IT Glossary & Dictionary

An AWS object storage service that stores and retrieves any amount of data from anywhere on the web.

A cloud delivery model where software applications are hosted and managed by a provider and accessed by users over the internet.

Automated analysis of source code to find security vulnerabilities without executing the application.

The structure definition of a database including tables, columns, data types, relationships, indexes, and constraints.

The most popular Python machine learning library providing simple and efficient tools for data analysis and modeling.

An approach that separates the network control plane from the data plane, enabling centralized, programmable network management.

The practice of securely storing, accessing, and rotating sensitive credentials like API keys, passwords, and certificates.

A systematic examination of an information system to assess compliance with security policies, identify vulnerabilities, and verify controls.

The process of reducing a system's attack surface by disabling unnecessary services, applying patches, and configuring security controls.

HTTP response headers that instruct browsers to enable security features like XSS protection, framing prevention, and content type enforcement.

A stream editor for filtering and transforming text, commonly used for find-and-replace operations in files.

Security-Enhanced Linux — a mandatory access control system that confines programs to minimum required privileges beyond standard file permissions.

A versioning scheme using MAJOR.MINOR.PATCH numbers that communicates the nature of changes in each release.

The practice of optimizing websites to rank higher in search engine results, increasing organic traffic.

A cloud execution model where the provider manages servers and dynamically allocates resources, charging only for actual usage.

A server push technology that enables a server to send real-time updates to a browser over a single HTTP connection.

A web technology enabling servers to push real-time updates to browsers over a single HTTP connection, simpler than WebSockets.

A mechanism that automatically detects and tracks the network locations of service instances in distributed systems.

An infrastructure layer that handles service-to-service communication, providing load balancing, encryption, and observability.

A JavaScript file that runs in the background, enabling offline support, push notifications, and background sync for web apps.

An attack where an adversary takes over a legitimate user session by stealing or predicting the session identifier.

A command-line interface that interprets user commands and passes them to the operating system for execution.

A platform that collects, correlates, and analyzes security events from across an organization to detect threats and incidents.

A design pattern that restricts a class to a single instance and provides a global point of access to that instance.

An XML file that lists all important URLs on a website, helping search engines discover and crawl content efficiently.

A formal agreement between a service provider and customer defining guaranteed levels of service availability and performance.

A class mechanism that restricts attribute creation and reduces memory usage by using a fixed set of instance variables.

A protocol for monitoring and managing network devices like routers, switches, servers, and printers remotely.

A centralized team and facility responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats 24/7.

A pattern where records are marked as deleted with a flag or timestamp rather than being physically removed from the database.

Five design principles for writing maintainable, flexible object-oriented code: Single Responsibility, Open-Closed, Liskov Substitution, Interface Segregation, and Dependency Inversion.

Five object-oriented design principles that guide developers in creating maintainable, flexible, and scalable software systems.

A platform for continuous code quality inspection that detects bugs, vulnerabilities, and code smells through static analysis.

A web application that loads a single HTML page and dynamically updates content without full page reloads.

Discounted cloud compute instances that use spare capacity at significantly lower prices but can be interrupted with short notice.

Structured Query Language — the standard language for managing and querying data in relational databases.

The most popular Python SQL toolkit and ORM that provides a full suite of database abstraction patterns.

An attack where malicious SQL code is inserted into application queries through user input to access or manipulate the database.

An engineering discipline that applies software engineering principles to infrastructure and operations to create reliable systems.

A cryptographic network protocol for secure remote login and command execution over an unsecured network.

A digital certificate that authenticates a website identity and enables encrypted HTTPS connections.

A technique where web pages are rendered on the server and sent as complete HTML to the browser, improving SEO and initial load time.

A data structure that follows Last-In-First-Out (LIFO) ordering, where elements are added and removed from the same end (top).

Two memory regions: the stack stores function call data with automatic cleanup, while the heap stores dynamically allocated objects.

A tool that generates a complete static HTML website from templates and content at build time, requiring no server-side processing.

A precompiled collection of SQL statements stored in the database that can be executed as a single unit.

A diagnostic tool that traces system calls and signals made by a process, useful for debugging and performance analysis.

A standardized vocabulary for marking up web content so search engines can understand and display it as rich results.