The FREE Cybersecurity Glossary by Thor Pedersen!

Covert storage channel: A method of unauthorized data transfer that uses alterations in stored data, such as file sizes or timestamps, to encode and transmit information discreetly.

Covert timing channel: A surreptitious communication pathway that conveys information by manipulating the timing of events, such as process execution or network packet delivery. By varying these timing characteristics in a controlled manner, an entity can transmit data to a receiving entity that's observing the same timings, all without arousing suspicion.

Crack: To bypass or break through security measures of software or systems, often to gain unauthorized access, crack encrypted data, or illegally copy or use software. Cracking compromises the security and integrity of digital assets and is considered a cybercrime.

Credentialed Analysis: In cybersecurity, this refers to a scanning or analysis process where the security tools are provided with authorized access credentials to perform a more thorough examination of the system. By using credentials to log in, the tools can evaluate the system as an authenticated user, allowing for a deeper and more accurate assessment of configurations, software, permissions, and other security controls that may not be visible or accessible to non-credentialed scanning. This can provide a comprehensive picture of system vulnerabilities, compliance with policies, and potential security risks.

Credential Management: The process of creating, storing, managing, and updating user credentials such as usernames, passwords, and personal identification numbers (PINs), as well as digital certificates and keys. Effective credential management is crucial in maintaining security and controlling access to sensitive systems and data. It encompasses practices such as enforcing password complexity requirements, implementing regular password rotations, and using multi-factor authentication to enhance security. Good credential management also involves monitoring for compromised credentials and ensuring that access rights are revoked when no longer required, such as when an employee leaves an organization.

Credentials: Information used to verify the identity of a user or system within a digital environment. Credentials, such as usernames and passwords or digital certificates, are essential for authentication processes to access computer systems or networks.