Siglas e acrônimos
100 / 146Siglas de cibersegurança com seu significado em português. As que ainda não foram traduzidas levam à versão em inglês.
- SIEM Security Information and Event ManagementDetection & Response
- SOAR Security Orchestration, Automation, and ResponseDetection & Response
- EDR Endpoint Detection and ResponseDetection & Response
- XDR Extended Detection and ResponseDetection & Response
- MDR Managed Detection and ResponseDetection & Response
- SOC Security Operations CenterSecurity Operations
- NOC Network Operations CenterNetwork Security
- IDS Intrusion Detection SystemNetwork Security
- IPS Intrusion Prevention SystemNetwork Security
- WAF Web Application FirewallApplication Security
- DLP Data Loss PreventionData Security
- NDR Network Detection and ResponseDetection & Response
- NTA Network Traffic AnalysisNetwork Security
- NGFW Next-Generation FirewallNetwork Security
- EPP Endpoint Protection PlatformEndpoint Security
- PCAP Packet CaptureNetwork Security
- IOC Indicator of CompromiseThreat Intelligence
- IOA Indicator of AttackThreat Intelligence
- TTP Tactics, Techniques, and ProceduresThreat Intelligence
- APT Advanced Persistent ThreatThreat Intelligence
- CTI Cyber Threat IntelligenceThreat Intelligence
- TIP Threat Intelligence PlatformThreat Intelligence
- OSINT Open-Source IntelligenceThreat Intelligence
- MSSP Managed Security Service ProviderSecurity Operations
- MSP Managed Service ProviderIT Operations
- DDoS Distributed Denial of ServiceNetwork Security
- BAS Breach and Attack SimulationSecurity Testing
- ASM Attack Surface ManagementSecurity Testing
- EASM External Attack Surface ManagementSecurity Testing
- CASB Cloud Access Security BrokerCloud Security
- CSPM Cloud Security Posture ManagementCloud Security
- CNAPP Cloud-Native Application Protection PlatformCloud Security
- CWPP Cloud Workload Protection PlatformCloud Security
- IAM Identity and Access ManagementIdentity & Access
- PAM Privileged Access ManagementIdentity & Access
- MFA Multi-Factor AuthenticationAuthentication
- SSO Single Sign-OnAuthentication
- RBAC Role-Based Access ControlIdentity & Access
- ABAC Attribute-Based Access ControlIdentity & Access
- PKI Public Key InfrastructureAuthentication
- CA Certificate AuthorityAuthentication
- ZTNA Zero Trust Network AccessCloud Security
- SDP Software-Defined PerimeterCloud Security
- SASE Secure Access Service EdgeCloud Security
- SD-WAN Software-Defined Wide Area NetworkCloud Security
- SAML Security Assertion Markup LanguageAuthentication
- OIDC OpenID ConnectAuthentication
- OAuth Open AuthorizationAuthentication
- JWT JSON Web TokenAuthentication
- NAC Network Access ControlIdentity & Access
- K8s KubernetesCloud Security
- OPA Open Policy AgentCloud Security
- IaC Infrastructure as CodeCloud Security
- GRC Governance, Risk, and ComplianceGRC
- ERM Enterprise Risk ManagementGRC
- BIA Business Impact AnalysisGRC
- BCP Business Continuity PlanGRC
- DRP Disaster Recovery PlanGRC
- RPO Recovery Point ObjectiveMetrics
- RTO Recovery Time ObjectiveMetrics
- MTTR Mean Time to RecoverMetrics
- MTTD Mean Time to DetectMetrics
- KPI Key Performance IndicatorMetrics
- KRI Key Risk IndicatorMetrics
- SLA Service Level AgreementMetrics
- SLO Service Level ObjectiveMetrics
- NIST National Institute of Standards and TechnologyFrameworks
- ISO International Organization for StandardizationFrameworks
- PCI Payment Card IndustryCompliance
- HIPAA Health Insurance Portability and Accountability ActCompliance
- GDPR General Data Protection RegulationCompliance
- CCPA California Consumer Privacy ActCompliance
- CMMC Cybersecurity Maturity Model CertificationCompliance
- FedRAMP Federal Risk and Authorization Management ProgramCompliance
- FISMA Federal Information Security Modernization ActCompliance
- STIG Security Technical Implementation GuideFrameworks
- OWASP Open Worldwide Application Security ProjectFrameworks
- STRIDE Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of PrivilegeFrameworks
- DREAD Damage, Reproducibility, Exploitability, Affected Users, DiscoverabilityFrameworks
- NICE National Initiative for Cybersecurity EducationFrameworks
- SOX Sarbanes-Oxley ActCompliance
- FERPA Family Educational Rights and Privacy ActCompliance
- NFPA National Fire Protection AssociationCompliance
- RCE Remote Code ExecutionOffensive Security
- XSS Cross-Site ScriptingApplication Security
- SQLi SQL InjectionApplication Security
- CSRF Cross-Site Request ForgeryApplication Security
- SSRF Server-Side Request ForgeryApplication Security
- BOF Buffer OverflowOffensive Security
- ROP Return-Oriented ProgrammingOffensive Security
- ASLR Address Space Layout RandomizationOffensive Security
- DEP Data Execution PreventionOffensive Security
- RAT Remote Access TrojanOffensive Security
- C2 Command and ControlOffensive Security
- VM Vulnerability ManagementVulnerability Management
- PT Penetration TestingOffensive Security
- SBOM Software Bill of MaterialsApplication Security
- SCA Software Composition AnalysisApplication Security
- SAST Static Application Security TestingApplication Security
- DAST Dynamic Application Security TestingApplication Security
Ver o catálogo completo EN em inglês
As definições são explicações originais escritas para fins de desenvolvimento profissional. Para definições técnicas autoritativas, consulte NIST, ISO ou o órgão de normalização correspondente.