# Security

52 Security terms explained simply, ordered from basic to advanced. Start at the top if the topic is new to you.

## Basic

- [Antivirus](https://tidbit.legios.com.ar/antivirus/): A program that watches your files and apps and blocks the ones known to be harmful.
- [Backup](https://tidbit.legios.com.ar/backup/): A separate copy of your data, kept so you can get it back when the original is lost.
- [Biometrics](https://tidbit.legios.com.ar/biometrics/): Proving who you are with your body: a fingerprint, your face, your voice.
- [Blockchain](https://tidbit.legios.com.ar/blockchain/): A shared record book, copied on many computers, where old pages can't be quietly changed.
- [Brute-force attack](https://tidbit.legios.com.ar/brute-force-attack/): Breaking into an account by trying passwords, one after another, until one works.
- [CAPTCHA](https://tidbit.legios.com.ar/captcha/): A small test a website uses to tell a person from an automated program.
- [Cookies](https://tidbit.legios.com.ar/cookies/): Small notes a website asks your browser to keep, so it can recognize you later.
- [Cybersecurity](https://tidbit.legios.com.ar/cybersecurity/): Protecting computers, networks and data from theft, damage and disruption.
- [Dark web](https://tidbit.legios.com.ar/dark-web/): Websites that are reachable only with special software that hides who is talking to whom.
- [Data breach](https://tidbit.legios.com.ar/data-breach/): When private data an organization holds ends up with people who should not have it.
- [Deepfake](https://tidbit.legios.com.ar/deepfake/): A fake video, photo or voice made with AI to look and sound like a real person.
- [Encryption](https://tidbit.legios.com.ar/encryption/): Scrambling data so that only someone with the key can read it.
- [Firewall](https://tidbit.legios.com.ar/firewall/): A gatekeeper that decides which network traffic gets in or out.
- [Hacker](https://tidbit.legios.com.ar/hacker/): Someone who takes systems apart to see how they work, for better or for worse.
- [HTTPS](https://tidbit.legios.com.ar/https/): The padlock in your browser: web traffic nobody in between can read.
- [Identity theft](https://tidbit.legios.com.ar/identity-theft/): Someone uses your personal details to pass as you, usually to borrow or buy in your name.
- [Incognito mode](https://tidbit.legios.com.ar/incognito-mode/): A browser window that forgets your visit on this device. It does not make you invisible.
- [Keylogger](https://tidbit.legios.com.ar/keylogger/): Software or a gadget that secretly records everything you type.
- [Malware and ransomware](https://tidbit.legios.com.ar/malware-and-ransomware/): Software built to harm you; ransomware locks your files and charges to unlock them.
- [Passkeys](https://tidbit.legios.com.ar/passkeys/): A way to sign in without a password, using your phone's or computer's lock instead.
- [Password manager](https://tidbit.legios.com.ar/password-manager/): An encrypted vault that remembers a different strong password for every site.
- [Personal data and GDPR](https://tidbit.legios.com.ar/personal-data-and-gdpr/): Information about you, and the laws that say who can use it and how.
- [Phishing](https://tidbit.legios.com.ar/phishing/): A fake message that tricks you into handing over a password or a payment.
- [Social engineering](https://tidbit.legios.com.ar/social-engineering/): Manipulating people, instead of machines, into giving away access or information.
- [Spam](https://tidbit.legios.com.ar/spam/): Unwanted messages sent in bulk: ads, scams and junk you never asked for.
- [Two-factor authentication](https://tidbit.legios.com.ar/two-factor-authentication/): A second proof that you are you, so a stolen password alone is not enough.

## Intermediate

- [Amazon Cognito](https://tidbit.legios.com.ar/amazon-cognito/): Sign-up, login and passwords for your app, handled by AWS instead of you.
- [API key](https://tidbit.legios.com.ar/api-key/): A secret string that identifies your app when it calls someone else's API.
- [AWS CloudTrail](https://tidbit.legios.com.ar/aws-cloudtrail/): The logbook of an AWS account: who did what, when, and from where.
- [AWS KMS](https://tidbit.legios.com.ar/aws-kms/): AWS's vault for encryption keys: you use them, but they never leave.
- [AWS Secrets Manager](https://tidbit.legios.com.ar/aws-secrets-manager/): A locked vault for passwords and API keys, so they never live in your code.
- [AWS Shield](https://tidbit.legios.com.ar/aws-shield/): AWS's protection against DDoS attacks, on by default for everyone.
- [AWS WAF](https://tidbit.legios.com.ar/aws-waf/): A filter in front of your website that reads each request and blocks the bad ones.
- [Bug bounty](https://tidbit.legios.com.ar/bug-bounty/): A company pays outside researchers who find and privately report its security holes.
- [Cross-site scripting](https://tidbit.legios.com.ar/cross-site-scripting/): Sneaking code into a website so it runs in other visitors' browsers.
- [DDoS](https://tidbit.legios.com.ar/ddos/): Knocking a site offline by flooding it with more traffic than it can handle.
- [End-to-end encryption](https://tidbit.legios.com.ar/end-to-end-encryption/): Only the sender and the recipient can read a message; the service in between cannot.
- [Hashing](https://tidbit.legios.com.ar/hashing/): A one-way fingerprint of data: easy to compute, not meant to be reversed.
- [OAuth and SSO](https://tidbit.legios.com.ar/oauth-and-sso/): Log in once with an account you trust, and let it vouch for you in other apps.
- [Penetration testing](https://tidbit.legios.com.ar/penetration-testing/): Hiring someone to break into your systems, with permission, before a criminal does.
- [Proxy](https://tidbit.legios.com.ar/proxy/): A middleman computer that makes requests on someone else's behalf.
- [Public-key cryptography](https://tidbit.legios.com.ar/public-key-cryptography/): Two linked keys: one you share with everyone to lock, one you keep to unlock.
- [Sandboxing](https://tidbit.legios.com.ar/sandboxing/): Running a program in a closed box so it cannot harm anything outside it.
- [Security operations center](https://tidbit.legios.com.ar/security-operations-center/): The team that watches an organization's systems around the clock for attacks.
- [SQL injection](https://tidbit.legios.com.ar/sql-injection/): Typing text into a form that the database mistakes for its own instructions.
- [SSH](https://tidbit.legios.com.ar/ssh/): An encrypted way to log in to another computer and type commands on it.
- [TLS certificate](https://tidbit.legios.com.ar/tls-certificate/): The ID card a website shows your browser to prove it is who it claims to be.
- [VPN](https://tidbit.legios.com.ar/vpn/): An encrypted tunnel that sends all your traffic through another network first.
- [Vulnerability and CVE](https://tidbit.legios.com.ar/vulnerability-and-cve/): A flaw that lets an attacker misuse software, and the public id that names it.
- [Wi-Fi security](https://tidbit.legios.com.ar/wifi-security/): How a Wi-Fi password keeps neighbors out and scrambles what travels through the air.

## Advanced

- [SIEM](https://tidbit.legios.com.ar/siem/): The system that gathers security logs from everywhere and raises the alarm.
- [Zero trust](https://tidbit.legios.com.ar/zero-trust/): Security that checks every request, instead of trusting whatever is inside the network.