Digital Forensics and Incident Response (DFIR)
Digital Forensics and Incident Response (DFIR) is the coordinated practice of detecting, containing, investigating, eradicating, and recovering from incidents while preserving and…
Security, Risk & Compliance
Security controls, fraud, operational risk and regulatory compliance.
673Terms
0Reviewed
Terms (673)
Disaster Recovery (DR)
Disaster recovery is the coordinated process for restoring wallet, custody, treasury, and supporting operations after a severe disruption or loss event. Effective…
Discretionary Access Control (DAC)
Discretionary Access Control (DAC) is an access-control model in which the owner or another authorized principal can decide who receives permissions to…
Distributed Denial-of-Service Attack (DDoS)
A Distributed Denial-of-Service Attack (DDoS) is a denial-of-service attack generated through many distributed systems, devices, networks, reflectors, or compromised hosts. Its distributed…
DNS Security Extensions (DNSSEC)
DNS Security Extensions (DNSSEC) are extensions to the Domain Name System that add digital signatures so validating resolvers can detect forged or…
Document Fraud
Document Fraud is the creation, alteration, theft, substitution, or misuse of a document to misrepresent identity, authority, ownership, eligibility, a transaction, or…
Double-Spend Attack
Double-Spend Attack is an attack or weakness pattern that attempts to use the same digital funds in conflicting transactions so more than…
Double-Spend Risk
Double-spend risk is the probability and potential impact that a received digital payment is replaced, reversed, or invalidated by conflicting spending. For…
Downgrade Attack
Downgrade Attack is an attack or weakness pattern that forces communicating systems to use an older, weaker protocol, algorithm, version, or security…
Dusting Attack
Dusting Attack is an attack or weakness pattern that sends tiny crypto amounts to many addresses to analyze later spending patterns and…
ECDSA Signature
An ECDSA signature is a digital signature created with an elliptic-curve private key to authenticate data and prove its integrity. An ECDSA…
Eclipse Attack
Eclipse Attack is an attack or weakness pattern that isolates a blockchain node from honest peers so an attacker can control the…
Economic Sanctions
Economic Sanctions are government-imposed restrictions used to influence conduct by limiting transactions, trade, services, investment, access to property, or dealings with specified…
Economic Security
Economic security is the resilience of an economy, organization, protocol, or person against financial disruption, coercion, instability, and resource loss. Economic security…
EdDSA Signature
An EdDSA signature is an elliptic-curve digital signature created with the Edwards-curve Digital Signature Algorithm for authentication and integrity verification. An EdDSA…
EIP-712 Typed Data
EIP-712 Typed Data is an Ethereum standard for hashing and signing structured data with explicit types and domain information so wallets can…
Encryption
Encryption is a security mechanism or control discipline that transforms readable information into ciphertext so only holders of authorized cryptographic keys can…
Encryption at Rest
Encryption at Rest is a security mechanism or control discipline that protects stored data by keeping database files, disks, backups, objects, or…
Encryption Key
An encryption key is a cryptographic value that controls how an algorithm converts plaintext to ciphertext or restores protected data. Symmetric systems…
End-to-End Encryption (E2EE)
End-to-End Encryption (E2EE) is a security mechanism or control discipline that keeps content encrypted between communicating endpoints so intermediaries cannot normally decrypt…
Endpoint Security
Endpoint Security is a security mechanism or control discipline that protects laptops, phones, servers, terminals, and other connected devices from compromise, misuse,…
Enterprise-Wide Risk Assessment (EWRA)
An Enterprise-Wide Risk Assessment (EWRA) is an organization-level evaluation of material risks across business lines, products, customers, geographies, technologies, third parties, processes,…
Enumeration Attack
Enumeration Attack is an attack or weakness pattern that systematically tests inputs or responses to discover valid accounts, identifiers, resources, services, or…
Envelope Encryption
Envelope Encryption is a security mechanism or control discipline that protects data with a data-encryption key, then encrypts that key under a…