Glossary

Advanced persistent threat (APT)

A sophisticated targeted attack against the corporate IT infrastructure that simultaneously uses different methods to infiltrate the network, hide on the network, and gain unobstructed access to confidential data.

Anti-Phishing

A component of Kaspersky Secure Mail Gateway designed to detect messages categorized as phishing.

Anti-Spam

A component of Kaspersky Secure Mail Gateway designed to detect messages categorized as spam.

Anti-Virus

A Kaspersky Secure Mail Gateway component designed to detect viruses in email messages and email attachments.

Backup

Special storage for saving backup copies of objects. Backup copies are created before disinfection or deletion of infected objects.

Content filtering

Filtering email messages based on message size, attachment file name mask, and attachment format. Based on the results of content filtering, you can restrict the forwarding of messages by the mail server.

Directory service

A software system that can store information about network resources (such as users) in one place and provides centralized management capabilities.

DKIM authentication of mail senders

Verification of the digital signature added to messages.

DMARC authentication of mail senders

Authentication performed to verify that the message was actually sent from the specified domain.

DNSBL

DNS blacklist or DNS blocklist. Custom list of DNSBL servers used to improve the accuracy of spam detection. DNSBL servers stores lists of IP addresses that were previously detected as sources of spam and to which the Anti-Spam module assigns a spam rating and one of the Anti-Spam message scan status labels.

Email notification

An email message describing an application event or a message scan event, which Kaspersky Secure Mail Gateway sends to the specified email addresses.

Heuristic analysis

The technology designed to detect threats that cannot be detected using the current version of Kaspersky Lab application databases. It detects files that may be infected with an unknown virus or a new variety of a known virus.

Files in which malicious code is detected during heuristic analysis are marked as infected.

Kaspersky Anti Targeted Attack Platform

Solution designed for the protection of a corporate IT infrastructure and timely detection of threats such as zero-day attacks, targeted attacks, and complex targeted attacks known as advanced persistent threats (hereinafter also referred to as "APT").

Kaspersky Private Security Network

A solution that allows users of Kaspersky Lab anti-virus applications to access Kaspersky Security Network databases without sending data from their computers to Kaspersky Security Network servers.

Kaspersky Security Network (KSN)

An infrastructure of cloud services that provides access to the online Knowledge Base of Kaspersky Lab which contains information about the reputation of files, web resources, and software. The use of data from Kaspersky Security Network ensures faster responses by Kaspersky Lab applications to threats, improves the performance of some protection components, and reduces the likelihood of false alarms.

Key file

A xxxxxxx.key file that allows using a Kaspersky Lab application on the terms of a trial or commercial license. The application generates the key file based on the activation code. The application can be used only with a key file.

LDAP

Lightweight Directory Access Protocol for accessing directory services.

Malicious links

Web addresses leading to malicious resources, i.e. web resources designed to spread malware.

Phishing

A type of Internet fraud aimed at obtaining unauthorized access to users' confidential data.

Reputation filtering

A cloud service that uses technologies for determining the reputation of messages. Information about new kinds of spam appears in the cloud service sooner than in Anti-Spam module databases, making it possible to improve the speed and accuracy of spam detection.

SNMP agent

A network management software module of Kaspersky Secure Mail Gateway, which monitors the operation of Kaspersky Secure Mail Gateway.

SNMP trap

An application event notification sent by the SNMP agent.

Spam

Unsolicited mass email messages mailings, most often including advertisements

SPF authentication of mail senders

Comparison of IP addresses of message senders with the list of possible message sources, which has been created by the mail server administrator.

SURBL

Spam URI Realtime Blocklists. Custom list of SURBL servers used to improve the accuracy of spam detection. SURBL servers store lists of web addresses that were previously detected in the subject or body of messages recognized as spam and to which the Anti-Spam module assigns a spam rating and one of the Anti-Spam message scan status labels.

Targeted attack

Attack that targets a specific person or organization. Unlike mass attacks by computer viruses designed to infect as many computers as possible, targeted attacks can be aimed at infecting the network of a specific organization or even a specific server within the corporate IT infrastructure. A dedicated Trojan program may be written to stage each targeted attack.

Virtual machine

A fully isolated software system that executes machine-independent or machine code of the processor and can imitate the operating system of an application or device (such as a computer).

Zero-day attack

An attack targeting the corporate IT infrastructure by exploiting zero-day vulnerabilities in software. These are software vulnerabilities that hackers find and exploit before the software vendor has a chance to release a patch.

Zero-day vulnerability

A software vulnerability that hackers find and exploit before the software vendor has a chance to release a patch with fixed program code.

Page top