atsdopi@secure:~$ boot --mode=production
0%press ESC to skip
ATSDopi
Beginner-friendly cyber vocabulary

Cyber Glossary

Clear definitions and practical examples for people who want to understand the theme without drowning in jargon.

WebEmailIdentityIncidentVulnerabilityReconDefense

CSP

Content Security Policy

Web

A browser policy that limits where scripts, styles, images and frames can load from.

A strict CSP can reduce the impact of XSS by blocking unexpected scripts.

HSTS

HTTP Strict Transport Security

Web

A header that tells browsers to use HTTPS for future visits.

max-age=31536000; includeSubDomains

SPF

Sender Policy Framework

Email

A DNS TXT record listing servers allowed to send email for a domain.

v=spf1 include:_spf.google.com -all

DKIM

DomainKeys Identified Mail

Email

A signature system that helps prove an email was authorized by the sending domain.

DKIM uses a public key published in DNS.

DMARC

Domain-based Message Authentication

Email

A policy layer that tells receivers what to do when SPF or DKIM checks fail.

p=quarantine or p=reject after monitoring.

TLS

Transport Layer Security

Web

The protocol behind HTTPS, used to encrypt traffic and authenticate servers.

A valid TLS certificate protects users from passive network interception.

JWT

JSON Web Token

Identity

A compact token format commonly used for authentication and authorization claims.

JWTs should expire and should not use alg=none.

IOC

Indicator of Compromise

Incident

A technical clue such as an IP, domain, URL, hash or email linked to suspicious activity.

A phishing URL in a log can be an IOC.

CVE

Common Vulnerabilities and Exposures

Vulnerability

A public identifier for a known security vulnerability.

CVE-2024-3094 identifies the XZ Utils backdoor incident.

OSINT

Open Source Intelligence

Recon

Information gathered from public sources without intrusive access.

Checking public DNS records is OSINT.

SSRF

Server-Side Request Forgery

Web

A bug where a server can be tricked into requesting internal or unintended resources.

Blocking private IP ranges helps reduce SSRF risk.

WAF

Web Application Firewall

Defense

A filtering layer that can detect and block common malicious web traffic patterns.

Cloudflare WAF can block common SQL injection probes.

Want to apply these concepts?

Open the cyber toolkit and test headers, DNS, TLS, privacy and identity signals on public assets you own.

Open tools