Glossary

I-O

IDS - Intrusion Detection System Devices or software dedicated to detect intrusions. IDS enable to log abnormal events, to detect suspicious actions in real time and even to adopt counter-measures based on signatures or behaviour analysis. There are 2 major types of IDS : NIDS (Network Intrusion Detection Systems) for networks and HIDS (Host-based Intrusion Detection Systems) for servers
IP address - Internet Protocol Number set to identify a computer on a network. It comprises 4 numbers from 0 to 255 - corresponding to 1 byte each- separated with dots for the Internet Protocol version 4
IP (address) spoofing Hacking technique consisting of using the IP address of a machine in order to 'usurp' its identity. It enables to retrieve access to confidential data creating IP packets with a source IP address pertaining to somebody else

J2EE Specification for Sun Java programmation language containing a set of extensions dedicated to businesses
Java Java is the name of a technology developed by Sun. It enables to produce software capable to run on any hardware architecture. It uses the following elements : (1)Java is an object oriented programmation language, Java virtual machine runs any Java written program and is completed with API specifications
Jscript - javascript Script programmation language that needs no compilation and enables to add functionalities to HTML web pages. Added functionalities improve interactivity with internet users and make pages dynamic. Javascript code is blended with HTML code and is directly interpreted by web browser
Just-in time patching Creation and application of a 'substitutive' patch developed by a security software vendor to protect the software before the official software editor has developed and officially released the patch

Keylogger A program dedicated to capture keystrokes of a computer user, store them and optionnally send them back to a remote hacker

Log(ging) Sequential recording of all events that take place while a computer is running. Recording is achieved either on a log file or on a database

Mailbombing Act of overwhelming a mail box with a huge volume of unuseful messages in order to paralyze this mail box
Man-in-the- middle attack The purpose of the attacker is to make the client believe that he -the attacker- is the server and make the server believe that he is the client. He then becomes the 'man in the middle'. It enables to monitor all network traffic between client and server and to modify it in order to obtain confidential information such as passwords, access rights, etc.)
Message relay Application or server located between the internet and internal messaging server. The message relay usually achieves vital security functions such as content analysis in order to fight against virus, spam, info leaks, ... Exchanges can also be encrypted via message relay
Metatag A piece of information placed in the HTML header of a web page, providing page description. These data are not displayed on the browser but are visible when you edit source code of a web page. Also see TAG
MIME A MIME type is used to identify data type or format. It was initially used for e-mail exchanges then for HTTP. A MIME type comprises 2 short character strings separated with '/', the first part indicates a category (for instance, 'image' or 'text'), the second part indicates format in detail (for instance, 'png' for a Portable Network Graplics page)
Monitoring Real time control and surpervision of a process

Negative (negative security model) cf. Black list
NIDS - Network Intrusion Detection System Device or software dedicated to detect intrusions. IDS enable to log abnormal events, to detect suspicious actions in real time and even to adopt counter-measures based on signatures or behaviour analysis. There are 2 major types of IDS : NIDS (Network Intrusion Detection Systems) for networks and HIDS (Host-based Intrusion Detection Systems) for servers
No repudiation Guarantee that a message has been effectively sent by a specific sender and received by a specific receiver. The real purpose is to guarantee the message has been sent so that the sender can not 'repudiate' his message arguing that he did not send it