AI security
Protecting AI systems, models and the data they use from attacks and misuse, and governing how AI is used.
Related: Prompt injection, Shadow AI
Glossary category
Protecting sensitive data, AI tools and the APIs that connect your systems.
20 terms
Protecting AI systems, models and the data they use from attacks and misuse, and governing how AI is used.
Related: Prompt injection, Shadow AI
A service that manages, routes and secures traffic to an organisation's APIs.
Related: API security, WAF, OAuth
Protecting application programming interfaces from attacks, misuse and data exposure.
Related: OWASP API Top 10, API gateway, OAuth
Business Continuity and Disaster Recovery
Plans and processes that keep a business running during a disruption and restore systems afterwards.
Related: Immutable backup, Ransomware, Incident response
The policies, controls and technologies that protect cloud data, applications and infrastructure.
Cloud-Native Application Protection Platform
A platform that combines cloud security tools to protect cloud-native applications from development to runtime.
Related: CSPM, CWPP, Cloud security
Cloud Security Posture Management
Tools that continuously check cloud environments for misconfigurations and compliance risks.
Related: CNAPP, CWPP, Cloud security
Cloud Workload Protection Platform
Security for workloads running in the cloud, such as virtual machines, containers and serverless functions.
Labelling data by sensitivity so the right protections can be applied.
Related: DLP, DPDP Act, Data fiduciary
Data Loss Prevention
Tools and policies that stop sensitive data from being leaked, misused or sent outside the organisation.
Related: CASB, Data classification, Insider threat
Converting data into unreadable code so only people with the right key can read it.
Related: Tokenization, SSL inspection, DLP
A backup that cannot be changed or deleted for a set period, protecting it from ransomware.
Related: BCDR, Ransomware, Ransomware rollback
A list of the ten most critical API security risks, published by the OWASP Foundation.
Related: API security, SQL injection, OAuth
An attack that hides instructions in input to an AI model to make it ignore its rules or leak data.
Related: AI security, Shadow AI
Using technology to perform security tasks automatically, reducing manual effort and response time.
Related: SOAR, Alert fatigue, Security playbook
Employees using AI tools without approval or oversight, risking data leakage.
Related: Shadow IT, AI security, DLP
Hardware, software or cloud services used without IT department approval.
Related: CASB, Shadow AI, Attack surface
The split of security duties between a cloud provider and its customer.
Related: Cloud security, CSPM
Replacing sensitive data, such as card numbers, with non-sensitive tokens.
Related: Encryption, PCI DSS
Web Application Firewall
A firewall that filters web traffic to block attacks on web applications, such as SQL injection.
Related: API security, SQL injection, Cross-site scripting
These terms describe the work our AI & API Security service does for clients. The service page sets out what it includes.