C2 · 50 words
Information security in Spanish
Attack surface, vulnerability, incident, recovery — the language of the defence.
La sal criptográfica is the salt added to a password before it is hashed, and the word is the kitchen one in both languages. What Spanish does with it afterwards is its own. Tener sal is to have charm, and ser muy salado, said of a person in Spain, means witty and good company — the opposite of dull. Cross the Atlantic and the same word turns: in much of Latin America estar salado is to be jinxed, to have a run of bad luck. One seasoning, and two regions read it in opposite directions; the password only ever needs the first sense.
The words
View
Phrase (47)
la superficie de ataqueeverything an outsider could reach and tryPhraseC2
La superficie de ataque crece con cada servicio nuevo.The attack surface grows with every new service.
el vector de ataquethe route by which an attack actually gets inPhraseC2
El vector de ataque más común sigue siendo el correo.The commonest attack vector is still e-mail.
la vulnerabilidad de día cerothe flaw for which no fix exists yetPhraseC2
La vulnerabilidad de día cero no tiene parche todavía.A zero-day vulnerability has no patch yet.
la carga útil maliciosawhat is delivered once the way in is openPhraseC2
La carga útil maliciosa llega después del acceso.The malicious payload arrives after the access.
la escalada de privilegiosthe step from ordinary user to administratorPhraseC2
La escalada de privilegios convierte a un usuario en administrador.Privilege escalation turns a user into an administrator.
el movimiento lateralthe spreading through the network from insidePhraseC2
El movimiento lateral recorre la red desde dentro.Lateral movement crosses the network from inside.
la persistencia del atacantethe foothold that survives a restartPhraseC2
La persistencia del atacante sobrevive al reinicio.The attacker's persistence survives a restart.
la exfiltración de datosthe quiet removal of data, dressed as ordinary trafficPhraseC2
La exfiltración de datos se disfraza de tráfico normal.Data exfiltration disguises itself as ordinary traffic.
la amenaza persistente avanzadathe intruder who stays for months and takes their timePhraseC2
La amenaza persistente avanzada trabaja durante meses.The advanced persistent threat works for months.
la ingeniería socialthe attack aimed at the person rather than the systemPhraseC2
La ingeniería social ataca a la persona, no al sistema.Social engineering attacks the person, not the system.
la suplantación del remitentethe forging of the address a message appears to come fromPhraseC2
La suplantación del remitente imita a quien se conoce.Sender spoofing imitates somebody you know.
el correo fraudulento dirigidothe fraudulent message written for one recipient in particularPhraseC2
El correo fraudulento dirigido cita datos reales.Targeted phishing quotes real details.
el programa de secuestrothe software that encrypts everything and then asks for moneyPhraseC2
El programa de secuestro cifra y luego pide dinero.Ransomware encrypts and then asks for money.
la doble extorsiónthe same, with the threat of publishing what was takenPhraseC2
La doble extorsión amenaza además con publicar.Double extortion also threatens to publish.
la puerta traserathe way back in, left behind on purposePhraseC2
La puerta trasera se deja para volver.The back door is left in order to come back.
el ataque a la cadena de suministrothe attack that arrives through a trusted supplierPhraseC2
El ataque a la cadena de suministro entra por un proveedor de confianza.The supply-chain attack comes in through a trusted supplier.
la denegación de serviciothe flooding that steals nothing and stops the workPhraseC2
La denegación de servicio no roba nada, impide trabajar.Denial of service steals nothing, it stops the work.
la inyección de códigothe slipping of commands into an unfiltered inputPhraseC2
La inyección de código aprovecha una entrada sin filtrar.Code injection takes advantage of an unfiltered input.
el desbordamiento de memoriathe writing past the end of the space set asidePhraseC2
El desbordamiento de memoria escribe donde no debe.A buffer overflow writes where it should not.
el hombre en el mediothe listener who sits between the two ends and sometimes editsPhraseC2
El hombre en el medio escucha y a veces modifica.The man in the middle listens and sometimes alters.
el cifrado en reposothe encryption of data that is sitting stillPhraseC2
El cifrado en reposo protege el disco robado.Encryption at rest protects the stolen disk.
la clave públicathe half of the pair that may be handed out freelyPhraseC2
La clave pública se reparte sin riesgo.The public key is handed out without risk.
la clave privadathe half that never leaves the devicePhraseC2
La clave privada no sale nunca del dispositivo.The private key never leaves the device.
la firma digitalthe proof of who sent it and that nothing was alteredPhraseC2
La firma digital prueba origen e integridad.The digital signature proves origin and integrity.
la función resumenthe one-way fingerprint of a piece of dataPhraseC2
La función resumen no se puede invertir.The hash function cannot be reversed.
la sal criptográficathe extra value that stops one table cracking many passwordsPhraseC2
La sal criptográfica impide reutilizar tablas.The cryptographic salt stops tables being reused.
el segundo factorthe second proof of identity, besides the passwordPhraseC2
El segundo factor detiene casi todo el fraude masivo.The second factor stops nearly all mass fraud.
la llave física de seguridadthe small device that cannot be talked out of anybody over the phonePhraseC2
La llave física de seguridad no se puede suplantar por teléfono.A physical security key cannot be phished over the phone.
el principio de mínimo privilegiothe rule of giving no more access than the job needsPhraseC2
El principio de mínimo privilegio limita el daño posible.The principle of least privilege limits the possible damage.
la segmentación de la redthe dividing of the network so one breach does not reach it allPhraseC2
La segmentación de la red frena el movimiento lateral.Network segmentation slows down lateral movement.
la confianza cerothe design that trusts nothing merely for being insidePhraseC2
La confianza cero no supone segura la red interna.Zero trust does not assume the internal network is safe.
el endurecimiento del sistemathe switching off of everything that is not neededPhraseC2
El endurecimiento del sistema apaga lo que no se usa.System hardening switches off what is not used.
la gestión de parchesthe keeping up with fixes, which is the cheapest defence there isPhraseC2
La gestión de parches es la defensa más barata.Patch management is the cheapest defence.
el inventario de activosthe list of what you actually run, missing where it matters mostPhraseC2
El inventario de activos falta justo donde hace falta.The asset inventory is missing exactly where it is needed.
la copia de seguridad aisladathe copy an intruder cannot reach from the networkPhraseC2
La copia de seguridad aislada es lo único que salva ante un cifrado.An isolated backup is the only thing that saves you from encryption.
la prueba de restauraciónthe rehearsal of getting it all back, done before it is neededPhraseC2
La prueba de restauración se hace antes de necesitarla.The restore test is done before it is needed.
el centro de operaciones de seguridadthe room where the alerts are watched, day and nightPhraseC2
El centro de operaciones de seguridad vigila día y noche.The security operations centre watches day and night.
la detección de intrusionesthe watching for intrusions, which raises many false alarmsPhraseC2
La detección de intrusiones genera muchos falsos positivos.Intrusion detection produces many false positives.
el indicador de compromisothe trace that says a system has been got atPhraseC2
El indicador de compromiso se comparte entre organizaciones.The indicator of compromise is shared between organisations.
la respuesta a incidentesthe plan for what happens after, rehearsed beforePhraseC2
La respuesta a incidentes se ensaya antes del incidente.Incident response is rehearsed before the incident.
la contención del incidentethe shutting-in that comes before any investigationPhraseC2
La contención del incidente precede a la investigación.Containment of the incident comes before the investigation.
el análisis forense digitalthe examination that must leave the original untouchedPhraseC2
El análisis forense digital exige no tocar el original.Digital forensics requires the original not to be touched.
la cadena de custodia digitalthe record of who held the evidence, which decides whether it countsPhraseC2
La cadena de custodia digital decide si sirve ante un juez.The digital chain of custody decides whether it stands before a judge.
la prueba de penetraciónthe authorised attack, agreed in writing and with a scopePhraseC2
La prueba de penetración se contrata por escrito y con alcance.A penetration test is commissioned in writing and with a scope.
el equipo rojothe team that attacks without telling the defendersPhraseC2
El equipo rojo actúa sin avisar al equipo defensor.The red team acts without warning the defending team.
la divulgación responsablethe reporting of a flaw with time given before it is made publicPhraseC2
La divulgación responsable da plazo antes de publicar.Responsible disclosure allows time before publication.
la cultura de seguridadthe habit that shows in whoever reports their own mistakePhraseC2
La cultura de seguridad se nota en quien avisa de su propio error.A security culture shows in whoever reports their own mistake.
Noun (f) (2)
la ciberseguridadthe practice of defending systems, which is a process and not a productNoun (f)C2
La ciberseguridad es un proceso, no un producto.Information security is a process, not a product.
la vulnerabilidadthe flaw itself, whether or not anybody uses itNoun (f)C2
La vulnerabilidad existe aunque nadie la use.A vulnerability exists even if nobody uses it.
Noun (m) (1)
el exploitthe piece of code that turns a flaw into a way inNoun (m)C2
El exploit convierte un fallo en una entrada.The exploit turns a flaw into a way in.
This list belongs to Technology and industry — 26 lists and 1296 words that can also be practised as a whole.
Practise this list
From these 50 words, as many per round as you like — up to all of them: first what is due today, then new ones. First you choose, then you fill the gap, then you write it yourself. Mistakes come back again shortly.