The FREE Cybersecurity Glossary by Thor Pedersen!

Network traffic analysis: The process of capturing and reviewing network traffic in order to understand the nature of the traffic, optimize network performance, and detect any unusual or malicious activity. Network traffic analysis can help identify bottlenecks, threats like malware or unauthorized data exfiltration, and ensure efficient network operations.

Network traffic analysis tools: Software programs that monitor and analyze the flow of data on a network, providing detailed information about network usage and performance. Network traffic analysis tools are used to identify potential security threats, optimize network performance, and diagnose problems on the network. Examples include Wireshark, NetFlow, and ntop.

Next-gen Firewall (NGFW): A part of the third generation of firewall technology, combining a traditional firewall with other network device filtering functionalities, such as an application firewall using in-line deep packet inspection (DPI) and intrusion prevention system (IPS). NGFWs include features like encrypted traffic inspection, intrusion prevention, web filtering, and antivirus protection, delivering more enhanced visibility and control to secure networks against modern threats.

NIST 800-94: A guideline on intrusion detection and prevention systems (IDPS), providing a detailed explanation of these technologies along with recommendations for their planning, implementation, configuration, securing, monitoring, and maintenance. It aids organizations in comprehending the characteristics of IDPS technologies and offers a comprehensive approach to integrating them effectively into an overall security architecture to enhance the protection of information systems.

NIST Cybersecurity Framework (CSF): A voluntary set of standards, guidelines, and best practices designed to assist organizations in managing cybersecurity risk. It is composed of three parts - the Framework Core, the Framework Profile, and the Framework Implementation Tiers, each providing specific guidance for establishing new or improving existing cybersecurity programs. The framework has been widely adopted by various sectors and organizations due to its flexibility and scalability.

NIST Forensic process - Analysis: Analysis is a crucial stage in the National Institute of Standards and Technology (NIST) Forensic Process. This phase involves the in-depth evaluation and interpretation of the data that has been examined to arrive at useful insights. It seeks to answer the who, what, where, when, why, and how of an incident by identifying patterns, connections, and contradictions in the evidence.