The training and skills medium
TLS (Transport Layer Security) is a cryptographic protocol designed to secure communications on the Internet.
It establishes a secure channel between a web server and a client (a browser, for example), guaranteeing the confidentiality and integrity of the data exchanged. TLS is the successor to the SSL (Secure Sockets Layer) protocol.
In cybersecurity, a token is a form of digital token used to authenticate, authorise or secure communications between users, applications or systems. It is often used to avoid directly manipulating sensitive information such as passwords.
The acronym TTP refers to all the Tactics, Techniques and Procedures used by malicious actors to plan, execute and refine their attacks. TTP therefore refers to the modus operandi of cybercriminals, i.e. all the methods and approaches used to carry out their attacks.
User and Entity Behavior Analytics (UEBA) is an advanced category of cybersecurity solutions that uses artificial intelligence and machine learning to detect anomalous and potentially malicious behavior by users and entities within a computer network.
In simple terms, the UEBA does not simply look for signatures of known attacks (as traditional antivirus software does) or check predefined rules (as firewalls do). The UEBA learns what is 'normal' for each user and each entity (machines, applications, servers, etc.) and alerts you as soon as any behaviour deviates from this norm.