GLOSSARY TERM DEFINITION Artificial Intelligence (AI) Attack Surface Programmable systems or devices that interact with the physical Refers to the study and use of intelligent machines to mimic human action and thought. Operational Technology (OT) environment or manage devices that interact with the physical environment. Examples include industrial control systems and building management systems. Refers to all vulnerable resources of a system, or the sum of the points through which an attacker could try to enter an environment. A model for enabling ubiquitous, convenient, and on-demand network Penetration Testing An authorised simulated attack on a system to evaluate the efficacy of the security measures in place. access to a shared pool of configurable computing resources (e.g. Cloud A class of technologies that works by using the principles of quantum networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or Critical Information Infrastructure (CII) Quantum Technologies mechanics (the physics of sub-atomic particles). Examples of quantum service provider interaction. technologies include quantum computing and cryptography. The computer or computer system necessary for the continuous delivery Malware that encrypts files on a victim’s device, rendering them of an essential service, which the loss or compromise thereof will have a unusable until a ransom is paid, usually in the form of Bitcoin or other debilitating effect on the availability of essential services in Singapore. Ransomware cryptocurrencies. It may spread through phishing e-mails that contain malicious attachments or links, or malicious pop-ups that appear when Cybercrime users access unsafe websites. Criminal acts related to the use of computers such as gaining unauthorised access to a computer to view, modify or destroy its data. An approach to software and hardware development that seeks to The complex environment resulting from the interaction of people, Secure-by-Design minimise system vulnerabilities and reduce the attack surface, by designing and building in security at every development phase. software and services on the Internet by means of technological devices and networks connected to it, which does not exist in any physical form. Cyberspace A weakness in an information system, system security procedures, Singapore’s cyberspace includes domain names with “.SG” or Singapore- Vulnerability internal controls or implementation that could be exploited or triggered by a threat source. mentions, Internet Protocol (IP) addresses used in Singapore, and Internet Service Providers (ISPs) located here. A security framework requiring all end-users, whether in or outside the Domain Name System Refers to the system used to translate readable domain names to IP (DNS) addresses. Zero-Trust organisation’s network, to be authenticated, authorised, and continuously validated for security configuration and posture before being granted or keeping access to applications and data. Edge Computing Refers to the practice of capturing, processing, and analysing data near the source of data. The vast network of everyday objects, such as baby monitors, Internet of Things (IoT) printers, televisions, and autonomous vehicles, that are connected to the Internet. 59 The Singapore Cybersecurity Strategy 2021 60