Cyber Toonie

This post will serve as a quick reference guide to some of the most widely used jargon in the domain of cyber security.

What’s the difference between an allowlist and a denylist?

Allowlist: In Allowlist, everything is denied access by default. We explicitly allow items/entities to the list. 

Blocklist: In Blocklist, everything is allowed access by default. We explicitly block items/entities to the list.  

What’s the difference between an event, alert, and incident?

Event is a change that has been observed to the normal behavior of a system or process. 

Alert is a notification...