The FREE Cybersecurity Glossary by Thor Pedersen!

Timing attack: A form of attack where the attacker learns information about the target system by observing the time it takes for the system to respond to inputs. The analysis of the time required to perform cryptographic operations can potentially reveal sensitive data, such as secret keys, especially in poorly implemented cryptographic systems.

TOGAF (The Open Group Architecture Framework): A framework offering a detailed methodology for the design, planning, implementation, and management of enterprise information architecture. It ensures the resulting system aligns with business objectives while being cost-efficient, dependable, and scalable, guided by principles, methods, and tools.

Token: A digital identity representation that serves as evidence of a transaction, authentication, or permission within a system. Tokens usually contain protected, cryptographically secured data, such as user authentication credentials, which can be used to gain access to network services or carry out certain transactions.

Token device: A physical device used to facilitate user authentication by generating or storing a unique authentication factor, such as a secure digital signature or biometric data like a fingerprint template, providing additional proof of identity.

Tokenization: The process of converting sensitive data into a series of random, meaningless characters or tokens. It is used to protect data during transmission and storage. Examples -using tokenization to protect credit card information during online transactions and using tokenization to protect sensitive medical records in a healthcare database.

Top-down approach to security management: A method of security management that involves setting high-level goals and policies and then working down to the implementation of specific security controls. It is commonly used in organizations with hierarchical structures. Examples -a top-down approach to security management in a government agency and a top-down approach to security management in a multinational corporation.