Message Authentication Code (MAC)
A Message Authentication Code is a keyed cryptographic tag used to verify message integrity and authenticity between parties sharing secret material. A…
Security, Risk & Compliance
Security controls, fraud, operational risk and regulatory compliance.
673Terms
0Reviewed
Terms (673)
Metadata Privacy
Metadata Privacy is a compliance or privacy requirement that protects contextual information about communications or transactions, including participants, timing, location, size, devices,…
MFA Fatigue Attack
An MFA fatigue attack repeatedly sends authentication prompts or approval requests to pressure, confuse, or trick a user into approving one, often…
Mobile Security
Mobile Security is a security mechanism or control discipline that protects smartphones, tablets, applications, identities, communications, sensors, and stored data from compromise,…
Model Risk
Model risk is the possibility of harmful decisions or estimates caused by flawed models, data, assumptions, implementation, interpretation, or use. Model Risk…
MPC Risk
MPC risk is exposure arising from the design, implementation, participation, communication, and recovery assumptions of secure multi-party computation. A score for MPC…
Multi-Factor Authentication (MFA)
Multi-Factor Authentication (MFA) is a security mechanism or control discipline that requires evidence from at least two independent factor categories before granting…
Multi-Round Fraud Proof
Multi-Round Fraud Proof is a fraud or abuse pattern that resolves a disputed computation through successive challenge messages that isolate an invalid…
Multisig Risk
Multisig risk is exposure created by multi-signature thresholds, signer concentration, key custody, coordination, transaction review, and recovery arrangements. Multisig Risk must specify…
Network Detection and Response (NDR)
Network detection and response is the capability to analyze network traffic and related telemetry for suspicious behavior, investigate threats, and support containment…
Network Partition Attack
A network partition attack deliberately separates nodes or services so different groups receive inconsistent information or cannot coordinate normally. Network Partition Attack…
Network Privacy
Network Privacy is a compliance or privacy requirement that limits disclosure of communicating parties, addresses, routes, timing, traffic volume, and behavioral relationships…
Network Risk
Network risk is the possibility of loss caused by connectivity, routing, consensus, congestion, security, dependency, or availability failures within a network. A…
Network Security
Network Security is a security mechanism or control discipline that protects communications, devices, services, and control planes from unauthorized access, interception, manipulation,…
No-KYC Payment
A no-KYC payment allows a transaction without requiring the payer or merchant to complete a provider's standard identity-verification process beforehand. No- KYC…
Nonce Reuse Attack
A nonce reuse attack exploits the repeated use of a value that a cryptographic protocol requires to be unique, potentially revealing private…
Operational Custody Risk
Operational custody risk is the possibility that procedures, people, systems, or records fail while safeguarding, signing, moving, or recovering assets. A score…
Operational Risk
Operational risk is the possibility of loss from failed processes, people, systems, external events, or inadequate execution of business activities. Decision-makers use…
Operational Security
Operational Security is a security mechanism or control discipline that protects sensitive activities and information by identifying what adversaries could observe, infer,…
Oracle Attack
Oracle Attack is an attack or weakness pattern that manipulates, delays, corrupts, or selectively exploits external data used by a protocol to…
Oracle Exploit
An oracle exploit is a practical attack that abuses vulnerable data feeds or oracle-dependent logic to extract value or corrupt system state.…
Oracle Risk
Oracle risk is exposure created when systems rely on external data whose accuracy, availability, timing, incentives, or governance may fail. Oracle Risk…
Origin Authentication
Origin authentication verifies that data, software, requests, or messages came from the claimed source rather than an impersonator or substitute. Origin authentication…
Out of band authorization (OOB)
Out of band authorization (OOB) is a security mechanism or control discipline that out-of-band authorization approves an action through a separate communication…