Glossary
Searchable terminology from accessibility, web standards, and related fields.
15 results found in security.
- Accessible Authentication (WCAG 3.3.7, Accessible Authentication (Minimum))
- A web accessibility requirement introduced in WCAG 2.2 (Success Criterion 3.3.7) that mandates for each step in an authentication process relying on a cognitive function test — such as remembering a p…
- Aural Eavesdropping (Audio Eavesdropping, Auditory Shoulder Surfing)
- A security attack in which an unauthorized person overhears sensitive information such as passwords, PINs, or personal data being spoken aloud. This is a particular concern for people who are blind or…
- Authentication (User Authentication, Login)
- The process of verifying a user's identity before granting access to a system, service, or protected content. Common authentication methods include passwords, PINs, biometrics, and security tokens. Au…
- Biometric Authentication (Biometrics, Biometric Identification)
- A security method that verifies a person's identity using unique biological characteristics such as fingerprints, facial features, iris patterns, or voice. For people with vision impairments, biometri…
- Biometric System (Biometric Technology, Biometric Identification)
- A technology system that uses innate human physical or behavioral characteristics — such as facial features, fingerprints, voice patterns, gait, or iris patterns — to identify or verify a person's ide…
- Coercion Resistance (Receipt-Freeness, Anti-Coercion)
- Coercion resistance is a security property of voting systems that prevents a coercer from verifying how a voter cast their ballot, even if the voter cooperates with the coercer. A related but weaker p…
- Content Security Policy (CSP)
- An HTTP response header that allows web developers to restrict which sources of content (scripts, styles, images, frames, etc.) a browser will load for a given page, mitigating cross-site scripting an…
- Deepfake (Synthetic Media, AI-Generated Media)
- AI-generated or AI-manipulated media (images, video, audio, or text) designed to convincingly depict events, people, or statements that never occurred. Deepfakes pose specific risks for people with di…
- End-to-End Verifiability (E2E Verifiability, E2EV)
- End-to-end verifiability (E2EV) is a property of voting systems that allows voters to independently verify that their ballot was cast as intended, recorded as cast, and counted as recorded — without r…
- Graphical Authentication (Graphical Password, Picture Password)
- An authentication method that uses images, patterns, or visual elements instead of text-based passwords. Graphical authentication leverages human visual memory, which is generally stronger than verbal…
- Graphical Password (Picture Password, Visual Password)
- An authentication method that uses images instead of text, requiring users to either recognize previously selected images (recognition-based) or recall specific points on an image (recall-based). Grap…
- Privacy Enhancing Technology (PET, PETs)
- A category of tools, protocols, and practices designed to protect user privacy while using digital systems, including anonymising proxies, tracker blockers, end-to-end encryption, differential privacy…
- Privacy Threat Model (Privacy Threat Analysis, Privacy Risk Assessment)
- A systematic process for identifying, classifying, and evaluating potential privacy risks that a technology system may pose to its users. Privacy threat modeling extends security-focused frameworks (l…
- Recognition-Based Authentication (Cognometric Authentication)
- A type of graphical authentication where users authenticate by recognizing and selecting previously registered images from a set that includes decoy images. Unlike recall-based systems that require us…
- Universal Verifiability (Public Verifiability)
- Universal verifiability is a security property of election systems that enables any third party — not just registered voters — to independently audit and confirm that the published election outcome co…