Active Cyber Defence The principle of implementing security measures to strengthen the security of a network or system to make it more robust against attack. Authentication The process of verifying the identity, or other attributes of a user, process or device. Autonomous System A collection of IP networks for which the routing is under the control of a specific entity or domain. Bitcoin A digital currency and payment system. CII Critical Information Infrastructure Cryptography The science or study of analysing and deciphering codes and ciphers; cryptanalysis. Cyber crime Cyber-dependent crime (crimes that can only be committed through the use of ICT devices, where the devices are both the tool for committing the crime and the target of the crime); or cyber–enabled crime (crimes that may be committed without ICT devices, like financial fraud, but are changed significantly by use of ICT in terms of scale and reach). Cyber incident An occurrence that actually or potentially poses a threat to a computer, internet-connected device, or network – or data processed, stored, or transmitted on those systems – which may require a response action to mitigate the consequences. Cyber resilience The overall ability of systems and organisations to withstand cyber events and, where harm is caused, recover from them. Cyber security The protection of internetconnected systems (to include hardware, software and associated infrastructure), the data on them, and the services they provide, from unauthorised access, harm or misuse. This includes harm caused intentionally by the operator of the system, or accidentally, as a result of failing to follow security procedures or being manipulated into doing so. Cyberspace The interdependent network of information technology infrastructures that includes the Internet, telecommunications networks, computer systems, internetconnected devices and embedded processors and controllers. It may also refer to the virtual world or domain as an experienced phenomenon, or abstract concept. Cyber threat Anything capable of compromising the security of, or causing harm to, information systems and internetconnected devices (to include hardware, software and associated infrastructure), the data on them and the services they provide, primarily by cyber means. Cyber-physical system Systems with integrated computational and physical components (so-called “smart” systems). 41