50.2 Core security terms
CIA triad, threat, risk, malware, MFA – foundation words. Alphabetical. Hard terms = Devanagari; everyday English = English madhech. Aata pudhe jaauya.
| Term | Meaning | मराठी अर्थ |
|---|---|---|
| Access control | Rules that decide who can use which resource. | प्रवेश नियंत्रण |
| Authentication | Proving that an identity is genuine (password, key, MFA). | ओळख पडताळणी |
| Authorisation | Deciding what an authenticated identity is allowed to do. | अधिकार निर्धारण |
| Availability | Systems and data are usable when needed (CIA triad). | उपलब्धता |
| Backdoor | Hidden way into a system that bypasses normal login. | गुप्त प्रवेशमार्ग |
| Blue team | Defenders who detect, stop and recover from attacks. | — (English madhech vapra) |
| Brute force | Trying many passwords or keys until one works. | जबरदस्तीने अनेक प्रयत्न |
| Certificate | A digitally signed file that binds a public key to an identity (TLS). | प्रमाणपत्र |
| CIA triad | Confidentiality, Integrity, Availability – core security goals. | गोपनीयता–अखंडता–उपलब्धता |
| Confidentiality | Only authorised people can read the data (CIA triad). | गोपनीयता |
| Defence in depth | Several layers of control so one failure does not open everything. | बहुस्तरीय संरक्षण |
| Encryption | Turning readable data into ciphertext so it needs a key to read. | कूटबद्धीकरण |
| Enumeration | Listing users, shares, services or directories after discovery. | सूचीकरण |
| Exploit | Code or technique that abuses a weakness. | कमकुवत जागा वापरणारी पद्धत |
| Firewall | Filter that allows or blocks traffic by rules. | — (English madhech vapra) |
| Hash | One-way fingerprint of data (for integrity / password storage). | हॅश (एकमार्गी ठसा) |
| Honeypot | Decoy system meant to attract and study attackers safely. | फसवा सापळा |
| IDS | Intrusion Detection System – alerts on suspicious traffic/behaviour. | घुसखोरी शोध प्रणाली |
| Incident response | Organised steps after a security event (detect → contain → recover). | घटना प्रतिसाद |
| Integrity | Data stays correct and unaltered by unauthorised change (CIA). | अखंडता |
| IPS | Intrusion Prevention System – can block matching traffic. | घुसखोरी प्रतिबंध प्रणाली |
| Least privilege | Give only the minimum rights needed for the job. | किमान आवश्यक अधिकार |
| Malware | Software designed to harm, steal or control without consent. | दुर्भावनापूर्ण सॉफ्टवेअर |
| Man-in-the-Middle | Attacker sits between two parties and can read or alter traffic. | मध्यस्थ हल्ला |
| MFA | Multi-Factor Authentication – more than one proof of identity. | बहुघटक ओळख पडताळणी |
| Non-repudiation | Evidence that an action cannot honestly be denied later. | नकार अशक्यता |
| Patch | Vendor fix that closes a known weakness. | — (English madhech vapra) |
| Payload | The part of malware / exploit that does the harmful action. | हानिकारक भाग |
| Phishing | Fraud messages that trick people into secrets or clicks. | फिशिंग (फसवा संदेश) |
| Privilege escalation | Gaining higher rights than intended (user → admin). | विशेषाधिकार वाढवणे |
| Ransomware | Malware that locks or encrypts data and demands payment. | खंडणी मागणारे मालवेअर |
| Reconnaissance | Gathering information before an attack (passive or active). | टेहळणी |
| Red team | Authorised attackers who test defences (with written scope). | — (English madhech vapra) |
| Risk | Chance and impact of a threat using a weakness. | जोखीम |
| Salt | Random value mixed into password hashing to stop rainbow tables. | सॉल्ट (हॅशमधील यादृच्छिक मूल्य) |
| SIEM | Security Information and Event Management – central log correlation. | — (English madhech vapra) |
| SOC | Security Operations Centre – people + process watching alerts. | — (English madhech vapra) |
| Social engineering | Manipulating people instead of (or before) breaking tech. | सामाजिक अभियांत्रिकी (मन वळवणे) |
| Threat | Anything that can harm assets (actor, malware, mistake). | धोका |
| TLS | Transport Layer Security – encrypts network sessions (HTTPS). | — (English madhech vapra) |
| VPN | Encrypted tunnel for private traffic over a public network. | — (English madhech vapra) |
| Vulnerability | A weakness that can be abused (bug, misconfig, weak process). | कमकुवत जागा |
| Zero-day | Weakness with no public patch yet (or unknown to the vendor). | शून्य-दिवस कमकुवत जागा |
| Red team (attacker) does | Blue team (defender) detects / stops |
|---|---|
| Uses “zero-day” as slang for any old bug | Names CVE / patch ID when known; tracks patch SLA |
| Brags “I did MitM” on cafe Wi-Fi | Practices MitM themes only on OWN host-only lab |
| Stores passwords as plain MD5 | bcrypt/Argon2 + salt; MFA; least privilege |
Ravindra Bagale's Tip
“Vulnerability” book madhe कमकुवत जागा – ekach Marathi stick kara (भेद्यता / असुरक्षा random mix nako in your notes). Interview madhe English term + Blue control. Payload / exploit rattlo ≠ permission. Lakshat theva.
Lab
Pick ten terms from this section. For each write: own-words meaning + one Blue control. Teach three of them aloud to Amir or Zoya in clean English. No live attack on anything you do not own.