The FREE Cybersecurity Glossary by Thor Pedersen!

Honeypot: A security mechanism set up to detect, deflect, or study hacking attempts. It is designed to appear as a legitimate part of the network but is isolated and monitored to capture unauthorized access attempts or understand an attacker's techniques.

Horizontal defense-in-depth: Horizontal defense-in-depth encompasses the implementation of security measures at the same network layer to create a multi-faceted barrier to threats. It involves using a variety of tools and techniques at a particular point in the network architecture, such that an attacker breaching one control encounters another.

Host: A computer or other device connected to a network that provides data, services, or resources to clients. In network architecture, hosts can serve as servers, offering web pages, applications, or storage, and enable users to access and utilize these resources.

Host-Based Firewalls: Security software installed on individual hosts or servers that controls the incoming and outgoing network traffic based on predetermined security rules. Host-based firewalls protect against unauthorized access and can provide tailored security at the host level.

Host-based Intrusion Detection Systems (HIDS)/Host-based Intrusion Prevention Systems (HIPS): Security measures deployed on individual devices or hosts to monitor and analyze system activities for malicious behavior. HIDS focuses on detecting potential threats by examining log files, system calls, and network traffic and then alerting administrators if suspicious activities are detected. On the other hand, HIPS takes it a step further by not only detecting threats but also attempting to prevent them from executing harmful actions. These host-based systems are particularly beneficial in identifying insider threats or targeted attacks that might be missed by network-based security systems.

Host escape: A type of attack in which an attacker gains access to the host system in a virtualized environment. It is used to bypass security measures and gain access to sensitive data or systems. Examples include using vulnerabilities in the host system or exploiting misconfigurations in the virtual environment.