Samedi 17 Octobre 2026 10:33:37 GMT+02:00
Netcrook
WIKICROOK - I
TERMES TECHNIQUES
I/Q dataRaw in-phase and quadrature samples used to represent radio signals digitally.IA-64Intel’s 64-bit instruction-set architecture used for the Itanium line.IaaSInfrastructure as a Service, a cloud model where customers manage more of the operating and security stack.iACLAn infrastructure access control list used to restrict traffic to sensitive network services and ports.iACLsinfrastructure ACLs used to allow only required management and control-plane traffic.IAM access keyA long-term credential used to authenticate AWS API requests.IAM Execution RoleThe AWS permission set an application uses to act on resources and call services.IAM identityAn AWS user or role that has permissions attached through policies.IAM userA named AWS identity that can receive permissions and programmatic credentials.IASTInteractive Application Security Testing, a method that examines security behavior inside a running application.IBAN swapFraud that replaces the intended bank account number during a payment process.IBM Consulting AdvantageIBM’s AI-enabled consulting platform for delivery, modernization, and operations work.IBM iIBM's integrated operating system for Power Systems, designed around tightly controlled object and file authority.IBM PCThe original personal computer platform that shaped a large compatibility ecosystem.IBM ZIBM's mainframe platform family used for mission-critical business systems.IBPBA mitigation that can flush branch predictor state across security boundaries.IC designsemiconductor engineering work that often depends on sensitive files, internal systems, and trusted suppliers.ICAO 9303The international standard framework for machine-readable travel and identity documents.Ice analysisInspection or measurement used to understand ice conditions.iCloud Private RelayAn Apple privacy feature designed to hide a user's IP address and encrypt DNS-related browsing data.ICMPA network protocol used for diagnostics like ping, but sometimes abused as a covert carrier.IcosahedronA 20-faced geometric solid often used in visual and mechanical design.ICT incidenta disruption or degradation affecting information and communication technology services.ICT providera company delivering information and communications technology services.ICT resiliencethe ability of digital systems and services to keep functioning or recover quickly after disruption.ICT riskThe risk that information and communication technology failures, misuse, or attacks will disrupt operations.ICT spendingbudget allocated to information and communications technology operations, upgrades, and maintenance.ICT supplierA company that provides information and communications technology products or services to support operations.ICT-SCRMInformation and Communications Technology Supply Chain Risk Management, the supply-chain security approach used for technology systems and services.IdentificationA one-to-many search that tries to determine who an unknown person is by comparing against a larger database.Identità onlineThe version of self that is built, shown, and interpreted through digital spaces.IdentityThe distinct account or credential used to identify which agent performed an action.Identity activity reviewchecking accounts and logins for suspicious access.Identity and accessthe controls that decide who can sign in and what they can do.Identity and authorizationControls that verify who a system is and what actions it is allowed to perform.Identity and authorization layerThe part of a system that verifies users and controls what they can access.Identity assertionA signed statement used in federated authentication to convey that an identity check has already occurred.Identity attributionThe ability to tie an action, session, or event to a verified user account.Identity backupsDedicated recovery copies for directory and authentication systems.Identity churnthe repeated creation and disposal of identities to avoid detection.Identity cloningFraud method that imitates a real person using copied media and personal signals.Identity compressionA tactic that turns a complex cause into a simple, repeatable symbol or label.Identity confidenceThe current level of trust a system assigns to a user or session.Identity controlAuthentication and account management measures used to tie activity to approved users and workspaces.Identity credentialA token that helps confirm who someone is, such as a badge or pass.Identity data leakunauthorized publication of personal information that can fuel fraud and phishing.Identity Dependencies Grapha relationship map of identities, permissions, sessions, and trust paths.Identity document replacementThe administrative process of reissuing documents after loss, theft, or security concerns.Identity driftA shift where an identity ends up with more authority than its intended role requires.Identity event reviewChecking accounts, logins, and access activity for suspicious changes.Identity evidenceA document or record used to prove a person’s identity, such as a driver’s license.Identity FabricAn architectural layer that connects identity systems and helps unify policy and visibility across environments.Identity farmingcreating large numbers of fake or disposable accounts for abuse.Identity flowthe steps used to verify a user, account, or session during login or checkout.Identity gatewayA service or interface that helps mediate user authentication and account access.Identity governance and administrationProcesses for reviewing, approving, and removing user access.Identity integrationThe process of merging login, access, and authentication controls across environments.Identity keyA cryptographic key used to help confirm that a chat contact is really who they claim to be.Identity Management ToolSoftware that helps control accounts, logins, and access in an organization.Identity mappingThe internal association between an alias and the real account or inbox behind it.Identity matchingThe process of linking data points to the same person across different systems.Identity middlewareSoftware that brokers login, policy, or directory integration between users and applications.Identity misuseThe unauthorized use or impersonation of credentials or identity information to access systems.Identity monitoringA service that watches for signs a user’s personal data may have appeared in suspicious places.Identity networkA system of digital credentials and access rules that helps define who can use a service.Identity policyRules that decide whether a user, device, or session should be trusted.Identity postureThe state of a user account and its authentication strength, including factors such as MFA and account assurance.Identity profile exporta bundle of account details and permissions that can reveal organizational structure.Identity protectionServices that help monitor or reduce the risk of personal data misuse.Identity Provider (IdP)The enterprise system that authenticates users and enforces access policy, such as a corporate SSO platform.Identity recordspersonal files such as IDs or social security data that can fuel fraud.Identity recovery workflowThe process used to restore or reset access, often a high-risk target for attackers.Identity resiliencethe ability to recover identity systems and restore trust after disruption.Identity reuseusing the same identifier across multiple services.Identity reviewchecking whether accounts, credentials, and permissions still match legitimate need.Identity riskthe danger that login credentials or admin accounts may be misused.Identity serviceslogin and account infrastructure that defenders often check during incident verification.Identity sessionAn authenticated access state that can be valuable to attackers even without a stolen password.Identity signalsaccount and access indicators that help validate suspicious activity.Identity sprawltoo many accounts, roles, or permissions spread across tools and services.Identity stackThe set of systems that manage users, devices, and access decisions.Identity storeA database or directory that holds core user attributes, affiliations, and account information.Identity traceA record or clue tied to an account, device, or login used in an investigation.Identity validationthe process of checking whether suspicious activity, access, or disclosures match real account or system behavior.Identity verification dataDocuments or biometrics used to confirm a person’s identity, often highly sensitive if leaked.Identity visibilityThe ability to track identities, credentials, and permissions across an environment in near real time.Identity-aware accessAccess decisions based on verified user or service identity, not network location alone.Identity-aware policyAccess rules that use user, device, or workload context instead of simple network location.Identity-Aware ProxyA gateway that checks identity and context before allowing access to protected services.Identity-based accessA model that grants permissions based on verified identities instead of static shared secrets.Identity-Centric SecurityA defense approach that treats user, machine, and service identity behavior as a primary attack surface.Identity-document datarecords such as passports or driver’s licenses that can increase fraud risk.Identity-document theftUnauthorized capture of passports, IDs, or similar personal records.Identity-First SecurityAn approach that places identity at the center of access control and security policy.Identity-layer access controlPermissioning that ties actions to a specific digital identity and its scope.Identity-proofingThe process of confirming that a digital account belongs to a real person.Identity-related functionsFeatures that help confirm who a user is before granting access to services.Identity-resolution pathThe part of an application that maps users, aliases, or addresses to records.Identity-rich dataPersonal or role-based information that can help an attacker tailor convincing outreach.Identity-rich recordsPersonal data sets that can raise privacy and fraud risk.Identity-rich systemsEnvironments that hold accounts, onboarding records, or employee data useful to attackers.Identity-theft riskThe chance that personal data could be misused to impersonate or defraud someone.Idle storageA period when equipment is left unused, which can affect later performance.IDNAn internationalized domain name that can use non-ASCII Unicode characters.IdPIdentity Provider, the system that authenticates users and issues access to applications or services.IDSA system that monitors traffic and events for signs of suspicious activity.IEC 60870-5-104A telecontrol protocol used for networked supervision and control in industrial and utility environments.IEDIntelligent Electronic Device, a field device commonly used in substations and other OT environments.Iframe sandboxingA containment method that restricts what embedded content can do inside the browser.iGamingOnline gambling services delivered through digital platforms.Ignitionthe point at which heat or energy starts a combustion reaction.IIS machine keysCryptographic values used by ASP.NET and IIS to protect application state and validate trusted requests.IKEInternet Key Exchange, the protocol commonly used to set up and manage IPsec security associations.IKEEXTThe Windows service component that implements Internet Key Exchange extensions for IPsec setup.IKEv2 SA_INITThe early stage of an IKEv2 handshake used to begin secure tunnel negotiation before normal access is established.iLEAPPA forensic tool used to examine iOS artifacts and extractions.Illegal tappingUnauthorized connection to a power line to draw electricity outside the billing system.Illicit tradeThe exchange of goods, services, or data that is illegal under applicable law.IlliquidityThe difficulty of exiting an investment quickly without a price penalty.Image integrityThe assurance that a container image has not been altered and still matches the trusted publisher’s version.Image Optimization APIA server-side feature that resizes, converts, or compresses images for faster delivery.Image reconstructionSoftware processing that turns raw sensor data into a finished image or video.Image scanningautomated analysis of an image for vulnerabilities, packages, and configuration issues.Image sensorThe part of a camera that converts incoming light into a digital signal.Image signingA verification method that attaches cryptographic proof to an image so its origin and integrity can be checked later.Image trackingThe process of following an object's position across successive frames.Image trustThe confidence that a container image came from a known, safe, and intended build source.Image VersionA maintained release instance of a container image, often tied to rebuilds, patches, or platform variants.Image-based abuseNonconsensual creation, sharing, or threat of sharing intimate images, including synthetic content.ImageMagickA server-side image processing suite that can convert, inspect, and transform many image formats.ImageResponseA Next.js API for generating server-side images from JSX and CSS, often used for Open Graph previews.ImagickA PHP extension that connects WordPress to ImageMagick for image and document processing.Imaging AISoftware that helps interpret medical images and support clinical decisions.Imaging deviceHardware designed to record visual information with usable clarity and fidelity.IMEInput Method Editor, software that lets users type complex scripts such as Chinese on a standard keyboard.Immediate debitA payment method where the amount is taken from the account at once.Immersion coolingA cooling approach that submerges servers in dielectric fluid to dissipate high heat loads.Immersive environmentsDigital or simulated settings that let learners practice tasks in realistic scenarios.Immersive trainingTraining delivered through interactive, simulated environments designed for practice and learning.ImmobilizerA vehicle function that prevents the engine from starting without proper authorization.Immutable identityA permanent identifier that does not change when a repository name changes.Immutable referenceA fixed identifier, such as a commit SHA, that cannot be changed later.Impact measurementThe practice of checking whether a system actually improves service, quality, speed, or cost.Impedance mismatchA situation where two systems interpret the same input differently, creating a security gap.Impersonation attackA social engineering tactic where an attacker poses as a trusted entity to obtain access or data.Impersonation campaigna scam that borrows a known name or identity to seem credible.Impersonation ContentMessages, pages, or templates designed to look like a trusted brand or organization.Impersonation protectionControls designed to reduce the risk of someone posing as a trusted person in a meeting.Impersonation warningan alert that flags a possible identity mismatch during a call or meeting.Implantable Cardiac MonitorA device placed under the skin to record heart rhythm events over time.Implementation guidanceNon-binding material that helps explain how a law may be applied in practice.Implementation varianceSmall differences in how software behaves across platforms or environments.Implementing decreesNational legal acts used to align domestic rules with a broader EU regulation.Implicit feedbackBehavioral signals such as clicks, pauses, or viewing time that can be used for model training.Implicit trustA security flaw pattern where a system assumes peer messages are trustworthy without sufficient validation.Import TableA Windows PE structure that lists external functions a program expects to call.Important subjectA NIS2 category that is still covered, but under a different set of obligations.Impossible TravelA sign-in anomaly where one account appears in far-apart locations too quickly to be physically plausible.Imposter websiteA fake site built to mimic a real brand or download page and mislead users.Impressiona recorded display event that may not equal meaningful attention.Improper AuthorizationA vulnerability class where a system fails to enforce access control correctly.Improper certificate validationA flaw where software fails to correctly verify a digital certificate, weakening trust in the connection.Improper origin validationA failure to confirm where a message or request truly came from.In silicoComputer-based analysis or simulation performed before laboratory testing.In-circuit readA method of reading memory while the chip stays on the board.In-game economythe system that governs earning, spending, and managing game currency.In-line enforcementControls applied during a live request, before data is returned.In-memory directoryA directory instance held in application memory, often used for testing or local authentication flows.In-memory implantMalicious code that runs in RAM rather than as a clearly visible file on disk.In-memory injectionA technique that places code directly into a live process or runtime space.In-memory shellcode executionRunning payload code directly in RAM, which can reduce disk artifacts.In-motion useOperation of a terminal while it is moving, which can be limited by plan, hardware, or policy.In-orbit validationTesting technology in the actual space environment to confirm that it works beyond laboratory conditions.In-process contextvisibility from inside the application process, where runtime activity can be examined more closely.Inactive themeA theme installed on a WordPress site but not currently active, still present on disk.iNaturalistA platform for sharing observations of nature and getting help with identification.Inauthentic amplificationRepeating or boosting a message through fake, automated, or deceptive accounts to make it appear more credible.Inauthentic behaviorCoordinated or automated activity that tries to fake genuine engagement, identity, or popularity.Inbound connectorA trust mechanism that identifies approved mail sources by IP address or certificate.Inbox ruleAn automated email action that can move, hide, delete, or forward incoming messages.Inbox rule abuseMalicious email filtering rules used to hide, delete, or redirect messages.Inbox rulesEmail automation settings that attackers may abuse to hide messages or forward mail.Incentives to shareThe rewards or penalties that influence whether people contribute information to a system.Incident attributionthe process of linking a security event to a specific actor or campaign.Incident coordinationthe process of organizing response roles, communication, and escalation during a cyber event.Incident drillA practice exercise for testing detection, containment, and recovery steps.Incident escalation workflowThe process for routing a security event to the right responders quickly and consistently.Incident loggingstored activity records that help reconstruct security events.Incident logsRecords of security events that help reconstruct what happened and when.Incident readinessthe ability to verify claims, preserve evidence, and respond quickly.Incident recordsLogs and notes that help reconstruct what happened after an attack.Incident response exercisea controlled simulation used to test how teams detect, communicate, and recover from a cyber event.Incident response planningThe preparation of procedures for detecting, containing, and recovering from cyber incidents.Incident response retainera prearranged contract for cyber incident help, often including recovery and coordination services.Incident reviewThe process of checking logs, accounts, and systems after a security claim.Incident taxonomyA classification scheme used to group security or reliability events into consistent categories.Incident TrailThe logs, traces, and artifacts used to reconstruct what happened during a security event.Incident-response proceduresstandard checks used to validate exposure, scope, and readiness after a security alert.Incident-response processThe defined steps a team follows after a security event is detected.Included servicesExtra features bundled into a plan, such as add-ons or usage benefits beyond basic connectivity.Income distributionThe way earnings are spread across people or households in an economy.Incoming emailA feature that processes mail to create or update project objects.Incoming email tokenA secret tied to a user-specific email address that can authenticate email-based actions in GitLab.Incomplete patchingA fix that leaves some vulnerable states or code paths still reachable.Incorrect permissionsAn access-control mistake where file or service rights are set too broadly or too narrowly.Incremental improvementSmall, steady gains rather than a single major breakthrough.IndemnityA contract term that shifts certain financial losses or claims from one party to another.Independent AssessmentA third-party evaluation of an AI system’s safety, security, or compliance posture.Independent auditingExternal review used to check security controls, evidence, and governance without relying only on internal claims.Independent authoritya regulator or oversight body that can supervise safety and compliance without being controlled by the operator.Independent controlsSecurity checks outside the model itself, such as logging, policy enforcement, and human review.Independent operatora provider that manages security tools without being tied to one hardware maker.Independent professionalA self-employed worker who manages business costs without a larger corporate structure.Independent supervisionOversight by a separate reviewer or evaluator intended to reduce self-attestation bias.Independent verificationExternal review used to check whether stated protections are actually in place.Independent verifierA third party that tests or reviews a system outside the development team.Indexa logical collection of documents in Elasticsearch, similar to a database table in concept.Indexationa pricing method that ties a retail rate to a market benchmark.Indexed pricinga rate that changes according to a market-linked formula.Indexed-price planA contract whose cost follows a market reference or formula.IndexingThe process search engines use to store and surface web content in results.Indicator correlationmatching clues across systems to test whether they belong to the same event.Indicator lampA visual signal used to show status or activity at a glance.Indicator RemovalTechniques used to erase logs, files, or other evidence of malicious activity.Indicator sharingexchanging clues that help identify related malicious activity.Indicizzazionea pricing method that follows a market benchmark or index.IndictmentA formal criminal charge, not proof of guilt.Indirect costsSupporting expenses that are harder to attribute, such as maintenance, monitoring, and coordination.Indirect disclosurewhen a document reveals sensitive details through context or inference rather than explicit fields.Indirect measurementLearning about a phenomenon through its effects rather than direct observation.Indirect syscallsA stealth technique that tries to avoid common user-mode monitoring by reaching system calls in less visible ways.Indirect system callA way to invoke Windows kernel services while trying to bypass user-mode monitoring.Inductora component that stores energy in a magnetic field and can vibrate.Industria 4.0A model of industrial digitization built around connected equipment, data collection, and automation.Industrial automationtechnology and services that support manufacturing processes and plant operations.Industrial Automation and Control Systems (IACS)The systems that run and coordinate industrial operations.Industrial basethe manufacturing capacity and skilled workforce needed to produce strategic equipment.Industrial capacityThe ability to turn research into reliable, scalable real-world use.Industrial competenciesspecialized technical knowledge and capabilities used in production or engineering.Industrial Demilitarized Zone (IDMZ)A network buffer that separates enterprise IT from production OT to reduce lateral movement.Industrial designthe practice of shaping products so they are functional, recognizable, and visually distinctive.Industrial ecosystemThe network of suppliers, workers, infrastructure, and customers needed to support production.Industrial electronicsspecialized hardware and systems used in engineering or research settings.Industrial espionageTheft of trade secrets or proprietary information for competitive or economic gain.Industrial Ethernetnetworking gear used in industrial settings where reliability and trust are important.Industrial expertisethe engineering and manufacturing capability needed to build and support complex systems.Industrial GPUA graphics processor intended for environments that often prioritize long lifecycle support and stable deployment.Industrial IoT (IIoT)Connected industrial devices and systems that collect, exchange, and act on operational data.Industrial monitoring toolSoftware used to observe equipment health, status, or performance in a plant environment.Industrial pilota limited real-world trial used to test whether a technology can perform reliably in production conditions.Industrial planta facility designed for production at commercial scale.Industrial ProtocolsCommunication standards used for data exchange in industrial environments.Industrial realismA practical view that security must operate within real-world limits such as budget and staffing.Industrial robot standardA safety or integration rule that helps organizations deploy robots in factories and shared workspaces.Industrial roboticsmachines and control systems used to automate repetitive or precise manufacturing tasks.Industrial servicesbusiness support for equipment and operations that can be disrupted by cyber incidents.Industrial sovereigntythe ability to keep strategic capabilities, ownership, and decision power inside a national or regional ecosystem.Industrial strategya coordinated approach to investment, regulation, and sector development.Industrial suppliera company whose products or services support manufacturing, equipment, or production chains.Industrial supply chainthe network of suppliers and components needed to build and deploy a manufacturing system.Industrial wasteenergy or material lost through inefficient operations.Industrial-robotics suppliera company that supports manufacturing systems with specialized hardware or components.IndustrializationThe process of turning a prototype into a scalable product.Industrialization of innovationThe process of turning research results into usable, competitive products and services.Industry 5.0A policy and industrial concept centered on human-centric, sustainable, and resilient production.Inertial Navigation System (INS)A navigation subsystem that estimates position, velocity, and attitude from motion sensors such as gyros and accelerometers.Inference efficiencyThe ability to generate model output with less compute, lower latency, or both.Inference modeThe way a model is served, such as streaming or non-streaming use.Inference riskThe possibility that a model can derive sensitive information from inputs, metadata, or outputs.Inference serviceA system that runs a machine learning model and returns predictions, classifications, or structured outputs.Inference setupThe process of configuring hardware and software so a model can execute correctly on a system.Inference tieringRouting simple tasks to cheaper models and reserving stronger models for harder work.Infertility treatment centera sensitive healthcare service where privacy and continuity concerns are elevated.Influence-as-a-serviceA term used for outsourced influence campaigns that use automation and AI to support content, targeting, and account operations.Influence, narrative and enterprise sellingThe skill of building support for ideas before a formal decision.Information and consultationFormal processes requiring employers to share relevant details and receive worker input before major decisions.Information assetThe organization’s valued data, metadata, and related records that support operations and decisions.Information Collection Request (ICR)A formal package an agency submits for approval to collect information from regulated parties.Information DominanceThe ability to collect, process, and act on data faster and more accurately than an opponent.Information leakUnintended disclosure of data that should remain private or protected.Information leakageUnintended disclosure of sensitive details through speech, devices, or weak controls.Information operationA campaign that uses messaging to shape opinions, decisions, or behavior.Information overloadA condition where too much information makes messages harder to process and remember.Information resilienceThe ability of a movement or community to preserve context, accuracy, and continuity under pressure.Information securityThe practice of protecting trust, context, and communications from manipulation or abuse.Information Security Management System (ISMS)The framework an organisation uses to manage security policies, roles, and controls.Information sharing and analysis centerA sector-focused group that exchanges threat intelligence and defensive guidance among members.Information sharing and analysis center (ISAC)A trusted forum where organizations exchange threat intelligence and defensive lessons.Information valueThe benefit a data set provides to decisions compared with the cost of collecting, maintaining, and using it.Information-flow controlRules and technical measures that limit where data can move and who can see it.Information-stealing malwareMalicious code designed to collect credentials, tokens, or other sensitive data.Informational emergencyA situation where false or manipulated content can worsen confusion during a real-world crisis.Informed consentA control principle that requires people to understand and accept how data is collected and used.Infostealer wormMalware that harvests sensitive information such as credentials; some variants may also self-propagate.Infotainment head unitThe in-car computer that handles media, navigation, connectivity, and apps.InfraredLight beyond the visible spectrum, commonly used by remote controls.Infrared spectrumLight wavelengths beyond visible red, usually invisible to humans.Infrastructure ACLA network access rule set used to limit which systems can talk to a service.Infrastructure activationthe point at which attacker-controlled systems begin supporting a campaign.Infrastructure breachA compromise that affects the systems running a service, not just a single user account.Infrastructure compromiseThe takeover or abuse of domains, subdomains, web hosts, or related assets so they can be used for malicious activity.Infrastructure controlsPlatform-level restrictions used to slow, block, or monitor suspicious activity across a service.Infrastructure correlationThe process of linking activity sets through shared domains, certificates, hosting, or web assets.Infrastructure dependencyReliance on an external network or facility that can affect continuity if it changes.Infrastructure dumpa bulk export of backend data that can contain sensitive operational records.Infrastructure hackA practical modification or idea intended to improve how a physical system works.Infrastructure huntingThe practice of finding related malicious domains or servers by pivoting on technical fingerprints such as certificates, panels, and response patterns.Infrastructure incidentA security event affecting the systems that support a digital service.Infrastructure IndicatorA technical clue, such as a domain or IP, that may help analysts connect activity to prior malicious use.Infrastructure layerThe servers, networks, and services that support cyber activity.Infrastructure maintenancethe ongoing work needed to keep roads, lanes, or systems usable.Infrastructure MappingThe analysis of servers, domains, and related assets to infer operator behavior or organization.Infrastructure overlapReuse of servers, domains, or hosting patterns across campaigns, often used as a hunting clue.Infrastructure patternsRepeated technical choices in domains, servers, and delivery methods that help link campaigns together.Infrastructure responsibilityThe idea that safety must be built into platforms, products, and workflows, not left only to users.Infrastructure reuseThe reuse of servers, domains, or tooling across separate campaigns, which can complicate attribution.Infrastructure securityThe practice of protecting the physical and operational components that keep a network functioning.Infrastructure state fileA file that records deployed cloud or infrastructure resources and may include sensitive values.Infrastructure-as-codeA method for defining and managing infrastructure through versioned configuration files.Infrastrutture apertesystems designed for transparency, interoperability, and easier reuse.InheritanceA permission mechanism where folders and files receive access rules from parent objects unless overridden.Initial-access channelThe first path an attacker uses to reach a person, account, or environment.Injected JavaScriptCode added to a webpage after compromise, often used to change what visitors see or to load malicious content.Injection AttackA technique that inserts fake or manipulated biometric data into the capture flow before the system can validate it.Inline enforcementAutomated policy action, such as blocking content, based on a security verdict.Inline keyboard buttonA Telegram bot interface element that attaches clickable actions to a message.Inline preventionSecurity control that can stop or challenge an access attempt before authentication completes.Inline workflow definitionA workflow submitted dynamically at runtime instead of being pre-registered ahead of time.Inno SetupA legitimate Windows installer framework that can be abused to deliver hidden payloads and run post-install actions.InnovationThe practice of improving methods, workflows, or controls through new ideas.Innovation culturea workplace attitude that supports change, experimentation, and adoption of new methods.inotifyA Linux kernel mechanism for watching file and directory events.inpoutx64A filename pattern associated with low-level driver or software components that may be relevant during triage.INPSItaly’s social-security authority, which issues clarifications that can affect contribution and labor treatment.InputThe browser path that handles keyboard, mouse, focus, and other user events.Input boundaryThe point where external user actions enter a system and must be handled carefully.Input desktopThe active Windows desktop currently receiving keyboard and mouse input.Input devicehardware used to send commands to a system, such as a controller.Input hardeningDefensive work that makes software more resilient against malformed or hostile data.Input interfaceThe part of a device that receives a user's command or action.Input latencythe delay between pressing a control and seeing a response.Input method editor (IME)Software used to enter complex characters, such as Chinese text, on a keyboard.Input reliabilityhow consistently a device turns intended actions into correct commands.Input separationKeeping trusted instructions apart from untrusted content so the model is less likely to be manipulated.Input surfaceA physical surface that accepts user actions and turns them into device behavior.Input telemetryData captured from user interaction, such as keystrokes or mouse clicks, which can be highly sensitive.Input tokensThe pieces of text sent into a model, which contribute directly to processing cost.Input-Constrained DeviceA device with limited text entry or no practical browser, such as a smart TV or printer.Inquadramento giuridicoThe legal classification used to decide which rules apply.Insecure deserializationA flaw where untrusted serialized data is processed without enough validation, sometimes leading to code execution.Insecure designA weakness caused by missing or weak security decisions in the architecture itself.Insecure File PermissionsWeak ownership or access settings that let unauthorized users read, change, or influence files.InsertA component placed into another material to add function, strength, or attachment.Insider cooperationAssistance from members or associates that can aid an investigation.Insider extortioncoercion using trusted internal access.Insider Preview buildA pre-release Windows build distributed for testing through the Windows Insider Program.Inspection overheadadditional checking required when confidence in the process drops.Inspection planA scheduled outline of priorities used to focus compliance checks over a set period.InspectionabilityHow easily a system can be checked, understood, and verified after it is built.Install commandA command that adds software, dependencies, or tools to a system.Install counta popularity signal that can be misleading when listings are deceptive.Install flowThe sequence a user follows to add software or an extension to a device.Installation DirectoryThe project-local location where a tool is expected to place files during setup.Installer integrityChecks that confirm a software installer has not been modified and still matches the trusted version.Installer masqueradeA tactic where malware pretends to be a legitimate software installer to trick users.Installer package abuseMisusing setup workflows so code runs during installation.Installment billingpaying a total cost in regular monthly amounts instead of all at once.Installment paymentA purchase repaid in smaller amounts over time.Instance DataThe records and configuration stored inside a ServiceNow deployment.Instance Metadata Service (IMDS)The EC2 service that provides instance data and temporary credentials from within the instance.Instant creditingA payment flow in which funds become available quickly after a transaction.Instant-payment railA payment network that settles transactions in seconds, leaving less time for manual fraud intervention.Institutional continuitythe ability of an organization to keep operating effectively through change.Institutional infrastructureLarge, organized equipment or systems typically operated by public agencies or major organizations.Institutional investora large organization that allocates capital on behalf of clients or members.Institutional legibilityhow easily people can understand what an institution says and does.Institutional linkageThe practical connection between schools, universities, research bodies, and businesses.Instruction fidelityHow accurately a rewritten version preserves the meaning of the original steps.Instruction labelthe printed guidance that tells users how a product should be used.Instruction tuningA training step that helps a model follow human instructions more closely.Instruction-set architectureThe set of rules that defines how software interacts with a processor.Instrumenta tool or device used to observe, measure, or indicate a quantity.Instrument approachA formal landing procedure that allows an aircraft to descend safely using navigation aids when visibility or conditions are limited.Instrumentationthe hardware and software used to measure, record, and analyze signals.Instrumentation chainThe linked set of sensors, wiring, and monitoring equipment that turns physical conditions into usable data.Intakethe part of a system that draws in water, air, or another resource needed for operation.Integer wraparoundA numeric error where a value exceeds its storage limit and rolls over to an unexpected smaller number.Integrated Charge Control Unit (ICCU)A vehicle component tied to charging-related functions.Integrated circuit (IC)a compact electronic circuit built on a single semiconductor chip.Integrated circuit fabricationThe process of manufacturing electronic circuits on silicon.Integrated File System (IFS)The hierarchical file space on IBM i used by many applications, scripts, and shared files.Integrated risk managementan approach that connects different risk areas into one coordinated process.Integrated servicesBundled offerings that combine connectivity, compute, and managed operations in one platform.Integration AdapterSoftware that connects two systems and helps them exchange data or requests.Integration componenta connector between systems that can widen trust boundaries.Integration endpointA system connection used to move data between applications, which can become a security-sensitive entry point.Integration fithow well a product works with existing security and business systems.Integration inventoryA record of the connections between applications, including APIs, workflows, and identity links.Integration roadmapA structured plan for aligning systems, teams, and timelines during change.Integration secretA token or credential used by one service to authenticate with another service.Integration specialista company focused on connecting separate technologies, systems, or suppliers into one working solution.IntegratorA third-party specialist that designs, installs, supports, or maintains ICS and OT systems.Integrity Checker ToolA vendor utility used to help validate whether an appliance has been altered or tampered with.Integrity ProblemA security issue where information is altered, reordered, or framed in a misleading way without necessarily being fully false.Integrity riskThe chance that data or code is altered without authorization.Integrity ValidationA check that confirms model, data, and configuration files have not been altered unexpectedly.Intel 8088-compatibleable to run software for the Intel 8088 instruction set, while still differing internally.Intel IPFIntel Innovation Platform Framework, a platform component associated with the affected driver issue.Intel Scalable SGXIntel enclave technology designed to isolate sensitive application code.Intel TDXa hardware-backed isolation technology for confidential virtual machines.Intelligence collectionGathering information that can support investigation, disruption, or identification efforts.Intelligence reformChanges to the mandate, structure, or coordination of security services.Intelligence-linked agencyA security body connected to national intelligence functions, often combining analysis and operational warning.Intelligent automationAutomation that uses AI or machine learning to support decisions or workflows.Intelligent cachingA cache strategy that tries to serve content faster by anticipating likely requests.Intelligent model routingSending requests to the least expensive model that can still handle the task well enough.Intelligent Platform Management Interface (IPMI)A server-management protocol used to monitor and control hardware remotely.Intelligent Tutoring SystemSoftware that adapts instruction to a learner’s progress and responses.Intent dataStructured signals that indicate why a customer is contacting a business, often extracted from language and context.Intent GovernanceThe practice of defining what an AI system is for, what outcomes are acceptable, and what limits it must not cross.Intent signalsBehavioral clues that help defenders infer what a user is trying to do across repeated interactions.Intent-Based Access ControlA permission model that ties access to the specific purpose of a request.Intent-Based AutomationAutomation driven by desired outcomes and policy constraints rather than manual device-by-device configuration.Intent-based designA future-oriented interface idea where the user states a goal and software helps carry it out.Intentional actionA user-driven event, such as submitting a prompt, that is more meaningful than background app activity.Inter-agency coordinationCooperation between different organizations that must work together during a security event.Interaction promptA visible cue that tells the player an action is available.Interactive accessa live session that lets an operator issue commands directly on a system.Interactive analysisA sandbox workflow that lets an analyst click, type, or otherwise interact with a live sample session.Interactive computingsystems that respond to user input in real time through a screen, buttons, or other controls.Interactive fictiontext-driven games where players type commands to progress.Interactive mediaContent that responds to user input instead of playing in a fixed sequence only.Interactive pageA web page that responds to user input instead of only displaying static content.Interactive sessionA live user-controlled environment where keyboard and mouse input affect what is running on screen.Interactive UIa user interface that supports clicks, input, or state changes rather than only text.Interactive zsh sessionA user-driven shell session on macOS that can provide a normal-looking starting point for malicious commands.Intercept modeA sudo feature designed to monitor or restrict later command execution under policy.Intercompany EliminationsConsolidation steps that remove internal balances and transactions between related entities.Interconnection agreementsUtility-facing documents that describe how a project connects to the grid.Interconnection queueThe waiting process for connecting new power demand, such as a data center, to the electrical grid.Intercultural sensitivityThe ability to recognize how meaning changes across cultural settings and audiences.Interdictionaction taken to stop illicit movement before goods reach the next market.InterdisciplinarityThe practice of connecting methods or ideas from different fields to solve complex problems.Interdisciplinarycombining knowledge from different fields to solve a single problem.Interdisciplinary pathwayA study track that combines multiple fields, such as computer science, law, ethics, and management.Interest rateThe percentage paid on deposited funds over a given period, often used to attract and retain balances.Interface discoveryThe task of identifying how two components communicate so they can work together correctly.Interface governanceThe rules and decisions that control how software screens are arranged and used.Interface mediationThe way a form, board, API, or workflow shapes what information can be observed or recorded.Interface recordsData that documents how systems exchange or process operational information.Interface riskthe possibility of delay or confusion where multiple organizations must coordinate.Interforce centera joint military structure for coordination across different armed forces branches.Intergenerational workplacea work environment where people of different ages and career stages collaborate.Intergovernmental organizationA formal body created by states to coordinate policy across national borders.InterlinguaA shared intermediate representation that can help a system move between languages.Intermediary verificationchecks performed by a platform or service before content is published, shared, or stored.Intermediate assetA temporary file created between production stages, often kept because regenerating it would be costly.Intermediate representationA compiler abstraction used to translate code between high-level and low-level forms.Intermittent faultA defect that appears only under certain conditions and can be difficult to reproduce.Intermodal terminalA facility that connects rail, truck, and sometimes ship cargo transfers through coordinated logistics systems.Internal APIA private application interface that software uses to perform device functions, often intended only for trusted access.Internal AuditThe assurance function that independently evaluates governance, controls, and risk management.Internal chatsprivate workplace messages that can reveal operations, disputes, or credentials.Internal componentsBack-end services or modules that are not meant to be directly exposed to users.Internal configurationsTechnical settings that describe how systems are built and connected.Internal ControlA self-assessment route where the provider evaluates and documents conformity without mandatory third-party involvement.Internal correlationComparing new indicators with existing logs or records to spot links.Internal database materialbusiness data that may increase extortion pressure if exposed.Internal Developer Platform (IDP)A company-managed platform that abstracts infrastructure details and provides guarded, reusable paths for software delivery.Internal documentsbusiness or technical records that can reveal operations, plans, or sensitive details if exposed.Internal endpointA service address that is meant to be reachable only from inside a private network.Internal filesnon-public documents that can increase operational and confidentiality risk if disclosed.Internal limitsBank controls that cap exposure to certain borrowers, sectors, or risk types.Internal policyA written set of organizational rules that defines approved use, boundaries, and review steps.Internal referencea pointer from one section of a document to another.Internal request routingA process where an application sends requests to backend services that are not intended for public access.Internal system IDsMachine-generated identifiers that can link records across systems and workflows.Internal systemsCompany-owned platforms used for operations, administration, or support rather than public-facing services.Internal Threat IntelligencePrivate detection data and analysis used to identify suspicious activity patterns and risk signals.Internal triagethe first phase of checking logs, alerts, and user activity after an incident claim.Internal validationchecking logs, access paths, and data exposure inside the organization before assuming impact.Internal-Network ScanningProbing internal hosts and services to map a network and identify reachable targets.International cooperationcoordination between agencies in different countries to share information and investigative leads.International humanitarian lawThe body of law governing armed conflict, including distinction, proportionality, and precautions in attack.International operationA coordinated action involving entities across more than one country.International tournamenta competition that brings participants from multiple regions into one event structure.International transferA payment sent across national borders through the banking or payments network.Internationalized domain nameA domain name that can include non-ASCII characters from supported scripts.Internet Accessible DeviceA system exposed to the public internet and therefore reachable from outside the local network.Internet Crime Complaint Center (IC3)The FBI’s online portal for reporting internet-enabled crime and fraud.Internet domainsHuman-readable web names that point users to online services and infrastructure.Internet egressOutbound network access from a controlled system to the wider internet.Internet Explorer engineThe older browser core used for legacy web compatibility on Windows.Internet exposureThe condition of a device being reachable from the public internet, increasing attack surface.Internet isolationA control that blocks or restricts outbound network access from a system under test.Internet of ThingsA network of physical devices that collect, exchange, or store data.Internet radioA device that streams audio over a network rather than relying only on traditional broadcast signals.Internet-edge deviceA system placed at the boundary between the public internet and an internal network.Internet-exposed assetA system reachable from the public internet, which can increase attack surface if not tightly controlled.Internet-facing applianceA device or service exposed directly to external networks and users.Internet-facing appliancesexposed edge devices that can become high-value entry points if poorly protected.Internet-facing deploymentSoftware reachable from the public internet, which increases exposure if a flaw is exploitable remotely.Internet-facing hostA system reachable from the public internet.Internet-facing servicesExternal systems that can be probed or abused if exposed.Interoperability layerThe set of linked databases and services that let authorized users cross-check identity records.Interoperability standardsRules that help different systems, platforms, or organizations work together reliably.INTERPOL Red NoticeA request to locate and provisionally arrest a person pending further legal action.Interposera hardware layer inserted between components to affect how they connect or communicate.Interpretation uncertaintyDoubt about how a rule should be read or applied in practice.InterpreterSoftware that executes code directly, often line by line, instead of compiling it first.Interpreter abuseA technique where attackers use legitimate scripting engines to run malicious code.Interpreter executionRunning code through a language runtime such as Python rather than as a standalone binary.Interpretive guidanceNon-binding clarification that helps organizations apply legal or regulatory duties in practice.Interpretive methodthe approach used to understand and apply legal texts or principles.Interprofessional fundsItalian training-finance mechanisms that help employers fund continuing education for workers.InterruptibilityThe ability of an autonomous system to accept human override, pause, or shutdown when needed.Interstellar spaceThe region between stars, containing very sparse matter and radiation.Interview guideA structured set of questions and answers used to prepare for or conduct interviews.Interview signala detail that helps an interviewer judge suitability more accurately.Intimate-image theftThe unauthorized collection or copying of private sexual or nude images from an account or device.Intraneta private internal network restricted to an organization.Introductory pricingA promotional rate offered for a limited initial period.IntrusionUnapproved entry into a system, account, or environment.Intrusion campaigna coordinated attempt to gain and maintain access in a target environment.Intrusion claiman allegation of unauthorized access that still requires independent verification.Intrusion pathThe method or route an attacker used to enter a system.Intrusion simulationa controlled exercise that tests how a system behaves during an attack path.Intrusion vectorthe path attackers may use to enter a network or environment.IntuneMicrosoft's cloud endpoint management platform, often used to deploy VPN settings at scale.Invalid reportA submission that does not describe a real, reproducible security issue.Invariant checkingProtocol rules intended to keep ledger state within allowed limits, such as supply caps.Invariant testingTesting that checks whether critical rules remain true under many conditions.InventoreThe person legally recognized as the originator of an invention for patent purposes.Inventory bufferExtra stock kept on hand to absorb shortages or delivery delays.Inventory debtThe buildup of untracked or poorly classified assets over time.Inventory driftThe loss of accuracy in records over time as systems, assets, or conditions change.Inventory freshnessHow current a security tool's view of cloud resources is, which affects detection of transient states.Inventory handlingThe operational management of available stock, including tracking, allocation and replenishment decisions.Inventory integrityConfidence that stock and availability records match operational reality.Inventory ManagementThe process of tracking devices, roles, and system state across an environment.Inventory mappingThe process of matching purchased items to the correct user account.Inventory shockA sudden mismatch between demand and available stock.Inverse-square lawA relationship in which strength decreases with the square of distance.Inverter-based resourceA grid component that relies on power electronics rather than rotating machinery.Investable asseta resource that can attract capital because its value can be assessed.Investigative informationContext that helps defenders review why a message was flagged and how it may relate to other activity.Investment climatethe combined conditions that influence whether capital enters a market.Invisible watermarkingHidden signals placed in text or media to support later detection or recovery.Invitation linka URL that grants access to a specific session or resource.Invite-only teamA team that should admit members only through explicit invitation.InvocationA single execution of a serverless function, often used as a billing or monitoring unit.InvoiceThe authoritative record of what a customer owes after billing is finalized.Invoice metadataSupporting information around an invoice, such as identifiers, dates, references, and related parties.Invoice PDFa billing document that can reveal financial or vendor details.Invoice recordsbilling documents that can reveal trading and payment relationships.Invoice Redirection FraudA scam that tricks a business into paying the wrong bank account by changing supplier payment details.Invoicing recordsfinancial documents that can reveal billing activity and commercial relationships.io_uringA Linux interface for high-performance asynchronous I/O.IO-LinkA standardized point-to-point protocol for connecting industrial sensors and actuators.IoMTInternet of Medical Things, networked medical devices that can introduce clinical and safety risk if mismanaged.Ionizing radiationRadiation energetic enough to remove electrons from atoms and damage tissue.IOPSInput/output operations per second, a measure of storage performance under load.iOS appSoftware built to run on Apple’s mobile operating system.iOS patchingInstalling security updates for Apple devices to close known flaws.IOS XECisco’s network operating system used across routing, switching, wireless, and related infrastructure.IOS XRCisco’s operating system for high-end routers, built to manage carrier-grade network infrastructure.IoT baselineA security baseline for connected devices covering access, updates, and data protection.IoT devicesInternet-connected hardware such as TVs, cameras, and appliances with limited resources.IoT endpointA connected device, such as a camera, that sits on a network and needs active security management.IoT GatewayA device or service that connects Internet of Things devices to wider networks such as satellite or cloud links.IoT securityProtection of connected devices that communicate over networks.IoT sensorA connected device that measures physical conditions and sends data to a system.IoT vulnerabilitiesSecurity weaknesses in internet-connected devices that attackers can abuse for unauthorized access or control.IOTLBA translation cache used to speed up device address lookups.IP AllowlistA control that permits access only from preapproved network addresses.IP AllowlistingA control that limits access to a service or admin panel to approved IP addresses.IP managementUsing internet address information to help shape access decisions.IP prefixA block of internet addresses that routers use when deciding where traffic belongs.IP restrictionA control that limits access by network address, but does not cover every application path.IP rotationRepeatedly switching between addresses to make blocking and tracing harder.IP routeA rule that tells network traffic where to travel next.IPCEIAn EU state-aid tool for major cross-border projects with high strategic importance and risk.IPMIIntelligent Platform Management Interface, a protocol used to manage servers independently of the operating system.IPSIntrusion Prevention System, a control that detects and blocks malicious traffic patterns.IPv4 HeaderThe leading section of an IPv4 packet that carries addressing and control information.IPv4-mapped IPv6an IPv6 representation that embeds an IPv4 address for compatibility in dual-stack systems.IR blasterA device that sends infrared signals to control nearby electronics.IRAPAustralia’s Infosec Registered Assessors Program, used to independently assess cloud and ICT security against government guidance.IRAP-aligned assessmentA review shaped to map controls and evidence to IRAP-style security requirements.IRGC-CECThe IRGC Cyber-Electronic Command referenced in U.S. reward and sanction materials.IRMInformation Rights Management, policy enforcement that travels with documents and files.ISA/IEC 62443-4-2A component-level OT security standard used as a technical baseline.ISAC (Information Sharing and Analysis Center)A sector-focused group that shares threat information among participating organizations.ISMThe Information Security Manual, which sets baseline cybersecurity controls for Australian government systems.ISM bandunlicensed spectrum used for industrial, scientific, and medical devices in many regions.ISO 15189a quality standard for medical laboratories.ISO 22301An international standard for business continuity management systems and continuity controls.ISO disk-image fileA container format that mounts as a virtual disk and can carry multiple files inside one attachment.ISO fileA disk image format that can package software and is often abused to hide malicious content.ISO/IEC 27035an international standard that frames information security incident management in a structured way.ISO/IEC JTC 1/SC 42The international committee responsible for AI standardization work, including terminology and trustworthiness.Isolated PatchA targeted fix released outside the normal update cycle for a specific issue.Isolated phishing sitesSeparated landing pages or site instances that can limit how much one campaign affects another.Isolation boundaryThe technical separation meant to keep testing environments from reaching live services or secrets.Isolation flawA weakness that lets data or behavior cross a boundary that should separate tenants, workloads, or users.Isolation PlanningPredefining how to separate vital systems from the rest of the environment during a cyber incident.IsopropanolA commonly used cleaning alcohol for removing oils and residue from surfaces.ISPMIdentity Security Posture Management, a continuous approach for finding and reducing risky identity configurations.ISRUIn-situ resource utilization, the practice of using local space materials to support missions without relying only on Earth shipments.Issuer authorizationThe bank-side decision that approves or declines a payment after the terminal sends transaction data.Istruttorie privacyFormal privacy proceedings used to assess a suspected data protection violation.IT asset disposition (ITAD)Secure handling, reuse, and destruction of retired technology assets.IT estateThe full collection of devices, servers, operating systems, and applications an organization runs.IT inflationRising total technology spending even when some unit costs fall, usually because usage expands faster than efficiency gains.IT modernizationThe process of updating legacy systems so they can better support current business, security, and performance needs.IT rolesJobs focused on information technology, including systems, support, networking, and related technical work.IT service providerAn organization that delivers shared digital services to customers or partners.IT supportassistance that helps small teams manage security tools and respond to basic issues.IT systems integratora firm that plans, deploys, and maintains technology infrastructure for clients.IT-OT ConvergenceThe linking of business networks and industrial control environments, often increasing complexity and exposure.IT-OT dependencyThe operational link between business systems and industrial or production environments.IT/OT boundaryThe interface between information technology systems and operational technology such as power infrastructure.ITaaSIT as a Service, a model where providers deliver managed technology functions to clients.ItaniumIntel’s processor family based on IA-64.Item Shopa digital storefront inside a game where users browse and buy in-game items.ITOA transparent conductive coating used to let a surface carry electrical signals without blocking visible light.IVAItaly’s value-added tax, which must be recorded consistently across invoices and corrective documents.IVASSItaly’s insurance supervisory authority, which sets and interprets rules for insurance processes.IXPInternet Exchange Point, a facility where networks interconnect and can sometimes share local services.