网络安全缩写
博主正在整理网络安全缩写。中文释义皆参照了维基百科和百度百科。若有扩充指正，请联系博主，一经采纳，定当酬谢！（博主继承了祖辈之学术严谨）
| 简称 | 全称 | 中文 |
|---|---|---|
| 3DES/TDEA | Triple Data Encryption Algorithm | 三重数据加密算法 |
| AAA | Authentication, Authorization, Accounting | 认证、授权、计费 |
| ACL | Access Control List | 访问控制表 |
| AES | Advanced Encryption Standard | 高级加密标准 |
| ASCII | American Standard Code for Information Interchange | 美国信息交换标准代码 |
| CA | Certificate Authority | 证书颁发机构 |
| CC | Common Criteria for Information Technology Security Evaluation | CC 标准 |
| CCMP | Counter CBC-MAC Protocol | 计数器模式密码块链消息完整码协议 |
| CHAP | Challenge-Handshake Authentication Protocol | 询问握手认证协议 |
| CIFS | Common Internet File System | 网络文件共享系统 |
| CRL | Certificate revocation list | 证书吊销列表 |
| CSR | Certificate Signing Request | 证书签署请求 |
| CSRF/XSRF | Cross-site Request Forgery | 跨站请求伪造 |
| DAC | Discretionary Access Control | 自主访问控制 |
| DAS | Direct Attached Storage | 直连式存储 |
| DCI | https://baike.baidu.com/item/DCI/75223 | 数字版权标识符 |
| DDoS | Distributed Denial-of-service Dttack | 分布式拒绝服务攻击 |
| DES | Data Encryption Standard | 数据加密标准 |
| DMZ | Demilitarized Zone | 非军事区/对外网络 |
| DNS | Domain Name System | 域名系统 |
| DNSSEC | Domain Name System Security Extensions | 域名系统安全扩展 |
| DOI | Digital Object Identifier | 数字对象识别符 |
| DoS | Denial-of-service Attack | 拒绝服务攻击 |
| EAP | Extensible Authentication Protocol | 扩展认证协议 |
| EDR | Endpoint Detection and Response | 终端检测与响应 |
| EFS | Encrypting File System | 加密文件系统 |
| ERP | Enterprise Resource Planning | 企业资源计划 |
| EXT | Extended File System | 延伸文件系统 |
| FTP | File Transfer Protocol | 文件传输协议 |
| GRE | Generic Routing Encapsulation | 通用路由封装 |
| HA | High Availability | 高可用性 |
| HIPS | Hostbased Intrusion Prevention System | 主机入侵防御系统 |
| HMAC | Hash-based Message Authentication Code | 散列消息认证码 |
| HTTP | Hyper Text Transfer Protocol | 超文本传输协议 |
| HTTPS | Hyper Text Transfer Protocol Secure | 超文本传输安全协议 |
| HVAC | Heating, Ventilation and Air Conditioning | 暖通空调、供热通风与空气调节 |
| IaaS | Infrastructure as a Service | 基础设施即服务 |
| IATF | Information Assurance Technical Framework | 信息安全保障技术框架 |
| ICMP | Internet Control Message Protocol | 互联网控制消息协议 |
| ICS | Industrial Control System | 工业控制系统 |
| IDS | Intrusion-detection System | 入侵检测系统 |
| IMAP | Internet Message Access Protocol | 因特网消息访问协议 |
| IoT | Internet of Things | 物联网 |
| IPFS | Inter Planetary File System | 星际文件系统 |
| IPS | Intrusion Prevention System | 入侵防御系统 |
| IPsec | Internet Protocol Security | 互联网安全协议 |
| ISMS | Information Security Management System | 信息安全管理体系 |
| ITIL | Information Technology Infrastructure Library | 信息技术基础架构库 |
| L2TP | Layer Two Tunneling Protocol | 第二层隧道协议 |
| LDAP | Lightweight Directory Access Protocol | 轻型目录访问协议 |
| LSASS | Local Security Authority Subsystem Service | 本地安全认证子系统服务 |
| MAC | Media Access Control Address | 媒体访问控制地址/物理地址 |
| MD5 | MD5 Message-Digest Algorithm | MD5消息摘要算法 |
| MDM | Mobile Device Management | 移动设备管理 |
| Mesh | Mesh Network | 网状网络 |
| MFA | Multi Factor Authentication | 多重要素认证/多因子认证 |
| MIME | Multipurpose Internet Mail Extensions | 多用途互联网邮件扩展 |
| MITM | Man-in-the-middle Attack | 中间人攻击 |
| MOU | Memorandum of Understanding | 谅解备忘录 |
| MTBF | Mean Time Between Failures | 平均故障间隔 |
| MTTR | Mean Time to Recovery | 平均修复时间 |
| NAS | Network Attached Storage | 网络附接存储 |
| NAT | Network Address Translation | 网络地址转换 |
| NDA | Non-disclosure Agreement | 保密协议 |
| NFC | Near-field Communication | 近距离无线通信 |
| NFS | Network File System | 网络文件系统 |
| NFT | Non-fungible Token | 非同质化代币 |
| NGFW | Next-generation Firewall | 下一代防火墙 |
| NTLM | NT LAN Manager | NT局域网管理器 |
| OAuth | OAuth | 开放授权 |
| OCSP | Online Certificate Status Protocol | 在线证书状态协议 |
| OID | Object Identifier | 对象标识符 |
| PaaS | Platform as a Service | 平台即服务 |
| PAP | Password Authentication Protocol | 密码认证协议 |
| PAT | Port Address Translation | 端口地址转换 |
| PCL | Printer Command Language | 打印机命令语言 |
| PDCA | Plan-Do-Check-Act | 戴明环 |
| PEAP | Protected Extensible Authentication Protocol | 受保护的扩展认证协议 |
| PFS | Perfect Forward Secrecy | 完全前向保密 |
| PGP | Pretty Good Privacy | 优良保密协议 |
| PIN | Personal Identification Number | 个人身份识别码 |
| ping | Packet Internet Groper | 网络诊断工具 |
| PKCS | Public Key Cryptography Standards | 公钥密码学标准 |
| PKI | Public Key Infrastructure | 公开密钥基础建设 |
| POC | Proof of Concept | 概念验证 |
| PPP | Point-to-Point Protocol | 点对点协议 |
| PPTP | Point to Point Tunneling Protocol | 点对点隧道协议 |
| PSK | Pre-shared Key | 预共享密钥 |
| QoS | Quality of Service | 服务质量 |
| RADIUS | Remote Authentication Dial In User Service | 远端用户拨入验证服务 |
| RAM | Random Access Memory | 随机存取存储器 |
| RAT | Radio Access Technology | 无线电接入技术 |
| RBAC | Role-based Access Control | 基于角色的访问控制 |
| ROM | Read-only Memory | 只读存储器 |
| RPO | Recovery Point Object | 恢复点目标 |
| RTO | Recovery Time Object | 恢复时间目标 |
| RTP | Real-time Transport Protocol | 实时传输协议 |
| SaaS | Software as a Service | 软件即服务 |
| SAML | Security Assertion Markup Language | 安全断言标记语言 |
| SAMM | Software Assurance Maturity Model | 软件保障成熟度模型 |
| SAN | Storage Area Network | 存储区域网络 |
| SCP | Secure Copy | 安全复制 |
| SDL | Security Development Lifecycle | 软件安全开发周期 |
| SDLC | System Development Life Cycle | 系统发展生命周期 |
| SFTP | SSH File Transfer Protocol/Secret File Transfer Protocol | 安全文件传送协议 |
| SIEM | Security Information and Event Management | 安全信息和事件管理 |
| SLA | Service-level Agreement | 服务级别协议 |
| S/MIME | Secure Multipurpose Internet Mail Extensions | 安全的多用途互联网邮件扩展 |
| SMB | Server Message Block | 服务器消息块 |
| SNMP | Simple Network Management Protocol | 简单网络管理协议 |
| SoC | System on a Chip | 单片系统/片上系统 |
| SPF | Sender Policy Framework | 发件人策略框架 |
| SRTP | Secure Real-time Transport Protocol | 安全实时传输协议 |
| SSE-CMM | System Security Engineering-Capability Maturity Model | 系统安全工程-能力成熟度模型 |
| SSH | Secure Shell | 安全外壳协议 |
| SSL | Secure Sockets Layer | 安全套接层 |
| SSO | Single Sign-on | 单点登录 |
| SSRF | Server-side Request Forgery | 服务端请求伪造 |
| STP | Spanning Tree Protocol | 生成树协议 |
| TACACS | Terminal Access Controller Access-Control System | 终端访问控制器访问控制系统 |
| TACACS+ | Terminal Access Controller Access-Control System Plus | （全新）终端访问控制器访问控制系统 |
| TCP | Transmission Control Protocol | 传输控制协议 |
| TFTP | Trivial File Transfer Protocol | 简单文件传输协议 |
| TKIP | Temporal Key Integrity Protocol | 临时密钥完整性协议 |
| TLS | Transport Layer Security | 传输层安全协议 |
| TPM | Trusted Platform Module | 可信平台模块 |
| UAC | User Account Control | 用户帐户控制 |
| UML | Unified Modeling Language | 统一建模语言 |
| URL | Uniform Resource Locator | 统一资源定位符 |
| VDSL | Very-high-bit-rate Digital Subscriber Line | 超高速数字用户线路 |
| VoIP | Voice over Internet Protocol | 基于IP的语音传输 |
| VPN | Virtual Private Network | 虚拟专用网 |
| WAF | Web Application Firewall | 网络应用程序防火墙 |
| WAP | Wireless Application Protocol | 无线应用协议 |
| WEP | Wired Equivalent Privacy | 有线等效加密 |
| WPA | Wi-Fi Protected Access | Wi-Fi访问保护 |
| WPS | Wi-Fi Protected Setup | Wi-Fi保护设置 |
| XSS | Cross-site Scripting | 跨站脚本 |
