The Absolute Beginners Guide to Cyber Security and Hacking

Zero trust is a security model in which no request is trusted because of where it comes from, so every access to a resource is authenticated, authorised and checked against policy each time.

Encryption transforms readable data into ciphertext with a key so that only someone holding the right key can turn it back, protecting the data while it is stored or in transit.

A hash function turns input of any size into a fixed-size fingerprint in a way that cannot be reversed, so that the fingerprint can verify data or store a password without holding the original.

TCP/IP is the family of protocols on which the internet runs: IP moves packets between addresses without guarantees, and TCP or UDP ride on top to deliver either a reliable ordered stream or fast unordered messages.

The OSI model is a seven-layer reference framework that separates networking into physical transmission, link, network, transport, session, presentation and application concerns, used to reason about where a problem sits rather than to describe any real protocol stack.

IP addressing is the scheme that gives every interface on a network a numeric address, with IPv4's four-byte addresses now supplemented by IPv6's much larger space, and with private ranges reserved for use inside networks that reach the internet through translation.

A web server is the program listening on a network port for HTTP requests and answering them, either by returning a file from disk or by handing the request to application code behind it.

IaaS is the layer of cloud computing where you rent raw infrastructure through an API, meaning virtual machines, disks and networks, and take responsibility for the operating system and everything you install above it.

PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.