Cloudflare Network Security key terms

A cyberattack where multiple compromised systems flood a target with traffic, exhausting its resources and making it unavailable to legitimate users.

Techniques and systems that detect and filter malicious traffic to protect a network or service from distributed denial-of-service attacks, ensuring availability.

A security solution that monitors, filters, and blocks HTTP/HTTPS traffic to protect web applications from attacks like SQL injection and cross-site scripting.

A widely used awareness document listing the most critical security risks to web applications, such as injection and broken authentication.

An attack where malicious SQL code is inserted into input fields to manipulate a database, potentially exposing or deleting sensitive data.

A vulnerability where attackers inject client-side scripts into web pages viewed by others, bypassing access controls like the same-origin policy.

A technique that controls the amount of traffic a client can send to a server within a specific time frame, preventing abuse and resource exhaustion.

The practice of detecting and controlling automated traffic to mitigate malicious bots while allowing legitimate ones, often using behavioral analysis and machine learning.

A challenge-response test used to distinguish human users from automated bots, often requiring solving puzzles or identifying images.

A type of DDoS attack that overwhelms a target's bandwidth by flooding it with a massive volume of traffic, often using amplification techniques.

A DDoS attack that exploits the TCP handshake by sending many SYN requests without completing the connection, exhausting server resources.

A DDoS technique where an attacker sends small requests to a vulnerable service with a spoofed source IP, causing large responses to flood the victim.

A network addressing method where multiple servers share the same IP address, routing users to the nearest server, which helps absorb and distribute attack traffic.

A distributed network of servers located close to end users, providing low-latency services and security filtering at the network perimeter.

A server that sits between clients and origin servers, forwarding requests and providing additional security, caching, and load balancing.

Cryptographic protocols that secure communications over a network by encrypting data and authenticating parties, commonly used for HTTPS.

An extension of HTTP that uses SSL/TLS to encrypt communication between a client and server, ensuring confidentiality and integrity.

The process of issuing, renewing, and revoking digital certificates used for SSL/TLS encryption to ensure secure and trusted connections.

A security model that requires strict verification for every user and device attempting to access resources, regardless of their location.

The process of restricting access to resources based on policies, ensuring only authorized users or systems can perform certain actions.

A framework for managing digital identities and controlling user access to resources through authentication and authorization policies.

A security method that requires two or more independent credentials to verify a user's identity, adding an extra layer beyond passwords.

A network security device that monitors and controls incoming and outgoing traffic based on predetermined security rules.

A system that monitors network traffic for suspicious activity and alerts administrators, but does not take active blocking measures.

A security system that not only detects but also actively blocks or prevents identified threats in network traffic.

A service that creates a secure, encrypted connection over an untrusted network, protecting data privacy and enabling remote access.

A suite of protocols that secures IP communications by authenticating and encrypting each IP packet in a data stream.

A preconfigured set of security rules provided by a vendor, designed to protect against common threats and kept up-to-date by the vendor.

User-defined security rules that allow organizations to tailor protection based on their specific traffic patterns and business logic.

The collection and analysis of security data to detect threats, identify patterns, and improve an organization's security posture.

A system that aggregates and analyzes log data from various sources to provide real-time monitoring, alerting, and incident response.

The process of collecting, storing, and analyzing log data from systems and applications for security auditing and troubleshooting.

Measures taken to protect the Domain Name System from attacks like cache poisoning, DDoS, and spoofing, ensuring reliable and secure name resolution.

A set of extensions that add cryptographic signatures to DNS records, allowing resolvers to verify the authenticity and integrity of DNS responses.

The practice of securing application programming interfaces by implementing authentication, authorization, and threat protection to prevent data breaches and abuse.

A security solution that protects APIs by enforcing positive security models, validating requests, and mitigating abuse.

A mutual authentication process where both client and server present certificates to verify each other's identity, enhancing API and service security.