Bezpieczeństwo

Security

A glossary of IT security concepts covering the protection of data, systems, networks and applications.

What is Security?

In IT, security means a set of principles, technologies and processes used to protect data, systems, applications and infrastructure against unauthorized access, loss, misuse or disruption.

Scope and core concepts

This area includes authentication, encryption, access control, web application protection, email security, backup, monitoring and incident response. Important threats include phishing, ransomware, DDoS attacks, SQL Injection, XSS, brute force and man in the middle attacks.

Importance for organizations

Good security practices help maintain the confidentiality, integrity and availability of information. They affect service continuity, regulatory compliance, infrastructure resilience and the trust of users and customers.

Technologies and practical context

In practice, security combines solutions such as firewall, WAF, VPN, TLS, DNSSEC, DKIM, DMARC, MFA, Zero Trust, immutable backup and penetration testing. Standards, methodologies and recommendations are also important, including OWASP, RTO and RPO, and incident response procedures.

Example roles

  • cybersecurity specialist
  • SOC analyst
  • penetration tester
  • IT security administrator
  • application security engineer
  • security architect
  • GRC specialist
  • incident response specialist

Keywords

Alphabetical filter

Dictionary entries

65 results

ACME
SecurityEN

ACME

Automatic Certificate Management Environment

ACME is a protocol that automates the issuance, validation, installation and renewal of SSL/TLS certificates for domains.

View details
Adware
SecurityEN

Adware

advertising-supported software

Adware displays advertisements and may track activity, change browser settings, reduce performance and weaken device security.

View details
ARC
SecurityEN

ARC

Authenticated Received Chain

ARC (Authenticated Received Chain) is an email authentication standard that preserves SPF, DKIM and DMARC results when messages pass through intermediary servers.

View details
Backup
Security, Servers and HostingEN

Backup

Data backup

A backup is a copy of data that enables recovery after a failure, user error, cyberattack or unsuccessful update.

View details
BIMI
SecurityEN

BIMI

Brand Indicators for Message Identification

BIMI is an email standard that displays a verified sender logo next to messages and supports protection against phishing.

View details
Brute Force
SecurityEN

Brute Force

Brute-force attack

Brute Force is an attack method that automatically tests many passwords, usernames, codes or keys to gain unauthorized access.

View details
Bug bounty
SecurityEN

Bug bounty

Security vulnerability reward program

Bug bounty programs reward ethical hackers for discovering and responsibly reporting vulnerabilities in applications, systems and IT infrastructure.

View details
Captcha
SecurityEN

Captcha

CAPTCHA, CAPTCHA test

Captcha is a verification test that helps distinguish humans from automated bots and limit spam, fraud, and abuse online.

View details
CSRF
SecurityEN

CSRF

Cross-Site Request Forgery, cross-site request forgery

CSRF is an attack in which an attacker tricks a logged-in user into performing an unauthorised operation in a web application.

View details
Darknet
SecurityEN

Darknet

hidden network, dark web

The darknet is a hidden part of the internet accessed with specialised tools such as Tor. It can improve communication privacy, but also involves an increased risk of fraud and cyberattacks.

View details
Atak DDoS
SecurityEN

DDoS Attack

Distributed Denial-of-Service Attack

A DDoS attack attempts to overwhelm a server, application or network with a large number of requests from multiple sources, preventing legitimate users from accessing the service.

View details
DKIM
SecurityEN

DKIM

DomainKeys Identified Mail

DKIM is an email authentication mechanism that uses a cryptographic signature and a DNS record to confirm sender authenticity and message integrity.

View details
DMARC
SecurityEN

DMARC

Domain-based Message Authentication, Reporting and Conformance

DMARC is an email authentication protocol that helps protect domains from phishing and spoofing while improving message deliverability.

View details
DNS DANE
SecurityEN

DNS DANE

DNS-based Authentication of Named Entities

DNS DANE authenticates TLS certificates through TLSA records secured with DNSSEC. It allows a domain owner to specify the certificate or public key authorized for a particular service.

View details
DNSSEC
Basic Terms and Acronyms, SecurityEN

DNSSEC

Domain Name System Security Extensions

DNSSEC extends DNS with digital signatures that verify the authenticity and integrity of domain records, reducing the risk of forged DNS responses.

View details
DoH
SecurityEN

DoH

DNS over HTTPS

DoH, or DNS over HTTPS, encrypts DNS queries over an HTTPS connection to improve privacy and communication security online.

View details
DoT
SecurityEN

DoT

DNS over TLS

DoT, or DNS over TLS, encrypts DNS queries with TLS to improve privacy and the security of network communication.

View details
DRP
SecurityEN

DRP

Disaster Recovery Plan, disaster recovery plan

DRP is a plan for restoring IT systems, data and services after a disaster, cyberattack or other event that disrupts business operations.

View details
Exploit
SecurityEN

Exploit

Code that exploits a security vulnerability

An exploit is code or a program that uses a vulnerability in a system, application, or protocol to gain unauthorized access, execute code, or take control of resources.

View details
Fail2ban
SecurityEN

Fail2ban

Fail2ban intrusion prevention system

Fail2ban analyzes server logs and automatically blocks IP addresses responsible for repeated suspicious login attempts.

View details
Firewall
SecurityEN

Firewall

Network firewall

A firewall controls traffic between devices, servers, applications and the internet, blocking unauthorised connections and suspicious requests.

View details
RODO
SecurityEN

GDPR

General Data Protection Regulation

The GDPR defines rules for protecting and processing personal data in the European Union. It affects websites, applications, IT systems and business processes.

View details
High Availability (wysoka dostępność)
Cloud and Virtualization, SecurityEN

High Availability (high availability)

HA, high availability

High Availability is the design of systems that remain accessible despite individual component failures. It uses redundancy, data replication, monitoring and automatic failover.

View details
HSTS
SecurityEN

HSTS

HTTP Strict Transport Security

HSTS is a security mechanism that enforces HTTPS connections and protects users from attacks such as SSL stripping.

View details
HTTP
SecurityEN

HTTP

Hypertext Transfer Protocol

HTTP is an application-layer protocol that enables data exchange between a client, such as a browser or application, and a server.

View details