Ruankao System Architect (Senior) key terms

The central processing unit is the main processor in a computer. It fetches instructions, decodes them, and carries out arithmetic, logic, and control operations while coordinating other components.

Temporary, volatile computer memory that holds programs and data currently in use. Its contents disappear when power is lost, but it allows fast reading and writing.

A small, fast memory area close to the processor that stores frequently used instructions and data. It reduces average access time by keeping likely-needed information nearby.

The quantity identified by one memory address, such as a byte or a word. A bus-width calculation requires this convention before converting address counts into byte capacity.

A failed lookup in the translation cache, requiring the processor’s defined translation procedure. It does not alone establish that the target virtual page is absent from physical memory.

An architectural exception caused by an absent or disallowed page translation or access under the platform model. Handling depends on mapping, protection and residency rather than always reading a disk.

A stated stimulus, operating condition and observable response with a measurement criterion, allowing alternative designs and tests to be compared against an actual requirement.

信息系统从立项、开发、运行维护到退役的完整过程，通常划分为系统规划、系统分析、系统设计、系统实施、系统运行与维护五个阶段，各阶段有明确的输入、输出和评审要求。

将硬件、网络、软件、数据等异构部件通过接口与协议连接，使其协同工作并满足用户整体业务目标的工程活动，强调技术整合与项目管理双重能力。

位于操作系统与应用软件之间、屏蔽底层异构性并提供通信、事务、消息等公共服务的软件层，常见类型包括消息中间件、应用服务器和数据库访问中间件。

将业务功能封装为松耦合、可复用、通过标准协议调用的服务，并据此组合业务流程的架构风格，其实现常借助Web服务与注册中心完成服务发现与编排。

面向主题、集成、相对稳定且反映历史变化的数据集合，用于支持管理决策分析；其数据通常经抽取、转换、加载过程从业务系统汇入。

从大量数据中自动发现潜在模式、关联规则与预测模型的分析技术，常用方法包括分类、聚类、关联分析和回归，其结果需结合业务判断使用。

对数据资产的质量、标准、安全、权责和生命周期进行制度化管理的活动集合，目标是使数据可信、可用、可追溯，并明确数据所有者与 stewards 的职责。

按信息系统的重要程度和受破坏后的危害程度划分安全保护等级，并据此实施分等级建设、测评与监管的制度，是信息系统安全合规工作的基础框架。

An identifier used with a defined storage and processing protocol to recognize repeated requests and avoid duplicating a specified side effect. Its scope and expiration must match the actual operation.

Analysis of software components and dependency information to identify relevant known issues and licensing or provenance questions, complementing code review and dynamic security testing.

An explicit protection outcome or constraint linked to the system’s assets, users, threats and obligations, with criteria that can be designed, implemented and verified.

The process of converting readable data into an encoded form that unauthorized people cannot easily understand. A key is used to encrypt and typically to decrypt the data.

The process of verifying a user's or system's claimed identity, often through passwords, tokens, biometrics, or multi-factor methods. It answers whether the identity is genuine.

A social-engineering attack that tricks people into revealing sensitive information or clicking malicious links by impersonating a trustworthy organization or person.

Software designed to harm, disrupt, or gain unauthorized access to a computer system. Examples include viruses, worms, ransomware, spyware, and trojan horses.

The gap between people who have effective access to digital technologies and those who do not, often due to cost, location, skills, or infrastructure.

Legal rights that protect creations of the mind, such as inventions, artistic works, software, and trademarks. These rights control use, copying, and distribution.

A model that describes the three core goals of information security: confidentiality (keeping data secret), integrity (keeping data accurate and unaltered), and availability (ensuring data and systems are accessible when needed).

The property that information is not disclosed to unauthorized individuals, processes, or devices. It is achieved through encryption, access controls, and proper handling procedures.

The property that data has not been altered or destroyed in an unauthorized manner. It ensures data is accurate, complete, and trustworthy throughout its lifecycle.

The property that systems and data are accessible and usable by authorized users when required. It is supported by redundancy, backups, and resilience measures.

A security strategy that uses multiple layers of controls (physical, technical, and administrative) so that if one layer fails, others still protect the asset.

The leadership, structures, and processes that ensure IT supports enterprise strategy, objectives, and risk appetite while using resources responsibly.