Machine learning is increasingly being explored for applications in healthcare and wellbeing. However, building an ML model for a sensitive domain such as mental health requires more than simply achieving a high accuracy score. I developed a Mental Health Prediction & Assessment System that combines machine learning, PHQ-9 screening, Explainable AI and a Flask-based web application. The project is available on GitHub: https://github.com/starJeet000/Mental-Health-Prediction-Using-Machine-Learning What Is the Project? The application is designed as an educational and preliminary screening system that evaluates mental-health-related information and produces a risk prediction. It combines an ML-based prediction system with a standardized PHQ-9 questionnaire. The purpose is not to replace mental-health professionals but to demonstrate how machine learning can be incorporated into a complete software application. Machine Learning Model Several classification algorithms were tr...
Cybersecurity has its own vocabulary.
When you begin studying cybersecurity, you will quickly encounter terms such as malware, phishing, vulnerability, exploit, authentication, authorization, firewall, zero-day, ransomware, social engineering, penetration testing, and threat actor.
At first, these terms can seem confusing.
Some are closely related, while others describe completely different concepts.
This glossary provides a beginner-friendly explanation of the most important cybersecurity and ethical-hacking terminology.
The goal is not to memorize every word.
Instead, use this guide as a reference whenever you encounter an unfamiliar security term.
A — Cybersecurity Terms
Access Control
Access control determines who or what is allowed to access a resource and what they are permitted to do with it.
It is commonly implemented using permissions, roles, policies, and authentication mechanisms.
Active Directory
Active Directory is Microsoft's directory and identity-management technology commonly used in Windows domain environments.
Organizations use it to manage users, computers, groups, authentication, and access policies.
Advanced Persistent Threat (APT)
An Advanced Persistent Threat is a prolonged and targeted intrusion in which a threat actor attempts to maintain access to a target environment while avoiding detection.
The term describes a type of threat activity rather than a single attack technique.
Antivirus
Antivirus software is designed to detect, block, and remove certain types of malicious software.
Modern endpoint-security products typically perform functions beyond traditional virus detection.
Attack Surface
An attack surface represents the collection of systems, applications, devices, interfaces, accounts, and other points that could potentially be targeted.
Reducing unnecessary exposure can reduce attack opportunities.
Attack Vector
An attack vector is a method or pathway that can be used to compromise a target.
Examples include:
Phishing
Exploited vulnerabilities
Stolen credentials
Malicious files
Misconfigured services
B — Cybersecurity Terms
Backdoor
A backdoor is a mechanism that can provide access to a system while bypassing normal authentication or security controls.
Some backdoors are intentionally created for legitimate administrative purposes, while malicious backdoors can be installed by attackers or malware.
Baiting
Baiting is a social-engineering technique that uses something attractive or interesting to encourage a person to perform an unsafe action.
A classic example is a malicious USB device presented as something valuable or interesting.
Black Hat Hacker
A black hat hacker is generally understood as someone who performs unauthorized activity for malicious or harmful purposes.
The important distinction is authorization and intent.
Blue Team
A blue team represents the defensive side of cybersecurity.
Blue-team activities can include:
Monitoring
Detection
Incident response
Threat hunting
Hardening
Security analysis
Bot
A bot is a software program that performs automated tasks.
Bots can be completely legitimate, such as search-engine crawlers, or malicious.
Botnet
A botnet is a collection of compromised devices controlled or coordinated by an attacker.
Botnets can be used for activities such as spam distribution, credential attacks, or DDoS attacks.
Brute-Force Attack
A brute-force attack attempts to discover a credential or secret by systematically trying many possibilities.
Strong passwords, authentication controls, rate limiting, and account protections can make brute-force attacks more difficult.
C — Cybersecurity Terms
CAPTCHA
CAPTCHA mechanisms are designed to help distinguish humans from automated systems.
Modern CAPTCHA systems can involve different types of challenges and risk-based detection.
CIA Triad
The CIA Triad represents three fundamental security objectives:
Confidentiality
Integrity
Availability
It is one of the most important foundational concepts in information security.
Clickjacking
Clickjacking is a technique in which a user is deceived into clicking something different from what they believe they are clicking.
Browser security controls and appropriate security headers can help mitigate certain clickjacking scenarios.
Cloud Security
Cloud security involves protecting applications, identities, data, infrastructure, and services operating in cloud environments.
Command and Control (C2)
Command and control refers to communication between an attacker and compromised systems.
Malware may use C2 infrastructure to receive instructions or send information back to an attacker.
Confidentiality
Confidentiality means protecting information from unauthorized disclosure.
Encryption and access controls are examples of mechanisms that can support confidentiality.
Cryptography
Cryptography is the study and application of techniques used to protect information and communications.
It includes concepts such as:
Encryption
Hashing
Digital signatures
Key management
D — Cybersecurity Terms
Dark Web
The dark web refers to services that are intentionally hidden from normal indexing and commonly require specialized software or configurations to access.
Not everything on the dark web is illegal, although it is also used by criminals and threat actors.
Data Breach
A data breach occurs when protected or sensitive information is accessed, disclosed, altered, or stolen without authorization.
DDoS Attack
A Distributed Denial-of-Service attack attempts to overwhelm a service using traffic from multiple systems or sources.
The goal is generally to reduce or prevent availability.
Deep Web
The deep web refers broadly to online content that is not indexed by conventional search engines.
Private email accounts, online banking portals, and authenticated web applications are common examples.
The deep web is not synonymous with the dark web.
DNS
The Domain Name System translates human-readable domain names into information used to locate network services, commonly including IP addresses.
For example, DNS helps systems resolve a domain such as:
example.com
to its corresponding network destination.
DNS Hijacking
DNS hijacking involves manipulating DNS resolution so that users are directed somewhere other than the intended destination.
E — Cybersecurity Terms
Encryption
Encryption transforms readable information into ciphertext using a cryptographic process.
The intended recipient can use the appropriate key or mechanism to recover the original information.
Endpoint
An endpoint is a device or system connected to a network.
Examples include:
Laptops
Smartphones
Servers
Workstations
IoT devices
Exploit
An exploit is a technique, program, or mechanism that takes advantage of a vulnerability.
An exploit can be used for legitimate security testing when performed with authorization.
F — Cybersecurity Terms
Firewall
A firewall monitors and controls network traffic according to configured security rules.
Firewalls can be implemented as hardware, software, cloud services, or combinations of these.
False Positive
A false positive occurs when a security system identifies something as malicious or suspicious when it is actually benign.
Reducing false positives is important because excessive alerts can overwhelm security teams.
False Negative
A false negative occurs when a security system fails to detect something that actually represents a threat.
Security systems therefore need to balance detection capability with alert quality.
H — Cybersecurity Terms
Hacker
The word "hacker" can have different meanings depending on context.
In cybersecurity discussions, it may refer broadly to someone who explores or manipulates computer systems.
More specific terms such as ethical hacker, black hat, and threat actor provide additional context.
Hacktivist
A hacktivist is a person or group that uses digital activity to promote a political or social cause.
Some hacktivist activities can involve unauthorized access or disruption.
I — Cybersecurity Terms
Identity and Access Management (IAM)
IAM refers to technologies and processes used to manage digital identities and access permissions.
IAM commonly includes:
User accounts
Authentication
Authorization
Roles
Policies
Access reviews
Incident
A security incident is an event that may compromise the confidentiality, integrity, or availability of information or systems.
Not every security alert becomes a confirmed incident.
Incident Response
Incident response is the structured process organizations use to identify, contain, investigate, eradicate, and recover from security incidents.
Integrity
Integrity means ensuring that information remains accurate and has not been improperly modified.
M — Cybersecurity Terms
Malware
Malware means malicious software.
It includes many categories of harmful software, such as:
Ransomware
Trojans
Spyware
Worms
Information stealers
Rootkits
Man-in-the-Middle (MitM)
A man-in-the-middle attack occurs when an attacker positions themselves between communicating parties or systems and attempts to intercept or manipulate communication.
Encryption and authenticated communication protocols can help defend against certain MitM attacks.
MFA
Multi-factor authentication requires multiple categories of authentication evidence.
These commonly include:
Something you know
Something you have
Something you are
MFA can significantly improve account security.
N — Cybersecurity Terms
Network Security
Network security involves protecting network infrastructure, communications, devices, and services against unauthorized activity and disruption.
It can include:
Firewalls
Network segmentation
Monitoring
Access controls
Encryption
Network Intrusion
A network intrusion is unauthorized activity or access within a network environment.
Security monitoring systems may attempt to identify suspicious network behavior.
P — Cybersecurity Terms
Packet
A packet is a formatted unit of data transmitted across a network.
Network communication is commonly divided into packets that contain information needed to deliver and process the data.
Packet Sniffing
Packet sniffing involves capturing and analyzing network traffic.
Network administrators and security professionals can use packet analysis for troubleshooting and security investigations.
Using packet-capture tools against networks without authorization can be illegal or disruptive.
Password Spraying
Password spraying is an attack technique where an attacker attempts a small number of commonly used passwords against many accounts instead of repeatedly attacking one account.
Security controls such as MFA, monitoring, and account protections can help reduce the risk.
Penetration Testing
Penetration testing is an authorized security assessment in which testers attempt to identify and demonstrate security weaknesses.
The key word is authorized.
A penetration test should have a clearly defined scope and rules of engagement.
Phishing
Phishing is a social-engineering technique used to trick victims into revealing information, clicking malicious links, transferring money, or performing other unsafe actions.
Personally Identifiable Information (PII)
PII refers to information that can identify a person directly or, depending on context, contribute to identifying them.
Examples can include:
Name
Email address
Phone number
Identification numbers
Address
The exact definition varies by legal and regulatory context.
R — Cybersecurity Terms
Ransomware
Ransomware is malware designed to disrupt access to data or systems, commonly by encrypting files.
Some ransomware operations also involve data theft and extortion.
Red Team
A red team performs authorized adversarial activities to evaluate an organization's security from an attacker's perspective.
Red teams may test people, processes, technology, and detection capabilities.
Risk
Risk represents the potential for an undesirable event to cause harm.
Security risk is often evaluated using factors such as:
Likelihood
Impact
Exposure
Existing controls
S — Cybersecurity Terms
Security Operations Center (SOC)
A Security Operations Center is a team or function responsible for monitoring and responding to security events.
SOC analysts may investigate alerts, identify suspicious activity, and coordinate incident response.
Shoulder Surfing
Shoulder surfing is the act of observing someone to obtain sensitive information.
For example, an attacker might watch someone enter a password or PIN in a public place.
SIEM
SIEM stands for Security Information and Event Management.
SIEM platforms collect and analyze security-related logs and events from multiple sources.
They can help security teams identify suspicious activity and investigate incidents.
Smishing
Smishing is phishing conducted through SMS or other text messaging channels.
Social Engineering
Social engineering involves manipulating people into revealing information or performing actions that benefit an attacker.
It targets human behavior rather than relying exclusively on technical vulnerabilities.
Spear Phishing
Spear phishing is a targeted form of phishing designed for a specific individual or organization.
Because the message may contain personalized information, it can be more convincing than generic phishing.
Spoofing
Spoofing involves pretending to be a different identity, system, source, or sender.
Examples include:
Email spoofing
IP spoofing
Caller-ID spoofing
Website spoofing
SQL Injection
SQL injection occurs when untrusted input is improperly incorporated into SQL queries.
Modern applications should use parameterized queries, appropriate database libraries, validation, and least-privilege database accounts.
SSL/TLS
SSL is an older security protocol family that has been replaced by TLS.
When people say "SSL certificate" today, they are generally referring to certificates used with modern TLS-secured connections.
HTTPS uses TLS to help protect web communications.
T — Cybersecurity Terms
Threat
A threat is a potential cause of harm to a system, organization, or individual.
Threats can be:
Malicious
Accidental
Environmental
Technical
Threat Actor
A threat actor is an individual, group, organization, or other entity responsible for or associated with malicious cyber activity.
Threat actors can include criminals, insider threats, hacktivist groups, espionage groups, and other actors.
Threat Intelligence
Threat intelligence is information that helps organizations understand threats, threat actors, indicators, tactics, techniques, procedures, and potential risks.
Trojan
A Trojan is malicious software that disguises itself as something legitimate or useful.
Unlike a worm, a Trojan generally does not independently replicate itself across systems.
U — Cybersecurity Terms
Unauthorized Access
Unauthorized access occurs when someone gains access to a system, account, network, or resource without the required permission.
URL
URL stands for Uniform Resource Locator.
It is the address used to locate a resource on a network or the web.
For example:
https://example.com/page
V — Cybersecurity Terms
Virus
A computer virus is malware that can replicate by inserting itself into other files or programs and generally requires some form of user or program execution to spread.
Vishing
Vishing is phishing conducted through voice communication, such as fraudulent phone calls or voice messages.
VPN
A Virtual Private Network creates an encrypted connection between a device and a VPN endpoint.
VPNs can improve privacy and secure certain connections, but they do not protect against every type of cyber threat.
Vulnerability
A vulnerability is a weakness in software, hardware, configuration, processes, or controls that could potentially be exploited.
Examples include:
Outdated software
Weak authentication
Insecure configuration
Programming errors
Excessive permissions
W — Cybersecurity Terms
Web Application Firewall (WAF)
A WAF is a security control designed to inspect and filter HTTP/HTTPS traffic to web applications.
It can help detect or block certain types of malicious requests.
Whaling
Whaling is a highly targeted form of phishing aimed at senior executives or other high-value individuals.
White Hat Hacker
A white hat hacker is a security professional who performs authorized security testing or research.
Authorization is what separates legitimate security testing from unauthorized intrusion.
Worm
A worm is malware capable of self-propagation, often spreading between systems through networks or other mechanisms.
Unlike traditional viruses, worms generally do not need to attach themselves to another executable file to replicate.
X — Cybersecurity Terms
XSS
XSS stands for Cross-Site Scripting.
It occurs when an application allows attacker-controlled content to execute in another user's browser.
Common categories include:
Stored XSS
Reflected XSS
DOM-based XSS
Modern web frameworks provide some protections, but developers can still introduce vulnerabilities through unsafe rendering or handling of untrusted content.
Z — Cybersecurity Terms
Zero-Day Vulnerability
A zero-day vulnerability is a vulnerability that is unknown to the vendor or for which a security fix has not yet been available at the time relevant to the discussion.
The term is often used when attackers exploit such vulnerabilities before defenders have had an opportunity to deploy a patch.
Zero-Day Exploit
A zero-day exploit is a technique or code that takes advantage of a zero-day vulnerability.
The terms zero-day vulnerability and zero-day exploit therefore describe different things.
Important Cybersecurity Concepts Beginners Should Know
Knowing individual definitions is useful, but understanding how the concepts connect is even more important.
Consider this simplified attack chain:
Phishing
↓
Stolen Credentials
↓
Authentication Bypass
↓
Unauthorized Access
↓
Privilege Escalation
↓
Data Access
↓
Data Theft / Disruption
A security team might respond with:
MFA
↓
Access Controls
↓
Monitoring
↓
Detection
↓
Incident Response
↓
Recovery
This is why cybersecurity is best understood as a system of interconnected controls, rather than a collection of isolated tools.
Ethical Hacking vs Criminal Hacking
The word "hacking" is often misunderstood.
Ethical hacking involves performing security testing with permission.
A professional security tester may be hired to identify weaknesses before criminals discover or exploit them.
A legitimate engagement normally defines:
Scope
Authorization
Testing methods
Time period
Targets
Reporting requirements
Rules of engagement
Without authorization, attempting to access someone else's systems can cause harm and may be illegal.
Cybersecurity Terms You Should Learn Next
Once you understand the terminology above, consider studying:
Networking
TCP/IP
DNS
HTTP/HTTPS
Ports
Routing
Firewalls
Operating Systems
Linux
Windows
Processes
Permissions
Services
File systems
Web Security
XSS
Injection
Authentication
Authorization
Session security
API security
Defensive Security
SIEM
SOC
Incident response
Threat intelligence
Vulnerability management
Security monitoring
Ethical Hacking
Reconnaissance
Vulnerability assessment
Penetration testing
Reporting
Remediation
Frequently Asked Questions
Is hacking always illegal?
No.
The term "hacking" can describe many activities. Ethical hacking involves authorized testing, while unauthorized access can be illegal and harmful.
What should I learn first: hacking or cybersecurity?
Learn cybersecurity and computing fundamentals first.
Understanding networks, operating systems, web applications, and security principles will make ethical-hacking concepts much easier to understand.
What is the difference between a threat and a vulnerability?
A vulnerability is a weakness.
A threat is a potential source of harm.
An exploit is a method used to take advantage of a vulnerability.
What is the difference between authentication and authorization?
Authentication verifies identity.
Authorization determines permissions.
What is the difference between the deep web and dark web?
The deep web broadly includes content that search engines do not index.
The dark web is a smaller portion of the internet that is intentionally hidden and typically requires specialized access mechanisms.
What is the difference between a virus and a worm?
A virus typically relies on attaching itself to another file or program, while a worm can independently replicate and spread between systems.
Final Thoughts
Cybersecurity terminology can seem overwhelming when you first begin learning.
You don't need to memorize every definition.
Instead, focus on understanding how the concepts connect.
Learn how vulnerabilities create opportunities for attacks. Understand how authentication and authorization protect access. Learn how phishing targets people, how malware affects systems, and how defenders detect and respond to incidents.
As you progress, the terminology will become much easier to understand because you will encounter the concepts in real systems and projects.
If you're learning cybersecurity as a developer, don't stop at theory.
Build secure applications, study common vulnerabilities, practice in authorized labs, and learn how defensive controls work.
Comments
Post a Comment
Thanks for reading! Feel free to drop a question or feedback