R
RA - registration authority (A component of, or delegated function, more often used in larger organizations, which serves the certificate authority (CA), a trusted organization (or server), which maintains and issues digital certificates within a public key infastructure (PKI) system. The registration authority serves as a kind of broker for the certificate authority, by establishing and confirming the identity of an individual, initiating the certification process, and performing certificate life-cycle management functions, before forwarding the request to the certificate authority, which then issues the certificate.)
RA - risk assessment (A method of identifying vulnerabilities and threats and assessing the possible impacts to determine where to implement security controls.)
RaaS - Ransomware-as-a-Service (An online software package sold in underground markets and/or forums using a subscription-based model, created by malware authors who develop ransomware code, package it as an online dashboard, complete with instructions, allowing for individual modification, and presented for sale or rent.)
RAB - RAID (redundant array of independent (or inexpensive) disks) Advisory Board (Organization formed in July 1992 to standardize, classify, and educate on the subject of RAID. The RAB no longer exists, but developed RAID specifications and a classification program.)
RAC (RBAC) - Rule-Based Access Control (Access control model in which access is based on specific rules that govern the level of access and the amount of access granted, such as a rule imposing a time of day or days of the week access restriction, where a user would not be expected to access a database at midnight or on Saturday or Sunday.)
RAD - Rapid Application Development (Software development model which relies on prototyping, user feedback, and the creation of workable models in stages, which are then refined as the full program is developed.)
RADIUS - Remote Authentication Dial-In User Service (A network protocol that provides client/server authentication and authorization, and audits remote users. Used by Internet service providers (ISPs) to authenticate customers, often through a user name and password system, before they are allowed access to the Internet.)
RADSL - Rate-Adaptive Digital Subscriber Line (Type of high-speed digital subscriber line (DSL) which will adjust the transmission speed to match the quality and the length of the line.)
RAID - Redundant Array of Independent (or Inexpensive) Disks (or Devices) (Computer storage technology in which data is simultaneously written to several physical disks, providing a data backup system if one of the disks fails.)
RAIT - Redundant Array of Independent Tapes (interconnected tape drive storage)
RAM - Random Access Memory (integrated circuit for temporary storage of data and program instructions)
RAMAC - Random Access Method of Accounting and Control (IBM computer disk storage system (1956))
RAMdisk - Random Access Memory disk drive (virtual solid state drive)
RARP - Reverse Address Resolution Protocol (local server IP (Internet Protocol) address lookup)
RAS - Remote Access Server (A Microsoft Windows Server feature that allows Microsoft Windows clients to remotely access a Microsoft Windows network. Predecessor to Microsoft Routing and Remote Access Server (RRAS).)
RAS - Remote Access Service (Hardware and software that allows remote users from outside a network to connect to the internal network, as if they were physically located inside the network. Remote access service handles connection, identification, authentication, and authorization processes.)
RASP - Runtime Application Self-Protection (A security technology that works to detect and protect against application attacks in real time.)
RASQ - Relative Attack Surface Quotient (Relative attackability or likely opportunities for attack against software in comparison to a baseline.)
RAT - Remote Access Tools (Generic term for programs or software which allow a person to access and control a computer, server or system remotely. Can be used legitimately by administrators to monitor or observe user behavior, to edit and enter data, or even to instruct users. Can also be used maliciously and installed through a "Trojan Horse" embedded in a game or other program, and then to run invisibly in the background. Can be used to install other tools, such as key loggers, remote controllers, and password finders.)
RAT - Remote Access Trojan (Malicious program that runs on a system and allows intruders to access and use a system remotely. Characterized or distinguished from other malware by the use of a "Trojan horse" method of attack, in which they are disguised as a legitimate program, such as a game, which users are tricked into downloading from a malicious website. Once loaded on a victim's system, they allow an attacker to download or upload files, send commands, monitor user behaviors, install zombie software, activate a webcam, take screenshots, and alter or delete files.)
RAT - Remote Administration Tool (Software programs that give an administrator or user the ability to access and control a tech device remotely, including computer screens and keyboard functions and data entry.)
RB-RBAC - rule-based access control (rule-based-role-based access control) (access based on defined rules)
RBAC - Role-Based Access Control (A method of access security that determines the system access an individual is granted based on their role in the organization. RBAC can be used to refer to role-based access control, but RBAC can also be used for rule-based access control.)
RBAC (RAC) - Rule-Based Access Control (Access control model in which access is based on specific rules that govern the level of access and the amount of access granted, such as a rule imposing a time of day or days of the week access restriction, where a user would not be expected to access a database at midnight or on Saturday or Sunday. RBAC can be used to refer to role-based access control, but RBAC can also be used for rule-based access control.)
RBL - Real-Time Blacklist Lookups (A service which uses the Domain Name System (DNS) protocol to do a reverse lookup to see if an IP address has been blacklisted (listed as an IP address blocked from access, usually as a source of malware or malicious conduct).)
RBN - Russian Business Network (Criminal syndicate of individuals and companies that was based in St. Petersburg, Russia, but by 2007 had spread to many countries through affiliates for international cybercrime.)
RBOCs - Regional Bell Operating Companies (Name for the seven regional telephone companies formed in 1984 from the breakup of American Telephone and Telegraph (AT&T), which had held a monopoly on phone service in the U.S. until that time.)
RCE - region code enhancement (video player disc copying control system)
R&D - research and development
RDoS - Ransom Denial-of-Service (Denial of service attack in which an attacker blocks or prevents access to a system, sometimes by encrypting data or blocking system operations, until a payment is made.)
RDP - Remote Desktop Protocol (A Microsoft protocol that allows a user to view and control the desktop of a remote computer.)
RDRAM - Rambus dynamic random access memory (memory chip manufactured by Rambus)
REP - reasonable expectation of privace (legal standard)
REST - Representational State Transfer (Cloud-based API (Application Programming Interface) governing the transfer of data in cloud-based applications. REST applies to the components, connectors, and data conduents for many web applications used on the Internet, and utilizes a stateless, cacheable, client-server protocol, almost always via HTTP.)
RF - radio frequency (Method of classifying or measuring radio waves based on the number of cycles of a waveform per second, measured in Hertz (Hz) . The radio frequency spectrum range, at the low end, starts at 3 kHz (1000 cycles per second) and, at the high end, reaches 300 GigaHertz (Ghz) (1 billion cycles per second). Higher frequencies can carry more data, but are more subject to interference.)
RFC - Request for Comment(s) (Semi-formal request, usually in the form of a memorandum, asking for input, criticism, or suggestions about a proposed action.)
RFC - radio-frequency choke (inductor coil designed to shield power supply lines from high-frequency signal interference)
RFI - radio frequency interference (The phenomenon in which a wireless signal is disrupted by a radio signal from another device or source of radio waves.)
RFI - Remote File Inclusion (A type of attacke= in which an attacker attempts to force an application to execute code from a remote site.)
RFID - radio frequency identification (Normally refers to a chip technology which provides information about the chip or what it is attached to, via radio waves. Originally, it was considered an alternative to BAR codes, for inventory tracking. The chip could be sewn into a piece of clothing or merchandise and a reader could scan the vicinity and use radio waves to locate and identify merchandise items until they were sold.)
RFP - Request for Proposals (product/service/bidding procurement process)
RGB - red, green, and blue (color system)
RIMM - Rambus inline memory module (plug-in memory board chips manufactured by Rambus)
RIP - Routing Information Protocol (router communication/path calculation)
RIPE NCC - Réseaux IP Européens Network Coordination Centre (Regional Internet Registry (RIR) for European countries, which maintains a database of company information about their Internet presence.)
RIRs - regional Internet registries (Organizations which manage, distribute, and register public Internet resources within their region - deals with IP address assignments.)
RISC - reduced instruction set computer (high-output chip)
RLE - run-length encoding (image file compression method)
RLL - run length limited (high-density disk encoding/storage method)
rlogin - remote login (UNIX command allowing remote access)
RM - risk management (The process of identifying and assessing risk, reducing it to an acceptable level, and ensuring that it remains at that level.)
RMF - Risk Management Framework (A security framework developed by the National Institute of Standards and Technology (NIST) providing guidelines, expectations, and recommended practices related to information security management in federal government agencies and systems and organizations dealing with federal agencies.)
RMP - risk management process (organizational threat analysis)
RMS - root-mean-square (alternating current voltage measurement)
ROB - Rules of Behavior
ROC - Receiver Operating Characteristic (Evaluation method used in malware analysis in which true positive rates and false positive rates of detection systems are plotted against each other, resulting in an ROC "curve" or graphic picture of performance at various performance levels, intended to provide a predictive framework showing how a system is likely to perform.)
RoHS - Restrictions on Hazardous Substances (European Community directive)
ROI - region of interest (digital images)
ROI - return on investment (A measure of the earning power of an investment, normally expressed as a ratio or percentage, calculated by dividing net income or income earned by the amount invested. Can be used at a company level, or at a division level to evaluate performance, or even at an asset level, to compare earnings or returns expected or earned from any given asset.)
ROM - read-only memory (data/routine written/burned into memory chip)
ROM BIOS - read-only memory basic input/output system (procedure stored on memory chip)
RP - return pointer (programming instruction/execution)
RPC - regional playback control (world geographic region disc-playing prevention system)
RPC - Remote Procedure Call (A mechanism that allows a program running on one computer to execute code seamlessly on a remote system.)
RPG - Report Program Generator (IBM programming language)
RPM - revolutions per minute (speed measure)
RPO - recovery point objective (The acceptable amount of data loss measured in time or the amount of data loss that is acceptable or the maximum amount of data that can be lost for an organization, after which the business cannot recover or would suffer significant loss. Put another way, the objective is to find alternatives which will prevent data loss or which will serve as some form of backup, so that loss does not reach the recovery point, beyond which the irreparable loss will occur.)
RRAS - Routing and Remote Access Server (A Microsoft Windows server feature that allows Microsoft Windows clients to remotely access a Microsoft Windows network.)
RRIP - Rock Ridge Interchange Protocol (industry consortium standard for compact disc read-only memory extensions)
RSA - Rivest-Shamir-Adelman (Names of the three creators of the first asymmetric algorithm, in 1978, that implemented signing and encryption: Ron Rivest, Adi Shamir,and Leonard Adleman. Also the name of the company they formed which provides security products and solutions for enterprise environments.)
RSA - Rivest-Shamir-Adleman algorithim (key encryption algorithm standard)
rsh - remote shell (An application which allows commands to be executed on a computer from a remote user.)
RTC - real-time clock (clock chip for time/date settings)
RTC/NVRAM - real-time clock/nonvolatile memory (battery-powered clock chip for time/date settings)
RTCP - RTP (Real-time Transport Protocol) Control Protocol (protocol providing information on streaming multimedia sessions)
RTF - Rich Text Format (Microsoft word processing file interchange format)
RTM - Requirements Traceability Matrix
RTO - recovery time objective (The maximum amount of time an organization can be down due to a disaster or an incident.)
RTP - Real-Time Transport Protocol (Protocol used for delivering media-based data over networks, such as Voice over IP.)
RTSP - Real-Time Streaming Protocol (Protocol which communicates with a media server such as a video server and controls the playback of the server's media files.)
RTU - Remote Terminal Unit (A special-purpose data acquisition and control device designed to support Supervisory Control and Data Acquisition (SCADA) "remote" deployments. RTUs are field devices that often support a variety of communications mediums.)
RUM - real use monitoring (tracking of actual individual user experience/activity)