# Acronyms

## Web

<table><thead><tr><th width="159.33333333333331"></th><th width="587"></th></tr></thead><tbody><tr><td>HTTP</td><td>Hypertext Transfer Protocol</td></tr><tr><td>HTML</td><td>Hypertext Markup Language</td></tr><tr><td>XML</td><td>Extensible Markup Language</td></tr><tr><td>JSP</td><td>Java Server Pages</td></tr><tr><td>PHP</td><td>PHP Hypertext Preprocessor</td></tr><tr><td>DOM</td><td>Document Object Module</td></tr><tr><td>CGI</td><td>Common Gateway Interface</td></tr><tr><td>AJAX</td><td>Asynchronous Javascript and XML</td></tr><tr><td>J2EE</td><td>Java 2 Platform Enterprise Edition</td></tr><tr><td>ISAPI</td><td>Internet Server Application Programming Interface</td></tr><tr><td>WebDAV</td><td>Web-Based Distributed Authoring and Versioning</td></tr><tr><td>SOAP</td><td><strong>Simple Object Access Protocol</strong><br>An XML-based communication protocol used for sending messages between applications via the Internet.</td></tr><tr><td>XXE</td><td><strong>XML External Entity</strong><br>This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts</td></tr></tbody></table>

## General

<table><thead><tr><th width="166"></th><th></th></tr></thead><tbody><tr><td>SIEM</td><td>Security Information and Event Management</td></tr><tr><td>IOC</td><td>Indication of Compromises</td></tr><tr><td>MBSA</td><td>Microsoft Baseline Security Analyzer</td></tr><tr><td>APIPA</td><td>Automatic Private Internet Protocol Addressing</td></tr><tr><td>OSSTMM</td><td>Open Source Security Testing Methodology Manual</td></tr><tr><td>ISECOM</td><td>Institute for Security and Open Methodologies</td></tr><tr><td>OWASP</td><td>Open Web Application Security Project</td></tr><tr><td>PTES</td><td>Pen Testing Execution Standard</td></tr><tr><td>CPNI</td><td>Centre for the Protection of National Infrastructure</td></tr><tr><td>HIPAA</td><td>Health Insurance Portability and Accountability</td></tr><tr><td>FISMA</td><td>Federal Information Security Management Act</td></tr><tr><td>GDPR</td><td>General Data Protection Regulation</td></tr><tr><td>PCI DSS</td><td>Payment Card Industry Data Security Standard</td></tr><tr><td>CFAA</td><td>The Computer Fraud and Abuse Act</td></tr><tr><td>GLBA</td><td>Gramm-Leach-Bliley Act</td></tr></tbody></table>

## Network

<table><thead><tr><th width="169"></th><th></th></tr></thead><tbody><tr><td>MTU</td><td>Maximum Transmission Unit</td></tr><tr><td>CSMA/CA</td><td>Carrier Sense Multiple Access with Collision Avoidance</td></tr><tr><td>CDMA</td><td>Code Division Multiple Access</td></tr><tr><td>WPAD</td><td>Web Proxy Auto Discovery</td></tr><tr><td>MDNS</td><td>Multicast DNS</td></tr><tr><td>NBT-NS</td><td>NetBIOS Name Service</td></tr><tr><td>LLMNR</td><td>Link-Local Multicast Name Resolution</td></tr><tr><td>NTFS</td><td>New Technology File System</td></tr><tr><td>SSL</td><td>Secure Sockets Layer</td></tr><tr><td>PDU</td><td>Protocol Data Unit</td></tr><tr><td>VLSM</td><td>Variable Length Subnet Masks</td></tr><tr><td>LAN</td><td>Local Area Network</td></tr><tr><td>VLAN </td><td>Virtual Local Area Networks</td></tr><tr><td>ISL</td><td>Inter-Switch Link</td></tr><tr><td>DMZ</td><td>Demilitarized Zone</td></tr><tr><td>POE</td><td>Power over Ethernet</td></tr><tr><td>NDP</td><td>Neighbor Discover Protocol</td></tr><tr><td>SLAAC</td><td>Stateless Address Autoconfiguration (DHCPv6)</td></tr><tr><td>DAD</td><td>Duplication Address Detection</td></tr><tr><td>RS</td><td>Router Solicitation</td></tr><tr><td>RA</td><td>Router Advertisement</td></tr><tr><td>NS</td><td>Neighbor Solicitation (Sent Multicast)</td></tr><tr><td>NAT</td><td>Network Address Translation</td></tr><tr><td>ACL</td><td>Access Control Lists</td></tr><tr><td>SDN</td><td>Software Defined Networking</td></tr><tr><td></td><td></td></tr></tbody></table>

## Routing

<table><thead><tr><th width="178"></th><th></th></tr></thead><tbody><tr><td>IGP</td><td><strong>Interior Gateway Protocol</strong></td></tr><tr><td>EGP</td><td><strong>Exterior Gateway Protocol</strong></td></tr><tr><td>HSRP</td><td><strong>Hot Standby Router Protocol</strong><br>This is exclusive to Cisco and allows a default router address to be configured to be used in the event that the primary router fails.</td></tr><tr><td>VRRP</td><td><strong>Virtual Router Redundancy Protocol</strong><br>A standard that assigns a virtual IP address to a group of routers. At first, messages routed to the virtual IP address are handled by the master router. If the master router fails, backup routers stand in line to take over responsibility for the virtual IP address.</td></tr><tr><td>OSPF</td><td><strong>Open Shortest Path First</strong><br>A link-state routing protocol used on IP networks.</td></tr><tr><td>IGMP</td><td>Internet Group Management Protocol</td></tr><tr><td>MPLS</td><td>Multiprotocol Label Switching</td></tr><tr><td>AS</td><td>Autonomous System</td></tr><tr><td>RIP</td><td>Routing Information Protocol</td></tr><tr><td>EIGRP</td><td>Enhanced Interior Gateway Routing Protocol</td></tr><tr><td>BGP</td><td>Border Gateway Protocol</td></tr><tr><td></td><td></td></tr></tbody></table>

## Switching

<table><thead><tr><th width="195"></th><th></th></tr></thead><tbody><tr><td>VTP</td><td><strong>Virtual Trunking Protocol (802.1Q)</strong><br>Cisco's protocol for exchanging VLAN information over trunks. Allows one switch on a network to centrally manage all VLANs.</td></tr><tr><td>STP</td><td><strong>Spanning Tree Protocol (802.1D)</strong><br>A Layer 2 protocol that is used for routing and prevents network loops by adopting a dynamic routing method.</td></tr><tr><td>CDP</td><td>Cisco Discovery Protocol</td></tr><tr><td>DTP</td><td>Dynamic Trunking Protocol</td></tr><tr><td>VLAN</td><td>Virtual Local Area Network</td></tr><tr><td>SLIP</td><td>Serial Line Internet Protocol</td></tr><tr><td>PPP</td><td>Point-to-Point Protocol</td></tr><tr><td>ARP</td><td>Address Resolution Protocol</td></tr><tr><td>RARP</td><td>Reverse Address Resolution Protocol</td></tr><tr><td>L2TP</td><td>Layer 2 Tunneling Protocol</td></tr><tr><td>PPTP</td><td>Point-to-Point Tunneling Protocol</td></tr><tr><td>ISDN</td><td>Integrated Services Digital Network</td></tr><tr><td>DLP</td><td>Data Link Protocols</td></tr><tr><td>RSTP</td><td>Rapid Spanning Tree Protocol (802.1w)</td></tr><tr><td>NAC</td><td>Network Access Control (802.1X)</td></tr></tbody></table>

## Ethernet Cable

<table><thead><tr><th width="196"></th><th></th></tr></thead><tbody><tr><td>10BaseT</td><td>10 Mbps LAN Ethernet</td></tr><tr><td>100BaseT</td><td>100 Mbps Fast Ethernet</td></tr><tr><td>1000BaseT</td><td>1 GB Gigabit Ethernet</td></tr></tbody></table>

## DNS Record

<table><thead><tr><th width="193"></th><th></th></tr></thead><tbody><tr><td>SOA</td><td>Start of Authority<br>The Source host where the DNS zone was created</td></tr><tr><td>MX</td><td>Mail Exchange<br>Mail servers for a given domain</td></tr><tr><td>NS</td><td>Name Server<br>Names of authoritative DNS Servers for a given domain</td></tr><tr><td>A</td><td>IPv4 Address for a hostname</td></tr><tr><td>AAAA</td><td>IPv6 Address for a hostname</td></tr><tr><td>CNAME</td><td>Canonical name<br>Hostname which the CNAME is an alias of</td></tr><tr><td>PTR</td><td>Pointer<br>Hostname of a given IPv4 or IPv6 address</td></tr><tr><td>HINFO</td><td>Host Information<br>Operating System or other information for a host</td></tr><tr><td>SRV</td><td>Service Locator<br>Application service endpoints within a domain, including kerberos, LDAP, SIP, XMPP</td></tr><tr><td>TXT</td><td>Text String<br>Material including SPF and DKIM fields used to provide security, depending on configuration</td></tr></tbody></table>

## Wireless

<table><thead><tr><th width="197"></th><th></th></tr></thead><tbody><tr><td>WEP</td><td><strong>Wired Equivalent Privacy</strong><br>An IEEE 802.11 security protocol designed to ensure that only authorized parties can view transmitted wireless information. Has significant vulnerabilities and is not considered secure.</td></tr><tr><td>WPA</td><td><strong>Wireless Protected Access - PreShared Key</strong><br>The 802.11 security method created as a stopgap between WEP and 802.11i. WPA2 uses AES Encryption</td></tr><tr><td>EAP</td><td><strong>Extensible Authentication Protocol</strong><br>A protocol that enables systems to use hardware-based identifiers, such as fingerprint scanners or smart card readers, for authentication.</td></tr><tr><td>LEAP</td><td><strong>Lightweight Extensible Authentication Protocol</strong></td></tr><tr><td>PEAP</td><td><strong>Protected Extensible Authentication Protocol</strong></td></tr><tr><td>TKIP</td><td><strong>Temporal Key Integrity Protocol</strong><br>A security protocol created by the IEEE 802.11i task group to replace WEP.</td></tr><tr><td>WAP</td><td>Wireless Access Point</td></tr><tr><td>MIMO</td><td>Multiple Input Multiple Output</td></tr><tr><td>EAP-FAST</td><td>EAP Flexible Authentication via Secure Tunneling</td></tr><tr><td>EAP-TLS</td><td>EAP Transport Layer Security</td></tr><tr><td>EAP-TTLS</td><td>EAP Tunneled Transport Layer Security</td></tr><tr><td>WPS</td><td>WIFI Protected Setup / WIFI Simple Config</td></tr><tr><td>NFC</td><td>Near Field Communication</td></tr><tr><td>IR</td><td>Infrared</td></tr><tr><td>RFID</td><td>Radio Frequency Identification</td></tr></tbody></table>

## Active Directory

<table><thead><tr><th width="196"></th><th></th></tr></thead><tbody><tr><td>Global Catalog Server</td><td>A domain controller that holds a subset of the information in all domain partitions for the entire Active Directory forest.</td></tr></tbody></table>

## Windows&#x20;

<table><thead><tr><th width="202"></th><th></th></tr></thead><tbody><tr><td>LANMAN hash</td><td>The original hash used to store Windows passwords, known as LM hash, based off the DES algorithm. (Legacy)</td></tr><tr><td>LM Hash</td><td>Primary Windows LAN hash before Windows NT. 14 Character limit</td></tr><tr><td>WMIC</td><td>Windows Management Instrumentation Command-Line</td></tr><tr><td>NTLM</td><td><strong>New Technology LAN Manager</strong><br>Successor to the LM hash. A more advanced hash used to store Windows passwords, based off the RC4 algorithm.</td></tr></tbody></table>

## Encryption

<table><thead><tr><th width="207"></th><th></th></tr></thead><tbody><tr><td>ESP</td><td>Encapsulation Security Payload</td></tr><tr><td>AH</td><td>Authentication Header</td></tr><tr><td>PGP</td><td>Pretty Good Privacy</td></tr><tr><td>AES</td><td>Advanced Encryption Standard</td></tr><tr><td>TLS</td><td>Transport Layer Security</td></tr><tr><td>IPSec</td><td>Internet Protocol Security</td></tr><tr><td>ECC</td><td>Elliptic Curve Cryptography</td></tr><tr><td>ECDH</td><td>Elliptic Curve Diffe-Hellman</td></tr><tr><td>DES</td><td>Data Encryption Standard</td></tr><tr><td>3DES</td><td>Triple DES</td></tr><tr><td>RC4</td><td>Rviest Cipher 4</td></tr><tr><td>ECB</td><td>Electronic Codebook</td></tr><tr><td>GCM</td><td>Galois/Counter Mode</td></tr><tr><td>DSA</td><td>Digital Signature Algorithm</td></tr><tr><td>ECDSA</td><td>Elliptic Curve Digital Signature Algorithm</td></tr><tr><td>MD5</td><td>Message Digest Algorithm</td></tr><tr><td>SHA</td><td>Secure Hash Algorithm</td></tr><tr><td>HMAC</td><td>Hash-Based Message Authentication Code</td></tr><tr><td>CCMP</td><td>Counter Mode with Cipher Block Chaining Message Authentication Code Protocol </td></tr><tr><td>PKI</td><td>Public Key Infrastructure</td></tr></tbody></table>

## Mail

<table><thead><tr><th width="160"></th><th></th></tr></thead><tbody><tr><td>SPF</td><td>Sender Policy Framework</td></tr><tr><td>DKIM</td><td>Domain Keys Identified Mail</td></tr></tbody></table>

## Network Topology

<table><thead><tr><th width="168"></th><th></th></tr></thead><tbody><tr><td>WANs</td><td>Wide Area Networks</td></tr><tr><td>MANs</td><td>Metro Area Networks</td></tr><tr><td>LAN</td><td>Local Area Networks</td></tr><tr><td>WLAN</td><td>Wireless LAN</td></tr><tr><td>CAN</td><td>Campus Area Network</td></tr><tr><td>NAS</td><td>Network Attached Storage</td></tr><tr><td>SAN</td><td>Storage Area Network</td></tr><tr><td>PAN</td><td>Personal Area Network</td></tr></tbody></table>

