Page 194 - CyberSecurityEssentialsEnglish

Common
Term Plain-language explanation
abbreviation

Re-linking de-identified data to a person using other
Re-identification -
details.

Generated data that mimics the characteristics of real data
Synthetic data -
without being records of real people.

Input that attempts to change a system’s behavior or
Prompt injection -
bypass its instructions.

Indirect prompt Malicious instructions inside a document, page, or source
-
injection that the system reads.

Improper output Using a model’s output in another system without
-
handling validation or sanitization.

A system able to carry out actions wider than required, or
Excessive agency -
without sufficient approval.

Allowlist - A defined list of permitted values, commands, or tools.

Risk arising from an extension, model, library, or connector
Supply chain risk -
that changes, is compromised, or collects data.

Generated information that seems plausible but is
Hallucination -
unsupported or untrue.

Primary source - The document or body closest to the original data or event.

Assessing a source by opening other sources rather than
Lateral reading -
staying inside the page itself.
Stop, investigate the source, find better coverage, and
SIFT method -
trace the original.

A deviation or pattern that produces unfair outcomes or
Harmful bias -
harm for groups or individuals.
A rule or system whose effects differ between groups even
Disparate impact -
without explicit discrimination.

Meaningful An explanation that is present, understandable, accurate,
-
explanation and accompanied by the system’s knowledge limits.

False information that may be spread without intent to
Misinformation -
deceive.

False or manipulated information spread with intent to
Disinformation -
deceive.

Synthetic or altered media that convincingly imitates a
Deepfake -
person or an event.

193