Glossary
Searchable terminology from accessibility, web standards, and related fields.
15 results found in Security.
- Audio CAPTCHA (Audio HIP, Audio Human Interaction Proof)
- An auditory alternative to visual CAPTCHAs, typically presenting distorted spoken letters, numbers, or words that users must transcribe. While intended as an accessible alternative for blind users, re…
- Biometric Authentication (Biometrics, Biometric Security, Behavioral Biometrics)
- Security technology that uses unique biological or behavioral characteristics to verify identity, including fingerprints, facial recognition, iris scans, voice patterns, and handwritten signatures. Ac…
- End-to-End Verifiable Voting (E2E-V, End-to-End Verifiable Election System)
- A class of voting systems designed so that each voter can independently verify their vote was cast as intended, recorded as cast, and counted as recorded, while preserving ballot secrecy. Examples inc…
- Equal Error Rate (EER, Crossover Error Rate)
- A metric used to evaluate biometric system performance, representing the point at which the false acceptance rate (wrongly accepting unauthorized users) equals the false rejection rate (wrongly reject…
- Human Interaction Proof (HIP, Human Interactive Proof)
- A challenge-response test designed to distinguish human users from automated software (bots). Human Interaction Proofs are the technical term for CAPTCHAs and similar verification systems. While effec…
- Jailbreak (LLM Jailbreak, AI Jailbreak)
- In the context of generative AI, a class of adversarial input designed to bypass a model's safety rules, instruction-following constraints, or content policy — for example, instructions that tell the …
- Multi-Factor Authentication (MFA, 2FA, Two-Factor Authentication, Two-Step Verification)
- An authentication pattern that requires two or more verification factors — something you know (password), have (phone, token), or are (biometric) — to confirm a user's identity. MFA substantially redu…
- Prompt Injection (Indirect Prompt Injection, Prompt Engineering Attack)
- A technique — originally an LLM security concern — in which carefully crafted instructions embedded in a user prompt or referenced content override the model's intended behaviour, constraints, or safe…
- Pseudonymization (Pseudonymisation, De-identification)
- A privacy technique in which personally identifying fields are replaced with artificial identifiers — typically hashes, tokens, or randomly assigned IDs — so that the data can no longer be attributed …
- Red Teaming (Generative Red-Teaming, AI Red Teaming)
- A structured evaluation practice in which an adversarial team probes a system — traditionally a network or application, increasingly an AI model or conversational agent — with realistic attack scenari…
- Role-Based Access Control (RBAC)
- An authorisation model in which system permissions are attached to roles (e.g., user, administrator, clinician, caregiver) and users are granted one or more roles rather than permissions directly. Wid…
- Screen Curtain (Display Curtain)
- Screen Curtain is an accessibility feature available on iOS and some other platforms that turns off the device's display while keeping the device fully functional and responsive to touch input and scr…
- Shoulder Surfing
- A form of visual eavesdropping where an attacker observes a person entering sensitive information such as passwords, PINs, or personal data by looking over their shoulder or from a nearby vantage poin…
- Threat Modeling (Security Threat Modeling, STRIDE)
- A structured engineering practice for identifying, categorising, and mitigating security and privacy threats in a system before they are exploited. The widely used STRIDE framework (Microsoft) covers …
- Turing Test (Imitation Game)
- The Turing Test, proposed by Alan Turing in 1950, is a thought experiment for assessing whether a machine's conversational behaviour is indistinguishable from that of a human. A human evaluator engage…