Bringing Your Tech to Life DSIR Resource – Recovery Guide Appendix A
Bringing Your Tech to Life DSIR Resource – Appendix A
Appendix A – Glossary
Appendix A — definitions used throughout the guide.
Recovery Guide · Appendix A
These are the plain-language definitions used in the recovery guide. A linked word in the guide
opens its definition here. Each entry also links to a Wikipedia page for a longer explanation.
Wikipedia is a reference, not an instruction from Bringing Your Tech to Life.
Plain-Language Definitions of Common Security Terms
Security incidents often involve unfamiliar words and abbreviations. The following definitions
explain how these terms are used throughout this guide.
Active session — A connection that allows a device, browser, or application to
remain signed in to an account. An attacker may sometimes retain access through an active
session even after learning that the password has been changed.Administrator access — A level of device permission that allows someone to
install software, change system settings, create accounts, or make other significant changes.Antivirus or anti-malware software — Software designed to identify, block,
quarantine, or remove known malicious programs. Antivirus results are important, but a clean
scan does not prove that an account, password, or identity was never compromised.Authentication application — An application that generates or approves
verification codes used during sign-in. Examples include Microsoft Authenticator, Google
Authenticator, and similar applications.Backup — A separate copy of important information that can be used if the
original information is deleted, damaged, encrypted, stolen, or otherwise unavailable.Browser extension — A small program added to a web browser to provide
additional features. Extensions can be useful, but an unwanted or malicious extension may
monitor browsing, redirect searches, display advertisements, or access information shown in the
browser.Browser profile — A collection of browser information associated with a
particular person or account. It may contain bookmarks, browsing history, extensions, saved
passwords, payment information, and active sessions.Compromised account — An account that may have been accessed, changed, or used
by someone without the account owner’s permission.Credential stuffing — The automated use of stolen usernames and passwords to
attempt sign-ins at other websites. This is one reason password reuse is dangerous.Data breach — An incident in which information held by a company,
organization, or service is exposed, stolen, or accessed without authorization.Device encryption — Protection that makes information stored on a device
difficult to read without the proper password, passcode, recovery key, or authorized account.Firewall — A security feature that helps control network connections entering
or leaving a device. A firewall is useful, but it does not prevent every scam, unsafe download,
or account compromise.Fraud alert — A notice placed on a credit report that asks businesses to take
additional steps to verify a person’s identity before granting new credit.Identity theft — The unauthorized use of another person’s identifying
information, usually to obtain money, credit, services, benefits, employment, or access to an
account.Information-stealing malware — Malicious software designed to collect
information from a device. It may target passwords, browser information, session cookies,
cryptocurrency wallets, documents, screenshots, or other stored information.Malware — A general term for harmful software, including viruses, spyware,
ransomware, information stealers, and other unwanted programs.Multi-factor authentication — A sign-in method requiring more than one form of
proof. It may combine a password with an authentication application, security key, trusted
device, fingerprint, face scan, or verification code.Passkey — A modern sign-in credential that can replace or supplement a
password. Passkeys are commonly protected by a device passcode, fingerprint, face scan, or
security key.Password manager — Software that securely stores and helps generate passwords.
Some password managers synchronize information between devices through an online account.Phishing — An attempt to trick someone into revealing information, visiting a
fraudulent website, opening a harmful attachment, sending money, or taking another unsafe
action.Potentially unwanted program — Software that may not be classified as malware
but can create unwanted advertisements, browser changes, tracking, redirects, or other
undesirable behavior.Ransomware — Malware that encrypts, locks, steals, or threatens to release
information in an attempt to demand payment.Recovery code — A one-time or limited-use code that may allow access to an
account when the normal verification method is unavailable. Recovery codes should be protected
like passwords.Recovery information — Email addresses, telephone numbers, trusted devices,
security questions, or other information used to regain access to an account.Remote-access software — Software that allows one device to view or control
another device over a network or the internet. It can be used legitimately for support, but
scammers frequently abuse it.Security freeze or credit freeze — A restriction placed on a credit report
that helps prevent new credit accounts from being opened until the freeze is lifted.Security key — A physical device used to approve a sign-in. Security keys can
provide strong protection against many forms of phishing.SIM-swap attack — An incident in which a criminal attempts to transfer a
victim’s telephone number to another SIM card or mobile device. This can interfere with calls
and messages and may allow the criminal to receive text-message verification codes.Spoofing — Falsifying information so a call, email, text message, website, or
sender appears to come from a trusted person or organization.Synchronization or syncing — The automatic copying of information between
devices or accounts. Synced information may include email, photographs, contacts, bookmarks,
passwords, payment information, and browser settings.Two-factor authentication — A form of multi-factor authentication that uses
two types of proof during sign-in.Virtual private network — A service that encrypts network traffic between a
device and a VPN provider. A VPN can provide useful privacy and network protection, but it does
not prevent phishing, remote-access scams, password theft, or fraudulent transactions.