Information Security Definitions

Over the years I’ve written a number of articles attempting to either define, or differentiate between, various terms used within information security.

Here there are in one place.

• Security Assessment Types >

• The Difference Between a Vulnerability Assessment and a Penetration Test >

• The Difference Between Threats, Threat Actors, Vulnerabilities, and Risks >

• The Difference Between Red, Blue, and Purple Teams >

• The Definition of a Purple Team >

• When to Use Vulnerability Assessments, Pentesting, Red Teams, and Bug Bounties >

• The Difference Between Events, Alerts, and Incidents >

Related

• The Difference Between CSRF and Clickjacking >

• The Difference Between a Programmer, a Hacker, and a Developer >

• The Difference Between CWE and CVE >

• A MITRE Quick Reference >

• Information Security Interview Questions >

• How to Build a Career in Information Security >