> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/appendix/list-of-abbreviations.md). # List of Abbreviations [A](#a) | [B](#b) | [C](#c) | [D](#d) | [E](#e) | [F](#f) | [G](#g) | [H](#h) | [I](#i) | [J](#j) | [K](#k) | [L](#l) | [M](#m) | [N](#n) | [O](#o) | [P](#p) | Q | [R](#r) | [S](#s) | [T](#t) | [U](#u) | [V](#v) | [W](#w) | [X](#x) | Y | Z ## A

Abbreviation	Term	Definition
AD	Active Directory	Active Directory (AD) is a Microsoft directory service for Windows systems. Among other functions, it allows access rights to be controlled and managed centrally and security policies to be enforced.
AES	Advanced Encryption Standard	The Advanced Encryption Standard (AES) is a globally recognized, secure symmetric encryption algorithm that encrypts data in fixed block sizes of 128 bits, regardless of the key length.
APT	Advanced Persistent Threat	An Advanced Persistent Threat (APT) is a prolonged, covert cyberattack conducted by well-funded, state-sponsored groups to carry out targeted espionage, steal data, or sabotage critical infrastructure. Unlike conventional cyberattacks, APTs are designed to remain undetected within a network for months or years while pursuing their objectives.
ASM	Attack Surface Management	Attack Surface Management (ASM) is the process of continuously identifying, monitoring, and assessing digital and physical attack surfaces, meaning potential entry points for attackers.
AV	Antivirus (Software) Anti-Virus (Software)	AV is antivirus software that scans devices, files, and directories to detect, block, and remove malicious software such as viruses or Trojans.

*** ## B

Abbreviation	Term	Definition
BIOS	Basic Input/Output System	The Basic Input/Output System (BIOS) is the fundamental firmware on a PC and provides basic control of its functions.
BSI	German Federal Office for Information Security	The German Federal Office for Information Security (BSI) is Germany's cybersecurity authority. It shapes and promotes the secure use of information technology in government, business, and society.

*** ## C

Abbreviation	Term	Definition
CA	Certificate Authority	A Certificate Authority (CA) is a trusted organization that issues digital SSL/TLS certificates to verify the identity of websites, users, or devices on the internet.
CBC	Cipher Block Chaining	Cipher Block Chaining is a mode of operation for block ciphers such as AES or DES. Instead of encrypting each data block independently, each plaintext block is combined with the previously encrypted block before encryption.
CDN	Content Delivery Network	A Content Delivery Network (CDN) is a globally distributed network of servers that caches web content, such as videos or images, close to end users to reduce loading times, among other benefits.
CIDR	Classless Inter-Domain Routing	Classless Inter-Domain Routing (CIDR) is a method for allocating IPv4 and IPv6 addresses that enables networks to be divided flexibly using subnet masks.
CNA	CVE Numbering Authority	A CVE Numbering Authority (CNA) is responsible for assigning and managing CVE identifiers.
CPE	Customer Premises Equipment	Customer Premises Equipment (CPE) refers to network devices located at an end customer's physical premises.
CPU	Central Processing Unit	The Central Processing Unit (CPU) is the central hardware component of a computer responsible for executing instructions and calculations.
CSV	Comma-Separated Values	Comma-Separated Values (CSV) is a file format that stores structured data, such as tables, as plain text by separating column values with delimiters such as commas or semicolons.
CVE	Common Vulnerabilities and Exposures	Common Vulnerabilities and Exposures (CVE) is a catalog of unique identifiers for publicly known security vulnerabilities in computer systems and software.
CVE ID	CVE Identifier	A CVE ID is the unique identifier assigned to a vulnerability listed in the Common Vulnerabilities and Exposures catalog.
CVSS	Common Vulnerability Scoring System	The Common Vulnerability Scoring System (CVSS) is a standardized system for assessing the severity of software vulnerabilities.

*** ## D

Abbreviation	Term	Definition
DH	Diffie-Hellman	Diffie-Hellman (DH) key exchange is a method that allows two communicating parties to establish a shared key over an insecure, potentially monitored channel such as the internet without allowing a potential attacker to calculate the key. It is primarily used to establish encrypted connections.
DHCP	Dynamic Host Configuration Protocol	The Dynamic Host Configuration Protocol (DHCP) is a network protocol that automatically assigns devices an IP address and other configuration data, such as the subnet mask, default gateway, and DNS server address.
DMZ	Demilitarized Zone	A Demilitarized Zone (DMZ) is a subnet that acts as a security buffer between an internal network and an untrusted external network, usually the internet.
DNS	Domain Name System	The Domain Name System (DNS) translates human-readable domain names such as example.com into numerical IP addresses such as 192.168.1.1 so that computers and devices can communicate with each other over the internet.

*** ## E

Abbreviation	Term	Definition
EPSS	Exploit Prediction Scoring System	The Exploit Prediction Scoring System (EPSS) calculates the probability that a software vulnerability will be exploited within the next 30 days.
EtherIP	EtherIP Network Tunneling	EtherIP Network Tunneling allows two geographically separated Ethernet networks to communicate as though they were connected directly by a local Ethernet cable, even though they are separated by a routed IP network.

*** ## F

Abkürzung	Begriff	Definition
FIM	File Integrity Monitoring	File Integrity Monitoring (FIM) is a process that continuously monitors and analyzes critical files and directories to detect unauthorized access and malicious changes.

*** ## G

Abbreviation	Term	Definition
GB	Gigabyte	A gigabyte (GB) is a unit of digital data equal to approximately one billion bytes.
GRE	Generic Routing Encapsulation	Generic Routing Encapsulation (GRE) is a tunneling method developed by Cisco. It encapsulates a data packet, or payload, inside an IP packet so that it can be transferred from one network endpoint to another through an intermediate network, usually the internet.

*** ## H

Abbreviation	Term	Definition
HDD	Hard Disk Drive	A Hard Disk Drive (HDD) is a conventional magnetic storage medium for computers.
HTTP	Hypertext Transfer Protocol	The Hypertext Transfer Protocol (HTTP) is a protocol for transferring files over the internet, particularly for accessing websites.
HTTPS	Hypertext Transfer Protocol Secure	Hypertext Transfer Protocol Secure (HTTPS) is the secure version of the HTTP web protocol. It encrypts data sent between a browser and web server, protecting it against unauthorized access and manipulation.

*** ## I

Abbreviation	Term	Definition
ICMP	Internet Control Message Protocol	The Internet Control Message Protocol (ICMP) is a protocol used by network devices and computers to exchange error and diagnostic messages.
IDS	Intrusion Detection System	An Intrusion Detection System (IDS) monitors network traffic and system events to identify suspicious activity and security breaches.
IGMP	Internet Group Management Protocol	The Internet Group Management Protocol (IGMP) allows routers and hosts in IPv4 networks to send data streams by multicast to multiple recipients that have requested the data.
IP	Internet Protocol	The Internet Protocol (IP) is a protocol used to address and route data packets across the internet so that they reach the correct destination. Every internet-enabled device has a unique IP address through which it can be accessed.
IPIP	IP-over-IP	IP-over-IP is a tunneling method in which an IP packet is encapsulated inside another IP packet so that it can be transferred from one network endpoint to another through an intermediate network, usually the internet.
IPS	Intrusion Prevention System	An Intrusion Prevention System (IPS) monitors network traffic and system events. Unlike an IDS, it not only detects malicious activity and potential security breaches but also actively blocks them.
IPSEC ESP	IPsec Encapsulating Security Payload	Encapsulating Security Payload (ESP) is a protocol in the Internet Protocol Security (IPsec) suite. It encrypts data packets transmitted across IP networks such as the internet and verifies that the data originates from the stated source.
IPSECAH	IPsec Authentication Header	Authentication Header (AH) is a protocol in the Internet Protocol Security (IPsec) suite. It ensures that data packets transmitted across IP networks such as the internet have not been modified and originate from the stated source. Unlike ESP, however, it does not encrypt the data.

*** ## J

Abkürzung	Begriff	Definition
JSON	JavaScript Object Notation	JavaScript Object Notation (JSON) is a lightweight, text-based data format used for structured data exchange between systems, such as a server and web browser.

*** ## K

Abbreviation	Term	Definition
KB	Kilobyte	A kilobyte (KB) is a unit of digital data equal to approximately one thousand bytes.
KRITIS	Critical Infrastructure	Critical infrastructure (KRITIS) refers to essential organizations, systems, and facilities whose failure would have serious consequences for the public, such as threats to public safety or supply shortages. Legislators require these organizations to implement special protective measures.

*** ## L

Abbreviation	Term	Definition
LAN	Local Area Network	A Local Area Network (LAN) is a computer network confined to a limited geographical area, such as a home or corporate network.
LDAP	Lightweight Directory Access Protocol	The Lightweight Directory Access Protocol (LDAP) is an open protocol used to manage and query directories containing data such as user accounts, passwords, and device information.
LLMNR	Link-Local Multicast Name Resolution	Link-Local Multicast Name Resolution (LLMNR) is a network protocol that allows computers on a local network to identify hosts using multicast requests without requiring a DNS server.

*** ## M

Abbreviation	Term	Definition
MB	Megabyte	A megabyte (MB) is a unit of digital data equal to approximately one million bytes.
MDR	Managed Detection and Response	Managed Detection and Response (MDR) is a managed cybersecurity service for detecting and responding to security threats. It combines 24/7 monitoring with analysis and attack mitigation.
MFA	Multi-Factor Authentication Multifactor Authentication	Multi-Factor Authentication (MFA) is a security method that requires multiple forms of identity verification when signing in to software.
MHz	Megahertz	Megahertz is a unit of frequency equal to one million cycles, or hertz, per second.
MIB	Management Information Base	A Management Information Base (MIB) is a hierarchically structured database that stores device information. This information can be accessed using SNMP to monitor and manage devices on a network.
MPLS	Multi-Protocol Label Switching	Multi-Protocol Label Switching (MPLS) is a network technology that prioritizes data packets in telecommunications networks, such as voice or video, and forwards them over fast, predefined paths instead of relying on slower IP routing.

*** ## N

Abbreviation	Term	Definition
NIS	Network and Information Security Network and Information Systems	The Network and Information Security (NIS) Directive and the subsequent NIS 2 Directive are EU regulations that define minimum security standards for network and information systems.
NTLM	New Technology LAN Manager	New Technology LAN Manager (NTLM) is a legacy Microsoft authentication protocol used in Windows networks to authenticate users and computers.

*** ## O

Abbreviation	Term	Definition
OS	Operating System	An Operating System (OS) is the central software of a computer. It manages the hardware, enables programs to run, and serves as the interface between the user and the machine.
OSPF	Open Shortest Path First	Open Shortest Path First (OSPF) is a routing protocol for IP networks that calculates the best path based on available bandwidth and potential latency.

*** ## P

Abbreviation	Term	Definition
PCRE	Perl-Compatible Regular Expression	Perl-Compatible Regular Expressions (PCRE) is a software library based on the Perl programming language that is used to analyze, compare, and modify strings using regular expressions.
PDF	Portable Document Format	Portable Document Format (PDF) is a document format originally developed by Adobe for displaying documents consistently across platforms.
PNIN	Predictable Network Interface Naming	Predictable Network Interface Naming (PNIN) is a Linux mechanism that assigns persistent, unique names to network interfaces based on hardware characteristics. This prevents interface names from changing after restarts or hardware modifications.

*** ## Q No abbreviation available. *** ## R

Abbreviation	Term	Definition
RAM	Random Access Memory	Random Access Memory (RAM) is a computer's working memory. It provides short-term storage and fast access to data while a program is running.
RPC	Remote Procedure Call	Remote Procedure Call (RPC) is a protocol that allows a program to execute a function or process on another computer or server as though it were local.

*** ## S

Abbreviation	Term	Definition
SaaS	Software as a Service	Software as a Service (SaaS) is a cloud-based model in which software applications are used over the internet rather than installed locally. The provider is responsible for the infrastructure, maintenance, and updates.
SCTP	Stream Control Transmission Protocol	The Stream Control Transmission Protocol (SCTP) is a connection-oriented network protocol. Like TCP, it ensures that data packets arrive completely and in the correct order, while also operating in a message-oriented and efficient manner similar to UDP.
SIEM	Security Information and Event Management	Security Information and Event Management (SIEM) solutions collect, correlate, and analyze a wide range of log data from an IT environment to detect security incidents at an early stage.
SMB	Server Message Block	Server Message Block (SMB) is a network protocol used to share files, printers, and other resources across computers and servers on a local network.
SNMP	Simple Network Management Protocol	The Simple Network Management Protocol (SNMP) is a protocol used to monitor and manage network devices.
SOAR	Security Orchestration, Automation, and Response	Security Orchestration, Automation, and Response (SOAR) is a software solution that integrates separate security tools such as firewalls and SIEM systems to automate recurring tasks and responses to security incidents.
SOC	Security Operations Center	A Security Operations Center (SOC) is a central team and/or feature responsible for monitoring, detecting, and defending against cyberthreats within an organization or software solution.
SSD	Solid State Drive	A Solid State Drive (SSD) is a modern storage device that stores data on flash memory chips rather than rotating disks.
SSH	Secure Shell	Secure Shell (SSH) is a network protocol that provides a secure, encrypted connection for remote access to computers or servers.
SSL	Secure Sockets Layer	Secure Sockets Layer (SSL) is a security protocol that protects internet communication by encrypting and authenticating data exchanged between a web browser and server. It has now been superseded by TLS, although the terms are still frequently used interchangeably.

*** ## T

Abbreviation	Term	Definition
TCP	Transmission Control Protocol	The Transmission Control Protocol (TCP) is a connection-oriented network protocol that ensures data is transmitted to its destination in the correct order and without errors.
TLS	Transport Layer Security	Transport Layer Security (TLS) is a security protocol that protects internet communication by encrypting and authenticating data exchanged between a web browser and server.
TTL	Time to Live	Time to Live (TTL) refers to the lifetime or validity period of data packets in a network.

*** ## U

Abbreviation	Term	Definition
UAC	User Account Control	User Account Control (UAC) is a security mechanism in Microsoft Windows that prevents unauthorized system changes by running programs with standard user privileges rather than administrator privileges by default.
UDP	User Datagram Protocol	The User Datagram Protocol (UDP) is a connectionless network protocol for data transmission. It enables data packets to be sent quickly without waiting for the destination to confirm that all data arrived without errors.
UDP-LITE	Lightweight User Datagram Protocol	The Lightweight User Datagram Protocol (UDP-LITE) is a connectionless network protocol for data transmission. As a variant of UDP, it was designed specifically for applications that can tolerate partially corrupted data packets rather than discarding them.
UI	User Interface	The User Interface (UI) is the part of a software application with which users interact.
URI	Uniform Resource Identifier	A Uniform Resource Identifier (URI) is a unique string used to identify a resource on the internet, such as a website, image, or document.
URL	Uniform Resource Locator	A Uniform Resource Locator (URL) is the unique address of a resource on the internet, such as a website, image, or document.
UTM	Urchin Tracking Module	Urchin Tracking Module (UTM) parameters are text components appended to the end of a URL without changing the page itself. They help measure the origin and effectiveness of website traffic.
UUID	Universally Unique Identifier	A Universally Unique Identifier (UUID) is a 128-bit string used to identify information uniquely across computer systems worldwide.

*** ## V

Abbreviation	Term	Definition
VM	Virtual Machine Virtualized Machine	A Virtual Machine (VM) is a software-based, virtual computer with its own CPU, RAM, and disk that runs on a physical host while sharing its resources.
VPN	Virtual Private Network	A Virtual Private Network (VPN) is a virtual, non-public network that establishes a protected, encrypted connection between two endpoints over an untrusted network, usually the internet, by routing data through a secure tunnel to a dedicated server.
VRRP	Virtual Router Redundancy Protocol	The Virtual Router Redundancy Protocol (VRRP) combines multiple physical routers into one virtual router with a single IP address. End devices use the virtual IP address as their gateway, which can fail over seamlessly to a backup router if the active router becomes unavailable.

*** ## W

Abbreviation	Term	Definition
WAN	Wide Area Network	A Wide Area Network (WAN) is a computer network that spans a large geographical area, potentially across countries and continents.
Wi-Fi	Wireless Fidelity	Wireless Fidelity (Wi-Fi) is a technology that uses radio waves to connect devices wirelessly to the internet or a local network.
WLAN	Wireless Local Area Network	A Wireless Local Area Network (WLAN) is a wireless network that allows devices to connect to the internet or a local network using radio waves, or Wi-Fi.
WMI	Windows Management Instrumentation	Windows Management Instrumentation (WMI) is a management infrastructure built into Microsoft Windows. It allows system data to be queried locally or remotely, configurations to be changed, and tasks to be automated.

*** ## X

Abbreviation	Term	Definition
XDR	Extended Detection and Response	Extended Detection and Response (XDR) is a cybersecurity concept that provides enhanced detection of and response to security threats across an organization's entire IT infrastructure, including not only endpoints but also servers, applications, networks, and cloud services.
XML	Extensible Markup Language	Extensible Markup Language (XML) is a text-based markup language used to describe, store, and exchange structured data between different systems.

*** ## Y No abbreviation available. *** ## Z No abbreviation available. ***