The FREE Cybersecurity Glossary by Thor Pedersen!

Coding practices: The methods and procedures that programmers follow when writing their code. Good coding practices aim to improve the quality of software and the efficiency of the development process. They may include techniques such as code reuse, modularization, commenting, consistent indentation, error handling, and adhering to naming conventions. These practices help ensure that the code is clean, readable, efficient, and easy to maintain and debug.

Common Vulnerabilities and Exposures (CVE): A publicly available, free-to-use list of reported vulnerabilities in software and firmware. Each CVE entry includes an identification number, a description, and at least one public reference. Maintained by the MITRE Corporation, CVE provides a standardized method for sharing information about vulnerabilities, allowing organizations to better protect their systems against known issues.

Common Vulnerability Scoring System (CVSS): A universally open and standardized method for rating IT vulnerabilities. CVSS helps organizations prioritize their responses to system vulnerabilities by offering a calculated score between 0 and 10 based on factors such as the complexity of exploiting a vulnerability, whether it requires local or network access, and what kind of impact it would have if successfully exploited.

Common Weakness Enumeration (CWE): A community-driven project that maintains a list of software security weaknesses. These weaknesses, identified by common terms and definitions, represent the conditions that lead to software vulnerabilities. By understanding and identifying these weaknesses, organizations, and developers can create more secure software systems and address issues before they lead to exploitable vulnerabilities.

Common Weakness Scoring System (CWSS): A framework for scoring the severity of software weaknesses listed in CWE based on various factors, including the potential impact of the weakness and the context of the software environment. It helps organizations prioritize software weaknesses to address the most significant risks first.

Compiler: A computer program that translates source code written in a high-level programming language into machine code that can be executed by a computer. It is commonly used in software development to create efficient and optimized programs. Examples include GCC and Microsoft Visual C++.