Defensive measures

272 pages, showing 201–272, ordered by identifier.

D3-PT — Process Termination Terminating a running application process on a computer system.
D3-PUM — Platform Uptime Monitoring Monitor the amount of time since the last power cycle or restart.
D3-PV — Pointer Validation Ensuring that a pointer variable has the required properties for use.
D3-PWA — Password Authentication Password authentication is a security mechanism used to verify the identity of a user or entity attempting to access...
D3-RA — Restore Access Restoring an entity's access to resources.
D3-RAM — Routing Access Mediation Routing access mediation is a network security approach that manages and controls access at the network layer using...
D3-RAPA — Resource Access Pattern Analysis Analyzing the resources accessed by a user to identify unauthorized activity.
D3-RC — Restore Configuration Restoring an software configuration.
D3-RD — Restore Database Restoring the data in a database.
D3-RDI — Restore Disk Image Restoring a previously captured disk image a hard drive.
D3-RE — Restore Email Restoring an email for an entity to access.
D3-RF — Restore File Restoring a file for an entity to access.
D3-RFAM — Remote File Access Mediation Remote file access mediation is the process of managing and securing access to file systems over a network to ensure...
D3-RFS — RF Shielding Adding physical barriers to a platform to prevent undesired radio interference.
D3-RFUM — Remote Firmware Update Monitoring Monitoring of remote firmware update commands to identify unauthorized software installations.
D3-RH — Radiation Hardening Radiation hardening is the process of making electronic components and circuits resistant to damage or malfunction...
D3-RIC — Reissue Credential Issue a new credential to a user which supercedes their old credential.
D3-RKD — Registry Key Deletion Delete a registry key.
D3-RN — Reference Nullification Invalidating all pointers that reference a specific memory block, ensuring that the block cannot be accessed or...
D3-RNA — Restore Network Access Restoring a entity's access to a computer network.
D3-RO — Restore Object Restoring an object for an entity to access. This is the broadest class for object restoral.
D3-RPA — Relay Pattern Analysis The detection of an internal host relaying traffic between the internal network and the external network.
D3-RRID — Reverse Resolution IP Denylisting Blocking a reverse lookup based on the query's IP address value.
D3-RS — Restore Software Restoring software to a host.
D3-RTA — RPC Traffic Analysis Monitoring the activity of remote procedure calls in communication traffic to establish standard protocol operations...
D3-RTSD — Remote Terminal Session Detection Detection of an unauthorized remote live terminal console session by examining network traffic to a network host.
D3-RUAA — Restore User Account Access Restoring a user account's access to resources.
D3-SAOR — Segment Address Offset Randomization Randomizing the base (start) address of one or more segments of memory during the initialization of a process.
D3-SBV — Service Binary Verification Analyzing changes in service binary files by comparing to a source of truth.
D3-SCA — System Call Analysis Analyzing system calls to determine whether a process is exhibiting unauthorized behavior.
D3-SCF — System Call Filtering Controlling access to local computer system resources with kernel-level capabilities.
D3-SCH — Source Code Hardening Hardening source code with the intention of making it more difficult to exploit and less error prone.
D3-SCP — System Configuration Permissions Restricting system configuration modifications to a specific user or group of users.
D3-SDA — Session Duration Analysis Analyzing the duration of user sessions in order to detect unauthorized activity.
D3-SDM — System Daemon Monitoring Tracking changes to the state or configuration of critical system level processes.
D3-SEA — Script Execution Analysis Analyzing the execution of a script to detect unauthorized user activity.
D3-SFA — System File Analysis Monitoring system files such as authentication databases, configuration files, system logs, and system executables...
D3-SFCV — Stack Frame Canary Validation Comparing a value stored in a stack frame with a known good value in order to prevent or detect a memory segment overwrite.
D3-SFV — System Firmware Verification Cryptographically verifying installed system firmware integrity.
D3-SHN — Standalone Honeynet An environment created for the purpose of attracting attackers and eliciting their behaviors that is not connected...
D3-SICA — System Init Config Analysis Analysis of any system process startup configuration.
D3-SJA — Scheduled Job Analysis Analysis of source files, processes, destination files, or destination servers associated with a scheduled job to...
D3-SMRA — Sender MTA Reputation Analysis Characterizing the reputation of mail transfer agents (MTA) to determine the security risk in emails.
D3-SPP — Strong Password Policy Modifying system configuration to increase password strength.
D3-SRA — Sender Reputation Analysis Ascertaining sender reputation based on information associated with a message (e.g. email/instant messaging).
D3-SSC — Shadow Stack Comparisons Comparing a call stack in system memory with a shadow call stack maintained by the processor to determine...
D3-ST — Session Termination Forcefully end all active sessions associated with compromised accounts or devices.
D3-SU — Software Update Replacing old software on a computer system component.
D3-SVCDM — Service Dependency Mapping Service dependency mapping determines the services on which each given service relies.
D3-SWI — Software Inventory Software inventorying identifies and records the software items in the organization's architecture.
D3-SYSDM — System Dependency Mapping System dependency mapping identifies and models the dependencies of system components on each other to carry out...
D3-SYSM — System Mapping System mapping encompasses the techniques to identify the organization's systems, how they are configured and...
D3-SYSVA — System Vulnerability Assessment System vulnerability assessment relates all the vulnerabilities of a system's components in the context of their...
D3-TAAN — Transfer Agent Authentication Validating that server components of a messaging infrastructure are authorized to send a particular message.
D3-TB — Token Binding Token binding is a security mechanism used to enhance the protection of tokens, such as cookies or OAuth tokens, by...
D3-TBA — Token-based Authentication Token-based authentication is an authentication protocol where users verify their identity in exchange for a unique...
D3-TBI — TPM Boot Integrity Assuring the integrity of a platform by demonstrating that the boot process starts from a trusted combination of...
D3-TL — Trusted Library A trusted library is a collection of pre-verified and secure code modules or components that are used within...
D3-UA — URL Analysis Determining if a URL is benign or malicious by analyzing the URL or its components.
D3-UAP — User Account Permissions Restricting a user account's access to resources.
D3-UBA — User Behavior Analysis User behavior analytics ('UBA') as defined by Gartner, is a cybersecurity process about detection of insider...
D3-UDTA — User Data Transfer Analysis Analyzing the amount of data transferred by a user.
D3-UGLPA — User Geolocation Logon Pattern Analysis Monitoring geolocation data of user logon attempts and comparing it to a baseline user behavior profile to identify...
D3-UGPH — User Group Permissions Access control where access is determined based on attributes associated with users and the objects being accessed.
D3-ULA — Unlock Account Restoring a user account's access to resources by unlocking a locked User Account.
D3-URA — URL Reputation Analysis Analyzing the reputation of a URL.
D3-USICA — User Session Init Config Analysis Analyzing modifications to user session config files such as .bashrc or .bash_profile.
D3-VI — Variable Initialization Setting variables to a known value before use.
D3-VS — Video Surveillance Monitoring of physical areas via camera video feeds to deter, detect, and investigate unauthorized access and...
D3-VTV — Variable Type Validation Ensuring that a variable has the correct type.
D3-WSAA — Web Session Activity Analysis Monitoring changes in user web session behavior by comparing current web session activity to a baseline behavior...
D3-WSAM — Web Session Access Mediation Web session access mediation secures user sessions in web applications by employing robust authentication and...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.