Network Security Assessment, 3rd Edition

Glossary of Terms

ACL

An access control list defines a security policy within a system.

AD

Active Directory is used within Microsoft environments as a directory service.

AEAD

Authenticated Encryption with Associated Data is a modern block cipher mode of operation that simultaneously provides confidentiality, integrity, and authenticity assurances on the data.

AES

The Advanced Encryption Standard is a cryptosystem established by NIST.

AFP

The Apple Filing Protocol is a network file service protocol for Apple OS X.

AH

The IPsecAuthentication Header guarantees integrity and data origin authentication of IP packets. Further, it can optionally protect against replay attacks.

AJP

The Apache JServ Protocol is a binary protocol used to proxy inbound requests from a frontend HTTP web server to a backend Java servlet container (e.g., JBoss).

ARP

Address Resolution Protocol is a Layer 2 protocol used within IPv4 networks to map IP addresses to MAC hardware addresses using a data link protocol (e.g., IEEE 802.3 Ethernet or 802.11 WiFi).

AS

A BGP Autonomous System number defines IP routing prefixes under the administrative control of a single entity (typically an Internet service provider).

ASLR

Address Space Layout Randomization is a memory-protection mechanism used by operating systems to guard against memory corruption attacks by randomizing the location of useful content within memory.

ASN.1

Abstract Syntax Notation One is a standard and notation that describes rules ...