|
因在阅读文献过程中经常遇到各种专业缩写，所以把各种缩写总结了一下。 因能力有限，错误在所难免，欢迎进行纠错与补充：https://github.com/piaolin/CSAbbr 渗透相关缩写全称解释备注XSSCross Site Script Attack跨站脚本攻击为了和CSS（层叠样式表）区分，故取名XSSCSRFCross-site request forgery跨站请求伪造SSRFServer-Side Request Forgery服务器端请求伪造SQLStructured Query Language结构化查询语言CTFCapture The Flag夺旗赛AWDAttack With Defense攻防赛DOSDisk Operating System磁盘操作系统DoSDenial of Service拒绝服务DDOSdistributed denial-of-service分布式拒绝服务攻击MITMMan-in-the-MiddleAttack中间人攻击SSTIServer-Side Template Injection服务器端模板注入CMScontent management system内容管理系统CDNContent Delivery Network内容分发网络PINGPacket Internet Groper因特网包探索器VPNVirtual Private Network虚拟专用网络DLLDynamic Link Library动态链接库mstscMicrosoft terminal services client远程桌面连接APIApplication Programming Interface应用程序编程接口CRCCyclic Redundancy Check循环冗余校核POCProof of Concept漏洞验证程序EXPExploit漏洞利用代码SOCSecurity Operations Center安全运行中心Windows相关缩写全称解释备注SSPISecurity Support Provider Interface安全服务提供接口SSPSecurity Service Provider安全服务提供NetBIOSNetwork Basic Input/Output System网络基本输入/输出系统IPC$Internet Process Connection共享"命名管道"的资源IPCInter-Process Communication进程间通信SPNService Principal Name服务主体名称WinRMWindows Remote Managementdwin远程管理ATLActive Template Library活动模板库COMComponent Object Model组件对象模型UACUser Account Control用户账户控制ADActive Directory活动目录服务AD DSActive Directory Domain Service活动目录域服务DCDomain Controllers域控制器运行 AD DS 的服务器是域控制器 (DC)TGTTicket Granting Ticket票据授权票据KDCKey Distribution Center密钥分发中心TGSTicket Granting Service票据授权服务STService Ticket服务票据别称TGS TicketLMLAN ManagerLAN Manager Challenge/Response 验证机制NTLMWindows NT LAN ManagerWindows NT LAN Manager Challenge/Response验证机制协议相关缩写全称解释备注SMBServer Message Block网络文件系统协议DHCPv6Dynamic Host Configuration Protocol for IPv6动态主机配置协议DUIDDistributed Unique Id分发的唯一标识符NDPNeixxxor Discovery Protocol邻居发现协议SLAACStateless address autoconfiguration无状态地址自动配置DNSDomain Name Server域名服务器DDNSDynamic Domain Name Server动态域名服务NBNSNetwork Basic Input/Output System网络基本输入/输出系统NetBIOS名称服务器的缩写LLMNRLink-Local Multicast Name Resolution本地链路多播名称解析mDNSMulticast DNS多播DNSLLDPLink Layer Discovery Protocol链路层链路发现协议SSDPSimple Service Discovery Protocol简单服务发现协议UPnPUniversal Plug-and-Play通用即插即用架构TCPTransmission Control Protocol传输控制协议UDPUser Datagram Protocol用户数据报协议SSHSecure Shell安全外壳协议FTPFile Transfer Protocol文件传输协议RPCRemote Procedure Call Protocol远程过程调用协议LDAPLight Directory Access Portocol轻量级目录访问协议Active Directory(AD)协议就是基于LDAPTFTPTrivial File Transfer Protocol简单文件传输协议SFTPSSH File Transfer Protocol安全文件传输协议文件传输协议(FTP)的安全版本,也是SSH协议的一部分DICTDictionary Server Protocol词典网络协议TCP：2628ICMPInternet Control Message Protocol因特网报文控制协议SSLSecure Sockets Layer安全套接字协议TLSTransport Layer Security传输层安全协议HTTPHyper Text Transfer Protocol超文本传输协议HTTPSHyper Text Transfer Protocol over SecureSocket Layer超文本传输安全协议TelnetTelnetInternet远程登录服务的标准协议和主要方式SNMPSimple Network Management Protocol简单网络管理协议ARPAddress Resolution Protocol地址解析协议编程相关缩写全称解释备注SGMLStandard Generalized Markup Language标准通用标记语言衍生语言：HTML, XMLHTMLHyperText Mark-up Language超文本标记语言XMLExtensible Markup Language可扩展标记语言XSLTExtensible Stylesheet Language Transformations可拓展样式表语言转换XSLT可将XML文档转换为其他文档，比如XHTMLXSLExtensible Stylesheet Language拓展样式表语言ASCIIAmerican Standard Code for Information Interchange美国信息互换标准代码UNICODEUniversal Multiple-Octet Coded Character Set别称UCSUTFUCS Transfer FormatSOAPSimple Object Access Protocol简单对象访问协议WSDLWeb Services Description LanguageWeb服务描述语言描述Web服务发布的XML格式UDDIUniversal Description Discovery and Integration通用描述发现和集成OOBOut of bounds界外，出界DFADeterministic finite automaton确定有限状态机AOPAspect Oriented Programming面向切面编程RMIRemote Method Invocation远程方法调用LLMNRLink-LocalMulticast NameResolutionLLDPDULink Layer Discovery Protocol Data UnitJFCJava Foundation ClassJava基础类库GUIGraphics User Interface图形用户界面GTKGIMP ToolkitGIMP库Linux系统上的两大图形界面库（GUI）之一，另一个是QTJNDIJava Naming and Directory InterfaceJava 命名和目录接口APTAdvanced Persistent Threat高级持续性威胁APTAdvanced Packaging Tool高级包管理工具DOMDocument Object Model文档对象模型JNLPJava Network Launch ProtocolJRMPJava Remote Method ProtocolJava远程方法协议JAVA RMI依赖JRMPJRMPJava Remote Messaging ProtocolJava远程消息交换协议OGNLObject-Graph Navigation Language对象图导航语言POJOPlain Ordinary Java Object普通Java对象JSTLJava server pages standarded tag libraryJava标准标签库安全机构与证书缩写全称解释备注CISACertified Information Systems Auditor国际信息系统审计师CISMCertified Information Security Member认证信息系统安全经理CISSPCertification for Information System Security Professional信息系统安全专业认证ISACAInformation Systems Audit and Control Association信息系统审计与控制协会ISCInternet Security Conference互联网安全大会SCASoftware Composition Analysis软件成分分析/软件组合分析CPECommon Platform Enumeration通用平台枚举项对IT产品的统一命名规范CVECommon Vulnerabilities & Exposures公共漏洞和暴露
|