Samedi 17 Octobre 2026 10:34:48 GMT+02:00
Netcrook
WIKICROOK - O
TERMES TECHNIQUES
O_DIRECTA Linux I/O mode that bypasses the page cache for direct disk access.OASISOpen Automated Security Initiative for Software, an OWASP program for AI-assisted patch generation and human validation.OAuth 2.0 client credentialsA machine-to-machine authentication flow for confidential software clients acting on their own behalf.OAuth 2.0 device authorization grant flowA sign-in method for devices with limited input that lets a user authorize access on a separate device.OAuth authorization serverThe component in an OAuth setup that issues tokens and makes authorization decisions.OAuth profileA BIG-IP configuration element used in OAuth-related access handling.OAuth token theftStealing access or refresh tokens so an attacker can reuse an authenticated session, depending on token lifetime and protections.OAuth2 bearer tokenA token that grants API access to whoever possesses it until it expires or is revoked.OAuth2 credentialsSecrets or tokens used to authorize apps and services through the OAuth 2.0 framework.OAuth2 ProxyAn authentication reverse proxy that sits in front of upstream applications.Obfuscated commandA command written to be harder to read or inspect, often to hide harmful behavior.Obfuscated HTMLWeb content deliberately altered to conceal malicious logic or delivery steps from inspection.Obfuscation infrastructureTools or networks used to conceal the origin of malicious traffic or operations.Object authorityThe IBM i permission model that determines what a user or job can access or modify.Object-document mapperA library layer that translates database documents into application objects and back again.Object-level access controlrules that decide who may view or change a specific record, order, or profile.Objective proofEvidence that shows a finding is real and reproducible, such as a working exploit or clear validation trail.Obligation of meansa duty to take reasonable steps without guaranteeing a perfect outcome.ObscurationA privacy control that hides specific records from ordinary consultation while keeping them available to limited parties.Obsolete ICan integrated circuit that is no longer commonly manufactured or sold.oc-mirrorA command-line utility that copies OpenShift release and image content into an internal registry for disconnected deployments.OcclusionAnything that blocks or obscures parts of a body or face from a camera view.OCI DistributionThe container content distribution specification used by registries and image delivery systems.OCI image manifestStandard container metadata that describes image content and references layers and configuration.OCI image specificationThe Open Container Initiative format that defines container images through manifests, configuration, and layers.OCI-POpen Client Interface - Provisioning, the BroadWorks provisioning path used for configuration changes.OCSP staplingA TLS feature where a server provides certificate-status information during the handshake instead of forcing a separate lookup.OCT InstAn EPC scheme for instant credit transfers with one leg inside SEPA and the other outside it.OCT scanoptical coherence tomography image used in eye care and often treated as sensitive medical data.ODBC DriverA client-side driver that lets applications connect to data sources through the Open Database Connectivity standard.odhcpdOpenWrt’s daemon for DHCPv4, DHCPv6, router advertisements, and related network configuration services.ODMOriginal design manufacturer; a company that designs and produces goods for customer brands.OECD averagethe benchmark created from participating countries’ results for comparison.Off-balance-sheetAn accounting arrangement where certain obligations are kept outside the main balance sheet presentation.Off-chain InfrastructureServers, APIs, and automation that operate outside the blockchain but support protocol functions.Off-chain spendingBuying goods or services outside the blockchain, such as travel or property rentals.Off-screen recordingCapturing a device’s visual output for later viewing.Off-the-shelf devicea ready-made product that can replace a custom-built solution.Offensive cyber operationan active attempt to disrupt, damage, or interfere with a digital target.Offensive cyber operationsauthorized digital actions meant to disrupt or degrade hostile systems.Offensive operationsCyber actions designed to disrupt, degrade, or interfere with a target rather than only defend against it.Offer windowThe period during which a plan can be purchased or activated.Office of Management and Budget (OMB)The executive office that reviews federal information collection requests and related approvals.Office productivity softwareapplications used for documents, spreadsheets, and related work.Official feedA trusted broadcast or page published by a known organization.Offline accessThe ability to use a product without a live server check, often subject to platform rules or cached verification.Offline attackA guessing attempt against stolen hashes or data without interacting with the live service.Offline brute-force attackPassword guessing performed against stolen hashes without contacting the live system.Offline copiesbackups stored away from live systems to support recovery after destructive attacks.Offline dataoutcomes that occur outside web analytics, such as store sales or signed contracts.Offline guessingTesting many password candidates against captured credential material without interacting with the target again.Offline installerA package that can be installed without a constant connection to a store or service.Offline listeningThe ability to download media to a device and play it without an internet connection.Offline password crackingTrying password guesses against captured hash material without contacting the target again.Offline password guessingTrying many candidate passwords against captured material without interacting with the live system.Offline paymentstransactions completed without a live network connection.Offline registry hive manipulationEditing or mounting a hive file outside its normal live registry context for maintenance or analysis.Offline scanA reboot-based scan that runs outside the normal Windows environment to help find persistent malware.Offline websiteA site designed to remain usable without constant dependence on live external services.OffloadThe practice of moving work from general-purpose compute to dedicated hardware or accelerator logic.Offtake agreementa contract in which a buyer commits to purchase future output.OGC filter processingThe part of a geospatial platform that interprets standardized query filters for map and feature requests.OGNLA Java expression language used by Struts that can become dangerous if untrusted input reaches expression evaluation.OGNL injectionA flaw where attacker-controlled input reaches Object-Graph Navigation Language evaluation and may lead to code execution.OIDC metadataStructured client details submitted during OpenID Connect registration, such as redirect URIs and application settings.OIDC trusted publishingA release method that uses short-lived identity tokens from a CI workflow instead of long-lived publish secrets.OLE dataembedded object content inside a document that can be abused to trigger malicious behavior.OLE objectembedded content inside a document that can trigger follow-on execution.Omni-completionAn editor feature that suggests code completions and can expand the attack surface when it processes hostile input.On-access scannersEndpoint protections that inspect files when they are written, opened, or executed.On-chain analysisexamination of blockchain transactions and addresses to trace asset movements.On-chain levela price zone informed by blockchain activity and holder behavior.On-chain signalsblockchain data used to infer investor behavior and market flows.On-chain tracingThe practice of following cryptocurrency transactions across public blockchains to identify movement patterns and linked wallets.On-chip debuggingA hardware-assisted way to inspect and troubleshoot code while it runs on the device.On-device analysisDetection that runs locally on a phone or tablet instead of relying only on cloud processing.On-device footprintThe files, processes, and other traces a program leaves on a device.On-device MLMachine learning that runs locally on a phone instead of sending data to a remote server.On-device modelAn AI model stored and run locally on a user’s machine rather than only in the cloud.On-host compilationBuilding malware directly on the victim machine instead of dropping a prebuilt binary.On-orbit servicingWork performed on a spacecraft after it has reached space.On-prem deploymentSoftware run inside an organization’s own environment instead of being fully hosted by a vendor.On-premise systemsSoftware or infrastructure hosted inside an organization’s own environment rather than in a public cloud.On-Premises DataInformation stored and managed on an organization’s own infrastructure rather than in a cloud service.On-premises ITsystems hosted and managed inside a company’s own environment rather than in the cloud.On-premises managementA deployment model where administration tools run on an organization’s own infrastructure.On-Premises ServerA server run by an organization in its own environment, with patching and exposure managed internally.On-premises serversSystems hosted and managed inside an organization rather than by a cloud provider.On-premises softwareSoftware installed and operated inside an organization’s own environment rather than as a hosted service.On-the-job trainingLearning through practical work tasks instead of only classroom instruction.Onboard autonomyThe ability of a spacecraft to make limited decisions and execute actions without real-time human control.Onboard connectivityWireless network services provided inside an aircraft or other vehicle.Onboarding fraudFraud that occurs when criminals create or hijack accounts during registration or verification.Onboarding remotethe hiring and access setup process for employees who work offsite.Once-only principleA public-service design approach that avoids asking citizens or businesses for data the state already holds.Once-through coolingA system that draws water from a natural source, uses it to absorb heat, then returns it downstream.One UISamsung’s Android-based interface layer for Galaxy devices.One UI 6Samsung’s Android-based interface layer for its phones and tablets.One-bit audioSound generation using only two signal states, usually on and off.One-click vulnerabilityA flaw that can be triggered through a single user action, often a click or tap.One-size-fits-allA solution assumed to work equally well in every situation, even when needs differ.One-time passcodeA short-lived authentication code used for login or transaction verification.One-Time Passcode (OTP)A single-use login code used to verify identity during sign-in or recovery.One-to-Many MatchingSearching one biometric sample against a larger database to find a possible identity match.One-way migrationAn upgrade path that cannot be reversed, usually because the new format changes security-sensitive data handling.OneDrive syncA feature that copies cloud files onto a local device for access and offline use.OneDrive-backed whiteboardsWhiteboard content stored and managed through OneDrive rather than a separate standalone workflow.OneLakeFabric's unified data lake that acts as the shared storage layer for the platform.Onion addressa Tor-based web address that can hide hosting location.Onion linka Tor-based address that hides the location of a service.Onion sitea Tor-hidden service often used to publish leak pages or proof files.Online identityThe self-image a person builds and manages through profiles, posts, and platform activity.Online learningA method that updates a model incrementally as new data arrives.Online lifetime spent communicating, learning, or socializing through digital platforms.Online messaging groupsChat spaces where users can exchange messages, files, and links in semi-private or private settings.Online onboardingA digital account-opening process that collects identity and consent details without a branch visit.Online stageA tournament phase played remotely over the internet.Online votingA voting process carried out through a digital platform rather than in a physical room.OpacityThe difficulty of understanding how a model or decision process produced its result.Opaque modelA model whose internal details or lineage are difficult to inspect or verify.Opaque URLa link that hides useful clues about where it will actually lead.OPASOfferta Pubblica di Acquisto e di Scambio, a public offer used to buy or exchange shares in a listed company.OpcodeThe machine-readable code that identifies a processor instruction.Open accessA publishing model that makes research available without reader paywalls, often shifting costs elsewhere.Open APIA documented interface design that helps systems integrate, test, and replace components more easily.Open betaA public test phase that lets players try a build before final release.Open callA formal invitation for organizations to apply for funding, support, or participation.Open directorya publicly reachable folder listing that can reveal stored files if left unprotected.Open GraphA metadata format that controls how links appear when shared on social platforms.Open Graph (OG) imageA preview image generated for link sharing on social platforms and messaging apps.Open Graph imageA preview image used by social platforms when links are shared.Open Policy AgentA policy engine used to evaluate rules and enforce controls across cloud-native systems.Open RegistrationA setting that lets users create accounts without prior approval.Open source AIAI systems designed to let users use, study, modify, and share them, with access to the preferred form for making changes.Open source projectSoftware whose source code is publicly available for inspection, use, and contribution.Open Source Software (OSS)Software whose source code is publicly available for use, review, and modification.Open source supportpaid or managed assistance for maintaining and securing open source software.Open vSwitchA virtual switch used for software-defined networking, with both userspace and kernel components.Open vSwitch (OVS)A Linux virtual switch used to route and filter traffic in virtualized and overlay-networked environments.Open VSXAn extension registry for VS Code-compatible editors.Open VSX Registrya marketplace for extensions used in developer tools and related environments.Open weightA model release format where the learned parameters are made available for download and local use.Open worlda game environment that lets players move and explore freely.Open XDRAn architecture that aims to integrate multiple security tools and normalize their data rather than forcing one vendor stack.Open-flowA flow-data approach built around open or widely supported network telemetry formats.Open-source AIAI systems whose code, model parameters, and the information needed to derive those parameters are made available under terms that support use, study, modification, and sharing.Open-Source AuditorA freely available tool used to review cloud settings and highlight security or compliance gaps.Open-source dependencyA third-party library or package an application relies on, which can inherit its own security flaws.Open-source hardwareHardware design released so others can study, modify, and build from it.Open-source intelligence (OSINT)information gathered from publicly available data, including social posts and profiles.Open-source libraryReusable software code published for others to inspect, integrate, and update.Open-source sharingExchange of security indicators or context through public or community-driven channels.Open-source software securityPractices that help protect freely shared code against bugs, misuse, and supply-chain risk.Open-source software stewardA party that helps manage an open-source project and may have specific security-related responsibilities.Open-Source ToolingSoftware components made available for inspection, reuse, or modification by the public.Open-weightA model whose learned weights are released publicly for inspection or reuse.Open-weight modelsAI models released with accessible weights that can often be self-hosted or customized.Open-weights modelAn AI model whose weights are released for external use, inspection, and local deployment.OpenJDKAn open-source Java runtime commonly used by enterprise software.OpenSCADA code-based tool for creating 3D models and geometric designs.OpenSSFThe Open Source Security Foundation, which maintains community security efforts for open-source software.OpenSUpdaterThe malware family discussed in this case.OpenVPNopen-source software for creating virtual private networks (VPNs).Operating assumptionsThe conditions a system expects in order to work as designed.Operating bandThe range of frequencies a radio device is designed to use.Operating cash flowCash generated by normal business operations after expenses and working capital changes.Operating conditionsthe practical environment in which a business or project must function.Operating contextThe real-world environment in which a financial control or monitoring process is used.Operating leverageThe ability to create more organizational output through delegation and structure.Operating system kernelThe core software layer that controls hardware access, memory, and process isolation.Operating-model redesignReworking roles, workflows, and responsibilities so new technology changes how work is done, not just what tools people use.Operating-room schedulingThe planning of surgeries, staff, and resources to improve efficiency and service delivery.Operating-system command executionRunning shell or system commands on a server through software input.Operational abuseusing a service as part of a fraud or scam workflow.Operational AI securitySecurity controls, monitoring, and response practices applied to AI systems while they are running in real environments.Operational alignmentthe process of making separate teams follow the same goals and workflows.Operational ambiguityuncertainty about whether an incident is real, limited, or fully understood.Operational archivestored business records that can reveal workflows, partners, or infrastructure details.Operational artifactleftover metadata or files that can reveal attacker tooling, workflow, or infrastructure.Operational assuranceConfidence that a security process works repeatedly in real operations, not only on paper.Operational attack capabilityA system’s ability to support or carry out harmful cyber activity.Operational automationUsing software to reduce manual effort in repetitive parts of an attack or defense workflow.Operational BaselineA measured starting point used to compare whether automation improves performance, quality, or risk.Operational bottlenecka point in a process where delays slow down the whole workflow.Operational cadenceThe pace at which repeated operations, such as launches, are carried out.Operational complexitythe difficulty that grows when many services, teams, or systems must work together.Operational concernsresponse actions a company may need to take after a public allegation.Operational constraintsPhysical, timing, and reliability limits that shape what a system can safely do.Operational databaseA live system that stores data used to run day-to-day operations.Operational datastoreA database layer used by live applications to read and write production data.Operational debtThe long-term cost of temporary fixes, exceptions, and shortcuts.Operational defensesecurity controls that are actively used and validated in live environments.Operational delayThe time gap that gives attackers room to move before defenders can respond.Operational denial-of-serviceA condition where process overload, not system compromise, disrupts normal work.Operational doctrineformal guidance that shapes how a unit trains, decides, and carries out missions.Operational documentationrecords that describe workflows, procedures, or system use.Operational ecosystemThe connected environment where people, processes, and systems affect each other.Operational exposurebusiness functions that may be disrupted if access or systems are affected.Operational fatiguethe strain created by repetitive manual work, exceptions, and friction.Operational hubthe coordination center where people, communication, and logistics are managed for a criminal scheme.Operational hygieneroutine habits that reduce avoidable security mistakes.Operational incidentA security event that can disrupt response, communications, or business decisions.Operational informationinternal business records such as pricing, financing, or workflow details.Operational leakageaccidental exposure of internal details that can help defenders or investigators.Operational lifetimethe period a satellite can function before fuel, hardware wear, or other limits end its mission.Operational limitsRestrictions on how a model can be used, accessed, or connected in practice.Operational linkssigns that two threat identities may share infrastructure, personnel, or methods.Operational lock-independence on a single vendor or platform that can make switching harder over time.Operational logsSystem records that can reveal activity, errors, and internal workflow details.Operational marginThe buffer between normal performance and failure conditions.Operational maturityThe ability to run technology reliably in live business processes, not just test it.Operational memoryThe accumulated messages and records that capture how an organization actually works.Operational networka live system used to run essential services, where interruptions can have immediate consequences.Operational nodeA key point in a criminal network, such as an account, device, or facility that supports the wider operation.Operational noisethe distraction created when incomplete alerts or claims force extra security work.Operational outagean unplanned interruption that stops a service from functioning normally.Operational overheadThe ongoing effort needed to configure, monitor, and maintain a system.Operational phaseThe stage where legal obligations must be implemented in day-to-day practice.Operational pressurethe business impact created by urgent public allegations.Operational realityThe day-to-day conditions under which security work is actually performed.Operational reportsinternal documents that can reveal schedules, procedures, or business routines.Operational requirementsthe tasks, conditions, or standards that must be met during a contract.Operational restraintA cautious response that avoids overreading limited information or acting on speculation.Operational reviewa careful internal check triggered by a security claim.Operational routingThe selection and control of traffic paths used to move activity through intermediary systems.Operational sample materialTest or example files that can still contain sensitive business context.Operational scalethe ability of a criminal network to expand its activity beyond local limits.Operational scopethe practical extent of what a law or command can do in real-world use.Operational scriptsautomated code that supports routine business or technical tasks.Operational shutdowna stoppage that interrupts manufacturing or related business processes.Operational signala cue that may justify checking logs, access, and service integrity.Operational simplicityA design quality that reduces unnecessary complexity in a process or system.Operational Software AssuranceA market framing for protecting software after deployment, especially in long-lived operational environments.Operational sovereigntyThe ability to control and recover digital infrastructure without relying on fragile external dependencies.Operational thresholdA pre-set decision point that triggers extra safeguards, review, or a stop-deployment action.Operational triagethe process of checking logs and alerts to separate facts from noise.Operational uncertaintythe period when the full scope of an incident is not yet known.Operational verificationthe process of checking logs, access, and backups to confirm or reject an incident claim.Operational windowThe limited period when an event’s systems and staff must perform reliably.Operational workflowthe practical sequence of tasks people use to manage systems and software.Operational workshopa structured session used to discuss practical use, procedures, and readiness.Operational-technology (OT)Systems that manage physical processes such as power generation, transmission, or industrial control.OperationalisationThe process of turning a tool or model into a working security capability.Operationally verifiableproven in practice, not only described in policy documents.Operativea person used to carry out tasks within a campaign.Operatorthe person coordinating a criminal campaign, including infrastructure and extortion activity.Operator DeceptionManipulating displays, alarms, or status information so a human controller sees a false picture of system state.Operator interfaceThe human-facing layer used to issue commands and read machine state.Operator panelThe attacker-controlled console used to manage infections, collect data, and steer fraud activity.Operatori TLCtelecom operators affected by how the CUP is interpreted and applied.OpExOperating expense, a cost category for running the business rather than directly producing a product or service.Opinion SummarizationAn NLP task that compresses multiple subjective reviews into a short summary.Opinion-based selectiona curated choice based on editorial judgment rather than a strict ranking method.OPNsenseOpen-source firewall and routing software used for network control and segmentation.Opportunity costThe value of the best alternative forgone when money, time, or staff are assigned to one AI project instead of another.Opt-inA model that requires prior permission before contact or processing.Opt-in disclosureA reporting model where maintainers choose to receive direct security findings.Opt-in serviceA service that only runs when a project or user explicitly chooses to participate.Opt-in settingA privacy control that requires active user permission before data is used for an extra purpose.Optical cavitya pair of mirrors that traps light through repeated reflections.Optical chainThe combined path of lens, sensor, and processing that shapes image quality.Optical diskA removable storage medium that stores data on a disc read by a laser.Optical encodingTurning data into visual patterns that can be read back by a compatible process.Optical feedbackA loop in which light influences the next cycle of a physical process.Optical filtera component that selectively passes or blocks certain light wavelengths.Optical interconnectA data link that uses light to carry information between components, racks, or systems.Optical mediastorage that uses light-based reading, such as CDs, instead of purely electrical memory.Optical reflectionlight bouncing off a surface in a way that can expose hidden structures.Optical waveguideA structure that guides light through a material with minimal loss.Optimization solverSoftware that searches for the best solution to a problem defined by objectives and constraints.OptionA command flag that changes how a tool behaves.Option valueThe strategic worth of keeping future choices open instead of locking into one path too early.Optional add-onA bonus service or benefit that may come with extra terms or conditions.Optional ComponentA feature or package not required for basic operation, but still capable of expanding attack surface.Optional preview cumulative updateA non-mandatory Windows update used to deliver fixes and changes before broader servicing.Optional serviceA feature that is not required for core operation but can still introduce risk when enabled.Optional updatea non-mandatory software release that users or admins can choose to install.OptionalityThe ability to keep future choices open by avoiding unnecessary lock-in, complexity, or narrow design decisions.OptionsExtra flags or parameters that change how a command behaves or what it returns.OptogeneticsA technique that uses light-sensitive proteins to control specific cells, often neurons, with high precision.Oracle Access ManagerA component for authentication and authorization in Oracle environments.Oracle attackAn attack that learns secrets by observing how a system responds to chosen inputs or errors.Oracle databaseAn enterprise database platform that can store data and execute stored logic.Oracle HTTP ServerOracle’s web server front end, often used to receive public traffic before forwarding it to application services.Oracle Internet DirectoryOracle’s LDAP-based directory service used to store and manage identities.Oracle vulnerabilityA flaw where differences in responses or timing reveal information useful to an attacker.Oral communications interceptioncapturing spoken conversations without authorization.ORAMOblivious RAM, a technique that hides memory access patterns to reduce privacy leakage.Orbit insertionThe process of placing a spacecraft into orbit around a body.Orbital environmentthe conditions of space around Earth, including microgravity and vacuum.Orbital habitata structure designed for people to live in space rather than only visit it briefly.Orbital interferencea broad term that can mean radio-frequency disruption or unsafe proximity operations in orbit.Orbital launchA flight that reaches space and achieves stable Earth orbit.Orchestration platformSoftware that coordinates workflows, tools, and services into a managed process.Orchestration softwareSoftware that coordinates workloads, resources, and deployment flow in production.ORDBMSObject-relational database management system, a database model that blends relational storage with object-style features.Order fulfillmentThe process of receiving, processing, and shipping customer orders across warehouse and logistics systems.Order Management System (OMS)Software that tracks an order from purchase through fulfillment, delivery, and return handling.Order metadataOperational details tied to a purchase, such as order numbers, shipment status, or fulfillment records.Order processingThe workflow that turns customer requests into fulfilled transactions.Order-trackingA support function that lets customers check the status of a purchase or shipment.Ordinary architectureThe standard institutional framework used for regular state functions.Ordini professionaliItalian professional bodies that oversee admission, conduct, and continuing education in regulated professions.Org-modeA plain-text markup system with document structure, metadata, and include-style features.Organic presenceVisibility earned without paid promotion.Organic trafficVisits that arrive through unpaid search results rather than ads or direct navigation.Organisational frictionInternal delays, silos, and process bottlenecks that slow security work.Organismo di VigilanzaThe oversight body that monitors whether a 231 model is actually working in practice.Organization accessControlled availability of a tool or service to approved groups rather than the general public.Organization SchemaA structured data type used to describe a company or institution in a way search systems can interpret.Organization-scoped packageA package published under a namespace owned by an organization.Organizational change management (OCM)The planning and communication needed to help people adopt new tools or workflows.Organizational epistemic riskIn this article, the working idea that AI may weaken an organization's ability to know, justify, and challenge decisions.Organizational frictionDelays and misalignment created by unclear priorities, heavy process, or weak coordination.Organizational improvisationReal-time adaptation by teams facing uncertainty or change.Organizational latencyThe delay between recognizing a risk and putting the right control in place.Organizational learningThe practice of turning exceptions, failures, and edge cases into improvements in process.Organizational measuresPolicies and procedures that help enforce privacy and security requirements in daily operations.Organizational psychologythe study of behavior, motivation, and relationships in workplaces.Organizational ReadinessThe ability of a company to absorb new technology through skills, processes, leadership, and controls.Organizational transformationa broad shift in structure, process, culture, or operating model.Organizational trustConfidence inside an institution that processes, responsibilities, and decisions are reliable.Orientation sensingMeasuring the direction or angle of an object in space.Origamithe art of shaping paper through folding, usually without cutting.Origin maskingThe practice of making the true source of network traffic difficult to identify.Origin of lifeThe scientific study of how living systems first emerged from non-living chemistry.Origin Validation ErrorA flaw where software fails to verify that data or commands came from a trusted source.Orphaned infrastructurePublic systems left unmanaged after a migration, project change, or ownership shift.OS payloadsCrafted inputs intended to influence how a command parser or shell interprets a command.OS-backed protectionOperating-system controls that help encrypt or guard stored secrets on the local device.OS-level IsolationOperating system controls that enforce separation between processes, files, and execution environments.OSCPA cybersecurity certification focused on practical offensive testing skills.OSDOn-screen display, the menu layer used to change monitor settings.OSD chipA controller that handles the monitor’s menu and related behavior.OSS ScannerAn opt-in Anthropic service that generates vulnerability reports for open-source maintainers.OSS VRPGoogle’s Open Source Software Vulnerability Reward Program for security issues in qualifying open-source projects.OSS-FuzzGoogle’s continuous fuzzing service for open-source projects that helps discover bugs by testing with unexpected inputs.OT and IT convergenceThe blending of operational technology and information technology into connected industrial environments.OT Asset InventoryA current record of devices, software, firmware, and related attributes in an OT environment.OT availabilityThe ability of operational technology systems to remain reachable and functional for control, monitoring, and maintenance.OT cybersecuritySecurity work focused on systems that control physical processes such as manufacturing, utilities, and transport.OT defendersteams responsible for protecting industrial and operational technology environments.OT isolationA security approach that separates industrial systems from other networks while preserving required operational functions.OT remote accessRemote connectivity used to administer or support operational technology systems in industrial environments.OT/ICSOperational Technology and Industrial Control Systems, the software and hardware that run physical processes.OTAPNSA’s Operational Technology Assurance Partnership for OT security evaluation.OTP applicationsReusable components in Erlang/OTP that shape which features and code paths a deployment actually uses.OTTERCOOKIEA malware family name associated with developer-targeted intrusion activity and used here as the label for the payload described.Out-of-band approvala separate verification step for sensitive actions before they are published.Out-of-band channelA communication path that does not rely on the normal internet connection, such as Bluetooth or NFC.Out-of-band communicationA backup channel used when the primary communication path is unavailable or unreliable.Out-of-band console accessAn alternate management path, such as a hypervisor or cloud console, used when normal remote access is unavailable.Out-of-band coordinationCommunication that happens outside the expected system path, often on an unrelated platform.Out-of-band monitoringObservation or control performed outside the main execution path, which can reduce reliance on the workload being monitored.Out-of-band telemetryIndependent monitoring data collected outside the device itself, useful when local logs may not be trustworthy.Out-of-band watchdogA separate monitoring mechanism that can intervene without relying on the main software path.OutageA period when a system or network is partially or fully unavailable.Outbound activityunusual data leaving a network, often checked during incident review.Outbound AllowlistA list of approved destinations a system is permitted to contact.Outbound connection monitoringdefensive review of where devices are sending traffic, useful for spotting unexpected relay behavior.Outbound connectionsnetwork traffic that can help reveal suspicious activity during review.Outbound data movementtraffic leaving a network or service that may warrant review during incident triage.Outbound egressTraffic leaving a device or network toward an external destination.Outbound egress controlA security measure that limits where systems can connect on the network, useful for stopping unwanted build-time downloads.Outbound Network AccessThe ability of a system to initiate connections to external services or the internet.Outbound transfer behaviornetwork activity that may indicate data being sent out of an environment.Outcome logicThe intended behavioral or business change that justifies the work.Outcome verificationThe practice of checking whether a policy or control actually produces the intended real-world result.Outcome-based engagementsContracts judged by delivered results rather than the number of people or hours assigned.Outcome-based evaluationMeasuring a program by results such as job placement, retention, or wage progress.Outcome-based measurementA way of judging technology by measurable business results, not by deployment counts or spending alone.Outdated confidencethe risk of treating an unverified claim as established fact before checks are complete.Outer Space TreatyThe 1967 treaty that bars weapons of mass destruction from orbit and limits certain military uses of celestial bodies.OutletThe point where a fluid or gas exits a device.Outlook PSTan email archive file that can preserve years of messages and attachments in one place.Outlook WebThe browser-based version of Microsoft Outlook for email access.Outlook Web AccessMicrosoft Exchange’s browser-based email interface, commonly used for remote mailbox access.Output controlsReview and approval rules that determine how AI-generated results are checked before use.Output formatThe expected structure of the model’s answer, such as bullets, summary, or table.Output gatingA control step that checks or approves AI output before it is published or shared.Output handlingThe process of reviewing and safely using AI-generated content before it is reused.Output harvestingCollecting model responses at scale so they can be reused as training data.Output minimizationA defense that reduces how much detail a model reveals in its responses.Output pluginA dynamically loaded module that defines how logical decoding data is formatted and delivered.OutputsThe content a model produces after being prompted or deployed.Outsourced capabilityA function or skill that has been moved outside the organization, sometimes taking critical know-how with it.Outsourced ProcessingHandling personal data by a contractor or service provider on behalf of another organization.Over-permissioned accessaccounts granted more rights than they need for daily work.Over-privileged accessA condition where a system has more permissions than its job requires.Over-relianceHeavy dependence on a tool that can weaken independent judgment or effort.Over-the-air TVBroadcast television delivered through electromagnetic waves instead of cables.Over-TrustExcessive confidence in a system's output or behavior, even when its limits are unclear.OverfishingFishing at a rate that exceeds what a stock can sustain over time.Overhanga section of a printed object that extends outward without direct support beneath it.Overlay WindowA screen element displayed above another app, often used to disguise prompts or intercept user actions.Override authorityThe ability for a human operator to interrupt, stop, or deactivate a system.Oversight workflowThe operational process that defines who reviews, who approves, and who can intervene.OWASP ASVSAn open standard for verifying web application security controls.OWASP Core Rule Set (CRS)A generic set of attack-detection rules often deployed with ModSecurity.OWASP Web Security Testing GuideA widely used framework for web application security testing.OwnCloudSelf-hosted file sync and sharing software used to store and exchange documents.Owned mediacommunication channels a company controls directly, such as newsletters and websites.Ownership structurethe legal and financial arrangement that determines who controls a company.OxidizerA chemical that supports combustion by providing oxygen or an equivalent function.