T
TACACS+ - Terminal Access Controller Access - Control System Plus (A Transmission Control Protocol (TCP)-based protocol used to communicate with an Authentication, Authorization, and Accounting (AAA) server, which encrypts an entire authentication packet.)
TAXII - Trusted Automated Exchange of Intelligence Information (A transport protocol developed by the MITRE organization that enables organizations to share threat intelligence over HTTPS and use common application programming interface (API) commands to extract that threat intelligence.)
TCB - trusted computing base (A collection of all the hardware, software, and firmware components within a system that provides some type of security and enforces the system's security policy.)
TCP - Transmission Control Protocol (The protocol which governs communication between two computers in a session (the session portion of the TCP/IP (Transmission Control Protocol/Internet Protocol) which establishes/verifies a connection with a session computer, ensures that packets reach their destination, and which can terminate a session) and oversees/monitors the computer-to-computer session connection.)
TCP/IP - Transmission Control Protocol/Internet Protocol (A suite of protocols that governs the way data travels from one device to another. TCP is the session portion of the TCP/IP, which establishes/verifies a connection with a session computer, ensures that packets reach their destination, can terminate a session, and oversees/monitors the computer-to-computer session connection. The IP portion deals with the addressing aspect of the data being sent, ensuring that the transmitted data is addressed to the correct receiving network and also addressed to the individual device within the receiving network.)
TCSEC - Trusted Computer System Evaluation Criteria (A collection of computer-security standards developed by the U.S. Department of Defense (DoD). TCSEC was replaced by the Common Criteria as an evaluation standard.)
TDE - Transparent Database Encryption (A database encryption system that encrypts a whole database at the file level, as a means to support encryption-at-rest compliance for database files.)
TDIR - Threat Detection, Investigation and Response (Process, or steps involved in, dealing with threats or potential threats, from detection and analysis, to a decision about how and whether to respond.)
TDoS - Telephony Denial-of-Service attack (A denial of service attack launched against traditional and packet-based telephone systems. Attempts to prevent telephone calls from being initiated or received by an individual or organization.)
TFA - Two-Factor Authentication (A method of security authentication that requires two separate means of authentication, such as using an identity card plus entering a password.)
TFTP - Trivial File Transfer Protocol (A protocol which transfers files with a remote host. TFTP is an insecure protocol which does not require authentication of user credentials.)
TGS - Ticket-Granting Server (A server or function within a Kerberos Key Distribution Center (KDC) server which provides additional tickets for the same user after the user has been verified.)
TGT - Ticket-Granting Ticket (Time stamped ticket provided by a Kerberos server to an authenticated user which allows the user to request access later for applications.)
TIC - Trusted Internet Connections (An initiative announced in 2007 for federal agencies which was intended to reduce the system attack surface by reducing the total number of Internet points-of-presence which, at the time were over 4,000, to fewer than 100.)
TKIP - Temporal Key Integrity Protocol (Encryption mechanism used with Wi-Fi Protected Access (WPA) which encrypts every packet transmitted from a wireless device with a different key (dynamic encryption).)
TLD - Top-Level Domain (In the Domain Name System (DNS) a term which refers to website addresses with extensions such as ".com" ".net" ".org" ".edu" ".gov" ".mil" or similar designations. These are also referred to as root domains, which are part of a Fully Qualified Domain Name (FQDN), which is the complete website address, such as "www.websitename.com" or "www.websitename.net")
TLS - Transport Layer Security (A protocol used to protect HTTP (Hypertext Transfer Protocol) (Internet message) traffic by encyrpting data as it moves from one system to another.)
TOC - threat operations center (An operations center which primarily focuses on threats - gathering intelligence, providing analysis, characterizing threats, attempting attribution (source or actors involved), and threat creation, as well as sharing information and situational awareness with teams, and the development of mitigation strategies and counter-measures. - A TOC can be created as a standalone operation or as part of a SOC (security operations center).)
TOCTOU - time of check, time of use (An item is validated by the system (essentially time-stamped by the computer) at one time but used at another. An attacker can use the window between these times to modify the item's value, such as in a way which allows the user to insert malicious code.)
TOE - target of evaluation (Term used in the system security evaluation process (under the Common Criteria ISO framework) to refer to a product proposed as solution to a security problem, i.e, the product is the "target" to be evaluated.)
Tor - The Onion Router (A privacy-focused network that hides and individual's traffic, by routing it through multiple random servers on the Tor network and, in addition, employs advanced cryptography with each routing step. The Tor system started as a research project sponsored by the U.S. Naval Research Laboratory in 2004 and takes its name from the layered manner in which it employs advanced cryptography, thus resembling the layers of an onion.)
TOTP - time-based one-time password (A password which can only be used one time to authenticate, or grant access to, one communications session and, in addition, has a time limit or window in which it must be used, or it will expire.)
TPM - Trusted Platform Module (A microchip installed on the motherboard of modern computers dedicated to carrying out security functions involving the storage and processing symmetric and symmetric keys, hashes, and digital certificates.)
TPR - true positive rate (The percentage of malware (or other type of value) a system will correctly detect.)
TRM - Technical Reference Model
TTL - Time to Live (Operational self-destruct function or value built into a packet, which "kills" or destroys the packet after it passes through a router so many times, so that it does not traverse a network forever. It normally works by assigning a TTL value when the packet is created, which is decremented (reduced) every time the packet passes through a router, until it reaches zero.)
TTP - tactics, techniques and procedures (Operational methods used in carrying out an operation or attack, individual techniques or variations, and the step-by-step procedures followed in an attack. An understanding or analysis of TTP can be helpful in identifying attackers, or the source of the attack, since certain groups will favor, and repeat, certain methods of attack, and finally, in developing counter-measures or creating methods to defend against future attacks.)
TTP - tools, techniques and processes (Alternative term or phrase for "tactics, techniques and procedures" to describe the operational methods used in carrying out an operation or attack, individual techniques or variations, and the step-by-step procedures followed in an attack. An understanding or analysis of TTP can be helpful in identifying attackers, or the source of the attack, since certain groups will favor, and repeat, certain methods of attack, and finally, in developing counter-measures or creating methods to defend against future attacks.)