The FREE Cybersecurity Glossary by Thor Pedersen!

Header manipulation: Header manipulation refers to the intentional alteration of HTTP header attributes by either a sender or an intermediary, such as a proxy, often to bypass security measures, conduct spoofing attacks, or enhance privacy. It can be used legitimately to control cache or to adjust request-response headers for compatibility, but it can also be utilized maliciously to disguise the true source of traffic or to manipulate web application behaviors.

Health Information Technology for Economic and Clinical Health Act (HITECH Act) (US): A US law enacted as part of the American Recovery and Reinvestment Act of 2009. The act promotes the adoption and meaningful use of health information technology, specifically electronic health records. One of its significant aspects related to security is that it expands the privacy and security rules of the Health Insurance Portability and Accountability Act (HIPAA), including extending the requirement of safeguarding health information to business associates of covered entities and strengthening the enforcement of HIPAA rules.

Health Insurance Portability and Accountability Act (HIPAA) (US): A US law passed in 1996 that sets standards for the protection of certain health information. The Privacy Rule, a key component of HIPAA, protects the privacy of individually identifiable health information, and the Security Rule, another key component, sets national standards for the security of electronically protected health information. Compliance with HIPAA requirements ensures that a patient's health information is properly protected while allowing the necessary information to be disclosed for patient care and other important purposes.

Hearsay evidence: Any statement made outside of the courtroom that is presented in court to prove the truth of the matter asserted. In cybersecurity, it may refer to a third-party report or statement about a cyber incident, attack, or vulnerability. This evidence is typically inadmissible in court due to its unverifiable nature, except under specific exceptions, highlighting the importance of forensic techniques and chain-of-custody in cyber incident investigations.

Heating, Ventilating, And Air Conditioning (HVAC): The technology and systems used to regulate temperature, air quality, and humidity in a building or space. It is used to ensure the comfort and health of building occupants and to protect sensitive equipment from environmental threats. Examples include thermostats, air filters, and ventilation systems.

Help desk: A service provided by an organization to assist users with technical or other issues. It is used to provide support to users who are experiencing problems with their computer systems or software. Examples include providing assistance with password resets, troubleshooting network connectivity issues, and providing guidance on how to use specific software applications.