Learn

Cybersecurity terms in plain words

Short, simple meanings of common network and cyber security words.

Most of these are enterprise products and services that TacUNS does not offer. A term has a In TacUNS line only where it relates to our Android firewall or free tools.

Firewalls and network security

Network Security: Everything that protects a network and the data moving across it from misuse or attack.
Network Firewall: A gatekeeper that allows or blocks network traffic according to rules.
Next Generation Firewall (NGFW): A Next-Generation Firewall also recognises applications and threats, not only addresses and ports.
Hardware Firewall: A firewall that runs on its own physical device, usually protecting an office or data centre.
Software Firewall: A firewall that runs as a program on a device.In TacUNS: TacUNS Firewall is a software firewall for Android phones.
Cloud Firewall: A firewall run in the cloud that filters traffic without equipment on site.
Firewall as a Service: A cloud firewall delivered and maintained as a service, often called FWaaS.
Managed Firewall: A firewall that an outside provider sets up, watches and maintains for an organisation.
Hybrid Mesh Firewall: Firewalls in offices, data centres and the cloud managed together under one set of rules.
Firewall Management: The daily work of keeping firewall rules, updates and logs correct.
Unified Threat Management (UTM): A UTM Firewall combines firewall, intrusion prevention, filtering and other checks in one box.
Intrusion Prevention System (IPS): Intrusion Prevention watches traffic for known attack patterns and stops them.
Web Application Firewall (WAF): A filter placed in front of a website that blocks attacks aimed at the site itself.
Network Access Control (NAC): Checks a device before letting it join a network.
Network Detection and Response (NDR): Watches network traffic for suspicious behaviour and helps teams respond.

VPN and remote access

VPN: A Virtual Private Network creates an Encrypted Tunnel between a device and a server.In TacUNS: TacUNS uses Android's VPN interface locally. It does not send traffic to a VPN server.
SSL VPN: A VPN that uses the same encryption as secure websites, often through a browser or small client.
Remote Access VPN: Lets staff connect safely to a company network from outside the office.
Split Tunneling: Sends some traffic through a VPN and lets other traffic go directly.
Kill Switch: A VPN feature that cuts internet access if the VPN connection drops.
WireGuard: A modern open-source VPN protocol known for its small code size.
Dedicated IP: An internet address used by one customer of a VPN service, not shared with others.
RAM-Only Servers: VPN servers that keep data in memory only, so it is lost when they restart.
Public Wi-Fi Protection: Steps that reduce the risks of shared networks, such as using encrypted websites and DNS.
Secure Wi-Fi: A wireless network using strong encryption and access control.
IP Leak Protection: Stops a device's real internet address appearing outside a VPN.
DNS Leak Protection: Stops website look-ups going somewhere other than the intended DNS server.In TacUNS: TacUNS stops apps using their own private DNS to skip your blocks, in the cases it has been tested against.
WebRTC Leak Protection: Stops the browser's real-time features from revealing a device's address.In TacUNS: The free Local IP Analyzer tool shows what your browser reveals.

Zero trust and secure access

Zero Trust: A security approach that checks every request and never assumes trust because of location.
Zero Trust Network Access (ZTNA): Gives a user access only to the specific application they need, not the whole network.
SASE: Secure Access Service Edge combines networking and security checks in one cloud service.
SD-WAN: Software that chooses the best path for traffic across an organisation's network links.
Secure Web Gateway (SWG): Filters staff web traffic to block dangerous sites and enforce policy.
CASB: A Cloud Access Security Broker controls how staff use cloud applications.
Remote Browser Isolation: Opens websites on a remote computer so risky code does not reach the user's device.
Identity and Access Management (IAM): Controls who a person is and what they may access.
Privileged Access Management (PAM): Protects and monitors powerful administrator accounts.
Multi-Factor Authentication (MFA): Asks for a second proof, such as a code, as well as a password.
Passwordless Authentication: Signing in with a device or biometric check in place of a password.

Detection and response

Endpoint Security: Protection for individual devices. Endpoint Protection covers phones, laptops and servers.
Endpoint Protection Platform (EPP): Software that prevents known threats on devices.
Endpoint Detection and Response (EDR): Records device activity so teams can find and respond to attacks.
Extended Detection and Response (XDR): Brings together signals from devices, networks, email and cloud.
Managed Detection and Response (MDR): An outside team watches for threats and responds for an organisation.
Security Operations Center (SOC): The team that handles Security Operations: watching alerts and investigating them.
Security Information and Event Management (SIEM): Collects logs in one place and raises alerts.
Threat Intelligence: Useful knowledge about attackers, their methods and their infrastructure.
Threat Hunting: Actively searching for attackers who have not triggered an alert.
Incident Response: The planned steps for containing and recovering from a security incident.
Vulnerability Management: Finding, ranking and fixing security weaknesses. Vulnerability Scanning is the finding part.
Exposure Management: Tracking which systems attackers could reach and which risks matter most.
Penetration Testing: An authorised, simulated attack that finds weaknesses before criminals do.
Ransomware Protection: Anti-Ransomware measures such as backups, updates and blocking known threats.
Mobile Threat Protection: Tools that look for risks on phones, such as dangerous apps and networks.
Security Posture Management: Continuously checking that security settings are correct.
Security Awareness Training: Teaches people to recognise scams and handle data safely.In TacUNS: The free TacUNS courses and blog support Security Awareness.

DNS, web and email

DNS Security: Protecting the look-ups that turn website names into addresses.In TacUNS: TacUNS checks these look-ups on the phone.
DNS Firewall: Blocks a device from looking up harmful or unwanted website names.In TacUNS: TacUNS blocks listed names on the phone.
DNS Filtering: Allows or blocks website names using rules and lists.In TacUNS: TacUNS uses your rules and the protection lists you choose.
Secure DNS: DNS sent in encrypted form, so others on the network cannot read or change it easily.In TacUNS: TacUNS can use encrypted DNS with the server you choose.
Private DNS: Android's setting for encrypted DNS.In TacUNS: TacUNS warns when this setting affects website blocking.
DNS Reputation: A rating of how trustworthy a domain or DNS server appears.
URL Filtering: Allows or blocks web addresses by category or list.In TacUNS: TacUNS works at website-name level, not full addresses.
Web Filtering: Controls which websites can be reached.In TacUNS: TacUNS does this by website name.
Content Filtering: Limits access to types of content, such as adult sites.In TacUNS: TacUNS offers Safe Search and lists you choose.
Phishing Protection: Anti-Phishing measures that help people avoid fake sites.In TacUNS: TacUNS warns about or blocks suspected look-alike websites. It can be wrong.
Email Security: Protects mail from scams, malware and impersonation. An Email Security Gateway filters it before delivery.
DMARC: A DNS record that tells mail servers how to treat messages failing sender checks.In TacUNS: The free DNS Analyzer tool checks it.

Data, cloud and new technology

Data Protection: Keeping data safe from loss and misuse.In TacUNS: Your TacUNS rules and activity stay on your phone.
Data Loss Prevention (DLP): Stops sensitive data leaving an organisation without permission.
Data Encryption: Scrambling data so only someone with the key can read it. AES-256 Encryption is a common strong method.
Cryptography: The mathematics behind encryption and digital signatures.
Key Management: Safely creating, storing and retiring encryption keys.
TLS 1.3: The current main version of the protocol that protects secure web connections.
Post-Quantum Cryptography: Encryption designed to resist future quantum computers.In TacUNS: TacUNS prefers a post-quantum key exchange for encrypted DNS when the server offers it.
Cloud Security: Protecting data and services hosted in the cloud.
Cloud Workload Protection: Protecting the programs and servers running in the cloud.
Data Center Security: Physical and network protection for the buildings that run servers.
Application Security: Building and testing software so it resists attack.
IoT Security: Protecting connected devices such as cameras and sensors.
OT Security: Protecting Operational Technology, the systems that run machines and plants, including ICS/SCADA Security.
AI Security: Protecting AI systems and watching what they do with data. Agentic AI Security covers AI that acts for you.In TacUNS: TacUNS shows which apps contacted known AI services and offers an AI agent mode.

More terms you may see

Advanced Threat Protection: Tools that look for new or hidden attacks as well as known ones. Advanced Threat Prevention aims to stop them early.
Malware Protection: Measures that stop harmful software from running or spreading.In TacUNS: TacUNS blocks known harmful website names. It does not scan or remove malware.
Web Security: Protecting people while they browse. A Web Security Gateway does this for a whole organisation.In TacUNS: TacUNS can block unwanted websites by name.
Website Security: Protecting a website itself. Website Protection often includes a Managed WAF or WAF as a Service.
Website Monitoring: Regularly checking that a website is online and has not been changed.
Data Security: Keeping data private, correct and available. Cloud Data Protection applies this to data in the cloud.
Email Protection: Filtering messages to stop scams and malware before people open them.
Wi-Fi Security: Keeping a wireless network safe. Wireless Security covers encryption and who may connect.
Wi-Fi Penetration Testing: An authorised test of a wireless network, also called a Wi-Fi Pentest or Wireless Security Assessment.
Secure Connection: A connection protected by encryption, so others cannot easily read it.In TacUNS: TacUNS can encrypt DNS look-ups. Apps' own connections stay as the apps made them.
Secure Remote Access: Lets people reach work systems safely from outside. Secure Network Access applies the same idea to whole networks.
Secure Internet Access: Filters internet traffic in the cloud. Secure Private Access does the same for private company apps.
Secure SD-WAN: SD-WAN with security checks built in.
Zero Trust Access: Access granted only after each request is checked. Zero Trust for ICS/SCADA applies this to industrial systems.
Network Security Management: Managing rules and devices across a whole network from one place.
Network Threat Prevention: Stopping attacks as they cross a network.
Network Intrusion: Someone or something entering a network without permission.
Identity Security: Protecting user accounts from theft and misuse. Account Takeover Protection is one part of it.
User Authentication: Checking that a person really is who they claim to be.
Managed Security Services: Security work handled by an outside provider, sometimes sold as Security as a Service. Managed XDR is one example.
Security Assessment: A planned review of how well systems are protected.
Compliance Management: Keeping track of which rules and standards an organisation must follow.
ISMS: An Information Security Management System is an organisation's set of security policies and processes.
Cyber Essentials: A United Kingdom scheme that sets basic security controls for organisations.
Business Continuity: Plans that keep an organisation working during and after a disruption.
Offensive Security: Testing systems by thinking like an attacker. Defensive Security is the work of protecting them.
Proactive Monitoring: Watching systems for early signs of trouble, before users notice.
Application Protection: Protecting running software from attack. Cloud-Native Application Protection does this for cloud apps.
Secure Cloud: A cloud setup with access control, encryption and monitoring in place.
Hyperconverged Infrastructure (HCI): Computing, storage and networking combined in one managed system.
Campus Network: The connected network across the buildings of a school, company or hospital.
IoT/OT Security: Protecting connected devices and industrial machines together.
Safe DNS: DNS that refuses to answer for known harmful websites. DNS Threat Protection is another name for this.In TacUNS: TacUNS can block listed names on the phone.
VPN Protocols: The rules a VPN uses to build its tunnel, used by every VPN Application and VPN client.
Secure VPN: A VPN with strong encryption and careful handling of data. A Private VPN usually means one that keeps few records.
Open-Source VPN Client: VPN software whose code anyone can read and check.
Workspace Security: Protecting the email, files and chat tools people use at work.
Vulnerability Signatures: Patterns that help tools recognise attempts to attack a known weakness.
Secure AI: Building and running AI systems so they resist misuse and protect data.