Cybersecurity Terms - R
radio frequency (RF) - (Method of classifying or measuring radio waves based on the number of cycles of a waveform per second, measured in Hertz (Hz) . The radio frequency spectrum range, at the low end, starts at 3 kHz (1000 cycles per second) and, at the high end, reaches 300 GigaHertz (Ghz) (1 billion cycles per second). Higher frequencies can carry more data, but are more subject to interference.)
radio frequency identification (RFID) - (Normally refers to a chip technology which provides information about the chip or what it is attached to, via radio waves. Originally, it was considered an alternative to BAR codes, for inventory tracking. The chip could be sewn into a piece of clothing or merchandise and a reader could scan the vicinity and use radio waves to locate and identify merchandise items until they were sold.)
radio frequency interference (RFI) - (The phenomenon in which a wireless signal is disrupted by a radio signal from another device or source of radio waves.)
Ransom Denial-of-Service (RDoS) - (Denial of service attack in which an attacker blocks or prevents access to a system, sometimes by encrypting data or blocking system operations, until a payment is made.)
ransomware - (Generic term for a specific type of malware in which the computer user is forced to pay a sum of money, or cryptocurrency, to the malicious attacker in exchange for decrypting and restoring the user's important data. When malware executes it normally locks the user out of the computer or system or encrypts the system data, making it unreadable to the user.)
Ransomware-as-a-Service (RaaS) - (An online software package sold in underground markets and/or forums using a subscription-based model, created by malware authors who develop ransomware code, package it as an online dashboard, complete with instructions, allowing for individual modification, and presented for sale or rent.)
Real-Time Blacklist Lookups (RBL) - (A service which uses the Domain Name System (DNS) protocol to do a reverse lookup to see if an IP address has been blacklisted (listed as an IP address blocked from access, usually as a source of malware or malicious conduct).)
Real-Time Streaming Protocol (RTSP) - (Protocol which communicates with a media server such as a video server and controls the playback of the server's media files.)
Real-Time Transport Protocol (RTP) - (Protocol used for delivering media-based data over networks, such as Voice over IP.)
Receiver Operating Characteristic (ROC) - (Evaluation method used in malware analysis in which true positive rates and false positive rates of detection systems are plotted against each other, resulting in an ROC "curve" or graphic picture of performance at various performance levels, intended to provide a predictive framework showing how a system is likely to perform.)
recovery point objective (RPO) - (The acceptable amount of data loss measured in time or the amount of data loss that is acceptable or the maximum amount of data that can be lost for an organization, after which the business cannot recover or would suffer significant loss. Put another way, the objective is to find alternatives which will prevent data loss or which will serve as some form of backup, so that loss does not reach the recovery point, beyond which the irreparable loss will occur.)
recovery time objective (RTO) - (The maximum amount of time an organization can be down due to a disaster or an incident.)
Redundant Array of Independent (or Inexpensive) Disks (or Devices) (RAID) - (Computer storage technology in which data is simultaneously written to several physical disks, providing a data backup system if one of the disks fails.)
Regional Bell Operating Companies (RBOCs) - (Name for the seven regional telephone companies formed in 1984 from the breakup of American Telephone and Telegraph (AT&T), which had held a monopoly on phone service in the U.S. until that time.)
regional Internet registries (RIRs) - (Organizations which manage, distribute, and register public Internet resources within their region.)
Relative Attack Surface Quotient (RASQ) - (Relative attackability or likely opportunities for attack against software in comparison to a baseline.)
Remote Access Server (RAS) - (A Microsoft Windows Server feature that allows Microsoft Windows clients to remotely access a Microsoft Windows network. Predecessor to Microsoft Routing and Remote Access Server (RRAS).)
Remote Access Service (RAS) - (Hardware and software that allows remote users from outside a network to connect to the internal network, as if they were physically located inside the network. Remote access service handles connection, identification, authentication, and authorization processes.)
Remote Access Tools (RAT) - (Generic term for programs or software which allow a person to access and control a computer, server or system remotely. Can be used legitimately by administrators to monitor or observe user behavior, to edit and enter data, or even to instruct users. Can also be used maliciously and installed through a "Trojan Horse" embedded in a game or other program, and then to run invisibly in the background. Can be used to install other tools, such as key loggers, remote controllers, and password finders.)
Remote Access Trojan (RAT) - (Malicious program that runs on a system and allows intruders to access and use a system remotely. Characterized or distinguished from other malware by the use of a "Trojan horse" method of attack, in which they are disguised as a legitimate program, such as a game, which users are tricked into downloading from a malicious website. Once loaded on a victim's system, they allow an attacker to download or upload files, send commands, monitor user behaviors, install zombie software, activate a webcam, take screenshots, and alter or delete files.)
Remote Administration Tool (RAT) - (Software programs that give an administrator or user the ability to access and control a tech device remotely, including computer screens and keyboard functions and data entry.)
Remote Authentication Dial-In User Service (RADIUS) - (A network protocol that provides client/server authentication and authorization, and audits remote users. Used by Internet service providers (ISPs) to authenticate customers, often through a user name and password system, before they are allowed access to the Internet.)
Remote Desktop Protocol (RDP) - (A Microsoft protocol that allows a user to view and control the desktop of a remote computer.)
Remote File Inclusion (RFI) - (A type of attacke= in which an attacker attempts to force an application to execute code from a remote site.)
remote shell (rsh) - (An application which allows commands to be executed on a computer from a remote user.)
Remote Procedure Call (RPC) - (A mechanism that allows a program running on one computer to execute code seamlessly on a remote system.)
Remote Terminal Unit (RTU) - (A special-purpose data acquisition and control device designed to support Supervisory Control and Data Acquisition (SCADA) "remote" deployments. RTUs are field devices that often support a variety of communications mediums.)
Representational State Transfer (REST) - (Cloud-based API (Application Programming Interface) governing the transfer of data in cloud-based applications. REST applies to the components, connectors, and data conduents for many web applications used on the Internet, and utilizes a stateless, cacheable, client-server protocol, almost always via HTTP.)
Request for Comment (RFC) - (Semi-formal request, usually in the form of a memorandum, asking for input, criticism, or suggestions about a proposed action.)
Requirements Traceability Matrix (RTM) -
Réseaux IP Européens Network Coordination Centre (RIPE NCC) - (Regional Internet Registry (RIR) for European countries, which maintains a database of company information about their Internet presence.)
return on investment (ROI) - (A measure of the earning power of an investment, normally expressed as a ratio or percentage, calculated by dividing net income or income earned by the amount invested. Can be used at a company level, or at a division level to evaluate performance, or even at an asset level, to compare earnings or returns expected or earned from any given asset.)
risk assessment (RA) - (A method of identifying vulnerabilities and threats and assessing the possible impacts to determine where to implement security controls.)
risk management (RM) - (The process of identifying and assessing risk, reducing it to an acceptable level, and ensuring that it remains at that level.)
Risk Management Framework (RMF) - (A security framework developed by the National Institute of Standards and Technology (NIST) providing guidelines, expectations, and recommended practices related to information security management in federal government agencies and systems and organizations dealing with federal agencies.)
Rivest-Shamir-Adelman (RSA) - (Names of the three creators of the first asymmetric algorithm, in 1978, that implemented signing and encryption: Ron Rivest, Adi Shamir,and Leonard Adleman. Also the name of the company they formed which provides security products and solutions for enterprise environments.)
Role-Based Access Control (RBAC) - (A method of access security that determines the system access an individual is granted based on their role in the organization.)
Routing and Remote Access Server (RRAS) - (A Microsoft Windows server feature that allows Microsoft Windows clients to remotely access a Microsoft Windows network.)
Rule-Based Access Control (RAC) or (RBAC) - (Access control model in which access is based on specific rules that govern the level of access and the amount of access granted, such as a rule imposing a time of day or days of the week access restriction, where a user would not be expected to access a database at midnight or on Saturday or Sunday.)
Rule-Based Access Control (RBAC) or (RAC) - (Access control model in which access is based on specific rules that govern the level of access and the amount of access granted, such as a rule imposing a time of day or days of the week access restriction, where a user would not be expected to access a database at midnight or on Saturday or Sunday.)
Rules of Behavior (ROB) -
Runtime Application Self-Protection (RASP) - (A security technology that works to detect and protect against application attacks in real time.)
Russian Business Network (RBN) - (Criminal syndicate of individuals and companies that was based in St. Petersburg, Russia, but by 2007 had spread to many countries through affiliates for international cybercrime.)