Glossary - Page 3 - MELIUS CyberSafe

The GIAC Web Application Penetration Tester (GWAPT)

Phil Clerkin November 10, 2023 No Comments

Definition: a certification that demonstrates an individual’s expertise in identifying and addressing security vulnerabilities in web applications. These individuals have demonstrated knowledge of web application exploits and penetration testing methodology.

Spear-phishing

Phil Clerkin November 10, 2023 No Comments

Definition: a targeted and personalised form of phishing.

Smishing

Phil Clerkin November 10, 2023 No Comments

Definition: phishing but via SMS.

Surveillance audit

Phil Clerkin November 10, 2023 No Comments

Definition: a review audit to ensure that an organisation is still adhering to the key elements of an ISO standard. Typically conducted annually.

Structured Query Language (SQL)

Phil Clerkin November 10, 2023 No Comments

Definition: a programming language designed for managing data held in a relational database.

SSL certificate validity

Phil Clerkin November 10, 2023 No Comments

Definition: SSL certificates are only valid for a set time. After just over one year (13 months), they must be renewed.

SQL Injection (Structured Query Language Injection) (SQLi)

Phil Clerkin November 10, 2023 No Comments

Definition: the placement of malicious code in SQL statements to manipulate or access databases. This can lead to the theft of data or malicious alteration of data.

Social Engineering

Phil Clerkin November 10, 2023 No Comments

Definition: a malicious actor deceives a victim in order to manipulate them and gain something.

SOC2 (Systems and Organisation Controls)

Phil Clerkin November 10, 2023 No Comments

Definition: an audit standard developed by the American Institute of Certified Public Accountants that evaluates controls related to security, availability, processing integrity, confidentiality and privacy. Generally adopted by orgaisation active [...]

SOC1 (Systems and Organisation Controls)

Phil Clerkin November 10, 2023 No Comments

Definition: an audit standard developed by the American Institute of Certified Public Accountants that evaluates a service organisation’s controls over financial reporting.

Archives: Glossary