a threat actor — tactics (the why/goal), techniques (the how), and procedures (the specific imp…

A high-performance Linux kernel networking framework that runs eBPF programs at the earliest possible point in the netwo…

A cryptographic method in which a prover convinces a verifier that a statement is true without revealing any information…

A security model that requires continuous verification of every user, device, and network flow, regardless of whether th…