Ian Provencher
Read the blog

Glossary · 2973 terms

A working technical dictionary

The vocabulary of the work — AI, software, the web, data, infrastructure, security, systems, and supply chain — defined plainly and grouped the way I actually reach for it. Filter by text, category, or tag.

Tags

AI & Machine Learning

419

A/B Testing

Split Testing

An experiment that compares two versions by randomly routing users to each and measuring which performs better on a chosen metric. It is used to validate model or product changes in production.

Ablation Study

An experiment that removes or alters individual components of a system one at a time to measure their contribution to overall performance. It is a standard way to understand which design choices matter.

Accuracy

The fraction of all predictions a model gets right; simple but misleading when the classes are heavily imbalanced.

Activation Function

A function applied at each neuron that adds nonlinearity, letting networks learn complex patterns rather than just linear relationships.

Active Learning

An approach in which the model iteratively selects the most informative unlabeled examples for a human to label, aiming to reach high accuracy with as few labels as possible. It is useful when labeling is costly.

Actor-Critic

A reinforcement learning architecture that combines a policy (the actor) that chooses actions with a value estimator (the critic) that evaluates them. The critic's feedback stabilizes and speeds up the actor's learning.

AdaBoost

Adaptive Boosting

An early boosting algorithm that combines many weak learners into a strong one by repeatedly reweighting training examples so that misclassified points get more attention in later rounds.

AdaGrad

Adaptive Gradient

An optimizer that adapts the learning rate for each parameter based on the accumulated sum of its past squared gradients, giving smaller updates to frequently updated parameters. It suits sparse data but can slow down over time.

Adam Optimizer

Adaptive Moment Estimation

A popular optimization algorithm that adapts the learning rate for each parameter using running estimates of the first and second moments of the gradients. It combines the benefits of momentum and per-parameter scaling.

Adversarial Attack

A deliberate attempt to fool or manipulate a machine learning model by crafting malicious inputs, poisoning training data, or exploiting its weaknesses. Defending against such attacks is a key security concern.

Adversarial Example

An input crafted with small, often imperceptible changes designed to make a model produce a wrong output with high confidence. Such examples reveal the brittleness of many neural networks.

Agent

AI agent · agentic system

An AI system that pursues a goal over multiple steps, deciding actions, calling tools, and observing results in a loop rather than producing a single answer.

Agent Memory

The mechanism by which an AI agent stores and recalls information across steps or sessions, such as past actions, results, or user facts. It lets agents maintain context beyond a single model call.

Agentic Workflow

A process in which an AI system autonomously plans and carries out a multi-step task, deciding which tools to call and when, rather than answering in a single turn. It underpins modern AI agents that take actions in the world.

AI Ethics

The study of the moral principles and societal impacts of building and deploying AI, including fairness, accountability, transparency, and privacy. It guides responsible development and use.

AI Safety

The field concerned with ensuring AI systems behave reliably and do not cause unintended harm, both today and as capabilities grow. It spans robustness, alignment, monitoring, and governance.

Algorithmic Bias

Machine Learning Bias

Systematic and unfair skew in a model's outputs that disadvantages certain groups, often arising from biased training data or design choices. Detecting and mitigating it is central to responsible AI.

Alignment

The effort to make an AI system's behavior match human intentions and values, so it is helpful, honest, and safe rather than merely capable.

Anomaly Detection

Outlier Detection

The task of identifying data points, events, or observations that deviate significantly from the expected pattern. It is used for fraud detection, fault monitoring, and network security.

Anthropomorphism

The tendency to attribute human traits, intentions, or emotions to an AI system based on its fluent behavior. Being aware of it helps set realistic expectations about what models actually understand.

Artificial General Intelligence

AGI

A hypothetical AI that can understand, learn, and perform any intellectual task a human can, across domains, rather than being specialized to narrow tasks. Whether and when it is achievable is widely debated.

Attention

attention mechanism

A mechanism that lets a model weigh which parts of the input matter most for each output, dynamically focusing on the relevant pieces.

AUC

Area Under the Curve · AUROC

The area under the ROC curve, a single number between 0 and 1 summarizing a classifier's ability to rank a random positive above a random negative. A value of 0.5 is no better than chance and 1.0 is perfect.

Autoencoder

A network that learns to compress input into a compact code and reconstruct it, useful for dimensionality reduction, denoising, and learning representations.

Autonomous Agent

An AI system that pursues a goal by taking a sequence of actions with little or no human intervention, observing results and adjusting as it goes. It typically combines a language model with tools, memory, and planning.

Autoregressive

Describing a model that generates output one token at a time, feeding each prediction back as input to produce the next; the mode most language models run in.

Backbone

The main pretrained feature-extracting portion of a model, on top of which task-specific heads are added. Reusing a strong backbone is central to transfer learning.

Backpropagation

backprop

The algorithm that trains neural networks by computing how much each parameter contributed to the error and passing those gradients backward through the layers.

Bag-of-Words

BoW

A simple text representation that describes a document by the counts of the words it contains, ignoring order and grammar. It is easy to compute but loses sequence information.

Bagging

Bootstrap Aggregating

Short for bootstrap aggregating, an ensemble method that trains models on different random samples of the data (drawn with replacement) and averages their outputs to reduce variance. Random forests are a well-known example.

Baseline

A simple reference model or heuristic used as a point of comparison to judge whether a more complex model adds real value. Common baselines include predicting the majority class or the mean.

Batch

mini-batch · batch size

A subset of training examples processed together in one step; using small batches (mini-batches) balances speed and stability during training.

Batch Inference

Offline Inference

Running a model over a large set of inputs all at once on a schedule, rather than responding to individual requests in real time. It is efficient for tasks that do not need immediate results.

Batch Normalization

batch norm

A technique that rescales the outputs of a layer across a batch to stabilize and speed up training of deep networks.

Batch Size

The number of training examples processed together before the model's weights are updated once. It affects training speed, memory use, and the stability of the gradient estimate.

Bayes' Theorem

Bayes' Rule

A formula that describes how to update the probability of a hypothesis given new evidence, relating the posterior to the prior, the likelihood, and the evidence. It is the foundation of Bayesian methods and naive Bayes classifiers.

Bayesian Inference

A framework for updating beliefs about unknown quantities by combining prior assumptions with observed data via Bayes' theorem, producing a posterior distribution. It treats parameters as probability distributions rather than fixed values.

Bayesian Optimization

A hyperparameter tuning method that builds a probabilistic model of the objective and uses it to choose the most promising settings to try next. It finds good configurations with fewer evaluations than grid or random search.

Bellman Equation

A recursive equation that expresses the value of a state in terms of the immediate reward plus the discounted value of successor states. It is the mathematical backbone of many reinforcement learning algorithms.

Benchmark

A standardized dataset and scoring method used to compare models on a task, enabling apples-to-apples measurement of capability.

BERT

Bidirectional Encoder Representations from Transformers

An influential transformer language model trained with masked language modeling to produce deep bidirectional representations of text. It is fine-tuned for tasks like classification, question answering, and named entity recognition.

Bias-Variance Tradeoff

The balance between a model too simple to fit the data (high bias) and one too sensitive to training noise (high variance); good models find the middle.

Bidirectional RNN

BiRNN

A recurrent network that processes a sequence in both forward and backward directions and combines the results, so each position has context from both sides. It improves performance on tasks like tagging and translation.

Bootstrap

A resampling method that estimates the variability of a statistic by repeatedly drawing samples with replacement from the observed data. It underpins techniques like bagging and confidence-interval estimation.

Bounding Box

A rectangle drawn around an object in an image to indicate its location, defined by its coordinates. It is the standard output format for object detection.

Byte-Pair Encoding

BPE

A subword tokenization algorithm that starts from characters and repeatedly merges the most frequent adjacent pairs to build a vocabulary of common subwords. It is widely used to tokenize text for language models.

Calibration

The degree to which a model's predicted probabilities match observed frequencies, so that events predicted with 70% confidence actually occur about 70% of the time. Well-calibrated probabilities are important for decision making.

Canary Deployment

A rollout strategy that releases a new model or version to a small fraction of traffic first, monitoring it before expanding to everyone. It limits the blast radius of a bad release.

Catastrophic Forgetting

The tendency of a neural network to lose previously learned knowledge when trained on new data or tasks. It is a central challenge for continual and sequential learning.

Chain-of-Thought

CoT

A prompting technique that asks a model to reason step by step before answering, which often improves accuracy on complex or multi-step problems.

Chatbot

A software system that converses with users in natural language to answer questions or perform tasks. Modern chatbots are typically powered by large language models.

Chunking

Splitting a long document into smaller passages so they can be embedded, indexed, and retrieved individually in a retrieval-augmented pipeline. Chunk size and overlap affect retrieval quality.

Class Imbalance

A situation where some classes appear far more often than others in the training data, which can bias a model toward the majority class. It calls for special metrics and techniques like resampling or reweighting.

Class Weighting

A technique for handling imbalanced data by giving underrepresented classes more influence in the loss function, so the model does not ignore them. It is an alternative to resampling the data.

Classification

A predictive task where a model assigns inputs to discrete categories, such as spam versus not spam or which animal is in a photo.

Clustering

An unsupervised task that groups data points by similarity without predefined labels, revealing natural segments in the data.

Cold Start Problem

The difficulty a system faces in making good recommendations or predictions for new users or items about which it has little or no data. It is a common challenge for recommender systems.

Collaborative Filtering

A recommendation technique that predicts a user's preferences based on the preferences of similar users or items, without needing explicit content features. It powers many product and media recommender systems.

Concept Drift

Model Drift

A gradual or sudden change over time in the relationship between inputs and the target a model predicts, causing its accuracy to decline. Detecting it signals that the model needs retraining.

Conditional GAN

cGAN

A generative adversarial network that conditions generation on extra information such as a class label or text, so it can produce outputs of a chosen type. It enables controllable image and content generation.

Confidence Interval

A range of values, computed from data, that is likely to contain a true unknown quantity with a stated probability such as 95%. It expresses the uncertainty around an estimate.

Confidence Score

A number a model outputs alongside a prediction to indicate how certain it is, often a probability. It supports thresholding, ranking, and deferring uncertain cases to humans.

Confusion Matrix

A table showing a classifier's correct and incorrect predictions broken down by category, exposing exactly where and how it makes mistakes.

Constitutional AI

An alignment approach in which a model critiques and revises its own outputs against a set of written principles, reducing the need for direct human feedback on harmful content. The principles act as a guiding constitution for behavior.

Content-Based Filtering

A recommendation approach that suggests items similar to those a user has liked before, based on item features rather than other users' behavior. It works even for users with little overlap with others.

Context Compression

Techniques that shorten or summarize the information placed in a model's context window so more can fit or costs drop, while preserving the essentials. It helps manage long documents and conversation history.

Context Window

context length

The maximum amount of text, measured in tokens, that a model can consider at once, covering both the input prompt and its generated response.

Contextual Embedding

A word or token representation that changes depending on the surrounding context, so the same word gets different vectors in different sentences. Transformer models produce these, unlike static embeddings such as Word2Vec.

Contrastive Learning

A self-supervised technique that learns useful representations by pulling similar examples together and pushing dissimilar ones apart in the embedding space. It underlies many strong image and text encoders.

Convergence

The point in training at which a model's parameters and loss stop changing meaningfully, indicating it has settled into a solution. Slow or failed convergence often signals problems with the learning rate or data.

Convolution

An operation that slides a small filter across an input such as an image, computing weighted sums to detect local patterns like edges or textures. It is the core operation of convolutional neural networks.

Convolutional Neural Network

CNN · ConvNet

A neural network that scans inputs with small sliding filters to detect local patterns; especially effective for images and other grid-like data.

Corpus

A large, structured collection of text used to train or evaluate language models and other NLP systems. Its size, quality, and diversity strongly influence model performance.

Corrigibility

The property of an AI system that reliably permits humans to correct, redirect, or shut it down without resisting. It is a desirable safety trait for powerful autonomous systems.

Cosine Similarity

A measure of how alike two embedding vectors are based on the angle between them; widely used to rank matches in semantic search.

Cross-Attention

An attention mechanism in which one sequence attends to a different sequence, such as a decoder attending to an encoder's output. It lets models condition generation on separate inputs like a source sentence or an image.

Cross-Entropy Loss

Log Loss

A loss function for classification that measures the difference between the predicted probability distribution and the true labels, penalizing confident wrong predictions heavily. It is the standard objective for training classifiers and language models.

Cross-Validation

k-fold cross-validation

An evaluation method that repeatedly splits data into training and testing portions to estimate how well a model will generalize to unseen data.

Curriculum Learning

A training strategy that presents examples to a model in a meaningful order, typically from easier to harder, to improve learning speed and final performance. It is inspired by how humans learn progressively.

Data Augmentation

Expanding a training set by creating modified copies of existing examples, such as rotating or cropping images, to improve robustness and reduce overfitting.

Data Drift

Feature Drift

A change over time in the distribution of a model's input data compared with what it was trained on, which can degrade performance even if the underlying relationship is unchanged. Monitoring for it is a standard MLOps practice.

Data Labeling

Data Annotation

The process of annotating raw data with the correct answers a supervised model should learn to predict, such as tagging images or categorizing text. Its cost and quality strongly affect model outcomes.

Data Leakage

Target Leakage

A modeling error where information from outside the training data, often the target or future data, sneaks into the features and inflates performance during development. It leads to models that fail in production.

DBSCAN

Density-Based Spatial Clustering of Applications with Noise

A density-based clustering algorithm that groups together points packed closely in space and marks points in low-density regions as outliers. Unlike k-means, it finds clusters of arbitrary shape and does not need the cluster count specified.

Decision Tree

A supervised learning model that makes predictions by following a branching series of yes/no questions about the input features, with each leaf of the tree giving a final class or value. It is easy to interpret but prone to overfitting when grown deep.

Deep Learning

Machine learning using neural networks with many layers, which learn increasingly abstract features and power most modern AI, including image and language models.

Deep Q-Network

DQN

A reinforcement learning method that uses a deep neural network to approximate the value of actions in each state, enabling agents to learn from high-dimensional inputs like pixels. It was a landmark in playing Atari games from raw images.

Deepfake

Synthetic media, typically video or audio, in which a person's likeness or voice is realistically fabricated using generative models. Deepfakes raise concerns about misinformation, fraud, and consent.

Denoising Autoencoder

An autoencoder trained to reconstruct clean inputs from deliberately corrupted versions, forcing it to learn robust features. It is used for representation learning and data denoising.

Differential Privacy

A mathematical framework that lets systems learn useful patterns from data while provably limiting how much can be inferred about any single individual, typically by adding calibrated noise. It gives formal privacy guarantees.

Diffusion Model

A generative model that learns to reverse a gradual noising process, turning random noise into coherent images or other data; the basis of many AI image generators.

Dimensionality Reduction

The process of reducing the number of input variables in a dataset while preserving as much meaningful structure as possible. It helps with visualization, speeds up training, and can reduce noise.

Direct Preference Optimization

DPO

An alignment method that fine-tunes a language model directly on human preference pairs without training a separate reward model or running reinforcement learning. It simplifies the RLHF pipeline while achieving similar results.

Discount Factor

Gamma

A number between 0 and 1 in reinforcement learning that determines how much future rewards are valued relative to immediate ones. Lower values make the agent more short-sighted.

Discriminator

In a generative adversarial network, the model that tries to distinguish real data from the fakes produced by the generator. Its feedback drives the generator to improve.

Distillation

knowledge distillation

Training a smaller student model to imitate a larger teacher model, keeping much of the capability while cutting size and cost.

Dropout

A regularization technique that randomly ignores some neurons during training, forcing the network to build redundant, more robust representations.

Early Stopping

A regularization strategy that halts training once performance on a validation set stops improving, preventing the model from overfitting the training data. It uses the validation curve to pick the best stopping point.

Edge AI

Running AI models directly on local devices such as phones, cameras, or sensors rather than in the cloud, reducing latency and preserving privacy. It requires compact, efficient models.

Elastic Net

A regularized regression method that combines the L1 penalty of lasso and the L2 penalty of ridge, balancing feature selection with stability when features are correlated.

Embedding

vector representation

A representation of text, images, or other data as a list of numbers (a vector) positioned so that similar items sit close together in that numeric space.

Embedding Space

The multi-dimensional vector space into which items such as words, images, or users are mapped so that geometric closeness reflects semantic similarity. Operations like nearest-neighbor search happen within it.

Emergent Abilities

Capabilities that appear in large models once they cross a certain scale but are largely absent in smaller ones, sometimes seeming to arrive abruptly. Examples include multi-step reasoning and in-context learning of new tasks.

Encoder-Decoder

An architecture pattern where an encoder compresses the input into an internal representation and a decoder expands that representation into an output. It is common in translation, summarization, and image captioning.

Ensemble Learning

A strategy that combines the predictions of multiple models to produce a result more accurate and robust than any single model. Common forms include bagging, boosting, and stacking.

Entropy

In information theory, a measure of the uncertainty or disorder in a distribution, highest when outcomes are equally likely. In machine learning it appears in decision-tree splitting and in cross-entropy loss.

Epoch

One complete pass of the training algorithm over the entire training dataset; models usually train for many epochs.

Epsilon-Greedy

A simple exploration strategy that picks the best-known action most of the time but chooses a random action with a small probability epsilon. It provides a basic balance between exploration and exploitation.

Eval

evaluation

A test or suite of tests that measures how well a model performs on specific tasks or behaviors, used to track quality and catch regressions.

Expectation-Maximization

EM Algorithm

An iterative algorithm for finding maximum-likelihood parameter estimates when the data has hidden or missing variables. It alternates between estimating the hidden values (E-step) and updating parameters (M-step).

Experiment Tracking

The practice of systematically recording the configurations, code, data, metrics, and results of machine learning experiments so they can be compared and reproduced. Dedicated tools log these runs automatically.

Expert System

An early AI program that encodes the knowledge of human experts as a set of if-then rules to make decisions in a narrow domain. Such systems were prominent in the 1980s before machine learning became dominant.

Explainability

The extent to which the reasons behind an AI system's outputs can be presented in human-understandable terms. It is important for trust, debugging, and regulatory compliance.

Explainable AI

XAI

A set of methods and tools designed to make the decisions of complex machine learning models understandable to humans. It is often abbreviated XAI.

Exploding Gradient

A training problem where gradients grow uncontrollably large as they propagate through many layers, causing unstable updates and numerical overflow. Gradient clipping and careful initialization help address it.

Exploration vs Exploitation

The core tradeoff in reinforcement learning between trying new actions to discover their outcomes and choosing known good actions to maximize reward. Balancing the two is essential for effective learning.

F1 Score

F1

A single accuracy metric that combines precision and recall into their harmonic mean, useful when classes are imbalanced and both error types matter.

Fairness

The goal of ensuring an AI system treats individuals and groups equitably and does not produce discriminatory outcomes. Multiple, sometimes conflicting, mathematical definitions of it exist.

Feature

An individual measurable property or input signal a model uses to make predictions, such as a pixel value, a word, or a customer's age.

Feature Engineering

The craft of selecting, transforming, and creating input features from raw data to help a model learn more effectively.

Feature Importance

A measure of how much each input feature contributes to a model's predictions, used to interpret models and guide feature selection. Different methods, such as permutation importance or tree-based scores, can give different rankings.

Feature Map

Activation Map

The output produced when a convolutional filter is applied across an input, highlighting where a particular pattern appears. A convolutional layer produces many feature maps, one per filter.

Feature Scaling

Adjusting numeric input features to a common range or distribution so that no single feature dominates due to its units. Common methods are normalization to a 0–1 range and standardization to zero mean and unit variance.

Feature Selection

The process of choosing the most relevant subset of input variables for a model, discarding redundant or uninformative ones. It can improve accuracy, reduce overfitting, and lower computational cost.

Feature Store

A central repository that stores, manages, and serves curated features for machine learning, ensuring the same feature definitions are used in training and in production. It reduces duplication and training-serving skew.

Federated Learning

A training approach in which a shared model is improved across many devices or servers that keep their data local, sending only model updates instead of raw data. It enables learning while preserving data privacy.

Feedforward Neural Network

A neural network in which information flows in one direction from input to output with no loops or cycles. It is the most basic form of deep network, contrasted with recurrent architectures.

Few-Shot Learning

Guiding a model by including a handful of worked examples in the prompt so it infers the desired pattern without any additional training.

Fine-Tuning

Further training a pretrained model on a smaller, task-specific dataset so it specializes in a particular domain, style, or behavior.

Flash Attention

An efficient, memory-aware implementation of the attention operation that avoids storing the large intermediate attention matrix, speeding up training and inference on long sequences. It computes exact attention with lower memory use.

Foundation Model

base model

A large model pretrained on broad data that serves as a general base, adaptable to many downstream tasks through prompting or fine-tuning.

Frontier Model

A term for the largest and most capable general-purpose AI models at the leading edge of what is currently possible. Their scale and capabilities raise both new opportunities and safety considerations.

Frozen Weights

Freezing

Model parameters that are held fixed and not updated during a training or fine-tuning run. Freezing a pretrained backbone while training only new layers is common in transfer learning.

Fully Connected Layer

Dense Layer

A neural network layer in which every neuron is connected to every output of the previous layer. It is also called a dense layer and is common near the end of many architectures.

Gated Recurrent Unit

GRU

A type of recurrent network cell that uses gating mechanisms to control information flow, capturing long-range dependencies with fewer parameters than an LSTM. It is a common alternative to LSTMs for sequence modeling.

Gaussian Mixture Model

GMM

A probabilistic clustering model that assumes the data is generated from a mixture of several Gaussian distributions with unknown parameters. Each point is assigned a probability of belonging to each cluster.

GELU

Gaussian Error Linear Unit

The Gaussian Error Linear Unit, a smooth activation function that weights inputs by their value under a Gaussian distribution. It is widely used in transformer models.

Generalization

A model's ability to perform well on new, unseen data rather than just the examples it was trained on; the real goal of machine learning.

Generative Adversarial Network

GAN

A pair of networks trained against each other, one generating fake data and one trying to detect it, producing increasingly realistic synthetic outputs.

Generative AI

GenAI

AI that creates new content such as text, images, audio, or code, rather than only classifying or predicting from existing inputs.

Generator

In a generative adversarial network, the model that creates synthetic data samples from random noise, trying to fool the discriminator into judging them real. It improves by learning to produce increasingly realistic outputs.

Gini Impurity

A measure of how often a randomly chosen element would be misclassified if labeled by the class distribution in a node. Decision trees minimize it to pick the best splits.

GloVe

Global Vectors

A method for learning word embeddings by factorizing a matrix of global word co-occurrence counts across a corpus. It combines the strengths of count-based and prediction-based approaches.

GPT

Generative Pretrained Transformer

A family of decoder-only transformer models trained to predict the next token, generating text autoregressively. The architecture underpins many modern large language models.

GPU

Graphics Processing Unit

A graphics processing unit, a parallel processor originally built for rendering images that is now the workhorse hardware for training and running neural networks. Its ability to do many operations at once suits the matrix math of deep learning.

Gradient

A vector showing how the loss changes as each parameter changes; it points the direction to adjust parameters to reduce error.

Gradient Boosting

An ensemble technique that builds models sequentially, where each new model is trained to correct the errors of the combined previous models by fitting to their residuals. It often produces very accurate predictors for tabular data.

Gradient Clipping

A technique that caps the magnitude of gradients during training to prevent excessively large updates that destabilize learning. It is especially useful for recurrent networks prone to exploding gradients.

Gradient Descent

SGD · Stochastic Gradient Descent

The core optimization method for training models, iteratively nudging parameters in the direction that most reduces the loss, one small step at a time.

Graph Neural Network

GNN

A neural network that operates on graph-structured data by passing and aggregating messages between connected nodes. It is used for molecules, social networks, recommendation, and other relational data.

Greedy Decoding

A text-generation strategy that always selects the single highest-probability token at each step. It is fast and deterministic but can produce repetitive or suboptimal sequences.

Ground Truth

The reference labels or measurements assumed to be correct, against which a model's predictions are compared during training and evaluation. Its quality directly limits how good a model can become.

Grounding

Connecting a model's outputs to verifiable external information such as retrieved documents, databases, or sensor data so its responses are factual and traceable. It is a key technique for reducing hallucination.

Guardrails

Rules, filters, or checks placed around a model to keep its inputs and outputs safe, on-policy, and within intended bounds.

Hallucination

confabulation

When a model produces fluent but false or fabricated information, stating it confidently as if it were true.

Hallucination Mitigation

The set of techniques used to reduce a language model's tendency to state false or fabricated information, such as retrieval grounding, citation, and verification steps. It is central to making generative AI trustworthy.

He Initialization

Kaiming Initialization

A weight initialization scheme designed for ReLU-style activations that scales initial weights by the number of input units to preserve signal variance. It helps very deep networks train reliably.

Hidden Layer

A layer of neurons in a neural network that sits between the input and output layers and learns intermediate representations of the data. Networks with many hidden layers are called deep.

Hierarchical Clustering

An unsupervised method that builds a tree of nested clusters by repeatedly merging the closest groups (agglomerative) or splitting them (divisive). The result is often visualized as a dendrogram.

Human-in-the-Loop

HITL

A design in which people review, correct, or approve an AI system's outputs at key steps rather than letting it act fully autonomously. It improves safety and quality for high-stakes decisions.

Hyperparameter

A setting chosen before training that controls how a model learns, such as the learning rate or number of layers, as opposed to values the model learns itself.

Hyperparameter Tuning

Hyperparameter Optimization

The process of searching for the configuration settings that are not learned from data, such as learning rate or tree depth, to maximize a model's performance. Methods include grid search, random search, and Bayesian optimization.

Hyperplane

A flat decision boundary of one dimension less than its surrounding space, such as a line in 2D or a plane in 3D. Linear classifiers separate classes using a hyperplane.

Hypothesis Testing

A statistical procedure for deciding whether observed data provides enough evidence to reject a default assumption (the null hypothesis) in favor of an alternative. It is used to assess whether effects are likely real or due to chance.

Image Captioning

The task of automatically generating a natural-language description of the content of an image. It sits at the intersection of computer vision and natural language generation.

Image Classification

The computer vision task of assigning a whole image to one of a set of predefined categories. It is a foundational benchmark task in the field.

In-Context Learning

A model's ability to adapt to a task purely from the examples and instructions in its prompt at inference time, without updating its weights.

Inference

prediction · serving

Using a trained model to generate predictions or outputs on new inputs; the phase after training when the model is actually put to work.

Information Gain

The reduction in uncertainty (entropy) about the target achieved by splitting data on a particular feature. Decision trees use it to choose which feature to split on at each node.

Instance Segmentation

A computer vision task that identifies each individual object in an image at the pixel level, distinguishing separate instances of the same class. It combines object detection with per-pixel masks.

Instruction Tuning

Fine-tuning a pretrained language model on examples of instructions paired with desired responses, so it learns to follow natural-language directions. It is a key step in turning a base model into a helpful assistant.

Interpretability

The degree to which a human can understand how a model reaches its decisions, either because the model is inherently simple or through analysis techniques. Higher interpretability aids trust and oversight.

Intersection over Union

IoU · Jaccard Index

A metric that measures how well a predicted region overlaps a ground-truth region by dividing the area of their intersection by the area of their union. It is the standard way to score object detection and segmentation.

Jailbreak

A crafted prompt or interaction that tricks a language model into bypassing its safety guidelines and producing content it was trained to refuse. Defending against jailbreaks is an ongoing safety challenge.

K-Fold Cross-Validation

A validation technique that splits data into k equal folds, training on k-1 of them and testing on the remaining one, rotating until each fold has been the test set. Averaging the results gives a more reliable performance estimate.

K-Means Clustering

An unsupervised algorithm that partitions data into k groups by iteratively assigning each point to the nearest cluster center and then recomputing those centers. It requires choosing the number of clusters in advance.

K-Nearest Neighbors

KNN

A simple algorithm that classifies or predicts a new point based on the labels or values of its k closest examples in the training data. It does no explicit training and stores the whole dataset for lookup at prediction time.

Kernel Trick

A method that lets algorithms like SVMs operate in a high-dimensional feature space without explicitly computing coordinates there, by using a kernel function to compute similarities directly. It enables efficient non-linear modeling.

Knowledge Graph

A structured representation of facts as entities connected by typed relationships, forming a network of knowledge that machines can query and reason over. It is used to ground AI systems in verified information.

KV Cache

Key-Value Cache

A memory optimization for transformer generation that stores the key and value vectors of previously processed tokens so they need not be recomputed for each new token. It greatly speeds up autoregressive decoding at the cost of memory.

L1 Regularization

Lasso Penalty

A penalty added to the loss proportional to the sum of the absolute values of the model's weights. It encourages sparsity, driving some weights exactly to zero.

L2 Regularization

Ridge Penalty

A penalty added to the loss proportional to the sum of the squared values of the model's weights. It discourages large weights and improves generalization without forcing weights to zero.

Label

ground truth · target

The correct answer attached to a training example in supervised learning; the target the model learns to predict.

Language Model

LM

A model that assigns probabilities to sequences of words or tokens, allowing it to predict likely next tokens and generate text. Large versions trained on huge corpora power modern generative AI.

Large Language Model

LLM

A model trained on vast amounts of text to predict and generate language, capable of tasks like answering questions, writing, and reasoning over text.

Lasso Regression

L1 Regularized Regression

A linear regression variant that adds an L1 penalty on the coefficients, which can shrink some of them exactly to zero and thereby perform automatic feature selection.

Latency

The time it takes for a model or system to return a response after receiving a request. Low latency is critical for interactive applications like chat and real-time recommendations.

Latent Diffusion

A diffusion generation approach that runs the denoising process in a compressed latent space rather than on raw pixels, greatly reducing computation. It is the basis of many efficient text-to-image models.

Latent Dirichlet Allocation

LDA

A popular topic-modeling algorithm that represents each document as a mixture of topics and each topic as a distribution over words. It infers these hidden structures from word co-occurrence patterns.

Latent Space

latent representation

The compressed internal representation a model learns, where each point is a vector capturing meaningful features of the data in an abstract numeric form.

Layer Normalization

LayerNorm

A technique that normalizes the activations across the features of each individual example, stabilizing and speeding up training. It is the standard normalization used inside transformer layers.

Leaky ReLU

A variant of the ReLU activation that allows a small, non-zero slope for negative inputs instead of outputting exactly zero. This helps prevent neurons from becoming permanently inactive.

Learning Curve

A plot showing how model performance changes as a function of training experience, such as dataset size or training time. It helps diagnose whether more data or more training would help.

Learning Rate

A hyperparameter that controls how large a step gradient descent takes on each update; too high overshoots, too low trains slowly.

Learning Rate Schedule

Learning Rate Decay

A plan for changing the learning rate during training, such as decaying it over time or warming it up at the start. A good schedule can improve convergence speed and final accuracy.

Lemmatization

A text-normalization technique that reduces words to their dictionary base form using vocabulary and grammar rules, so different inflections map to one lemma. It is more accurate but slower than stemming.

Likelihood

The probability of the observed data given a particular set of model parameters, viewed as a function of those parameters. Maximizing it is a common way to fit models.

LIME

Local Interpretable Model-agnostic Explanations

A technique that explains a single prediction of any model by fitting a simple, interpretable model to the behavior of the complex one in the neighborhood of that input. Its name stands for Local Interpretable Model-agnostic Explanations.

Linear Regression

A model that predicts a continuous value as a weighted linear combination of input features, fitting the line or plane that best matches the data. It is the foundational technique for regression problems.

Local Minimum

A point in the loss landscape where the loss is lower than at all nearby points but not necessarily the lowest possible overall. Optimization can get stuck in poor local minima, though in high dimensions this is less common than once feared.

Logistic Regression

A statistical model for binary or categorical classification that estimates the probability of a class by applying a logistic (sigmoid) function to a linear combination of the input features.

Logits

The raw, unnormalized scores a model outputs for each possible class or token before they are converted into probabilities by a softmax function. They can be any real number, positive or negative.

Long Short-Term Memory

LSTM

A type of recurrent network with gating that lets it remember information over longer sequences, mitigating the forgetting problem of plain RNNs.

LoRA

Low-Rank Adaptation

A lightweight fine-tuning method that trains small add-on matrices instead of all a model's weights, cutting the cost and storage of customizing large models.

Loss Curve

A plot of a model's loss over training steps or epochs, used to diagnose whether training is progressing, converging, or overfitting. Comparing training and validation loss curves reveals generalization problems.

Loss Function

cost function · objective function

A formula that measures how wrong a model's predictions are, producing a single number that training tries to minimize.

Machine Learning

ML

A field where systems learn patterns from data to make predictions or decisions, rather than following rules written explicitly by a programmer.

Machine Translation

MT

The automatic conversion of text or speech from one human language to another. Modern systems use neural sequence-to-sequence and transformer models.

Markov Decision Process

MDP

A mathematical framework for sequential decision making defined by states, actions, transition probabilities, and rewards, where the future depends only on the current state. It is the foundation of reinforcement learning theory.

Masked Language Modeling

MLM

A self-supervised training objective where random tokens in the input are hidden and the model learns to predict them from the surrounding context. It is the pretraining task used by models like BERT.

Max Pooling

A pooling operation that keeps only the largest value in each small region of a feature map, preserving the strongest activations while reducing resolution. It is the most common pooling method in vision models.

Maximum Likelihood Estimation

MLE

A method of estimating a model's parameters by choosing the values that make the observed data most probable under the model. It underlies the training of many statistical and machine learning models.

Mean Absolute Error

MAE

A regression metric equal to the average absolute difference between predicted and actual values. It is more robust to outliers than mean squared error and is expressed in the target's units.

Mean Squared Error

MSE

A regression loss and metric equal to the average of the squared differences between predicted and actual values. Squaring penalizes large errors more heavily and makes it sensitive to outliers.

Mechanistic Interpretability

A research area that aims to reverse-engineer the internal computations of neural networks, identifying the circuits and features that produce specific behaviors. It seeks a detailed, causal understanding of how models work inside.

Mini-Batch Gradient Descent

A form of gradient descent that computes updates on small batches of examples, balancing the stability of full-batch training with the efficiency of single-example updates. It is the standard approach for training deep networks.

Mixed-Precision Training

A training technique that uses lower-precision number formats such as 16-bit floats for most computations while keeping key parts in higher precision, cutting memory use and speeding up training. Modern accelerators are optimized for it.

Mixture of Experts

MoE

An architecture that routes each input to only a few specialized sub-networks (experts) instead of the whole model, boosting capacity without proportional compute.

MLOps

Machine Learning Operations

The set of practices for reliably deploying, monitoring, and maintaining machine learning models in production, adapting DevOps principles to ML. It covers data pipelines, versioning, testing, and continuous retraining.

Mode Collapse

A failure mode of generative adversarial networks where the generator produces only a few similar outputs instead of the full diversity of the data. It results in a narrow, repetitive set of samples.

Model

The learned artifact produced by training, containing the parameters that map inputs to outputs for a given task.

Model Card

A short standardized document that describes a machine learning model's intended use, performance, limitations, training data, and ethical considerations. It promotes transparency and responsible deployment.

Model Collapse

A degradation that can occur when generative models are repeatedly trained on data produced by earlier models, causing them to lose diversity and drift from the real distribution. It is a concern as AI-generated content fills training corpora.

Model Compression

A set of techniques, including pruning, quantization, and distillation, that reduce a model's size and computational cost so it can run faster or on constrained hardware. The goal is efficiency with little loss of accuracy.

Model Context Protocol

MCP

An open standard for connecting AI models to external tools and data sources through a common interface, so any compliant client can use any compliant server.

Model Deployment

The process of putting a trained model into a production environment where it can serve predictions to applications or users. It involves packaging, serving infrastructure, and monitoring.

Model Monitoring

The ongoing tracking of a deployed model's performance, inputs, and outputs to detect problems like accuracy decay, drift, or errors. It triggers alerts and retraining when quality degrades.

Model Registry

A centralized system for storing, versioning, and cataloging trained models along with their metadata and stage (such as staging or production). It provides governance and reproducibility for ML teams.

Model Serving

Making a trained model available to respond to prediction requests, typically behind an API, with attention to latency, scalability, and reliability. It is the runtime side of deployment.

Model-Based Reinforcement Learning

An approach in which the agent learns or is given a model of the environment's dynamics and uses it to plan ahead. It can be more sample-efficient than model-free methods but depends on model accuracy.

Model-Free Reinforcement Learning

An approach in which the agent learns a policy or value function directly from experience without building an explicit model of the environment. Q-learning and policy gradients are examples.

Momentum

An optimization technique that accumulates a moving average of past gradients to keep updates moving in a consistent direction, speeding convergence and smoothing out oscillations. It is a common enhancement to gradient descent.

Monte Carlo Method

A family of techniques that estimate quantities by averaging the results of many random samples or simulations. In reinforcement learning they estimate value by averaging returns from complete episodes.

Multi-Agent System

A setup in which several AI agents interact, coordinate, or compete to solve a problem, sometimes with specialized roles. Coordination protocols and communication become central design concerns.

Multi-Head Attention

A transformer mechanism that runs several attention operations in parallel, each with its own learned projections, then combines them. Multiple heads let the model attend to different relationships at once.

Multilayer Perceptron

MLP

A basic feedforward neural network with one or more hidden layers of neurons between the input and output, using non-linear activations. It can approximate complex functions and is a standard baseline architecture.

Multimodal

multimodal model

Describing models that work across more than one type of data at once, such as understanding images and text together or generating audio from a description.

Multimodal Model

A model that can process and relate information from more than one type of data, such as text, images, audio, or video, within a single system. It enables tasks like describing an image or answering questions about a chart.

N-gram

A contiguous sequence of n items, usually words or characters, used to capture short-range context in text. Bigrams and trigrams are common in language modeling and text features.

Naive Bayes

A probabilistic classifier based on Bayes' theorem that assumes all features are conditionally independent given the class. Despite this simplifying assumption, it works well for tasks like spam filtering and text classification.

Named Entity Recognition

NER

An NLP task that finds and classifies named things in text, such as people, organizations, locations, and dates. It is a building block for information extraction.

Narrow AI

Weak AI

AI systems designed and trained for a specific, limited task, such as recognizing faces or recommending products, without general reasoning ability. Essentially all AI in use today is narrow.

Natural Language Generation

NLG

The subfield of NLP focused on producing coherent, human-like text from data or internal representations. It covers tasks like summarization, dialogue, and report writing.

Natural Language Processing

NLP

The field of AI concerned with enabling computers to understand, interpret, and generate human language. It spans tasks from translation and summarization to sentiment analysis and question answering.

Natural Language Understanding

NLU

The subfield of NLP focused on extracting meaning, intent, and structure from text, such as identifying entities, relationships, and sentiment. It emphasizes comprehension rather than generation.

Neural Network

artificial neural network · ANN

A model built from layers of interconnected nodes loosely inspired by the brain, where each connection has a weight adjusted during training.

Next-Token Prediction

Causal Language Modeling

The training objective of autoregressive language models, which learn to predict the following token given all preceding ones. Repeating this prediction generates coherent text.

Non-Maximum Suppression

NMS

A post-processing step in object detection that removes redundant overlapping boxes for the same object, keeping only the highest-scoring one. It cleans up the raw set of candidate detections.

Normalization

Rescaling numeric values to a fixed range, typically 0 to 1, so features with different units contribute comparably. In deep learning the term also refers to layer techniques that stabilize activations.

Normalizing Flow

Flow-Based Model

A generative model that transforms a simple probability distribution into a complex one through a sequence of invertible functions, allowing exact likelihood computation. It is used for density estimation and generation.

Null Hypothesis

The default assumption in a statistical test, typically that there is no effect or no difference. Tests attempt to gather enough evidence to reject it.

Object Detection

The computer vision task of locating and classifying multiple objects within an image, typically by drawing a bounding box around each and labeling it. It combines localization with classification.

Objective Function

Cost Function

The quantity that training seeks to optimize, either minimized as a loss or maximized as a reward. Choosing it defines what the model is actually trying to achieve.

One-Hot Encoding

A way to represent a categorical variable as a set of binary columns, one per category, where exactly one column is 1 and the rest are 0. It lets models that expect numeric input handle non-numeric categories.

Online Learning

A training paradigm where the model updates its parameters continuously as new data arrives, one example or small batch at a time, rather than training once on a fixed dataset. It suits streaming or changing data.

Open-Weight Model

A model whose trained parameters are publicly released so anyone can run, inspect, or fine-tune it, though its training data or code may not be fully open. It contrasts with closed models accessed only through an API.

Optical Character Recognition

OCR

The technology that converts images of typed, printed, or handwritten text into machine-readable characters. It is used to digitize documents and read text from photos.

Optimizer

The algorithm that adjusts a model's parameters during training to reduce the loss, using the gradients from backpropagation. Common choices include SGD, Adam, and RMSprop.

Orchestration

Coordinating multiple models, tools, or agent steps into a coherent pipeline that accomplishes a larger task. An orchestrator decides the order of operations and passes information between components.

Ordinary Least Squares

OLS

The standard method for fitting a linear regression by choosing the coefficients that minimize the sum of squared differences between predictions and observed values.

Out-of-Bag Error

OOB Error

An estimate of a bagged model's error computed using, for each training point, only the trees that did not see it during training. It provides a built-in validation score without a separate holdout set.

Overfitting

When a model memorizes its training data, including noise and quirks, so it performs well on those examples but poorly on new, unseen data.

Overfitting Detection

Recognizing when a model has learned noise in the training data by observing a growing gap between strong training performance and weaker validation performance. It signals the need for regularization or more data.

Overparameterization

Building a model with far more parameters than the training data strictly requires, which, counterintuitively, often improves how well large networks learn.

P-Value

In hypothesis testing, the probability of observing data at least as extreme as what was seen if the null hypothesis were true. Small p-values are taken as evidence against the null hypothesis.

Padding

Adding extra values, usually zeros, around the border of an input so that a convolution can process edge pixels and control the output size. Same padding keeps dimensions unchanged; valid padding uses none.

Parameter-Efficient Fine-Tuning

PEFT

A family of methods that adapt a large pretrained model to a new task by training only a small number of added or selected parameters while keeping most of the model frozen. It cuts the memory and storage cost of customization.

Parameters

parameter count

The total count of learned weights in a model, often in the billions; roughly indicates capacity, though architecture and training data matter just as much.

Part-of-Speech Tagging

POS Tagging

An NLP task that labels each word in a sentence with its grammatical category, such as noun, verb, or adjective. It supports parsing and downstream language understanding.

Perceptron

The simplest artificial neuron, which computes a weighted sum of its inputs and outputs one of two values based on a threshold. It is the historical building block that led to modern neural networks.

Perplexity

A metric for language models measuring how surprised a model is by a text; lower perplexity means the model predicts the words more confidently.

Policy

In reinforcement learning, the strategy that maps states to actions, telling the agent what to do in each situation. It can be deterministic or a probability distribution over actions.

Policy Gradient

A family of reinforcement learning methods that directly optimize the parameters of a policy by following the gradient of expected reward. They handle continuous action spaces well.

Pooling

A downsampling operation in convolutional networks that summarizes small regions of a feature map, for example by taking the maximum or average. It reduces spatial size and adds a degree of translation invariance.

Pose Estimation

The computer vision task of detecting the positions of a person's or object's key points, such as joints, to infer body posture or orientation. It is used in motion capture, fitness apps, and robotics.

Positional Encoding

Information added to a transformer's inputs so the model knows the order of tokens, since attention itself has no built-in sense of sequence.

Posterior

Posterior Distribution

In Bayesian statistics, the updated probability distribution over a quantity after combining the prior with observed data through Bayes' theorem. It represents what is believed after seeing the evidence.

Precision

Of all the items a model flagged as positive, the fraction that were actually correct; it measures how trustworthy the positive predictions are.

Precision-Recall Curve

A plot of precision against recall across decision thresholds, especially informative when classes are imbalanced. It highlights performance on the rare positive class better than the ROC curve.

Prefix Tuning

A parameter-efficient fine-tuning method that prepends a small set of trainable vectors to each layer's input while leaving the base model frozen. The learned prefixes steer the model toward a task.

Pretraining

The initial, resource-intensive phase where a model learns general patterns from a huge unlabeled corpus before any task-specific tuning.

Principal Component Analysis

PCA

A dimensionality-reduction technique that projects data onto a new set of axes (principal components) ordered by how much variance they capture. It compresses correlated features into fewer uncorrelated ones.

Prior

Prior Distribution

In Bayesian statistics, the probability distribution that expresses beliefs about a quantity before observing the current data. It is combined with the likelihood to form the posterior.

Prompt

The input text given to a language model to guide its response, ranging from a short question to detailed instructions and examples.

Prompt Chaining

Composing a task from a sequence of prompts where each step's output feeds the next, breaking a complex job into manageable stages. It improves reliability over asking for everything in one prompt.

Prompt Engineering

The practice of crafting and refining prompts, including instructions, examples, and formatting, to reliably get better outputs from a language model.

Prompt Injection

An attack where malicious instructions hidden in user input or fetched content hijack a model, causing it to ignore its intended rules or leak data.

Prompt Leaking

An attack in which a user coaxes a language model into revealing its hidden system prompt or confidential instructions. It is a variant of prompt injection and a security concern for deployed applications.

Prompt Template

A reusable, parameterized text pattern with placeholders that are filled in with specific inputs to build a consistent prompt for a language model. Templates make prompting repeatable and easier to maintain.

Prompt Tuning

Soft Prompting

A lightweight adaptation method that learns a small set of continuous prompt vectors prepended to the input, keeping the base model unchanged. It is a simple form of parameter-efficient fine-tuning.

Proximal Policy Optimization

PPO

A widely used reinforcement learning algorithm that improves a policy in small, stable steps by limiting how far each update can move from the previous policy. It is a common choice for the reinforcement stage of RLHF.

Pruning

Simplifying a trained model by removing parts that add little value, such as branches of a decision tree or weights in a neural network. It reduces overfitting and model size.

Pruning (Neural Networks)

Compressing a trained neural network by removing weights, neurons, or channels that contribute little to its output, shrinking the model with minimal accuracy loss. It speeds up inference and reduces memory.

Q-Learning

A model-free reinforcement learning algorithm that learns the value of taking each action in each state, gradually improving its estimates to derive an optimal policy. It does not require a model of the environment.

QLoRA

Quantized Low-Rank Adaptation

A fine-tuning technique that combines low-rank adapters with a quantized (compressed) base model, letting large models be adapted on a single consumer GPU. It makes efficient fine-tuning far more accessible.

Quantization

Reducing the numeric precision of a model's weights (for example from 16-bit to 4-bit) to shrink memory use and speed up inference, usually with minor accuracy loss.

Query, Key, Value

QKV

The three learned vectors that drive attention: the query is compared against keys to produce weights, which are then used to combine the values. This mechanism lets each token gather information from others.

R-Squared

R2 · Coefficient of Determination

A regression metric, also called the coefficient of determination, that measures the fraction of variance in the target explained by the model. A value of 1 means perfect fit and 0 means no better than predicting the mean.

Random Forest

An ensemble method that trains many decision trees on random subsets of the data and features, then averages or votes their predictions. Combining many diverse trees reduces overfitting and usually improves accuracy over a single tree.

ReAct

Reasoning and Acting

An agent pattern in which a language model interleaves reasoning steps with actions such as tool or search calls, using the results to inform its next thought. It combines chain-of-thought reasoning with acting in an environment.

Reasoning Model

thinking model

A language model trained to spend extra computation working through a problem step by step before answering, trading latency for stronger performance on hard tasks.

Recall

sensitivity

Of all the truly positive items, the fraction the model correctly caught; it measures how much of the target the model finds.

Receptive Field

The region of the input that influences a particular neuron's activation in a convolutional network. Deeper layers have larger receptive fields and capture broader context.

Recommender System

Recommendation Engine

A system that suggests items a user is likely to want, using patterns in past behavior, item attributes, or both. Approaches include collaborative filtering, content-based filtering, and hybrids.

Recurrent Neural Network

RNN

A neural network that processes sequences one step at a time while carrying a memory of previous steps, historically used for text and time series.

Red Teaming

The practice of deliberately probing an AI system for harmful, unsafe, or policy-violating behavior by simulating adversaries. Findings are used to strengthen safeguards before and after deployment.

Regression

A predictive task where a model outputs a continuous numeric value, such as a price, temperature, or expected demand.

Regularization

Techniques that discourage a model from becoming too complex, penalizing large parameters or adding constraints to reduce overfitting.

Reinforcement Learning

RL

A method where an agent learns by trial and error, taking actions in an environment and adjusting its behavior based on rewards and penalties.

Reinforcement Learning from Human Feedback

RLHF

A tuning method that uses human preference rankings to train a reward signal, then optimizes the model to produce responses people prefer.

ReLU

Rectified Linear Unit

A widely used activation function that outputs the input if positive and zero otherwise; simple, fast, and effective for deep networks.

Reranking

re-ranking

A second-pass step that reorders an initial set of retrieved results using a more precise model, surfacing the most relevant items to the top.

Residual Connection

Skip Connection

A shortcut that adds a layer's input directly to its output, letting gradients flow more easily and enabling training of very deep networks. It is the key idea behind residual networks (ResNets).

ResNet

Residual Network

A deep convolutional architecture built from residual blocks that use skip connections, allowing networks hundreds of layers deep to train effectively. It set accuracy records in image classification and remains a common backbone.

Retrieval

The step of finding and returning relevant documents or passages from a knowledge source in response to a query, typically using keyword or vector similarity search. It supplies external context to grounded and retrieval-augmented systems.

Retrieval-Augmented Generation

RAG

A pattern where a model first fetches relevant documents from an external source, then uses them as context to generate a grounded, up-to-date answer.

Reward Function

The function in reinforcement learning that assigns a numeric score to the outcomes of an agent's actions, defining what it should try to achieve. Designing it well is crucial and mis-specification can cause unintended behavior.

Reward Hacking

Specification Gaming

When an agent finds a way to maximize its reward signal that satisfies the letter of the objective but not the intent, producing unintended or degenerate behavior. It highlights the difficulty of specifying good objectives.

Reward Model

A model trained to score how good a response is according to human preferences, used to guide reinforcement learning of a language model. It converts subjective human judgments into a numeric signal.

Ridge Regression

L2 Regularized Regression

A linear regression variant that adds an L2 penalty on the size of the coefficients to reduce overfitting and handle correlated features. The penalty shrinks coefficients toward zero without eliminating them.

RLAIF

Reinforcement Learning from AI Feedback

Reinforcement Learning from AI Feedback, a method that trains a model using preference judgments generated by another AI model instead of humans. It aims to scale alignment by reducing reliance on human labelers.

RMSprop

An optimizer that divides each parameter's learning rate by a running average of the magnitudes of its recent gradients, helping training progress steadily on both steep and flat directions.

Robustness

A model's ability to maintain reliable performance when inputs are noisy, shifted, or adversarially manipulated. It is a central property for safe and dependable AI systems.

ROC Curve

Receiver Operating Characteristic

A plot of a classifier's true positive rate against its false positive rate across all decision thresholds. It shows the tradeoff between catching positives and raising false alarms.

Root Mean Squared Error

RMSE

The square root of the mean squared error, expressing regression error in the same units as the target variable. It is a common summary of how far predictions typically fall from the truth.

Rotary Positional Embedding

RoPE

A method of encoding token positions in transformers by rotating the query and key vectors according to position, which generalizes well to longer sequences. It is used in many modern large language models.

Scaling Laws

Empirical relationships showing how model performance improves predictably as model size, dataset size, and compute increase. They guide decisions about how large to make models and how much data to use.

Self-Attention

Attention applied within a single sequence, letting each element relate to every other element so the model captures context and relationships across the input.

Self-Consistency

A prompting technique that samples multiple reasoning paths for the same question and selects the most common answer among them. It improves accuracy on reasoning tasks over taking a single chain of thought.

Self-Supervised Learning

A training approach where the model creates its own supervision signal from unlabeled data, for example by predicting a hidden part of the input from the rest. It underpins the pretraining of most modern language and vision models.

Semantic Segmentation

The computer vision task of labeling every pixel in an image with the class of the object it belongs to, without distinguishing separate instances of the same class. It produces a dense, per-pixel map.

Semi-Supervised Learning

A learning setting that uses a small amount of labeled data together with a large amount of unlabeled data. It aims to get better performance than labeled data alone would allow when labels are expensive.

Sensitivity

True Positive Rate

Another name for recall, the fraction of actual positives that a classifier correctly identifies. It is widely used in medical and diagnostic testing.

Sentence Embedding

A single vector that represents the meaning of an entire sentence or passage, enabling similarity comparison and semantic search. It is produced by models designed to encode whole texts.

SentencePiece

A tokenization toolkit and method that treats text as a raw stream, including spaces, so it works across languages without pre-tokenization. It supports byte-pair encoding and unigram tokenization.

Sentiment Analysis

Opinion Mining

An NLP task that determines the emotional tone or opinion expressed in text, often classifying it as positive, negative, or neutral. It is widely used for analyzing reviews and social media.

Sequence Modeling

The task of learning from and predicting ordered data such as text, audio, time series, or DNA, where the order of elements carries meaning. Recurrent networks, convolutional models, and transformers are all used for it.

Sequence-to-Sequence

Seq2Seq

A modeling framework that maps an input sequence to an output sequence of possibly different length, using an encoder to read the input and a decoder to generate the output. It underlies machine translation and summarization.

Shadow Deployment

Shadow Mode

Running a new model alongside the current one on live traffic without serving its results to users, to compare its behavior safely before promotion. It surfaces problems without user impact.

SHAP

SHapley Additive exPlanations

A method for explaining individual model predictions by assigning each feature a contribution value based on cooperative game theory. It provides consistent, locally accurate feature attributions.

Sigmoid

Logistic Function

An activation function that squashes any real number into the range 0 to 1 using an S-shaped curve. It is useful for outputting probabilities but can cause vanishing gradients in deep networks.

Sim-to-Real Transfer

The challenge and set of techniques for transferring a model or policy trained in simulation to work reliably in the real world, bridging the gap between simulated and physical conditions. It is important in robotics.

Softmax

A function that converts a set of raw scores into probabilities that sum to one, commonly used to produce a model's confidence across categories.

Sparse Model

A model in which many parameters or activations are zero, so only a small portion is used or stored at a time, reducing compute and memory. Mixture-of-experts models are one popular way to build sparsity into large networks.

Specificity

True Negative Rate

A classification metric measuring the fraction of actual negatives that the model correctly identifies as negative. It complements recall (sensitivity), which measures correctly identified positives.

Speculative Decoding

An inference speedup where a small, fast model drafts several tokens that a larger model then verifies in parallel, accepting the correct ones. It reduces latency without changing the larger model's output distribution.

Speech Recognition

Automatic Speech Recognition · ASR · Speech-to-Text

The technology that converts spoken audio into written text, also called automatic speech recognition. It powers voice assistants, transcription, and dictation.

Standardization

Z-Score Normalization

Transforming a feature so it has zero mean and unit standard deviation, expressing each value as how many standard deviations it sits from the mean. It is a common preprocessing step for many algorithms.

Stemming

A text-normalization technique that strips words down to a rough root form by chopping off suffixes, so related words are treated the same. It is fast but can produce non-words.

Stochastic Gradient Descent

SGD

An optimization method that updates model parameters using the gradient computed on one training example or a small batch at a time, rather than the whole dataset. Its noisy updates are efficient and can help escape poor solutions.

Stop Words

Very common words such as the, is, and of that are often filtered out before text processing because they carry little distinguishing meaning. Removing them can reduce noise in some tasks.

Stratified Sampling

A sampling method that preserves the proportion of each class or group when splitting or subsampling data. It ensures training and test sets have representative class distributions.

Stride

The step size by which a convolutional filter or pooling window moves across the input. A larger stride reduces the output size and computation.

Structured Output

Constraining a language model to produce responses in a defined format such as JSON matching a schema, so downstream software can parse them reliably. It is essential for using LLMs in automated pipelines.

Subword Tokenization

A tokenization approach that breaks words into smaller reusable units so the model can handle rare or unseen words as combinations of known pieces. It balances vocabulary size against sequence length.

Supervised Learning

Training a model on examples that are each paired with a correct answer (a label), so it learns to predict that answer for new, unlabeled inputs.

Support Vector Machine

SVM

A supervised algorithm that finds the boundary (hyperplane) that best separates classes by maximizing the margin between them. Using kernels, it can also model non-linear boundaries.

Support Vectors

The training points that lie closest to the decision boundary in a support vector machine and determine its position. Only these points influence the final model.

Symbolic AI

GOFAI · Good Old-Fashioned AI

An approach to AI based on explicit rules and manipulation of human-readable symbols and logic, dominant before the rise of statistical machine learning. It is strong at reasoning but brittle and hard to scale to messy real-world data.

Synthetic Data

Artificially generated data, created by simulations or generative models, used to augment or replace real data for training. It helps when real data is scarce, sensitive, or expensive to label.

System Prompt

A special instruction that sets a model's role, rules, and behavior for a conversation, applied before and above the user's messages.

t-SNE

t-Distributed Stochastic Neighbor Embedding

A non-linear dimensionality-reduction technique used mainly to visualize high-dimensional data in two or three dimensions by keeping similar points close together. It is good for exploration but its distances between clusters should not be over-interpreted.

Tanh

Hyperbolic Tangent

An activation function shaped like sigmoid but outputting values between -1 and 1, centered at zero. Its zero-centered output often helps optimization compared with sigmoid.

Temperature

A setting that controls randomness in a model's output; low values make responses focused and predictable, high values make them more varied and creative.

Temporal Difference Learning

TD Learning

A reinforcement learning approach that updates value estimates using the difference between successive predictions, learning from each step without waiting for a final outcome. It blends ideas from Monte Carlo and dynamic programming.

Tensor

A multi-dimensional array of numbers that is the fundamental data structure for deep learning, generalizing scalars, vectors, and matrices to any number of dimensions. Neural networks compute by transforming tensors.

Text Summarization

The NLP task of producing a shorter version of a text that preserves its key information. Extractive methods select existing sentences, while abstractive methods generate new phrasing.

Text-to-Image

The generative task of producing an image that matches a natural-language description. Modern systems use diffusion or transformer models trained on paired image-text data.

Text-to-Speech

TTS · Speech Synthesis

The technology that synthesizes natural-sounding spoken audio from written text. Neural approaches have made synthesized voices increasingly lifelike.

TF-IDF

Term Frequency-Inverse Document Frequency

A weighting scheme that scores a word in a document by how often it appears there, scaled down by how common it is across all documents. It highlights words that are distinctive to a document.

Throughput

The number of requests or tokens a model or system can process per unit of time. It measures capacity and is often traded off against latency.

Time Series Forecasting

Predicting future values of a quantity based on its past observations ordered in time, accounting for trends, seasonality, and noise. It is used in demand planning, finance, and operations.

Token

The unit of text a language model reads and generates, often a word fragment; models process and are priced by counts of these tokens.

Tokenization

The step that breaks raw text into tokens the model can process, mapping words and word-pieces to numeric ids.

Tool Calling

function calling · tool use

A capability letting a language model invoke external functions or APIs, such as search or calculations, by emitting a structured request the surrounding program runs.

Top-k Sampling

A text-generation method that restricts each step's choices to the k most likely tokens and then samples among them. It adds controlled randomness while avoiding very unlikely words.

Top-p Sampling

nucleus sampling

A generation method that samples the next token from the smallest set of choices whose probabilities add up to a threshold p, balancing coherence and variety.

Topic Modeling

An unsupervised NLP technique that discovers abstract themes running through a collection of documents by grouping words that tend to co-occur. It helps organize and summarize large text corpora.

TPU

Tensor Processing Unit

A tensor processing unit, a specialized chip designed specifically to accelerate the tensor operations used in machine learning. It offers high throughput for training and inference of large models.

Train/Validation/Test Split

dataset split · holdout set

Dividing data into three parts: one to train the model, one to tune settings, and a held-out set to fairly estimate final performance.

Training

The process of feeding data to an algorithm so it adjusts a model's parameters to reduce error and improve at a task.

Transfer Learning

Reusing knowledge from a model trained on one task as a starting point for a related task, cutting the data and compute needed.

Transformer

A neural network architecture built around attention that processes sequences in parallel; it underpins nearly all modern large language models.

Tree of Thoughts

ToT

A prompting and search framework where a model explores multiple branching reasoning steps like a tree, evaluating and backtracking among them. It extends chain-of-thought reasoning to problems requiring exploration.

Turing Test

A proposed test of machine intelligence in which a human judge converses with a machine and a human and tries to tell them apart; a machine passes if the judge cannot reliably distinguish it. It shaped early thinking about artificial intelligence.

Type I Error

False Positive

A false positive: rejecting a true null hypothesis, or flagging something as present when it is not. Its rate is controlled by the significance level of a test.

Type II Error

False Negative

A false negative: failing to reject a false null hypothesis, or missing something that is actually present. Reducing it usually increases the risk of Type I errors.

U-Net

A convolutional architecture with a symmetric encoder-decoder shape and skip connections, originally designed for biomedical image segmentation. It is also widely used as the backbone of image diffusion models.

UMAP

Uniform Manifold Approximation and Projection

A dimensionality-reduction and visualization technique that preserves both local and some global structure of high-dimensional data, often faster than t-SNE. It is widely used to map embeddings into two dimensions.

Underfitting

When a model is too simple to capture the real patterns in the data, performing poorly on both the training set and new inputs.

Universal Approximation Theorem

A theoretical result stating that a feedforward network with a single hidden layer and enough neurons can approximate any continuous function to arbitrary accuracy. It explains why neural networks are so expressive, though it says nothing about learnability.

Unsupervised Learning

Training on data with no labels, letting the model discover structure on its own, such as grouping similar items or finding underlying patterns.

Value Function

In reinforcement learning, a function estimating the expected long-term reward of being in a state, or of taking an action in a state, under a given policy. It guides the agent toward high-reward behavior.

Vanishing Gradient

A training problem in deep networks where gradients shrink toward zero as they propagate backward, stalling learning in the earliest layers.

Variance

A statistical measure of how spread out a set of values is around their mean. In the bias-variance framing it also refers to how much a model's predictions change with different training data.

Variational Autoencoder

VAE

A generative autoencoder that learns a probabilistic latent space and can generate new data by sampling from it. It encodes inputs as distributions rather than fixed points, enabling smooth interpolation and generation.

Vector Database

vector store

A database that stores embeddings and finds the most similar ones to a query vector quickly, the backbone of semantic search and retrieval-augmented generation.

Vision Transformer

ViT

An image model that applies the transformer architecture to sequences of image patches instead of using convolutions. It has matched or exceeded convolutional networks on large-scale image tasks.

Vision-Language Model

VLM

A multimodal model that understands images and text jointly, able to describe pictures, answer questions about them, or follow instructions referencing visuals.

Vocabulary

The fixed set of tokens a language model knows and can read or generate, established during tokenizer training. Its size affects sequence length, memory, and how well rare words are handled.

Warmup

A training technique that starts with a very small learning rate and gradually increases it over the first steps before applying the main schedule. It stabilizes early training, especially for large transformer models.

Watermarking

Embedding a detectable signal into AI-generated text, images, or audio so its machine origin can later be identified. It is one proposed tool for tracing and moderating synthetic content.

Weight Decay

A regularization technique that shrinks model weights slightly at each update by adding a penalty on their magnitude, discouraging overly large parameters and reducing overfitting. It is closely related to L2 regularization.

Weight Initialization

The choice of starting values for a neural network's weights before training begins. Good initialization schemes keep signal and gradient magnitudes stable across layers and are essential for training deep networks.

Weights

parameters

The learned numeric values inside a model that determine how strongly inputs influence outputs; training is the process of finding good weights.

Word Embedding

A representation that maps each word to a dense vector of numbers such that words with similar meanings sit close together in the space. It replaced sparse one-hot representations in modern NLP.

Word2Vec

An early, influential technique for learning word embeddings by training a shallow network to predict words from their context or vice versa. It popularized the idea that word meaning can be captured by vector arithmetic.

WordPiece

A subword tokenization method that builds a vocabulary by choosing merges that most increase the likelihood of the training text. It is used by models such as BERT.

Xavier Initialization

Glorot Initialization

A weight initialization scheme that sets the initial scale based on the number of input and output units in a layer to keep activation variance stable. It works well with sigmoid and tanh activations.

XGBoost

Extreme Gradient Boosting

A widely used, optimized implementation of gradient-boosted decision trees known for speed and strong performance on structured, tabular data. It adds regularization and engineering optimizations to standard boosting.

YOLO

You Only Look Once

A family of real-time object detection models that predict bounding boxes and classes in a single pass over the image, prioritizing speed. The name stands for You Only Look Once.

Zero-Redundancy Optimization

ZeRO

A distributed training technique that shards a model's parameters, gradients, and optimizer states across devices to remove memory duplication, enabling training of very large models. It underlies popular large-scale training libraries.

Zero-Shot Chain-of-Thought

A prompting trick that elicits step-by-step reasoning from a model without worked examples, often by simply adding an instruction like think step by step. It improves reasoning on many tasks at no extra data cost.

Zero-Shot Learning

Asking a model to perform a task from instructions alone, with no examples provided, relying on knowledge gained during pretraining.

Software Development

459

Abstract Class

A class that cannot be instantiated directly and is meant to be subclassed, often declaring methods without implementations. It defines a common interface and shared behavior for its descendants.

Abstract Factory

A creational design pattern that provides an interface for creating families of related objects without specifying their concrete classes. It keeps a group of products consistent with one another.

Abstract Syntax Tree

AST

A tree representation of a program's syntactic structure that omits superfluous details like punctuation and focuses on meaningful constructs. Compilers and tools operate on the AST during later analysis and transformation.

Abstraction

Exposing only the essential behavior of a component while hiding its implementation details, letting callers work at a higher conceptual level.

Abstraction Leak

leaky abstraction

When the underlying details an abstraction was meant to hide surface and force callers to understand them, undermining the benefit of the abstraction.

Acceptance Testing

User Acceptance Testing · UAT

Testing that validates whether a system meets business requirements and is ready for delivery, often performed from the user's perspective. Passing it signals the software satisfies the agreed criteria.

Access Modifier

Visibility Modifier

A keyword such as public, private, or protected that controls the visibility and reachability of a class member. Access modifiers enforce encapsulation boundaries.

Accessor

Getter · Setter

A method that reads or writes the value of a private field, commonly called a getter or setter. Accessors let a class control and validate access to its internal state.

ACID

Atomicity, Consistency, Isolation, Durability

An acronym for the four guarantees of reliable database transactions: Atomicity, Consistency, Isolation, and Durability. Together they ensure transactions behave predictably even amid failures and concurrency.

Actor Model

A concurrency model in which independent actors each own private state and communicate only by sending asynchronous messages. Avoiding shared memory sidesteps many locking problems.

Adapter Pattern

Wrapper

A structural design pattern that wraps an existing interface with a new one so incompatible classes can work together. It acts as a translator between two systems.

Adjacency List

A graph representation that stores, for each node, a list of the nodes it connects to. It is memory-efficient for sparse graphs compared with an adjacency matrix.

Adjacency Matrix

A graph representation using a two-dimensional grid where each cell indicates whether an edge exists between two nodes. It allows constant-time edge checks but uses space proportional to the square of the node count.

Agile

An iterative approach to software development that delivers working increments in short cycles, favoring collaboration, feedback, and adaptation over fixed long-range plans.

Ahead-of-Time Compilation

AOT

The compilation of source or intermediate code into native machine code before execution rather than during it. It yields fast startup and predictable performance at the cost of build-time work.

Algebraic Data Type

ADT

A composite type formed by combining other types, typically as a sum of alternatives (variants) or a product of fields. It pairs naturally with pattern matching to model structured data.

Algorithm

A finite, well-defined sequence of steps that transforms input into a desired output, judged by correctness and by its time and space efficiency.

Amortized Analysis

A method of analyzing the average cost per operation over a sequence of operations, even when individual operations occasionally cost much more. It shows that expensive steps are rare enough to keep the average low.

API

Application Programming Interface

Application Programming Interface: a defined contract of operations, inputs, and outputs through which one piece of software requests services from another.

API Gateway

A server that acts as a single entry point for a set of backend services, handling concerns such as routing, authentication, rate limiting, and aggregation. It simplifies client access to a microservices system.

Array

A contiguous, indexed collection of elements of the same type offering constant-time access by position, foundational to most other data structures.

Artifact

Build Artifact

A file produced by the build process, such as a compiled binary, library, or container image, that can be deployed or distributed. Artifacts are often stored and versioned in a repository.

Aspect-Oriented Programming

AOP

A paradigm that isolates cross-cutting concerns such as logging or security into separate modules called aspects, which are woven into the main code at defined points. This keeps core logic free of repetitive boilerplate.

Assembler

A tool that translates assembly language, a human-readable form of machine instructions, into the corresponding machine code. Each assembly instruction typically maps to a single processor operation.

Assertion

A statement in code or a test that declares a condition expected to be true, raising an error if it is not. Assertions verify test outcomes and document assumptions in production code.

Associative Array

Map · Dictionary

A collection that maps unique keys to values, allowing values to be retrieved by key rather than by position. It is commonly implemented with hash tables or balanced trees.

Async/Await

asynchronous programming

Language syntax for writing non-blocking asynchronous code in a sequential style; await pauses a coroutine until a pending operation completes without blocking the thread.

Atomic Operation

An operation that completes entirely as a single indivisible step, so other threads never observe a partial result. Atomics enable safe lock-free updates of shared variables.

B-Tree

A self-balancing tree that keeps data sorted and allows nodes to have many children, minimizing disk reads for large datasets. It is widely used in databases and file systems.

Backlog

A prioritized list of work items, features, and fixes that a team may take on in the future. The product backlog is refined and reordered over time as priorities and understanding change.

Backpressure

A flow-control mechanism in which a slow consumer signals a fast producer to slow down, preventing unbounded buffering and resource exhaustion. It keeps streaming and reactive systems stable under load.

Backtracking

An algorithmic technique that incrementally builds candidate solutions and abandons a candidate as soon as it cannot lead to a valid solution. It is used for constraint problems like puzzles and pathfinding.

Backus-Naur Form

BNF

A notation for expressing the grammar of a language as a set of production rules with nonterminals and terminals. It and its extended variant are widely used to define programming language syntax.

Barrier

A synchronization point at which threads wait until all participating threads have reached it before any proceeds. Barriers coordinate phases of parallel computation.

Batch Processing

The execution of a series of jobs on a collection of data all at once, without user interaction, typically scheduled to run when convenient. It contrasts with real-time or interactive processing.

Behavior-Driven Development

BDD

A development practice that expresses requirements as concrete examples of behavior in a readable format shared by developers, testers, and business stakeholders. It builds on test-driven development with a focus on communication.

Big Ball of Mud

A software system that lacks a discernible architecture, having grown haphazardly into a tangle of shared state and ad hoc dependencies. It is a widely observed anti-pattern in long-lived codebases.

Big-Endian and Little-Endian

Endianness

Two conventions for ordering the bytes of a multi-byte value in memory: big-endian stores the most significant byte first, little-endian the least significant first. Mismatched endianness must be handled when systems exchange binary data.

Big-O Notation

time complexity · asymptotic complexity

A notation describing how an algorithm's running time or memory grows relative to input size in the worst case, ignoring constants, e.g. O(n) linear or O(n log n).

Binary Search Tree

BST

A binary tree in which each node's left subtree holds smaller keys and right subtree holds larger keys, enabling efficient ordered search, insertion, and deletion. Performance degrades to linear time if the tree becomes unbalanced.

Binary Tree

A tree data structure in which each node has at most two children, referred to as the left and right child. It is the foundation for many specialized trees and traversal algorithms.

Bisect

A debugging technique, automated in Git, that performs a binary search through commit history to find the commit that introduced a bug. It quickly narrows down the culprit among many commits.

Bitwise Operation

An operation that manipulates the individual bits of a value, including AND, OR, XOR, NOT, and bit shifts. Bitwise operations are used for flags, low-level protocols, and performance-critical code.

Blame

Annotate

A version control command that annotates each line of a file with the commit and author that last changed it. It helps trace when and why a particular line was introduced.

Bloom Filter

A space-efficient probabilistic data structure that tests whether an element is in a set, allowing false positives but never false negatives. It trades a small error rate for very low memory use.

Blue-Green Deployment

A release strategy that runs two identical production environments, sending live traffic to one while deploying and testing the other, then switching over. It enables near-zero-downtime releases and quick rollback.

Boilerplate

Repetitive, structurally required code that must be written to satisfy a language or framework but carries little unique logic of its own.

Boolean

bool

A primitive data type with exactly two values, true and false, used for logical conditions and control flow decisions.

Bootstrapping

In compilers, the process of writing a compiler in the language it compiles, using an existing compiler to build the first version and then using that to compile itself. More generally it means a self-starting process that needs minimal external input.

Borrowing

In ownership-based memory models, the temporary use of a value through a reference without taking ownership, subject to rules that prevent conflicting access. It enables safe sharing while the compiler enforces validity.

Bounded Context

In domain-driven design, an explicit boundary within which a particular domain model and its terms apply consistently. Different bounded contexts can define the same term differently without conflict.

Boxing

Unboxing · Autoboxing

Wrapping a primitive value in an object so it can be used where an object reference is required; unboxing is the reverse operation. It bridges value types and reference-based collections at some performance cost.

Branch

A movable named line of development that diverges from the main history, letting you work on features or fixes in isolation before merging back.

Bridge Pattern

A structural design pattern that separates an abstraction from its implementation so the two can vary independently. It replaces a rigid class hierarchy with composition.

Bubble Sort

A simple sorting algorithm that repeatedly steps through a list, swapping adjacent out-of-order elements until no swaps are needed. It is easy to understand but inefficient for large data with quadratic time.

Buffer Overflow

A defect where a program writes data past the end of an allocated buffer, corrupting adjacent memory. Buffer overflows can crash programs and are a classic security vulnerability.

Build

build process

The process of transforming source code and assets into a runnable or distributable artifact, typically involving compilation, bundling, and packaging steps.

Builder Pattern

A creational design pattern that constructs a complex object step by step, separating the construction process from the final representation. It is useful when an object has many optional parts.

Burndown Chart

A visual chart that tracks remaining work against time over an iteration or project, sloping toward zero as work is completed. It helps teams see whether they are on pace to finish.

Bytecode

A compact, portable intermediate instruction set produced by a compiler and executed by a virtual machine, sitting between source code and native machine code.

Cache Invalidation

The process of removing or updating cached entries when the underlying data changes so the cache does not serve stale results. It is famously one of the harder problems in computer science.

Caching

Storing copies of frequently used data in a fast-access layer to avoid repeated expensive computation or retrieval. Effective caching improves performance but introduces the challenge of keeping data fresh.

Callback

A function passed to another routine to be invoked later when an event occurs or an operation completes, a core pattern for asynchronous and event-driven code.

Canary Release

Canary Deployment

A deployment strategy that rolls out a change to a small subset of users first and monitors it before expanding to everyone. It limits the blast radius of a problematic release.

CAP Theorem

Brewer's Theorem

A principle stating that a distributed data store can guarantee at most two of consistency, availability, and partition tolerance at the same time. It frames the trade-offs designers face during network partitions.

Chain of Responsibility

A behavioral design pattern that passes a request along a chain of handlers, each deciding to process it or forward it to the next. It decouples senders from receivers.

Cherry-Pick

A Git operation that applies the changes from a specific commit onto the current branch without merging the entire source branch. It selectively transplants individual commits between branches.

Circuit Breaker

A resilience pattern that stops calls to a failing service after errors cross a threshold, quickly returning failures instead of waiting, then periodically testing for recovery. It prevents cascading failures across a system.

Class

A blueprint that defines the data (fields) and behavior (methods) shared by objects of a type; instances created from it are objects.

Client-Server Model

A distributed architecture in which client programs request services or resources from centralized server programs that provide them. It underlies most web and networked applications.

Clone

The operation of creating a complete local copy of a remote repository, including its files and full history. It is typically how a developer starts working on an existing project.

Closure

A function bundled with references to the variables from the scope in which it was defined, so it can access that captured state even after the outer function has returned.

Code Coverage

test coverage

A metric of how much source code is exercised by the test suite, useful for spotting untested areas but not a guarantee that the tested code is correct.

Code Freeze

A period before a release during which no new changes may be merged except critical fixes, to stabilize the build for testing and shipping. It reduces the risk of late-introduced defects.

Code Review

The practice of having peers examine proposed changes before merge to catch defects, share knowledge, and keep code consistent with team standards.

Code Smell

A surface indication in code that often corresponds to a deeper design problem, such as duplicated logic or an overly long method. Smells are hints to investigate, not certain defects.

Cohesion

How closely the responsibilities within a single module belong together; high cohesion means a module does one thing well, aiding clarity and reuse.

Command Pattern

A behavioral design pattern that encapsulates a request as an object, allowing requests to be queued, logged, or undone. It separates the object issuing a request from the one performing it.

Commit

A recorded snapshot of staged changes in version control, identified by a hash and carrying a message, forming one point in the project's history.

Compiler

A program that translates source code in one language into another form, typically machine code or bytecode, ahead of execution, reporting errors before it runs.

Composite Pattern

A structural design pattern that lets clients treat individual objects and compositions of objects uniformly through a common interface. It naturally models tree structures such as file systems.

Concurrency

Structuring a program so multiple tasks make progress in overlapping time periods, coordinating shared resources; distinct from truly simultaneous parallel execution.

Concurrency Bug

A defect arising from the interaction of concurrent tasks, such as race conditions, deadlocks, or livelocks, notorious for being intermittent and hard to reproduce.

Concurrency Control

The set of techniques that coordinate simultaneous operations on shared data so they produce correct results without interfering. It spans locking, versioning, and transaction isolation.

Concurrency Model

The overall strategy a language or system uses to structure concurrent work, such as threads and locks, actors and message passing, or async event loops.

Concurrency Primitive

A low-level building block for coordinating threads, such as locks, semaphores, condition variables, and atomics, that higher-level abstractions are built upon.

Concurrency vs Parallelism

Concurrency is dealing with many tasks at once by interleaving progress; parallelism is doing many tasks at the same instant on multiple cores. One is structure, the other is execution.

Condition Variable

A synchronization primitive that lets threads wait until a particular condition becomes true and be signaled when it changes. It is used with a lock to coordinate cooperating threads.

Conditional

if statement · branch

A control structure that runs different branches of code depending on whether a boolean expression is true, typically expressed with if/else statements.

Constant

const

A named value that is fixed at definition and cannot be reassigned, signaling intent and preventing accidental modification of values meant to stay stable.

Constructor

A special method that initializes a new object, setting up its initial state when the object is created. Many languages call it automatically during instantiation.

Containerization

Packaging an application together with its dependencies into a lightweight, isolated container that runs consistently across environments. Containers share the host kernel, making them more efficient than full virtual machines.

Content Delivery Network

CDN

A geographically distributed network of servers that caches and delivers web content from locations near users to reduce latency. It offloads traffic from origin servers and improves reliability.

Content Negotiation

The process by which a client and server agree on the format of a response, such as JSON or XML, using request headers like Accept. It lets one endpoint serve multiple representations.

Context Switch

The act of saving one thread or process's state and loading another's so a single CPU can run multiple tasks. Frequent context switches add overhead that can hurt performance.

Continuation

A representation of the remaining steps of a computation at a given point, which can be saved and invoked later. Continuations underlie advanced control flow such as coroutines and exceptions.

Continuous Delivery

CD · continuous deployment · CI/CD

Extending continuous integration so that every validated change is automatically prepared for release, keeping the software in a deployable state at all times.

Continuous Deployment

CD

A practice in which every change that passes automated tests is released to production automatically, without manual approval. It shortens the path from commit to live software.

Continuous Integration

CI

The practice of frequently merging developers' work into a shared branch where automated builds and tests run on every change to catch breakage early.

Continuous Profiling

The ongoing collection of performance data such as CPU and memory usage from running software to find bottlenecks and regressions over time. It gives insight into how code behaves under real workloads.

Coroutine

A function that can suspend its execution and later resume from where it left off, cooperatively yielding control. Coroutines support lightweight concurrency and generators.

Coupling

The degree of interdependence between modules; loose coupling means components can change independently, while tight coupling makes changes cascade and testing harder.

Covariance and Contravariance

Variance

Rules that govern how subtyping between component types relates to subtyping of container or function types. Covariance preserves the direction of subtyping while contravariance reverses it.

CQRS

Command Query Responsibility Segregation

Command Query Responsibility Segregation, an architectural pattern that separates the models used to update data from those used to read it. It can optimize each path independently at the cost of added complexity.

Critical Section

A region of code that accesses shared resources and must not be executed by more than one thread at a time. Synchronization primitives protect critical sections to prevent race conditions.

CRUD

Create, Read, Update, Delete

An acronym for the four basic operations on persistent data: Create, Read, Update, and Delete. Most data-driven applications and APIs are built around these operations.

Currying

Transforming a function that takes multiple arguments into a chain of functions each taking a single argument. It enables partial application and composition in functional programming.

Dangling Pointer

A pointer that references memory which has already been freed or is no longer valid. Dereferencing it causes undefined behavior and is a common source of crashes and security bugs.

Data Structure

A way of organizing and storing data so it can be accessed and modified efficiently, such as arrays, linked lists, stacks, queues, trees, hash maps, and graphs.

Data Type

type

A classification that tells the language what kind of value a piece of data is (integer, string, boolean, etc.) and which operations are valid on it.

Dead Code

Code that is never executed or whose results are never used, such as an unreachable branch or an unused function. It adds clutter and maintenance burden and is a candidate for removal.

Deadlock

A standstill where two or more tasks each wait forever for a resource the other holds, so none can proceed; avoided with lock ordering or timeouts.

Debugger

A tool that lets you pause a running program, step through code line by line, and inspect variables and the call stack to locate the cause of a defect.

Declarative Programming

A style expressing what result you want without specifying the step-by-step control flow, contrasted with imperative code that spells out how to compute it.

Decorator

Annotation

A syntax that wraps a function or class to modify or extend its behavior without changing its source, often marked with a special symbol. It is distinct from the decorator design pattern though inspired by it.

Decorator Pattern

A structural design pattern that attaches new responsibilities to an object dynamically by wrapping it in decorator objects sharing its interface. It offers a flexible alternative to subclassing for extending behavior.

Deep Copy

A copy of an object that also duplicates all objects it references, so the copy is fully independent of the original. Modifying the copy does not affect the source at any level of nesting.

Default Argument

Default Parameter

A parameter that takes a predefined value when the caller does not supply one, making that argument optional. It simplifies function signatures for common cases.

Definition of Done

DoD

A shared, explicit checklist of criteria a work item must satisfy to be considered complete, such as code reviewed, tested, and documented. It creates a common understanding of quality across the team.

Dependency

External code, such as a library or module, that a program relies on to function. Managing versions and updates of dependencies is a central concern in modern software development.

Dependency Hell

A frustrating situation in which packages have conflicting or incompatible version requirements that are difficult to satisfy simultaneously. It commonly arises with complex transitive dependency graphs.

Dependency Injection

DI · inversion of control · IoC

A design technique where an object receives its collaborators from the outside rather than constructing them itself, improving testability and decoupling.

Dependency Inversion Principle

DIP

The SOLID principle that high-level modules should depend on abstractions rather than on low-level concrete implementations, and abstractions should not depend on details. It reduces coupling between layers.

Deque

Double-Ended Queue

A double-ended queue data structure that supports adding and removing elements from both the front and the back efficiently. It generalizes both stacks and queues.

Design Pattern

A named, reusable solution to a commonly recurring design problem, such as Observer, Factory, or Strategy, providing shared vocabulary and proven structure.

Destructor

Finalizer

A special method invoked when an object is destroyed, used to release resources such as memory or file handles. It is prominent in languages with deterministic object lifetimes.

Destructuring

A syntax that unpacks values from arrays or properties from objects into distinct variables in a single expression. It reduces boilerplate when extracting multiple fields.

Detached HEAD

A Git state in which HEAD points directly at a specific commit rather than at a branch, so new commits are not attached to any branch. Work done here can be lost unless a branch is created to keep it.

DevOps

A culture and set of practices that unite software development and IT operations to shorten delivery cycles and improve reliability through automation and collaboration. It emphasizes continuous integration, delivery, and monitoring.

Diff

A representation of the differences between two versions of text or files, showing added, removed, and unchanged lines. Version control tools use diffs to display and store changes.

Dijkstra's Algorithm

A graph algorithm that computes the shortest paths from a source node to all others in a graph with non-negative edge weights. It repeatedly selects the closest unvisited node using a priority queue.

Directed Acyclic Graph

DAG

A directed graph with no cycles, meaning no path returns to its starting node. DAGs model dependencies, scheduling, and version histories.

Distributed Version Control

DVCS

A version control model in which every developer holds a complete copy of the repository and its history, enabling offline work and flexible collaboration. Git and Mercurial are examples.

Divide and Conquer

An algorithmic paradigm that breaks a problem into smaller subproblems of the same type, solves them recursively, and combines their results. Merge sort and quicksort are classic examples.

Domain-Driven Design

DDD

An approach to software design that models software closely on the business domain, using a shared ubiquitous language between developers and domain experts. It emphasizes bounded contexts and rich domain models.

Domain-Specific Language

DSL

A programming or configuration language specialized to a particular application domain, such as SQL for queries or regular expressions for text patterns. It trades general power for expressiveness within its niche.

DRY

Don't Repeat Yourself

Don't Repeat Yourself: the principle that each piece of knowledge should have a single authoritative representation, so duplication doesn't drift out of sync.

Duck Typing

A style of typing where an object's suitability is determined by the presence of required methods and properties rather than its declared type. The name comes from the saying that if it walks and quacks like a duck, it is treated as a duck.

Dynamic Programming

DP

An algorithmic technique that solves complex problems by breaking them into overlapping subproblems and storing subproblem results to avoid recomputation. It applies to problems with optimal substructure.

Dynamic Typing

A type system that associates types with values at runtime rather than compile time, offering flexibility while deferring type errors until execution.

Eager Evaluation

Strict Evaluation

An evaluation strategy that computes expressions as soon as they are bound, before their results are known to be needed. It is the default in most imperative languages.

Edge Case

corner case

An input or condition at the extreme boundary of what code handles, such as empty input, maximum size, or zero, where defects commonly hide.

Encapsulation

The object-oriented principle of hiding an object's internal state behind a public interface, so callers interact through methods rather than touching fields directly.

End-to-End Test

E2E test

A test that drives the full system the way a real user would, validating a complete workflow across all layers from interface to storage.

Endpoint

A specific URL or address on a server where an API can be accessed to perform an operation or retrieve a resource. Each endpoint typically corresponds to a particular function of the API.

Enum

enumeration

A type defining a fixed set of named constant values, making code that chooses among a small set of options clearer and less error-prone than raw literals.

Epic

A large body of work in agile planning that is too big to complete in a single iteration and is broken down into smaller user stories. It groups related stories toward a common goal.

Event Loop

A runtime construct that continuously pulls queued events and callbacks and dispatches them one at a time, enabling non-blocking single-threaded concurrency.

Event Sourcing

A pattern that stores the full sequence of state-changing events rather than just the current state, reconstructing state by replaying events. It provides a complete audit trail and supports temporal queries.

Event-Driven Architecture

EDA

An architectural style in which components communicate by producing and reacting to events rather than calling each other directly. It supports loose coupling and asynchronous, scalable systems.

Event-Driven Programming

A paradigm in which the flow of the program is determined by events such as user actions, messages, or sensor outputs, handled by callbacks or event handlers. It is central to GUIs and networked servers.

Eventual Consistency

A consistency model in distributed systems where replicas may temporarily differ but converge to the same value once updates stop. It trades immediate consistency for availability and partition tolerance.

Exception Handling

try-catch

A mechanism for responding to runtime errors by throwing an exception and catching it in an enclosing handler, separating error-recovery logic from normal flow.

Facade Pattern

A structural design pattern that provides a simplified, unified interface to a complex subsystem. It shields clients from the subsystem's internal complexity.

Factory Method

A creational design pattern that defines a method for creating objects, letting subclasses decide which concrete class to instantiate. It decouples client code from specific constructors.

Fail-Fast

A design principle in which a system detects errors early and halts immediately rather than continuing in a corrupt or uncertain state. Failing fast surfaces problems close to their cause and simplifies debugging.

Fast-Forward Merge

A merge in which the target branch has no new commits since the source diverged, so its pointer simply advances to the source's tip without creating a merge commit. It produces a linear history.

Feature Branch

A branch created to develop a specific feature or fix in isolation from the main line, merged back when complete. It keeps work-in-progress separate from stable code.

Feature Flag

Feature Toggle

A configuration switch that turns a feature on or off at runtime without redeploying code, enabling gradual rollouts, experiments, and quick disabling of problematic features. It decouples deployment from release.

Fiber

Green Thread

A lightweight, cooperatively scheduled unit of execution managed in user space rather than by the operating system. Fibers, also called green threads, allow many concurrent tasks with low overhead.

Field

Member Variable · Attribute

A named piece of data stored within an object, struct, or record. Fields together define the state that an instance holds.

First-Class Function

A function that a language treats like any other value: it can be assigned to variables, passed as an argument, and returned from other functions. This capability underpins higher-order functions.

Flaky Test

A test that sometimes passes and sometimes fails without any code change, often due to timing, ordering, or environmental dependencies. Flaky tests erode trust in a test suite and should be stabilized or removed.

Floating Point

float · double

A numeric type that represents real numbers with a fractional part using a mantissa and exponent, trading exactness for range and prone to rounding error.

Fluent Interface

Method Chaining

An API design that allows method calls to be chained together in a readable, sentence-like sequence, with each method returning an object to continue the chain. Builders and query libraries often use this style.

Flyweight Pattern

A structural design pattern that minimizes memory use by sharing common state across many fine-grained objects instead of storing it in each. It separates intrinsic shared data from extrinsic per-instance data.

Fork

A personal server-side copy of a repository that lets a developer make changes independently of the original, often as a step toward contributing back via a pull request. It is a common workflow on hosting platforms.

Fork-Join

A parallelism pattern that splits a task into subtasks that run concurrently (fork) and then combines their results once all finish (join). It suits recursively divisible workloads.

Formal Grammar

Grammar

A set of production rules that defines which strings are valid in a language, used to specify programming language syntax. Parsers are built to recognize the language a grammar describes.

Framework

A structured scaffold that defines an application's shape and calls into the code you supply at defined extension points, inverting control compared to a library.

Function

subroutine · procedure · method

A reusable, named block of code that takes inputs (arguments), performs work, and optionally returns a result, letting you invoke the same logic from many places.

Functional Programming

FP

A paradigm that builds programs by composing pure functions and avoiding shared mutable state, favoring immutability, higher-order functions, and expressions over side effects.

Functor

In functional programming, a type that can be mapped over, providing a way to apply a function to values inside a wrapping context while preserving its structure. Lists and optional types are common functors.

Future

An object representing the eventual result of an asynchronous computation that may not have completed yet. Code can wait on it or attach callbacks to run when the value is ready.

Fuzz Testing

Fuzzing

An automated testing technique that feeds a program large amounts of random, malformed, or unexpected input to uncover crashes and security flaws. It is effective at finding edge-case defects humans miss.

Garbage Collection

GC

Automatic memory management that reclaims objects a program can no longer reach, freeing developers from manual deallocation at the cost of some runtime overhead.

Generational Garbage Collection

A garbage collection strategy that groups objects by age and collects the young generation more frequently, exploiting the observation that most objects die young. It reduces collection overhead for typical workloads.

Generic

parametric polymorphism · template

A type or function parameterized over types, letting one implementation work with many concrete types while preserving type safety, e.g. a list of T.

Git

A distributed version-control system that tracks content as snapshots, giving every clone the full history and enabling fast local branching and merging.

Graceful Degradation

A design approach in which a system continues to provide reduced functionality when some components fail rather than failing completely. Users retain core service even when parts are unavailable.

Gradual Typing

An approach that allows static and dynamic typing to coexist in one program, letting developers add type annotations incrementally. TypeScript and Python's optional type hints are examples.

Graph

A data structure of vertices connected by edges, modeling networks and relationships; traversed with algorithms like breadth-first and depth-first search.

GraphQL

A query language and runtime for APIs that lets clients request exactly the data they need in a single request against a typed schema. It reduces over-fetching and under-fetching compared with fixed REST endpoints.

Greedy Algorithm

An algorithmic strategy that makes the locally optimal choice at each step in hope of reaching a global optimum. It is efficient but only yields correct results for problems with the right structure.

gRPC

A high-performance, open-source remote procedure call framework that uses HTTP/2 for transport and Protocol Buffers for serialization. It supports streaming and strongly typed service contracts.

Guard Clause

An early check at the start of a function that handles an invalid or edge condition and returns immediately, reducing nesting in the main logic. Guard clauses make the primary code path clearer.

Hash Collision

The situation where a hash function produces the same output for two different inputs. Hash tables resolve collisions with strategies such as chaining or open addressing.

Hash Table

hash map · dictionary · map

A structure mapping keys to values via a hash function that computes an index, giving average constant-time lookup, insertion, and deletion.

Hashing

The process of applying a hash function to map data of arbitrary size to fixed-size values used as indexes or fingerprints. It enables constant-time average lookups in hash tables.

HATEOAS

Hypermedia as the Engine of Application State

Hypermedia as the Engine of Application State, a REST constraint in which responses include links guiding clients to the actions available next. It lets clients navigate an API dynamically rather than hard-coding URLs.

Heap

Binary Heap

A tree-based data structure satisfying the heap property, where each parent is ordered relative to its children, enabling fast access to the minimum or maximum element. It is the usual basis for priority queues and heapsort.

Heap Memory

A region of memory used for dynamic allocation whose objects persist until explicitly freed or garbage collected, allowing flexible lifetimes. Access is slower than the stack and mismanagement causes leaks or fragmentation.

Heapsort

A comparison-based sorting algorithm that builds a heap from the input and repeatedly extracts the largest element to produce sorted output. It runs in logarithmic-linear time and sorts in place.

Heisenbug

A bug that changes behavior or disappears when one attempts to observe it, for example when adding logging or running under a debugger alters timing. Such bugs are notoriously difficult to reproduce and fix.

Hexagonal Architecture

Ports and Adapters

An architectural style that isolates core application logic from external systems by communicating through ports and adapters. It makes the core testable and independent of frameworks, databases, and UIs.

Higher-Order Function

A function that takes other functions as arguments or returns a function, enabling composition patterns like map, filter, and reduce.

Hotfix

A small, urgent change applied to production to correct a critical defect outside the normal release cycle. Hotfixes are typically minimal and fast-tracked to restore service.

HTTP Method

HTTP Verb

A verb in an HTTP request that indicates the desired action on a resource, such as GET to read, POST to create, PUT to replace, and DELETE to remove. Methods convey intent and have defined semantics around safety and idempotency.

HTTP Status Code

Status Code

A three-digit number in an HTTP response that indicates the outcome of a request, grouped into categories such as success, redirection, client error, and server error. Examples include 200 for success and 404 for not found.

IDE

Integrated Development Environment

Integrated Development Environment: an application combining a code editor, build tools, debugger, and other aids into one workspace to streamline development.

Idempotency

idempotent

A property where performing an operation multiple times has the same effect as performing it once, making retries safe in the face of network or crash failures.

Idempotency Key

A unique token a client attaches to a request so the server can detect and ignore duplicate submissions, making retries safe for operations that change state.

Idempotent Operation

An operation that can be applied repeatedly without changing the result beyond the first application, central to safe retries in distributed and networked systems.

Idiomatic Code

Code written in the natural, conventional style of a particular language or framework, using its preferred patterns and features. Idiomatic code is easier for other practitioners of that ecosystem to read and maintain.

Immutability

immutable

The property of a value or object that cannot be changed after creation; modifications produce new values instead, which simplifies reasoning and concurrency.

Imperative Programming

A style where code issues explicit sequential statements that change program state to achieve a result, describing how the computation proceeds step by step.

Infrastructure as Code

IaC

The practice of defining and provisioning computing infrastructure through machine-readable configuration files rather than manual setup. It makes environments repeatable, versioned, and reviewable.

Inheritance

A mechanism where a class derives fields and methods from a parent class, reusing and extending behavior; overused hierarchies are a common source of rigidity.

Insertion Sort

A sorting algorithm that builds the sorted list one element at a time by inserting each new element into its correct position among those already sorted. It performs well on small or nearly-sorted inputs.

Integer

int

A primitive numeric type representing whole numbers without a fractional part, bounded by a fixed bit width that determines its minimum and maximum values.

Integration Test

A test that exercises multiple components together to verify they interact correctly, catching mismatches that pass in isolation but fail when combined.

Interface

protocol

A contract declaring a set of method signatures without implementation, letting different types be used interchangeably as long as they satisfy the contract.

Interface Segregation Principle

ISP

The SOLID principle that clients should not be forced to depend on methods they do not use, favoring many small, focused interfaces over one large one. It reduces unnecessary coupling.

Intermediate Representation

IR

A form of code between the source language and machine code that a compiler uses for analysis and optimization. A well-designed intermediate representation makes optimizations reusable across languages and targets.

Interpreter

A program that reads and executes source code directly, statement by statement, without a separate ahead-of-time compilation step, trading speed for flexibility.

Intersection Type

A type that combines several types so that a value must satisfy all of them simultaneously, exposing the members of each. It is used to compose capabilities in structural type systems.

Invariant

A condition that always holds true at particular points during a program's execution, such as a loop invariant that stays valid across every iteration. Invariants aid reasoning about and verifying correctness.

Inversion of Control

IoC

A design principle in which the framework or container, rather than the application code, controls the flow and the creation of dependencies. Dependency injection is a common way to achieve it.

Iterator

An object that produces a sequence of values one at a time on demand, letting code traverse a collection without exposing its underlying structure.

JSON

JavaScript Object Notation

JavaScript Object Notation, a lightweight, human-readable text format for representing structured data as key-value pairs and arrays. It is the most common data interchange format for web APIs.

Just-In-Time Compilation

JIT

A technique that compiles code to native machine instructions at runtime rather than ahead of time, often optimizing based on observed execution patterns. It blends the portability of interpretation with the speed of compilation.

Kanban

An agile method that visualizes work as cards on a board flowing through stages and limits work in progress to improve flow and reveal bottlenecks. It emphasizes continuous delivery over fixed-length iterations.

Keyword Argument

Named Argument

An argument passed to a function by naming the parameter it maps to rather than relying on position. It improves readability and lets callers skip optional parameters.

KISS

Keep It Simple

Keep It Simple, Stupid: a design maxim favoring the simplest solution that meets the need, because simpler systems are easier to understand, test, and maintain.

Lambda Expression

Anonymous Function · Lambda

An anonymous function defined inline without a name, often passed as an argument or returned from another function. It is a core building block of functional programming.

Layered Architecture

N-Tier Architecture

An architectural style that organizes code into horizontal layers such as presentation, business logic, and data access, each depending only on the one beneath it. It promotes separation of concerns.

Lazy Evaluation

Call by Need

An evaluation strategy that delays computing a value until it is actually needed, and may cache the result. It can improve performance and allows working with infinite data structures.

Lexical Analysis

Tokenization · Lexing

The first phase of compilation that scans source text and groups characters into meaningful tokens such as keywords, identifiers, and symbols. It is performed by a component called a lexer or tokenizer.

Library

A collection of reusable code you call from your own program, keeping control of the overall flow; contrasted with a framework that calls your code.

Linked List

A linear data structure of nodes where each node holds a value and a reference to the next, allowing efficient insertion and removal without contiguous memory.

Linker

A tool that combines compiled object files and libraries into a single executable or library, resolving references between them. Linking can happen statically at build time or dynamically at load time.

Linter

static analysis

A static-analysis tool that scans source code for stylistic issues, likely bugs, and rule violations without running it, enforcing consistency across a codebase.

Liskov Substitution Principle

LSP

The SOLID principle that objects of a subclass should be usable anywhere their superclass is expected without breaking correctness. Violations often indicate a flawed inheritance hierarchy.

Livelock

A concurrency failure in which threads keep changing state in response to each other but make no actual progress. Unlike deadlock, the threads are active yet stuck.

Load Balancing

The distribution of incoming requests across multiple servers to improve throughput, reduce latency, and avoid overloading any single machine. Load balancers can route by round-robin, least connections, or other strategies.

Load Testing

A form of performance testing that measures how a system behaves under expected or peak levels of concurrent usage. It reveals bottlenecks and confirms the system meets capacity goals.

Lock

A synchronization mechanism that grants exclusive access to a shared resource, forcing other threads to wait until it is released. Locks prevent data races but can cause contention or deadlock if misused.

Logic Programming

A paradigm in which programs are expressed as sets of facts and rules, and computation proceeds by the system inferring answers to queries. Prolog is the best-known logic programming language.

Loop

iteration

A control structure that repeats a block of code while a condition holds or over the items of a collection, the primary tool for iteration.

Machine Code

Native Code

The lowest-level program representation, consisting of binary instructions that a processor executes directly. Compilers and assemblers ultimately translate higher-level code into it.

Macro

A rule or construct that expands into other code before or during compilation, enabling reuse of syntactic patterns and metaprogramming. Macros can be simple text substitution or full syntactic transformations.

Mark and Sweep

A garbage collection algorithm that marks all objects reachable from roots, then sweeps and frees everything unmarked. It handles reference cycles that reference counting cannot.

Marshalling

Unmarshalling

The process of transforming an object's in-memory representation into a format suitable for storage or transmission, and unmarshalling reverses it. It is closely related to serialization and often used across process or network boundaries.

Mediator Pattern

A behavioral design pattern that centralizes communication between objects in a mediator, so components refer to the mediator instead of each other. It reduces tangled direct dependencies.

Memento Pattern

A behavioral design pattern that captures and externalizes an object's internal state so it can be restored later, without violating encapsulation. It is a common basis for undo functionality.

Memoization

An optimization that caches a function's results by its inputs so repeated calls with the same arguments return the stored value instead of recomputing.

Memory Fragmentation

The condition where free memory is broken into many small, non-contiguous blocks, so large allocations fail even though enough total memory is free. It reduces effective usable memory over time.

Memory Leak

A defect where a program keeps allocating memory it no longer needs but never releases, causing usage to grow until performance degrades or the process crashes.

Merge

Combining the changes from one branch into another, reconciling divergent histories; overlapping edits produce conflicts a developer must resolve.

Merge Conflict

conflict

A situation where two branches changed the same lines and version control cannot auto-combine them, requiring a person to choose or blend the changes.

Merge Sort

A divide-and-conquer sorting algorithm that recursively splits a list in half, sorts each half, and merges them back together. It guarantees logarithmic-linear time and is stable.

Message Broker

An intermediary service that routes, transforms, and delivers messages between applications, often supporting queues and publish-subscribe topics. It centralizes messaging concerns away from individual services.

Message Queue

A component that holds messages sent between producers and consumers, allowing them to communicate asynchronously and buffer load. It decouples services and smooths spikes in demand.

Metaprogramming

The writing of code that generates, inspects, or modifies other code (or itself) at compile time or runtime. Macros, reflection, and code generation are common metaprogramming techniques.

Method

A function defined as part of a class or object that operates on that object's data. Methods express the behavior associated with a type.

Method Overloading

Defining multiple methods with the same name but different parameter lists, letting the compiler choose the right one based on the arguments. It supports the same operation over different input types.

Method Overriding

Providing a subclass with its own implementation of a method already defined in a superclass, replacing the inherited behavior. It is a key part of inheritance-based polymorphism.

Microservices

An architectural style that structures an application as a suite of small, independently deployable services communicating over a network. It enables independent scaling and deployment at the cost of operational complexity.

Middleware

Software that sits between components or between an application and the operating system, providing common services such as request processing, authentication, or messaging. In web frameworks it often forms a pipeline around each request.

Minimum Spanning Tree

MST

A subset of a connected weighted graph's edges that connects all nodes with the least total weight and no cycles. Algorithms like Kruskal's and Prim's compute it.

Minimum Viable Product

MVP

The smallest version of a product that delivers enough value to satisfy early users and generate feedback for further development. It validates ideas quickly while minimizing wasted effort.

Mixin

A class or module that provides methods to be reused by other classes without being their parent through standard inheritance. Mixins add capabilities across unrelated class hierarchies.

Mock

stub · test double

A stand-in object that imitates a real dependency during testing, returning controlled responses and recording calls so a unit can be tested in isolation.

Model-View-Controller

MVC

An architectural pattern that splits an application into a model holding data and logic, a view presenting it, and a controller handling input. Separating these roles improves maintainability and testability.

Model-View-ViewModel

MVVM

An architectural pattern related to MVC in which a view model exposes bindable data and commands to the view, mediating between the view and the model. It is popular in data-binding UI frameworks.

Module

A self-contained unit of code that groups related functionality and controls what it exposes to the rest of a program. Modules promote organization and reuse.

Monad

A design pattern from functional programming that wraps values in a computational context and provides operations to chain functions over them while managing that context. Common examples handle optional values, errors, or side effects.

Monolithic Architecture

Monolith

An architectural style in which an application is built and deployed as a single, tightly integrated unit. It is simple to start with but can become hard to scale and evolve as it grows.

Monorepo

A single repository that holds the code for many projects or services rather than splitting them across separate repositories. It simplifies shared code and atomic cross-project changes but requires tooling to scale.

Mutation Testing

A technique that evaluates the quality of a test suite by introducing small deliberate faults into the code and checking whether tests catch them. Surviving mutants reveal gaps in test coverage.

Mutex

lock · mutual exclusion

A mutual-exclusion lock that lets only one thread enter a critical section at a time, preventing concurrent access to shared data from corrupting it.

Namespace

A named scope that groups related identifiers to prevent naming collisions between different parts of a program or libraries. It lets identical names coexist under different qualifiers.

Nominal Typing

A type system in which compatibility is based on explicit names and declarations, so two types are equivalent only if they share the same declared identity. It contrasts with structural typing.

Nondeterminism

The property of a computation whose output or behavior can vary between runs given the same input, often due to concurrency, timing, or randomness. Nondeterministic behavior makes bugs harder to reproduce.

NP-Completeness

A classification of decision problems that are in NP and at least as hard as every other NP problem, so a fast solution to one would solve them all. No known polynomial-time algorithm exists for them.

Null Pointer

null reference · null pointer exception

A reference that points to nothing; dereferencing it triggers a common runtime error, which is why many languages add null-safety or optional types.

Nullable Type

Optional Type

A type that explicitly allows the absence of a value, usually represented as null or none, forcing code to account for the empty case. It helps prevent null-reference errors.

Object

instance

A concrete instance of a class or type that bundles state (data) with the operations that act on it, addressable and passed around at runtime.

Object-Oriented Programming

OOP

A paradigm that structures code around objects bundling state and behavior, organized through encapsulation, inheritance, and polymorphism.

Observability

The degree to which the internal state of a system can be understood from its external outputs, typically through logs, metrics, and traces. High observability makes it easier to diagnose problems in production.

Observer Pattern

A behavioral design pattern in which subjects maintain a list of observers and notify them automatically of state changes. It underpins event handling and publish-subscribe systems.

Off-by-One Error

Fencepost Error

A common logic error where a loop or index is iterated one time too many or too few, often from confusing inclusive and exclusive boundaries. It frequently arises at the edges of arrays and ranges.

Open-Closed Principle

OCP

The SOLID principle that software entities should be open for extension but closed for modification, so new behavior is added without altering existing tested code. It is often achieved through abstraction and polymorphism.

OpenAPI

Swagger

A specification for describing RESTful APIs in a standard, machine-readable format covering endpoints, parameters, and responses. Tools use it to generate documentation, client code, and server stubs.

Operator Overloading

Giving operators such as plus or equals custom meanings for user-defined types. It lets objects be used with familiar syntax, though overuse can obscure intent.

Optimistic Concurrency Control

OCC

A concurrency strategy that lets transactions proceed without locking and checks for conflicts only at commit time, retrying if a conflict is detected. It performs well when contention is rare.

Ownership

A memory-management model, most associated with Rust, in which each value has a single owner responsible for freeing it, and the value is dropped when its owner goes out of scope. It enforces memory safety at compile time without a garbage collector.

Package Manager

A tool that installs, updates, and resolves versioned dependencies for a project from a registry, keeping builds reproducible and dependency versions consistent.

Pair Programming

An agile practice in which two developers work together at one workstation, one writing code while the other reviews each line in real time. It improves code quality and spreads knowledge across the team.

Parallelism

Executing multiple computations literally at the same instant across multiple cores or machines to increase throughput, often layered on a concurrent design.

Parameter

argument

A named placeholder in a function's definition that receives an argument value when the function is called, letting one function operate on varying inputs.

Parsing

Syntax Analysis

The compiler phase that analyzes a stream of tokens against a grammar to determine its syntactic structure, usually producing a parse tree or abstract syntax tree. It reports syntax errors when the input does not conform.

Partial Application

Fixing some of a function's arguments to produce a new function that takes the remaining arguments. It specializes a general function for a specific context.

Pass by Reference

An argument-passing convention in which the function receives a reference to the caller's variable, so modifications inside the function affect the original. It avoids copying large data but can cause unexpected mutations.

Pass by Value

An argument-passing convention in which a copy of the value is given to the function, so changes inside the function do not affect the caller's original. It contrasts with pass by reference.

Patch

A file that describes a set of changes in diff format so they can be applied to another copy of the code. Patches let changes be shared and reviewed independently of a repository.

Pattern Matching

A control mechanism that checks a value against a series of structural patterns and binds parts of it to variables when a pattern matches. It concisely destructures data and branches on its shape.

Payload

The body of a request or response that carries the actual data being transmitted, as opposed to headers and metadata. In an API call, the payload is typically formatted as JSON or XML.

Peer-to-Peer

P2P

A distributed architecture in which nodes act as both clients and servers, sharing resources directly without a central coordinator. It offers resilience and scalability but complicates coordination.

Pessimistic Locking

A concurrency strategy that locks data as soon as it is read or written so no other transaction can touch it until the lock is released. It avoids conflicts at the cost of reduced parallelism.

Pointer

reference

A variable that stores the memory address of another value rather than the value itself, enabling indirect access, shared references, and manual memory manipulation.

Polymorphism

The ability for a single interface or call to operate on values of different types, so the same method name behaves appropriately for each concrete type.

Premature Optimization

Investing effort in making code faster before there is evidence that its performance actually matters, often complicating the code needlessly. It is famously cautioned against as a source of wasted effort and bugs.

Priority Queue

An abstract data structure in which each element has a priority and the highest-priority element is served first, regardless of insertion order. It is often implemented with a heap.

Procedural Programming

A programming paradigm that structures a program as a sequence of procedures or routines that operate on shared data, executing steps in order. It emphasizes ordered subroutine calls over objects or mathematical functions.

Process

An independent running instance of a program with its own isolated memory space; processes communicate through explicit channels rather than shared memory.

Producer-Consumer Problem

A classic synchronization scenario in which producers generate data into a shared buffer and consumers remove it, requiring coordination so producers wait when the buffer is full and consumers wait when it is empty. It illustrates the use of bounded buffers and condition variables.

Promise

future

An object representing the eventual result of an asynchronous operation, which can be pending, fulfilled, or rejected, and chained to sequence async work.

Property

A class member that looks like a field to callers but is backed by accessor logic, so reading or writing it can run code. It combines the simplicity of a field with the control of a method.

Property-Based Testing

A testing approach that specifies general properties expected to hold for all valid inputs and then checks them against many automatically generated cases. It can reveal edge cases that hand-written examples overlook.

Protocol Buffers

Protobuf

A language-neutral, binary serialization format from Google that encodes structured data compactly using a predefined schema. It is smaller and faster than text formats and is commonly paired with gRPC.

Prototype Pattern

A creational design pattern that creates new objects by copying an existing prototype instance rather than building from scratch. It is efficient when object creation is costly.

Proxy Pattern

A structural design pattern that provides a stand-in object controlling access to another object, adding behavior such as lazy loading, caching, or access control. The proxy shares the real object's interface.

Publish-Subscribe

Pub/Sub

A messaging pattern in which publishers emit messages to topics without knowing the subscribers, and subscribers receive messages from topics they follow. It decouples producers from consumers of events.

Pull Request

PR · merge request · MR

A proposal to merge one branch into another on a hosting platform, packaging the diff for review, discussion, and automated checks before it lands.

Pure Function

A function whose output depends only on its inputs and which produces no side effects, making it deterministic, testable, and safe to cache or parallelize.

Queue

FIFO

A first-in-first-out (FIFO) collection where elements are added at one end and removed from the other, used for buffering, scheduling, and breadth-first traversal.

Quicksort

A divide-and-conquer sorting algorithm that partitions elements around a pivot and recursively sorts the partitions. It is fast on average but can degrade to quadratic time with poor pivot choices.

Race Condition

A bug where the outcome depends on the unpredictable timing of concurrent operations accessing shared state, producing intermittent, hard-to-reproduce failures.

RAII

Resource Acquisition Is Initialization

Resource Acquisition Is Initialization, a technique that ties a resource's lifetime to an object's scope so the resource is released automatically when the object is destroyed. It prevents leaks of memory, files, and locks in languages with deterministic destruction.

Rate Limiting

A control that caps how many requests a client may make to an API within a time window to protect the service from overload and abuse. Clients exceeding the limit typically receive an error until the window resets.

Reactive Programming

A paradigm oriented around asynchronous data streams and the automatic propagation of change, so that dependent values update when their inputs change. It is often used for event-driven and UI-heavy systems.

Read-Write Lock

Shared-Exclusive Lock

A synchronization primitive that allows multiple concurrent readers but only one exclusive writer at a time. It improves throughput for data that is read far more often than written.

Rebase

Replaying a branch's commits on top of another base commit to produce a linear history, an alternative to merging that rewrites commit ancestry.

Recursion

A technique where a function calls itself on a smaller subproblem until it hits a base case, often expressing tree, divide-and-conquer, or nested problems more naturally than loops.

Recursion Base Case

base case

The terminating condition in a recursive function that returns without recursing further, preventing infinite recursion and letting the call stack unwind.

Red-Black Tree

A self-balancing binary search tree that colors nodes red or black and enforces rules to keep the tree approximately balanced. It guarantees logarithmic search, insert, and delete times.

Reentrancy

The property of a function that can be safely interrupted and called again before the previous call finishes, because it does not rely on shared mutable state. Reentrant code is important for recursion and signal handlers.

Refactoring

Restructuring existing code to improve its readability, structure, or design without changing its external behavior, ideally under the protection of tests.

Reference Counting

A memory management technique that tracks how many references point to an object and frees it when the count reaches zero. It reclaims memory promptly but cannot collect reference cycles on its own.

Reference Type

A type whose variables hold a reference to data stored elsewhere, so multiple variables can share and mutate the same underlying object. Objects and arrays are commonly reference types.

Referential Transparency

A property of an expression that can be replaced by its resulting value without changing the program's behavior. It holds for pure expressions and makes reasoning and optimization easier.

Reflection

The ability of a program to inspect and modify its own structure and behavior at runtime, such as listing an object's methods or fields. It powers serialization frameworks, test tools, and dependency injection.

Regression Testing

The practice of re-running existing tests after changes to confirm that previously working functionality has not broken. It guards against reintroducing old bugs as code evolves.

Regular Expression

regex · regexp

A concise pattern language for matching, searching, and extracting text by describing character sequences, repetition, and structure rather than literal strings.

Release Candidate

RC

A build that is considered potentially final and is undergoing final testing before release, with no known remaining blocking defects. If it passes, it becomes the released version.

Remote Procedure Call

RPC

A protocol style that lets a program invoke a procedure in another address space or machine as if it were a local call, hiding the network communication. Frameworks handle marshaling arguments and returning results.

Replication

The maintenance of copies of data across multiple nodes to improve availability, fault tolerance, and read performance. Replication can be synchronous or asynchronous, each with different consistency trade-offs.

Repository

repo

The store of a project's files together with their complete version history and metadata; a local clone or a remote host both hold the same repository.

Repository Pattern

A design pattern that mediates between the domain and data-mapping layers, presenting a collection-like interface for accessing domain objects. It hides the details of data storage from business logic.

REST

Representational State Transfer

Representational State Transfer, an architectural style for networked APIs that uses stateless requests, standard HTTP methods, and resources identified by URLs. RESTful APIs are widely used for web services.

Retrospective

A recurring meeting, common in agile teams, where the team reflects on the recent iteration to identify what went well and what to improve. It drives continuous process improvement.

Retry with Backoff

Exponential Backoff

An error-handling strategy that reattempts a failed operation after progressively longer waits, often with randomized jitter, to avoid overwhelming a recovering service. Exponential backoff is a common form.

Return Value

The result a function hands back to its caller when it finishes, allowing the computed output to be used in surrounding expressions.

Rollback

Reverting a system or database to a previous known-good state after a faulty change or deployment. Rollbacks limit the damage of a bad release.

Rubber Duck Debugging

A debugging technique in which a developer explains their code line by line to an inanimate object, such as a rubber duck, to force clearer thinking and reveal the flaw. The act of articulating the problem often surfaces the solution.

Runtime

The environment and support code that executes a program, managing memory, scheduling, and services; also refers to the period during which a program is running.

Sanity Check

A quick, basic test to confirm that something is plausibly correct before investing effort in deeper verification. It catches obvious mistakes early.

Scope

lexical scope

The region of a program where a given name (variable or function) is visible and valid, commonly lexical (block/function) or global, controlling naming and lifetime.

Scrum

An agile framework organizing work into fixed-length sprints with defined roles and ceremonies like planning, daily standups, reviews, and retrospectives.

SDK

Software Development Kit

Software Development Kit: a bundled set of libraries, tools, and documentation that helps developers build applications for a specific platform or service.

Segmentation Fault

Segfault

A runtime error that occurs when a program tries to access memory it is not permitted to, such as dereferencing a null or invalid pointer. The operating system terminates the offending process.

Selection Sort

A sorting algorithm that repeatedly selects the smallest remaining element and moves it to the sorted portion of the list. It is simple but runs in quadratic time regardless of input.

Self-Balancing Tree

Balanced Tree · AVL Tree

A binary search tree that automatically restructures itself during insertions and deletions to keep its height small, guaranteeing logarithmic operations. AVL trees and red-black trees are common examples.

Semantic Analysis

The compiler phase that checks the meaning of syntactically valid code, verifying types, scopes, and other rules that syntax alone cannot express. It catches errors such as using an undeclared variable.

Semantic Versioning

semver

A versioning scheme of MAJOR.MINOR.PATCH where each segment signals the nature of changes: breaking, backward-compatible feature, or backward-compatible fix.

Semaphore

A synchronization primitive holding a counter that limits how many threads may access a resource concurrently, generalizing a mutex to N permits.

Sentinel Value

A special value used to signal a boundary or a particular condition, such as -1 for not found or null to end a list. It distinguishes an out-of-band case from normal data.

Separation of Concerns

The principle of dividing a program into distinct sections that each address a separate responsibility, so changes to one concern don't ripple through others.

Serialization

marshalling · deserialization

Converting an in-memory data structure into a storable or transmittable format like JSON or bytes, with deserialization reconstructing the object from it.

Serverless

Functions as a Service · FaaS

A cloud execution model in which the provider manages server provisioning and scaling, and code runs in short-lived functions billed by usage. Developers focus on code while infrastructure is abstracted away.

Service Mesh

An infrastructure layer that manages service-to-service communication in a microservices system, providing traffic control, security, and observability transparently. It typically uses sidecar proxies alongside each service.

Service-Oriented Architecture

SOA

An architectural style that composes applications from reusable, loosely coupled services exposed over a network with well-defined contracts. It is a predecessor of the finer-grained microservices approach.

Set

A collection data structure that stores unique elements with no duplicates and typically supports fast membership tests. Sets also provide operations such as union, intersection, and difference.

Shallow Copy

A copy of an object that duplicates the top-level structure but shares references to the nested objects with the original. Changes to shared nested data are visible through both copies.

Sharding

Horizontal Partitioning

The partitioning of a dataset across multiple database instances so each holds a subset, allowing horizontal scaling of storage and load. Choosing a good shard key is essential to balance the data evenly.

Short-Circuit Evaluation

The evaluation of a logical expression that stops as soon as the result is determined, skipping the remaining operands. It is commonly used to guard against errors, such as checking for null before accessing a member.

Side Effect

Any observable change a function makes beyond returning a value, such as writing to disk, mutating shared state, or printing output; managing these is central to reliability.

Sidecar Pattern

A deployment pattern that runs a helper component alongside a main service in the same unit, extending it with capabilities like logging, proxying, or configuration. The sidecar shares the service's lifecycle without altering its code.

Single Responsibility Principle

SRP

The SOLID rule that a class or module should have one reason to change, keeping each unit focused on a single concern for easier maintenance.

Singleton

A creational design pattern that ensures a class has only one instance and provides a global point of access to it. It is often used for shared resources but can complicate testing.

Smart Pointer

An object that behaves like a pointer but automatically manages the lifetime of what it points to, freeing the resource when it is no longer needed. Smart pointers reduce manual memory errors in languages like C++ and Rust.

Smoke Testing

Build Verification Test

A shallow, broad set of tests run early to verify that the most critical functions of a build work before deeper testing proceeds. A failed smoke test usually means the build is not worth testing further.

Snapshot Testing

A testing technique that saves a rendered output or data structure as a reference snapshot and compares future runs against it, flagging any differences. It is common for verifying UI components.

SOAP

Simple Object Access Protocol

Simple Object Access Protocol, a standardized, XML-based messaging protocol for exchanging structured information in web services. It is more rigid and verbose than REST but offers strong contracts and built-in standards.

SOLID

A mnemonic for five object-oriented design principles: Single responsibility, Open-closed, Liskov substitution, Interface segregation, and Dependency inversion.

Space Complexity

A measure of how the amount of memory an algorithm needs grows with the size of its input. It is analyzed alongside time complexity to evaluate resource efficiency.

Spaghetti Code

Code with a tangled, unstructured control flow that is hard to follow and maintain, often from unrestricted jumps or deeply nested logic. The term describes software whose structure resembles a bowl of spaghetti.

Spike

In agile development, a time-boxed investigation used to research a technical question or reduce uncertainty before committing to an approach. Its output is knowledge rather than shippable code.

Spinlock

A lock that makes a waiting thread repeatedly check the lock in a loop rather than sleeping, useful when the wait is expected to be very short. Spinning wastes CPU if the wait is long.

Sprint

Iteration

In Scrum, a fixed-length iteration, typically one to four weeks, during which a team completes a set of committed work to produce a potentially shippable increment. Each sprint ends with review and retrospective.

Spy

A test double that records information about how it was called, such as arguments and call counts, so the test can verify interactions afterward. It often wraps a real object while observing it.

Squash

Combining several commits into a single commit, usually to tidy a messy history before merging. Squashing keeps the mainline history concise but discards the individual intermediate commits.

Stable Sort

Sort Stability

A sorting algorithm that preserves the relative order of elements that compare equal. Stability matters when sorting by multiple keys in successive passes.

Stack

LIFO

A last-in-first-out (LIFO) collection where elements are pushed and popped from one end, used for call frames, undo history, and backtracking.

Stack Memory

A region of memory that stores function call frames, local variables, and return addresses, allocated and freed automatically in last-in first-out order. It is fast but limited in size, and overflowing it causes a crash.

Stack Overflow

A runtime error that occurs when the call stack exhausts its allocated space, commonly from unbounded or excessively deep recursion.

Staging Area

Index

In Git, an intermediate area where changes are gathered and reviewed before being included in the next commit. It lets developers craft commits selectively rather than committing everything at once.

Starvation

A situation where a thread is perpetually denied the resources it needs to proceed because other threads keep acquiring them first. It often results from unfair scheduling or priority policies.

Stash

A Git feature that temporarily shelves uncommitted changes so the working directory is clean, letting them be reapplied later. It is useful for switching context without committing half-finished work.

State Pattern

A behavioral design pattern that lets an object change its behavior when its internal state changes, by delegating to a state object. It appears as if the object changes its class.

Stateful

Describing a component that retains information from prior interactions across requests, such as a session or an in-memory cache. Stateful services can be more complex to scale and recover.

Stateless

Describing a component or protocol that retains no memory of previous interactions, treating each request independently with all needed context supplied each time. Statelessness simplifies scaling because any instance can handle any request.

Static Member

Class Member

A field or method that belongs to a class itself rather than to any individual instance, shared across all instances. It is accessed through the class rather than an object.

Static Typing

A type system that checks and fixes the types of variables at compile time, catching type mismatches before the program runs.

Story Point

A unit of relative estimation used in agile planning to express the effort, complexity, and uncertainty of a user story rather than time directly. Teams use points to gauge and forecast capacity.

Strangler Fig Pattern

An incremental migration strategy that gradually replaces a legacy system by building new functionality around it and redirecting traffic until the old system can be retired. It reduces the risk of a big-bang rewrite.

Strategy Pattern

A behavioral design pattern that defines a family of interchangeable algorithms behind a common interface, letting the algorithm vary independently of the client using it. It replaces conditional logic with pluggable objects.

Stream Processing

The continuous processing of data as it arrives, one record or small window at a time, rather than in large scheduled batches. It supports low-latency analytics and real-time reactions to events.

Stress Testing

Testing that pushes a system beyond its normal operating limits to see how and when it fails and whether it recovers gracefully. It exposes breaking points and stability issues.

String

A data type representing an ordered sequence of characters used to hold text, supporting operations like concatenation, slicing, and searching.

Strong Typing

A type discipline that strictly enforces type rules and disallows most implicit conversions, so operations on incompatible types raise errors. It contrasts with weak typing, which permits many silent coercions.

Struct

Record · Structure

A composite data type that groups related fields under one name, often stored as a value type. It models a record without the behavior of a full class.

Structural Typing

A type system in which compatibility is determined by the shape of a type—its fields and methods—rather than by an explicit name or declaration. Two types match if they have the same structure.

Structured Programming

A discipline that builds programs from a small set of control structures—sequence, selection, and iteration—while avoiding unrestricted jumps like GOTO. It improves readability and provability of code.

Stub

A test double that returns predetermined responses to calls made during a test, without any real logic. Stubs supply the code under test with controlled inputs from its dependencies.

Symbol Table

A data structure a compiler or interpreter uses to record identifiers and their attributes, such as type, scope, and memory location. It supports name resolution and semantic checking.

Tail Call

Tail Recursion · Tail-Call Optimization

A function call that is the final action of a function, allowing some languages to reuse the current stack frame instead of adding a new one. Tail-call optimization enables deep recursion without overflowing the stack.

Technical Debt

tech debt

The accumulated future cost of choosing an expedient implementation over a sound one; like financial debt it accrues interest as it slows later changes.

Technical Specification

Tech Spec · Design Doc

A document that describes in detail how a system or feature will be built, covering architecture, data models, interfaces, and constraints. It aligns a team before implementation and serves as a reference during it.

Template Method

A behavioral design pattern that defines the skeleton of an algorithm in a base method while letting subclasses override specific steps. The overall structure stays fixed but details vary.

Ternary Operator

Conditional Operator

A conditional operator that takes three operands and returns one of two values based on a boolean condition, written concisely in a single expression. It is a compact alternative to a simple if-else.

Test Double

A general term for any stand-in object that replaces a real dependency in a test, including mocks, stubs, spies, and fakes. Test doubles isolate the code under test from external systems.

Test Fixture

The fixed setup and known state required to run a test consistently, such as sample data, objects, or a configured environment. Fixtures ensure tests start from a controlled, repeatable baseline.

Test Suite

A collection of test cases grouped together to be run as a unit, often organized by feature or type. Running a suite reports overall pass and fail results for the covered functionality.

Test-Driven Development

TDD

A practice of writing a failing test first, then the minimal code to pass it, then refactoring, cycling in short red-green-refactor loops that shape the design.

Thread

The smallest unit of execution a scheduler manages; multiple threads within one process share memory, enabling concurrency but requiring synchronization to stay correct.

Thread Pool

A managed collection of reusable worker threads that execute submitted tasks, avoiding the overhead of creating a thread per task. It bounds concurrency and improves resource utilization.

Thread Safety

The property of code that behaves correctly when accessed by multiple threads simultaneously, without data races or corruption. It is achieved through synchronization, immutability, or confinement of state.

Time Complexity

A measure of how the running time of an algorithm grows as the size of its input increases, usually expressed in Big-O notation. It helps compare the scalability of algorithms independent of hardware.

Topological Sort

An ordering of the nodes of a directed acyclic graph such that every edge points from an earlier node to a later one. It is used to schedule tasks that have dependency constraints.

Trait

A reusable unit of behavior that can be composed into classes, supplying method implementations without the constraints of single inheritance. Traits are found in languages such as Rust, Scala, and PHP.

Transaction

A unit of work that is executed as an all-or-nothing operation, so it either completes fully or leaves the system unchanged. Transactions provide guarantees around atomicity, consistency, isolation, and durability.

Transitive Dependency

A dependency that a program pulls in indirectly because one of its direct dependencies requires it. Deep transitive dependency trees complicate version conflicts and security auditing.

Transpiler

Source-to-Source Compiler

A source-to-source compiler that translates code from one high-level language or version to another, such as converting modern JavaScript to an older dialect. The output remains human-readable source code.

Tree

A hierarchical data structure of nodes with a single root and parent-child links and no cycles, underpinning file systems, parsers, and search structures.

Trie

Prefix Tree

A tree data structure that stores strings by sharing common prefixes along paths from the root, enabling fast prefix search and autocomplete. Each node represents a character position in the stored keys.

Trunk-Based Development

A branching strategy in which developers integrate small, frequent changes into a single main branch rather than long-lived feature branches. It reduces merge pain and supports continuous integration.

Tuple

An ordered, fixed-size collection of values that may have different types, accessed by position. Tuples are handy for returning multiple values from a function.

Turing Completeness

A property of a computational system that can simulate any Turing machine, meaning it can express any computation given enough time and memory. Most general-purpose programming languages are Turing complete.

Twelve-Factor App

A methodology of twelve best practices for building portable, scalable web applications, covering concerns like configuration, dependencies, and stateless processes. It guides applications toward cloud-friendly deployment.

Type Coercion

Type Casting · Type Conversion

The automatic or explicit conversion of a value from one type to another, such as turning a number into a string. Implicit coercion can cause subtle bugs when the rules are surprising.

Type Inference

A compiler or interpreter feature that automatically deduces the types of expressions without explicit annotations. It lets code stay concise while retaining static type checking.

Type Safety

The degree to which a language prevents type errors, either catching them at compile time (static typing) or at runtime, reducing a whole class of bugs.

Union Type

A type that permits a value to be one of several specified types. Code must typically narrow a union to a single type before using type-specific operations.

Unit Test

An automated test that verifies a single small piece of code, like one function or class, in isolation from its dependencies for fast, precise feedback.

User Story

A short, plain-language description of a feature told from the perspective of the person who wants it, usually following a template naming the role, goal, and benefit. It captures intent while deferring detailed specification.

Value Type

A type whose instances are copied when assigned or passed, so each holder owns an independent copy of the data. Numbers and structs are typically value types.

Variable

A named binding that holds a value in a program's memory, letting code store, read, and update data by referring to the name rather than the raw value.

Variadic Function

A function that accepts a variable number of arguments rather than a fixed count. Formatting functions like printf are classic examples.

Velocity

In agile development, a measure of how much work, often in story points, a team completes per iteration, used to forecast future capacity. It is a team-specific trend rather than a comparison metric between teams.

Version Control

source control · VCS · SCM

A system that records changes to files over time so you can review history, revert, branch, and collaborate; Git is the dominant modern example.

Virtual Method

A method whose implementation is selected at runtime based on the actual object type, enabling subclasses to override behavior. It is the mechanism behind runtime polymorphism.

Visitor Pattern

A behavioral design pattern that separates an algorithm from the object structure it operates on, letting new operations be added without modifying the elements. Each element accepts a visitor that performs the operation.

Waterfall Model

A sequential software development process that moves through fixed phases such as requirements, design, implementation, testing, and maintenance, with each completed before the next begins. It offers structure but adapts poorly to changing requirements.

Weak Reference

A reference that does not keep the referenced object alive, allowing it to be collected if only weak references remain. Weak references help break reference cycles and build caches.

Weak Typing

Loose Typing

A type discipline that permits implicit conversions between differing types, allowing operations that a strongly typed system would reject. It offers flexibility at the cost of surprising runtime behavior.

Webhook

A mechanism where a server sends an automatic HTTP request to a configured URL when a specified event occurs, pushing data to another system in real time. It reverses the usual polling model by having the source notify the consumer.

Work in Progress Limit

WIP Limit

A cap on how many items may be in a given stage of a workflow at once, used in Kanban to prevent overload and expose bottlenecks. Limiting work in progress improves flow and focus.

Working Directory

Working Tree

In version control, the local set of files a developer is actively editing, reflecting the checked-out version plus any uncommitted changes. It is distinct from the staging area and the committed history.

XML

Extensible Markup Language

Extensible Markup Language, a text format that encodes structured data using nested tags, supporting validation through schemas. It predates JSON and remains common in enterprise and document systems.

YAGNI

You Aren't Gonna Need It

You Aren't Gonna Need It: the principle of not building functionality until it is actually required, avoiding speculative complexity that may never pay off.

YAML

YAML Ain't Markup Language

A human-friendly data serialization format that uses indentation to represent structure, popular for configuration files. It aims to be more readable than JSON or XML.

Web & Frontend

451

!important

A CSS declaration flag that raises a rule above normal specificity in the cascade, forcing it to win; overuse makes stylesheets hard to maintain and is discouraged.

200 OK

The HTTP status code indicating the request succeeded and the response contains the requested representation.

301 Moved Permanently

The HTTP redirect status code signaling a resource has permanently moved to a new URL; browsers and search engines update to the new location and cache the redirect.

302 Found

The HTTP redirect status code indicating a resource is temporarily at a different URL; clients should keep using the original URL for future requests.

304 Not Modified

The HTTP status code sent in response to a conditional request when the cached copy is still valid, telling the client to reuse its stored version and saving bandwidth.

400 Bad Request

The HTTP status code indicating the server could not process the request due to malformed syntax or invalid parameters supplied by the client.

401 Unauthorized

The HTTP status code indicating the request lacks valid authentication credentials; despite the name it means 'unauthenticated' and prompts the client to log in.

403 Forbidden

The HTTP status code indicating the server understood the request but refuses to authorize it, regardless of authentication.

404 Not Found

The HTTP status code indicating the server cannot find the requested resource; it does not imply whether the absence is temporary or permanent.

500 Internal Server Error

The HTTP status code indicating an unexpected condition on the server prevented it from fulfilling the request; a generic catch-all for server-side failures.

503 Service Unavailable

The HTTP status code indicating the server is temporarily unable to handle the request, often due to overload or maintenance; a Retry-After header may suggest when to try again.

Above the Fold

The portion of a web page visible without scrolling; prioritizing its content and styles improves perceived load speed and first contentful paint.

Accept Header

A request header by which the client tells the server which media types it can handle, driving HTTP content negotiation.

Access-Control-Allow-Origin

A CORS response header that names which origin(s) are permitted to read the response, enabling controlled cross-origin resource sharing.

Accessibility

a11y

Designing and building web content so people with disabilities can perceive, operate, and understand it, including keyboard operability, screen-reader support, and sufficient color contrast.

Accessibility Tree

A parallel structure the browser derives from the DOM that exposes each element's role, name, state, and value to assistive technologies like screen readers.

Accessible Name

The computed label an assistive technology announces for an element, derived from sources like its text content, aria-label, aria-labelledby, or an associated label.

AJAX

Asynchronous JavaScript and XML

Asynchronous JavaScript and XML, the technique of fetching data from a server in the background and updating the page without a full reload. The modern equivalent uses the Fetch API and JSON.

Alt Text

Alt Attribute · Alternative Text

The alt attribute on an image giving a textual description read by screen readers and shown if the image fails to load; essential for accessibility and useful for SEO.

Angular

A comprehensive, opinionated TypeScript framework by Google for building large single-page applications, providing components, dependency injection, routing, and RxJS-based reactivity out of the box.

any Type

any

The TypeScript escape-hatch type that disables type checking for a value, allowing any operation; its overuse undermines the benefits of static typing.

API Endpoint

Endpoint

A specific URL on a server that a client calls to interact with a particular resource or operation of a web API.

API Route

Serverless Function · Route Handler

A server-side endpoint defined within a frontend meta-framework that runs backend logic (like handling form submissions or calling a database) alongside the application's pages.

App Shell

Application Shell

A PWA architecture that caches the minimal HTML, CSS, and JavaScript for the interface skeleton so it loads instantly and offline, then fills in content dynamically.

ARIA

Accessible Rich Internet Applications

Accessible Rich Internet Applications, a set of HTML attributes like roles and states that convey the purpose and status of custom widgets to assistive technologies when native semantics fall short.

ARIA Label

aria-label

The aria-label attribute that supplies an accessible name for an element when no visible text label exists, so screen readers can announce its purpose.

ARIA Live Region

Live Region · aria-live

An element marked with aria-live so screen readers announce dynamic content updates (like form errors or notifications) without the user moving focus to it.

ARIA Role

An attribute (role) that tells assistive technology what an element is or does, such as button, navigation, or alert, when native HTML semantics are insufficient.

aria-hidden

An ARIA attribute that, when true, removes an element and its descendants from the accessibility tree so screen readers ignore it, useful for purely decorative content.

Arrow Function

Fat Arrow Function

A concise JavaScript function syntax using => that has no own this, arguments, or prototype, making it well suited for callbacks and preserving the surrounding this.

aspect-ratio

A CSS property that sets a preferred width-to-height ratio for an element, so it resizes proportionally and reserves space to prevent layout shift.

Async Attribute

async

A script attribute that downloads the script in parallel and executes it as soon as it is ready, without guaranteeing order, suitable for independent scripts like analytics.

Atomic Design

A methodology for building interfaces from small reusable pieces up: atoms, molecules, organisms, templates, and pages, promoting consistency and composability.

Authorization Header

A request header carrying credentials to authenticate the client with the server, commonly holding a Bearer token or Basic-auth encoded username and password.

Autocomplete Attribute

An HTML attribute that tells the browser what kind of data a field expects (such as email or cc-number) so it can offer saved values for autofill.

Autoprefixer

A PostCSS plugin that automatically adds vendor prefixes to CSS rules based on browser-support data, so authors write standard syntax without maintaining prefixes by hand.

AVIF

A newer image format based on the AV1 video codec that provides excellent compression and quality with wide color and transparency support, typically smaller than WebP.

Babel

A JavaScript compiler that transforms modern or proposed syntax into backward-compatible code, enabling new language features to run in older browsers.

Base64

An encoding that represents binary data as ASCII text using 64 characters, used on the web to embed images or fonts in data URLs and to encode Basic-auth credentials.

Basic Authentication

Basic Auth

A simple HTTP authentication scheme that sends a Base64-encoded username and password in the Authorization header; because encoding is not encryption, it must be used over HTTPS.

Beacon API

A browser API (navigator.sendBeacon) that reliably sends small amounts of data to a server during page unload without delaying navigation, useful for analytics.

Bearer Token

An access credential passed in the Authorization header as 'Bearer <token>'; whoever holds (bears) the token is granted access, so it must be sent over HTTPS and kept secret.

BEM

Block Element Modifier

Block, Element, Modifier, a CSS naming methodology that structures class names (like card__title--large) to keep styles modular, predictable, and low in specificity.

Blob

Binary Large Object

A browser object representing immutable raw binary data, such as file contents, that can be sliced, stored, converted to object URLs, or uploaded.

Block-level Element

An HTML element that by default starts on a new line and stretches to fill its container's width, such as div, p, and section.

Border

The line drawn around an element's padding and content in the box model, configurable in width, style, and color.

Box Model

CSS box model

The CSS model where every element is a rectangular box made of content, padding, border, and margin. How these combine determines an element's rendered size and spacing.

box-sizing

A CSS property that determines whether an element's declared width and height include padding and border (border-box) or only the content area (the default content-box).

Breakpoint

A viewport width (or other condition) at which a responsive layout changes, defined in CSS media or container queries to adapt design across screen sizes.

Broadcast Channel

BroadcastChannel

A browser API that lets same-origin tabs, windows, and workers communicate by posting messages to a named channel all of them can listen on.

Brotli

A general-purpose compression algorithm optimized for the web that typically shrinks text assets more than gzip, negotiated via the Content-Encoding: br header.

Bundler

A build tool that combines many JavaScript modules and assets into optimized files for the browser, resolving dependencies and applying transforms. Common examples are Vite, webpack, and esbuild.

Cache API

A browser API, commonly used inside service workers, that stores request and response pairs so assets can be served from a programmatically managed cache, enabling offline support.

Cache Busting

Fingerprinting

The practice of forcing browsers to fetch an updated asset by changing its URL, typically by embedding a content hash in the filename, so long cache lifetimes do not serve stale files.

Cache Strategy

Caching Strategy

A rule a service worker follows to decide whether to answer a request from the cache, the network, or a combination, such as cache-first, network-first, or stale-while-revalidate.

Cache-Control

An HTTP header that directs how, and for how long, a response may be cached by browsers and intermediary caches, using directives like max-age, no-cache, and private.

calc()

A CSS function that performs arithmetic to compute a property value, allowing mixed units such as calc(100% - 2rem) for flexible sizing.

Call Stack

The data structure a JavaScript engine uses to track function calls: each call pushes a frame and each return pops one; overflowing it (e.g. via infinite recursion) throws a stack-overflow error.

Callback Hell

Pyramid of Doom

The deeply nested, hard-to-read pyramid of callbacks that arises when sequencing many asynchronous operations; Promises and async/await were introduced to flatten it.

Canvas

HTML Canvas

An HTML element providing a bitmap drawing surface controlled by a JavaScript API, used for graphics, charts, image manipulation, and games.

Cascade

The CSS algorithm that resolves conflicting declarations for an element by weighing origin, importance, specificity, and source order to decide which value wins.

Cascade Layers

@layer

A CSS feature (@layer) that groups rules into explicitly ordered layers, giving authors control over precedence independent of selector specificity and source order.

CDN

Content Delivery Network

Content Delivery Network, a geographically distributed set of edge servers that cache and serve static assets close to users, cutting latency and offloading traffic from the origin server.

CDN Edge

Edge Node · Point of Presence

A geographically distributed server location in a content delivery network that caches and serves assets close to users, reducing latency compared with a single origin server.

Certificate Authority

CA

A trusted organization that issues and digitally signs TLS certificates, vouching that a public key genuinely belongs to a given domain.

Chunk

A separately loadable piece a bundler emits when splitting an application's code, so parts can be loaded on demand rather than all at once.

Chunked Transfer Encoding

An HTTP mechanism that sends a response body in a series of chunks without a predeclared total length, enabling streaming of dynamically generated content.

Clickjacking

UI Redress Attack

An attack that overlays or frames a target site invisibly so a user's clicks are hijacked into performing unintended actions; prevented with frame-ancestors CSP or X-Frame-Options.

Client-Side Rendering

CSR

A rendering strategy where the server sends a minimal HTML shell and JavaScript builds the page in the browser; it enables rich interactivity but can slow the first meaningful paint and hurt SEO if not handled.

Client-Side Routing

SPA routing

Handling navigation within a single-page app in JavaScript, swapping views and updating the URL via the History API without a full server round trip, for instant transitions between pages.

clip-path

A CSS property that clips an element to a defined shape such as a circle, polygon, or path, hiding everything outside that region.

Clipboard API

A browser API that lets pages read from and write to the system clipboard asynchronously, typically requiring user activation or permission.

Code Splitting

Breaking a JavaScript bundle into smaller chunks loaded on demand, so users download only the code needed for the current view rather than the entire app up front.

Color Contrast

The measured luminance difference between text and its background; WCAG requires minimum ratios (such as 4.5:1 for normal text) to ensure readability for low-vision users.

Combinator

A CSS token that expresses a relationship between selectors, such as descendant (space), child (>), adjacent sibling (+), and general sibling (~).

CommonJS

CJS

A JavaScript module system, standard in Node.js, that imports with require() and exports via module.exports, loading modules synchronously; contrasted with ES modules.

Component

A reusable, self-contained piece of UI that bundles its markup, styling, and behavior. Modern frameworks compose interfaces from nested components that accept inputs and manage their own state.

Component Library

UI Library

A collection of reusable, styled UI components (buttons, inputs, modals) packaged for consistent reuse across an application or organization, often part of a design system.

Composite

Compositing

The final browser rendering step that assembles painted layers in the correct order (respecting stacking and transforms) to produce the frame shown on screen, often on the GPU.

Concurrent Rendering

Concurrent Mode

A React capability to prepare multiple versions of the UI at once and interrupt or defer lower-priority rendering, keeping the app responsive during heavy updates.

Console API

console

A set of browser methods (console.log, warn, error, table, group) for printing diagnostic output to the developer tools console during development.

Container Query

A CSS feature that styles an element based on the size of a designated ancestor container rather than the viewport, enabling truly component-based responsive design.

Content-Encoding

An HTTP header that indicates any compression applied to the response body, such as gzip or br (Brotli), so the client knows how to decode it.

Content-Security-Policy

CSP

An HTTP response header that restricts which sources of scripts, styles, images, and other resources a page may load, mitigating cross-site scripting and injection attacks.

Content-Type

An HTTP header that specifies the media (MIME) type of the message body, such as text/html or application/json, telling the recipient how to interpret the content.

Contenteditable

An HTML attribute that makes an element's content directly editable by the user in the browser, underpinning rich-text editors.

Context (React)

React Context

A React mechanism for sharing values like theme or current user across a component tree without passing props at every level, avoiding prop drilling.

Controlled Component

A form input whose value is driven by application state and updated through change handlers, making the framework the single source of truth for the field.

Core Web Vitals

CWV

A set of Google metrics measuring real-world user experience quality, focused on loading (LCP), interactivity (INP), and visual stability (CLS). They influence search ranking.

CORS

Cross-Origin Resource Sharing

Cross-Origin Resource Sharing, a browser security mechanism where a server uses response headers to opt in to requests from other origins, relaxing the same-origin policy in a controlled way.

Critical CSS

The minimal set of styles needed to render above-the-fold content, inlined in the document head so the initial view paints without waiting for the full stylesheet.

Critical Rendering Path

browser rendering · render pipeline

The sequence of steps a browser takes to turn HTML, CSS, and JavaScript into pixels: parsing into the DOM and CSSOM, building the render tree, layout, and paint. Optimizing it speeds first render.

Cross-Browser Compatibility

The goal of a website behaving consistently across different browsers and versions despite their differing engines and feature support, addressed through standards, testing, and fallbacks.

Cross-Site Request Forgery

CSRF · XSRF

An attack that tricks a logged-in user's browser into sending an unwanted authenticated request to a site; defenses include anti-CSRF tokens and SameSite cookies.

Cross-Site Scripting

XSS

A security vulnerability where an attacker injects malicious scripts into a page that other users' browsers execute, letting them steal cookies, hijack sessions, or deface content; mitigated by output encoding and Content Security Policy.

CSS

Cascading Style Sheets

Cascading Style Sheets, the language that controls the visual presentation of HTML, describing layout, color, typography, and spacing through rules that cascade based on specificity and source order.

CSS Animation

A CSS feature that animates properties over time through named @keyframes, running automatically and looping without JavaScript.

CSS Custom Properties

CSS variables

User-defined CSS variables declared with a double-dash prefix and read via var(), enabling reusable values for theming and runtime updates without a preprocessor.

CSS Filter

filter

A CSS property that applies graphical effects such as blur, brightness, contrast, grayscale, and drop-shadow to an element's rendering.

CSS Grid

grid layout

A two-dimensional CSS layout system that arranges elements into rows and columns simultaneously, ideal for complex page structures that flexbox handles only one axis at a time.

CSS Inheritance

Inheritance

The mechanism by which certain CSS properties (like color and font) pass from a parent element to its children unless explicitly overridden.

CSS Preprocessor

Sass · SCSS

A tool like Sass or Less that extends CSS with variables, nesting, mixins, and functions, compiling to plain CSS. Native CSS features have since absorbed many of these capabilities.

CSS Reset

A stylesheet that zeroes out the browser's default margins, paddings, and styles so a design starts from a consistent, predictable baseline across browsers.

CSS Selector

Selector

A pattern that targets HTML elements to apply styles, ranging from tag, class, and id selectors to attribute, pseudo-class, and combinator-based patterns.

CSS Specificity

specificity

The weighting system that decides which conflicting CSS rule wins, scored by selector type: inline styles beat IDs, which beat classes, which beat element selectors. Ties break by source order.

CSS-in-JS

Writing component styles in JavaScript, scoping them to a component and enabling dynamic values from props or state. Libraries include styled-components and Emotion, though build-time approaches are now favored.

CSSOM

CSS Object Model

The CSS Object Model, a tree the browser builds from parsed stylesheets that represents all styles and is combined with the DOM to form the render tree.

Cumulative Layout Shift

CLS

A Core Web Vital measuring unexpected visual movement of page content during load, such as text jumping when an image or ad loads late. Lower scores mean a more stable layout.

Custom Elements

The Web Components API for defining your own HTML tags with attached JavaScript behavior and lifecycle callbacks, registered with the browser and used like any built-in element.

Custom Hook

A reusable JavaScript function in React whose name starts with 'use' that composes built-in hooks to share stateful logic between components.

Data Attribute

data-*

A custom HTML attribute prefixed with data- that stores extra information on an element, readable from JavaScript via the dataset property or from CSS via attribute selectors.

Data Fetching

The act of retrieving data a page or component needs from an API or database, done on the server, at build time, or in the browser depending on the rendering strategy.

Data URL

Data URI

A URL scheme (data:) that embeds a resource's contents directly inline, typically Base64-encoded, avoiding a separate network request at the cost of larger, uncacheable markup.

Debounce

A technique that delays running a function until a pause in rapid events, so it fires only once after activity stops, used for search input and resize handlers.

Debugging with Breakpoints

Breakpoint Debugging

Pausing JavaScript execution at chosen lines in the browser's developer tools to inspect variables, the call stack, and the program state at that moment.

Declaration File

.d.ts · Type Definitions

A TypeScript .d.ts file that describes the types of existing JavaScript code without implementation, letting TypeScript projects consume untyped libraries safely.

Defer Attribute

defer

A script attribute that downloads the script in parallel but delays execution until after HTML parsing completes, preserving order and avoiding blocking the parser.

DELETE

The HTTP method that requests removal of the specified resource; it is idempotent because deleting an already-deleted resource leaves the same end state.

Design Tokens

Named, platform-agnostic variables for design decisions like colors, spacing, and typography, stored centrally so a single change propagates consistently across a product.

Details and Summary

Disclosure Widget

Native HTML elements that create a collapsible disclosure widget: details holds the content and summary provides the always-visible clickable label, with no JavaScript required.

DevTools

browser developer tools

The suite of debugging tools built into browsers for inspecting the DOM, editing CSS live, profiling performance, watching network requests, and running JavaScript in a console.

Dialog Element

dialog

A native HTML element for modal and non-modal dialog boxes, providing built-in focus trapping, backdrop, and Escape-to-close behavior via its showModal method.

Directive

A special markup attribute in template-based frameworks (like v-if or ng-for) that attaches behavior to an element, such as conditional rendering, looping, or binding.

Discriminated Union

Tagged Union

A TypeScript pattern combining union types with a shared literal 'tag' property, so checking that tag narrows the value to a specific member for safe, exhaustive handling.

display Property

The CSS property that sets an element's box type and layout behavior, with values like block, inline, inline-block, flex, grid, and none.

DNS

Domain Name System

The Domain Name System, the internet's directory that translates human-readable domain names into the IP addresses servers use to communicate.

DNS Prefetch

A resource hint (<link rel="dns-prefetch">) that resolves a domain's DNS ahead of time so later requests to that host skip the lookup delay.

Doctype

Document Type Declaration

A declaration at the top of an HTML document (<!DOCTYPE html>) that tells the browser to render in standards mode rather than legacy quirks mode.

DocumentFragment

A lightweight, off-screen DOM container used to assemble nodes and insert them into the live document in a single operation, minimizing reflows.

DOM

Document Object Model

The Document Object Model, a live in-memory tree representation of an HTML document that scripts can read and modify. Changing the DOM updates what the browser renders on screen.

DOM Node

Node

A single point in the Document Object Model tree; nodes include element nodes, text nodes, comment nodes, and the document node itself.

Domain Name

A human-readable address for a website (like example.com) that maps via DNS to a server's IP address; it is organized hierarchically from top-level to subdomains.

Drag and Drop API

A browser API providing events and a DataTransfer object that let users drag elements or files and drop them onto targets within or into a page.

Dynamic Route

Parameterized Route

A route whose path contains variable segments (like /users/:id) that capture values from the URL and pass them to the matched view or handler.

ECMAScript

ES · ECMA-262

The standardized specification, maintained by TC39, that defines the JavaScript language; annual editions like ES2015 (ES6) add new features browsers then implement.

Edge Computing

edge

Running code on servers geographically close to users, at CDN points of presence rather than a central origin, to cut latency for dynamic responses, personalization, and routing.

Edge Function

edge worker

A small serverless function that executes at the CDN edge near the user, used for lightweight dynamic work like auth checks, redirects, and API proxying with very low latency.

Entry Point

The file a bundler starts from when building the dependency graph; from it the bundler follows imports to gather everything the application needs.

Environment Variable

Env Var

A configuration value supplied to an application from its environment rather than hard-coded, used for API keys, URLs, and mode flags that differ between development and production.

Error Boundary

A React component that catches JavaScript errors thrown in its child tree during rendering and displays a fallback UI instead of crashing the whole application.

ES Modules

ESM · ECMAScript modules

The standardized JavaScript module system using import and export statements, natively supported in browsers and Node. It enables static analysis, tree shaking, and cleaner dependency graphs.

ES6 Class

Class · ES2015 Class

JavaScript syntax introduced in ES2015 for defining objects with a constructor, methods, and inheritance via extends; it is syntactic sugar over the prototype system.

esbuild

An extremely fast JavaScript and TypeScript bundler and minifier written in Go, often used as the transform layer inside other build tools.

ESLint

A configurable linter that statically analyzes JavaScript and TypeScript to flag errors, enforce coding conventions, and catch problematic patterns before runtime.

ETag

Entity Tag

A response header carrying an opaque identifier for a specific version of a resource; the client sends it back in If-None-Match so the server can reply 304 Not Modified when unchanged.

Event Bubbling

event propagation

The default phase where an event fired on an element propagates upward through its ancestors, letting parent elements respond to events on their children. Capturing is the reverse, top-down phase.

Event Capturing

Capture Phase · Event Trickling

The first phase of DOM event propagation in which an event travels from the document root down to the target element, opposite to the bubbling phase; listeners opt in with the capture option.

Event Delegation

A pattern that attaches one listener to a common ancestor and inspects the event target, instead of many listeners on individual children. It scales well for dynamic lists and reduces memory use.

Event Listener

event handler

A function registered to run when a specific event, such as a click or keypress, fires on a DOM element. It is the core mechanism for making pages interactive in JavaScript.

Event Object

The object a browser passes to an event handler carrying details about the event, such as target, type, coordinates, and methods like preventDefault and stopPropagation.

Favicon

site icon

The small icon a browser shows in the tab, bookmark, and history for a site, declared with a link tag in the head. Modern sites supply multiple sizes for tabs, home screens, and app icons.

Feature Detection

Testing at runtime whether the browser supports a given API or capability, then adapting behavior accordingly, a more robust approach than sniffing the user-agent string.

Fetch API

fetch

A modern promise-based browser API for making HTTP requests from JavaScript, replacing the older XMLHttpRequest with a cleaner interface for reading and sending JSON and other data.

Fieldset

An HTML element that groups related form controls together, typically labeled by a legend element, improving structure and accessibility.

File API

A browser API that lets web apps read the contents and metadata of files a user selects or drags in, exposing them as File and Blob objects.

File-based Routing

A convention where the routing structure is derived automatically from the folder and file layout of a project, so creating a file creates a route without manual configuration.

First Contentful Paint

FCP

A performance metric marking when the browser first renders any text or image from the DOM, indicating that the page has begun to display.

First Input Delay

FID

A former Core Web Vital measuring the delay between a user's first interaction and the browser's ability to respond, capturing input responsiveness; replaced by Interaction to Next Paint.

Flexbox

flexible box layout

A one-dimensional CSS layout model that distributes space and aligns items along a single row or column, handling growth, shrinking, and spacing without floats or manual positioning.

float

A CSS property that shifts an element to the left or right so text and inline content wrap around it; originally for images, it was long used for page layout before flexbox and grid.

Flux

An application architecture from Facebook featuring unidirectional data flow through dispatcher, stores, and views; it inspired libraries like Redux.

Focus Management

The practice of deliberately controlling which element has keyboard focus, especially when opening dialogs or navigating in single-page apps, so keyboard and screen-reader users are not lost.

Focus Trap

A technique that confines keyboard focus within a component such as a modal dialog, cycling between its first and last focusable elements until the component is dismissed.

Form

An HTML element that groups input controls and submits their values to a server or a handler, using a method (GET or POST) and an action URL.

Form Validation

The process of checking that form input meets requirements before submission, done natively via HTML attributes like required and pattern or via JavaScript for custom rules.

FormData

A browser API representing a set of key-value form fields, including files, that can be constructed in JavaScript and sent with fetch to submit forms programmatically.

FOUT and FOIT

FOUT · FOIT

Flash of Unstyled Text and Flash of Invisible Text, two web-font loading behaviors: FOUT briefly shows fallback text then swaps, while FOIT hides text until the font loads; the font-display property controls which occurs.

Fragment

React Fragment

A framework construct (such as React's <>...</>) that groups multiple children without adding an extra wrapper element to the DOM.

Gap

grid-gap

A CSS property that sets consistent spacing between rows and columns in flexbox and grid layouts without relying on margins.

Geolocation API

A browser API that, with user permission, provides the device's geographic position, used for maps, local search, and location-aware features.

GET

The HTTP method that requests a representation of a resource without modifying it; it is safe, idempotent, and its parameters typically ride in the URL query string.

Getter and Setter

Accessor Property

Special JavaScript methods, defined with get and set, that run when a property is read or assigned, letting an object expose computed or validated properties like normal fields.

gzip

A widely supported compression algorithm applied to HTTP responses to reduce the size of text-based assets like HTML, CSS, and JavaScript in transit.

Hex Color

Hexadecimal Color

A CSS color notation writing red, green, and blue channels as a hexadecimal string like #ff8800, optionally with a fourth pair for alpha transparency.

Higher-Order Component

HOC

A React pattern where a function takes a component and returns an enhanced component wrapping it, used to share cross-cutting logic; largely superseded by hooks.

History API

A browser API (pushState, replaceState, popstate) that lets JavaScript manipulate the session history and URL without a full page reload, underpinning client-side routing.

Hoisting

JavaScript's behavior of moving declarations to the top of their scope during compilation; function declarations and var are hoisted, while let and const remain in a temporal dead zone until initialized.

Hook

React hook

A function in React that lets a component use state, side effects, context, and other features without writing a class, such as useState and useEffect. Hooks follow rules about call order.

Hot Module Replacement

HMR · Hot Reload

A development feature that swaps updated modules into a running application without a full page reload, preserving state and speeding up the feedback loop.

HSL

HSLA

A CSS color model expressing hue (angle on the color wheel), saturation, and lightness, which is often more intuitive to reason about than RGB.

HTML

HyperText Markup Language

HyperText Markup Language, the standard markup that defines the structure and content of a web page through nested elements (tags) like headings, paragraphs, links, and images.

HTML Attribute

A name-value pair placed in an element's start tag that configures or provides metadata about the element, such as href on a link or src on an image.

HTML Element

A building block of an HTML document, usually consisting of a start tag, content, and an end tag, that defines structure or meaning such as a paragraph, heading, or link.

HTML Entity

Character Entity

A code beginning with an ampersand and ending with a semicolon (such as &amp; or &lt;) used to display reserved or special characters in HTML without them being parsed as markup.

HTTP

HyperText Transfer Protocol

HyperText Transfer Protocol, the stateless request-response protocol browsers and servers use to exchange web resources. A client sends a request with a method and headers; the server returns a status code and body.

HTTP Caching

browser cache · cache

Storing copies of responses so future requests can be served without a full round trip, controlled by headers like Cache-Control, ETag, and Expires in the browser and intermediary caches.

HTTP Header

A key-value pair sent with an HTTP request or response that carries metadata such as content type, caching directives, authentication, or cookies.

HTTP/2

h2

The second major version of the HTTP protocol, which multiplexes multiple requests over a single TCP connection, compresses headers, and supports server push to reduce latency compared to HTTP/1.1.

HTTP/3

h3

The third major version of HTTP, built on the QUIC transport protocol over UDP instead of TCP, which eliminates head-of-line blocking and speeds up connection setup.

HTTPS

HTTP Secure

HTTP layered over TLS encryption, protecting data in transit from eavesdropping and tampering and authenticating the server via a certificate. It is the default for the modern web.

Hydration

The process where client JavaScript attaches event handlers and state to server-rendered HTML, making a static page interactive. Excessive hydration is a common performance bottleneck.

Idempotent Method

An HTTP method that produces the same server state whether called once or many times, such as GET, PUT, and DELETE; POST is generally not idempotent.

iframe

Inline Frame

An HTML element that embeds another HTML document within the current page, isolated in its own browsing context; commonly used for third-party widgets and sandboxed content.

iframe Sandbox

Sandbox Attribute

The sandbox attribute on an iframe that restricts the embedded content's capabilities, such as disabling scripts, forms, or same-origin access, unless explicitly re-enabled.

IIFE

Immediately Invoked Function Expression

An Immediately Invoked Function Expression, a function defined and called at once to create a private scope, historically used for module-like encapsulation before ES modules.

Immutable State

The practice of never mutating existing state objects but producing new copies on change, which simplifies change detection, undo, and reasoning in UI frameworks.

IndexedDB

A low-level browser database API for storing large amounts of structured data, including files and blobs, with indexes and transactions for asynchronous querying.

Infinite Scroll

A UI pattern that automatically loads and appends more content as the user nears the bottom of a list, replacing explicit pagination controls with continuous scrolling.

Inline Element

An HTML element that by default flows within a line of text and takes only as much width as its content, such as span, a, and strong.

innerHTML

A DOM property that gets or sets an element's HTML content as a string; assigning untrusted input to it is a common cross-site scripting vector.

Input Element

An HTML form control (input) whose type attribute selects among text, email, number, checkbox, radio, date, file, and other single-field entry widgets.

Interaction to Next Paint

INP

A Core Web Vital measuring the responsiveness of a page by timing how long the interface takes to visually respond to user interactions. It replaced First Input Delay as the interactivity metric.

Interface (TypeScript)

Interface

A TypeScript construct that names the shape of an object, describing its properties and methods for structural type checking; interfaces can be extended and merged.

Intersection Observer

IntersectionObserver

A browser API that asynchronously reports when a target element enters or leaves the viewport or another element, powering lazy loading, infinite scroll, and scroll animations efficiently.

Islands Architecture

A rendering pattern where a mostly static page ships small, independently hydrated interactive components (islands), minimizing the JavaScript sent to the browser.

ISR

Incremental Static Regeneration

Incremental Static Regeneration, a hybrid where statically generated pages are rebuilt in the background on a schedule or on demand, combining static speed with periodically fresh content.

JAMstack

Jamstack

An architecture pattern of pre-rendered markup served from a CDN, enhanced by client-side JavaScript and reusable APIs. It decouples the frontend from backend services for speed and scalability.

JavaScript

JS · ECMAScript

The programming language of the web, running in the browser to make pages interactive by manipulating the DOM, handling events, and communicating with servers. It also runs server-side via runtimes like Node.js.

JavaScript Engine

The component that parses, compiles, and executes JavaScript, such as V8, SpiderMonkey, or JavaScriptCore, typically using just-in-time compilation for speed.

JSON Web Token

JWT

A compact, signed token format (header, payload, signature) that securely carries claims between parties, commonly used to authenticate API requests in a stateless way.

JSX

A syntax extension for JavaScript that lets you write HTML-like markup directly in code, compiled to function calls that create elements. It is the authoring format for React components.

Keep-Alive

Persistent Connection

A mechanism that reuses a single TCP connection for multiple HTTP requests and responses instead of opening a new one each time, reducing latency and overhead.

Key (React)

List Key

A special prop giving each item in a rendered list a stable identity, so the framework can efficiently match, reorder, and update elements across renders.

Keyboard Navigation

The ability to operate a website entirely with the keyboard, using Tab, Enter, arrow keys, and shortcuts; essential for users who cannot use a pointer.

Keyframes

@keyframes

A CSS @keyframes rule defining the intermediate states of an animation at percentages of its timeline, which the browser interpolates between.

Label Element

An HTML element that provides an accessible caption for a form control; associating it via the for attribute lets screen readers announce the field and lets clicks focus it.

Landmark

Landmark Region

An ARIA or native semantic region (such as header, nav, main, or footer) that lets assistive-technology users jump directly to major sections of a page.

Largest Contentful Paint

LCP

A Core Web Vital measuring how long the largest visible element, often a hero image or heading block, takes to render. Good LCP is under 2.5 seconds and signals fast perceived load.

Last-Modified

A response header giving the date a resource was last changed; clients send it back via If-Modified-Since for conditional requests that avoid re-downloading unchanged content.

Layout

Reflow

The browser rendering step that computes the exact size and position of every element (its geometry) based on the render tree and CSS; also called reflow.

Layout Shift

The unexpected movement of visible page elements as content loads (for example when an image without reserved space appears), which frustrates users and is measured by Cumulative Layout Shift.

Layout Thrashing

Forced Synchronous Layout

A performance problem where JavaScript repeatedly interleaves reads and writes of layout-affecting properties, forcing the browser to recalculate layout many times in one frame.

Lazy Loading

Deferring the loading of resources like images, components, or routes until they are actually needed, usually when they enter the viewport, to speed initial page load and save bandwidth.

Less

A CSS preprocessor offering variables, mixins, nesting, and operations, compiled to standard CSS either in the browser or during the build.

Lighthouse

An open-source auditing tool from Google that scores a page on performance, accessibility, best practices, and SEO, and suggests concrete improvements.

Loader

In bundlers like Webpack, a transform applied to a specific file type during the build, such as compiling TypeScript, processing CSS, or inlining images.

localStorage

A Web Storage API that persists string key-value pairs in the browser with no expiration, scoped to the origin and readable synchronously by JavaScript.

Lockfile

package-lock

A generated file (like package-lock.json or pnpm-lock.yaml) that records the exact resolved version of every dependency so installs are reproducible across machines.

Long Task

Any block of JavaScript execution that occupies the main thread for 50 milliseconds or more, delaying user input and often flagged by performance tooling for splitting up.

Macrotask

Task Queue · Macrotask Queue

A task in the event loop's main queue, such as a setTimeout callback, an I/O completion, or a UI event, processed one per loop iteration after microtasks drain.

Main Thread

The single thread where the browser runs JavaScript, parses documents, and performs layout and painting; long tasks on it block user interaction, so heavy work belongs on web workers.

Margin

The transparent space outside an element's border in the box model that separates it from neighboring elements; vertical margins between blocks can collapse.

matchMedia

MediaQueryList

A browser API that evaluates a CSS media query in JavaScript and can notify listeners when the match state changes, such as when crossing a breakpoint or toggling dark mode.

Media Query

A CSS feature that applies styles conditionally based on device characteristics like viewport width, orientation, or color scheme. It is the primary mechanism behind responsive breakpoints.

Memoization (React)

React.memo · useMemo

Caching a component's rendered output or a computed value so it is reused when inputs are unchanged, done with React.memo, useMemo, and useCallback to avoid unnecessary work.

Meta Tag

meta element

An HTML element in the document head that carries metadata about the page, such as its description, character set, viewport settings, and social sharing details, invisible to readers but read by browsers and crawlers.

Meta-framework

metaframework

A higher-level framework built on top of a UI library that adds routing, server rendering, data fetching, and build tooling, such as Next.js on React or Astro and SvelteKit.

Microtask

Microtask Queue

A task queued to run right after the current JavaScript execution finishes and before the next render or macrotask, used by Promise callbacks and queueMicrotask.

MIME Type

media type · content type

A label like text/html or application/json in the Content-Type header that tells the browser what kind of data a response contains, so it knows how to parse or render it.

Minification

minify

Stripping whitespace, comments, and shortening names in code to reduce file size without changing behavior, producing smaller assets that download and parse faster.

Mixed Content

A situation where an HTTPS page loads sub-resources (scripts, images, styles) over insecure HTTP, which browsers warn about or block because it undermines the page's security.

Mobile First

A design and CSS strategy of building the smallest-screen layout first and progressively enhancing for larger viewports with min-width media queries.

Multipart Form Data

multipart/form-data

An encoding (multipart/form-data) used to submit HTML forms containing files and binary data, packaging each field as a separately delimited part.

Mutation Observer

MutationObserver

A browser API that asynchronously watches for changes to the DOM tree, such as added or removed nodes or attribute changes, and reports them in batches.

NaN

Not a Number

A special JavaScript numeric value, Not-a-Number, produced by invalid math like 0/0 or parsing a non-number; notably, NaN is not equal to itself, so Number.isNaN is used to test for it.

Nested Routes

A routing structure where child routes render inside a parent layout, letting shared UI persist while inner content changes as the URL deepens.

Network Tab

A developer-tools panel that lists every request a page makes with its method, status, size, timing, and headers, used to diagnose loading and API problems.

never Type

never

A TypeScript bottom type representing values that never occur, used for functions that always throw or never return and for exhaustiveness checks in switch statements.

node_modules

The directory where a Node package manager installs a project's dependencies; it is generated from the manifest and lockfile and typically excluded from version control.

Normalize.css

A stylesheet that gently smooths out inconsistencies in browsers' default styles while preserving useful defaults, an alternative to a full CSS reset.

npm

Node Package Manager

The default package manager and registry for Node.js, used to install, version, and publish JavaScript dependencies via a package.json manifest.

Nullish Coalescing

??

The JavaScript ?? operator that returns its right-hand value only when the left is null or undefined, unlike || which also triggers on other falsy values like 0 or ''.

OAuth

OAuth 2.0

An authorization framework that lets a user grant a third-party application limited access to their resources on another service without sharing their password, via issued access tokens.

Object URL

Blob URL

A temporary URL created with URL.createObjectURL that references an in-memory Blob or File, letting it be used as an image source or download link until revoked.

object-fit

A CSS property that controls how a replaced element like an image or video fills its box, with values such as cover, contain, and fill.

Offline First

A design approach that treats the network as optional, using service workers and local storage so an app works without connectivity and syncs when it returns.

One-way Data Flow

Unidirectional Data Flow

An architecture where state flows down from parent to child through props and changes flow back up through events or callbacks, making data movement predictable and easier to debug.

opacity

A CSS property setting an element's overall transparency from 0 (fully transparent) to 1 (fully opaque), affecting the element and all its descendants.

Open Graph

OG tags · Open Graph Protocol

A metadata protocol using og: meta tags that controls how a URL appears when shared on social platforms, setting the title, description, and preview image of the link card.

Optimistic UI

Optimistic Update

A pattern where the interface updates immediately to reflect an intended action's expected result before the server confirms it, then reconciles or rolls back if the request fails, making apps feel instant.

Optional Chaining

?.

The JavaScript ?. operator that safely accesses nested properties or calls methods, short-circuiting to undefined instead of throwing when a reference is null or undefined.

OPTIONS

The HTTP method that asks a server which methods and capabilities are supported for a resource; browsers use it automatically for CORS preflight checks.

Origin

The combination of scheme, host, and port that identifies where content came from; the browser's same-origin policy uses it as the boundary for security decisions.

Output Encoding

Escaping · HTML Escaping

The practice of escaping special characters when inserting data into HTML, attributes, JavaScript, or URLs so it is treated as inert text rather than executable markup, preventing injection.

overflow

A CSS property that determines how content exceeding an element's box is handled, with values visible, hidden, scroll, and auto.

package.json

The manifest file at the root of a Node project that declares its metadata, dependencies, scripts, and configuration for package managers and tools.

Page Visibility API

A browser API that reports whether the page is currently visible or hidden (backgrounded), letting apps pause work like animations or polling to save resources.

Paint

Painting · Rasterization

The browser rendering step that fills in pixels for text, colors, images, borders, and shadows onto layers, after layout has determined element geometry.

Partial Hydration

A technique that hydrates only the interactive portions of a server-rendered page rather than the whole tree, reducing JavaScript execution and improving load performance.

Performance API

A set of browser APIs (performance.now, PerformanceObserver, Navigation and Resource Timing) that provide high-precision timing data for measuring and diagnosing page performance.

Picture Element

picture

An HTML element that provides multiple image sources with conditions, letting the browser choose the best one for the viewport, resolution, or format (art direction and responsive images).

Placeholder

Hint text shown inside an empty input field that disappears on typing; it suggests the expected value but is not a substitute for a proper label.

pnpm

A fast, disk-efficient Node package manager that stores one copy of each dependency version in a global content-addressable store and links it into projects.

Pointer Events

A unified browser event model that abstracts mouse, touch, and pen input into a single set of pointer events, simplifying cross-device interaction handling.

Polyfill

Code that implements a newer browser feature for environments that lack it, letting developers use modern APIs while still supporting older browsers that would otherwise fail.

Portal

A framework feature (as in React) that renders a component's output into a DOM node outside its parent's hierarchy, useful for modals, tooltips, and overlays.

position Property

The CSS property controlling how an element is placed in the document flow, with values static, relative, absolute, fixed, and sticky.

POST

The HTTP method that submits data to a server to create a resource or trigger processing; it is neither safe nor idempotent and carries data in the request body.

PostCSS

A tool that transforms CSS with JavaScript plugins, enabling features like autoprefixing, future-syntax support, and linting as part of the build pipeline.

Preconnect

A resource hint (<link rel="preconnect">) that tells the browser to set up a connection (DNS, TCP, TLS) to a third-party origin early, reducing latency when its resources are later requested.

prefers-color-scheme

A CSS media feature that reports whether the user prefers a light or dark interface, enabling automatic dark-mode support.

prefers-reduced-motion

A CSS media feature that detects when a user has requested minimized animation in their system settings, letting sites disable or soften motion for those who are sensitive to it.

Prefetch

A resource hint (<link rel="prefetch">) that fetches a resource likely needed for a future navigation at low priority, warming the cache before it is requested.

Preflight Request

An automatic OPTIONS request the browser sends before certain cross-origin requests, asking the server (via CORS headers) whether the actual request is permitted.

Preload

A resource hint (<link rel="preload">) that tells the browser to fetch a critical resource early with high priority, such as a hero image or key font, before it is discovered normally.

Prettier

An opinionated code formatter that automatically rewrites source to a consistent style, ending debates over formatting and keeping diffs focused on logic.

preventDefault

A method on an event object that cancels the browser's default action for that event, such as stopping a link from navigating or a form from submitting.

Progressive Enhancement

graceful degradation

A strategy of building a functional baseline with semantic HTML, then layering CSS and JavaScript so the experience improves where supported but still works when they fail or are absent.

Progressive Rendering

Delivering and displaying page content incrementally so users see and can use parts of the page before the whole document has loaded.

Prop Drilling

The awkward passing of data through many intermediate components that do not use it, just to reach a deeply nested consumer; context or state stores are common remedies.

Props

properties

The read-only inputs a parent component passes down to a child in frameworks like React, configuring how the child renders. A child cannot mutate its props, keeping data flow one-directional.

Prototypal Inheritance

JavaScript's model of inheritance in which objects delegate to other objects through the prototype chain rather than through classical classes.

Prototype

The object from which a JavaScript object inherits properties and methods; the prototype chain is walked when a property is not found on the object itself.

Proxy

A JavaScript object that wraps another and intercepts fundamental operations (get, set, has, delete) through handler traps, enabling reactivity, validation, and virtualization.

Pseudo-class

pseudo-element

A CSS selector keyword like :hover, :focus, or :nth-child that targets elements in a particular state or position without needing extra markup. Pseudo-elements like ::before style generated content.

Pseudo-element

A CSS keyword prefixed with :: (such as ::before, ::after, ::first-line) that styles a specific part of an element or inserts generated content.

Push API

A browser API that, together with a service worker, lets a server deliver notifications to a web app even when it is not open, subject to user permission.

PUT

The HTTP method that creates or fully replaces a resource at a known URL with the request payload; it is idempotent because repeating it yields the same result.

PWA

Progressive Web App

Progressive Web App, a website enhanced with a service worker and web app manifest so it can be installed, work offline, and behave like a native app while remaining a web page.

Query String

query parameters · URL params

The part of a URL after the question mark carrying key-value parameters separated by ampersands, used to pass filters, search terms, and options to the server or page.

querySelector

A DOM method that returns the first element matching a given CSS selector, with querySelectorAll returning all matches as a static NodeList.

QUIC

A transport-layer network protocol built on UDP that provides multiplexed, encrypted connections with faster handshakes; it underpins HTTP/3.

React Server Components

RSC

React components that render on the server and send a serialized description to the client, shipping zero component JavaScript for those parts and enabling direct backend data access.

Reactivity

A programming model in which the UI automatically updates when the underlying state changes; frameworks track dependencies so a data change re-renders only the affected parts.

Reconciliation

Diffing

The process by which a UI framework compares the new virtual representation of the interface against the previous one and applies the minimal set of real DOM updates.

Redirect

An HTTP response (3xx status) that instructs the browser to fetch a different URL, used for moved pages, canonical URLs, HTTPS upgrades, and post-form navigation.

Reducer

A pure function that takes the current state and an action and returns the next state, providing a predictable, centralized way to handle state transitions.

Redux

A predictable state-management library organizing app state in a single immutable store, updated only by dispatching actions to pure reducers.

Ref

A framework mechanism (such as React's useRef) that holds a mutable value or a direct reference to a DOM element across renders without triggering a re-render.

Referer

Referrer

An HTTP request header (historically misspelled) that names the URL of the page from which the request originated, used for analytics and access control.

Reflect

A built-in JavaScript object providing methods that mirror low-level object operations (get, set, has, ownKeys), commonly paired with Proxy traps.

Reflow and Repaint

layout thrashing

Reflow (layout) recalculates element geometry when the DOM or styles change; repaint redraws pixels without changing layout. Frequent reflows are a common cause of janky, slow interfaces.

rem and em Units

rem · em

Relative CSS length units: em is relative to the current element's font size, while rem is relative to the root element's font size, aiding scalable and accessible typography.

Render Prop

A React pattern in which a component receives a function as a prop and calls it to determine what to render, sharing reusable logic; often replaced by hooks.

Render Tree

The browser's combined structure of visible DOM nodes and their computed styles, used as the input to the layout step; hidden elements are excluded.

Render-blocking CSS

Stylesheets the browser must download and parse before it can paint, delaying first render; mitigated by inlining critical CSS and deferring or splitting the rest.

Render-Blocking Resource

A stylesheet or synchronous script the browser must download and process before it can paint the page, delaying first render. Deferring or inlining critical assets reduces the block.

Rendering Engine

Browser Engine · Layout Engine

The browser subsystem (such as Blink, WebKit, or Gecko) that parses HTML and CSS, builds the render tree, and paints pixels to the screen.

Request Header

An HTTP header sent by the client that describes the request or the client, such as Accept, User-Agent, Authorization, or Cookie.

Request/Response

request-response cycle

The core interaction model of HTTP: a client sends a request specifying a method, URL, headers, and optional body, and the server replies with a response carrying a status code, headers, and body.

requestAnimationFrame

rAF

A browser API that schedules a callback to run just before the next repaint, synchronizing JavaScript animation with the display's refresh rate for smooth motion.

Resize Observer

ResizeObserver

A browser API that notifies code when an element's content box changes size, without the cost of polling or listening to global resize events.

Resource Hints

A family of link relations (preload, prefetch, preconnect, dns-prefetch) that let developers advise the browser how to prioritize and pre-fetch resources for faster loading.

Response Header

An HTTP header sent by the server that describes the response or the server, such as Content-Type, Cache-Control, Set-Cookie, or ETag.

Responsive Design

responsive web design

Building layouts that adapt fluidly to any screen size using flexible grids, relative units, and media queries, so one codebase serves phones, tablets, and desktops well.

Rest Parameters

The JavaScript ... syntax in a function signature that collects an indefinite number of arguments into a single array.

RGBA

A CSS color function specifying red, green, blue channels plus an alpha value for opacity, as in rgba(255, 136, 0, 0.5).

role="button"

An ARIA role applied to a non-button element to make assistive technology treat it as a button; native <button> is preferred because it also provides keyboard behavior for free.

Rollup

A JavaScript module bundler focused on ES modules and efficient tree shaking, commonly used to build libraries and as Vite's production bundler.

Route

A mapping between a URL path and the content or component shown for it; a router matches the current URL to a route to render the right view.

Safe Method

An HTTP method that is not expected to change server state, such as GET, HEAD, or OPTIONS; safe methods can be cached and prefetched freely.

Same-Origin Policy

A browser security rule that restricts scripts on one origin (scheme, host, and port) from reading data from a different origin, limiting cross-site data leakage. CORS is the controlled exception.

Sanitization

Input Sanitization

The process of cleaning user-supplied content to remove or neutralize dangerous markup and scripts before it is inserted into a page, a key defense against cross-site scripting.

Sass

SCSS

A popular CSS preprocessor that adds variables, nesting, mixins, functions, and partials, compiling its .scss or .sass source down to plain CSS.

Screen Reader

Assistive software that converts on-screen content into speech or braille, allowing people with visual impairments to navigate and use websites via the accessibility tree.

Secure Context

A browsing context delivered over HTTPS (or localhost) that browsers require before granting access to powerful features like service workers, geolocation, and the Clipboard API.

Select Element

Dropdown

An HTML form control presenting a dropdown or list of option elements from which the user chooses one or, with the multiple attribute, several values.

Semantic HTML

semantic markup

Using HTML elements for their meaning, such as header, nav, main, article, and button, rather than generic divs. It improves accessibility, SEO, and code clarity.

Semantic Versioning Range

Version Range

A version constraint in a manifest (using operators like ^ and ~) that specifies which updates a package manager may install automatically without a breaking change.

Server-Sent Events

SSE · EventSource

A browser technology (EventSource) that opens a one-way, long-lived HTTP stream so a server can push text updates to the client, with automatic reconnection.

Server-Side Rendering with Hydration

A hybrid strategy that renders full HTML on the server for fast first paint and SEO, then attaches JavaScript event handlers in the browser (hydration) to make it interactive.

Service Worker

A background script the browser runs separately from the page, intercepting network requests to enable offline caching, background sync, and push notifications. It is the engine behind PWAs.

Session

Server-side state that ties a series of requests to one user, usually keyed by a session identifier stored in a cookie. It lets a stateless protocol remember who you are between requests.

sessionStorage

A Web Storage API that stores string key-value pairs for the duration of a single tab session, cleared when the tab closes and scoped to the origin.

setInterval

A Web API that repeatedly runs a callback at a fixed interval until cleared with clearInterval; drift and overlapping runs make it less reliable than recursive setTimeout for precise timing.

setTimeout

A Web API that schedules a callback to run once after a minimum delay in milliseconds, queuing it as a macrotask when the timer elapses.

Shadow DOM

A browser feature that attaches a hidden, scoped DOM subtree to an element so its markup and styles are encapsulated and do not leak into or collide with the rest of the page.

SharedWorker

A worker that can be accessed by multiple browsing contexts (tabs, iframes) from the same origin, letting them share a single background script and communicate through it.

Signals

Signal

A fine-grained reactivity primitive that wraps a value and automatically tracks which computations read it, so only the parts of the UI that depend on a changed value re-run.

Single Sign-On

SSO

An authentication scheme letting a user log in once and gain access to multiple related applications without re-entering credentials for each.

Single Source of Truth

SSOT

An architectural principle that each piece of data lives in exactly one authoritative place, so all views derive from it and cannot drift out of sync.

Single-File Component

SFC

A file format (notably Vue's .vue) that co-locates a component's template, script, and scoped styles in one file for cohesion.

Skeleton Screen

Skeleton Loader

A placeholder UI that mimics a page's layout with gray blocks while content loads, improving perceived performance over a blank screen or spinner.

Slot

A placeholder in a component's template into which a parent can inject content, enabling flexible composition; the same idea appears in web components and framework components.

Source Map

sourcemap

A file that maps minified or transpiled production code back to the original source, so browser dev tools can show readable line numbers and original files when debugging.

SPA

Single-Page Application

Single-Page Application, a site that loads one HTML shell and then updates content via JavaScript without full page reloads, handling routing on the client. Feels app-like but can hurt SEO and first load.

Spread Operator

...

The JavaScript ... syntax that expands an iterable or object into individual elements, used to copy, merge, or pass arrays and objects.

srcset

An img attribute listing multiple image files with their widths or pixel densities so the browser can download the most appropriate one for the device and viewport.

SSG

Static Site Generation

Static Site Generation, pre-rendering pages to plain HTML at build time so they can be served instantly from a CDN. Ideal for content that does not change per request, like blogs and docs.

SSL

Secure Sockets Layer

Secure Sockets Layer, the original protocol for encrypting web traffic; now deprecated and replaced by TLS, though the name persists colloquially (e.g. 'SSL certificate').

SSR

Server-Side Rendering

Server-Side Rendering, generating a page's HTML on the server for each request so the browser receives fully-formed markup. It improves first paint and SEO versus rendering everything client-side.

Stacking Context

z-index · z-index stacking

A layer formed by certain CSS properties that governs how overlapping elements paint front-to-back. The z-index property orders siblings only within the same stacking context.

Stale-While-Revalidate

A caching strategy that immediately serves a cached response while fetching a fresh copy in the background to update the cache for next time, balancing speed and freshness.

State

The data a component or application holds that can change over time and drives what the UI shows. When state updates, the framework re-renders the affected parts of the interface.

State Management

The practice and tooling for coordinating shared, changing data across a frontend app beyond a single component, using patterns and libraries like Redux, Zustand, or the Context API.

Static Site

A website served as pre-built HTML, CSS, and JavaScript files with no per-request server rendering, delivered fast and cheaply from a CDN. Content changes require a rebuild and redeploy.

Sticky Positioning

A CSS position value (sticky) that keeps an element in normal flow until it reaches a scroll threshold, then pins it in place within its container.

stopPropagation

A method on an event object that halts the event from continuing to bubble up (or capture down) the DOM tree to other listeners.

Store

A centralized container that holds application state and exposes ways to read and update it, used by state-management libraries to share data across components.

Streaming SSR

Streaming Server Rendering

Server-side rendering that sends HTML to the browser in chunks as it is generated, letting the page start displaying before the full response is ready.

Strict Mode

use strict

A JavaScript mode enabled with 'use strict' that catches common mistakes as errors, disables unsafe features, and changes some behaviors to be more secure.

Strict-Transport-Security

HSTS

An HTTP response header (HSTS) that instructs browsers to only connect to a site over HTTPS for a specified duration, preventing protocol-downgrade and cookie-hijacking attacks.

Subdomain

A prefixed segment of a domain (like blog.example.com) that lets a site organize sections or services under a parent domain.

Subgrid

A CSS grid feature letting a nested grid inherit the track sizing of its parent grid, so child items align to the outer grid's rows and columns.

Subresource Integrity

SRI

A security feature where a script or stylesheet tag carries a cryptographic hash so the browser refuses to run the file if its contents have been tampered with, protecting against compromised CDNs.

Suspense

A React feature that lets a component declaratively 'wait' for asynchronous work like data or code loading and show a fallback UI until it is ready.

Svelte

A UI framework that shifts work to a compile step, generating small, framework-less JavaScript that surgically updates the DOM, avoiding a runtime virtual DOM.

SVG

Scalable Vector Graphics

Scalable Vector Graphics, an XML-based format for resolution-independent 2D graphics defined by shapes and paths; SVG can be embedded inline in HTML and styled and scripted like the DOM.

Symbol

A JavaScript primitive type introducing unique, immutable identifiers often used as non-colliding object property keys or to define well-known behaviors like Symbol.iterator.

Tab Order

The sequence in which interactive elements receive focus as the user presses Tab; following DOM order (and avoiding positive tabindex) keeps it logical and predictable.

Tabindex

An HTML attribute controlling whether and in what order an element receives keyboard focus; 0 makes it focusable in document order, -1 makes it programmatically focusable only.

Template Element

template

An HTML element whose contents are parsed but not rendered until cloned and inserted by JavaScript, providing a reusable inert markup fragment.

Template Literal

Template String

A JavaScript string enclosed in backticks that supports multi-line text and embedded expressions via ${...} interpolation, plus tagged-template processing.

Textarea

An HTML form control for multi-line free-text entry, sized by rows and columns and resizable by default.

this Keyword

this

A JavaScript keyword whose value is the execution context of the current function, determined by how the function is called; arrow functions instead inherit this from their enclosing scope.

Throttle

A technique that limits how often a function can run to at most once per interval during a stream of events, used for scroll and mousemove handlers.

Time to First Byte

TTFB

A performance metric measuring the time from a request until the first byte of the response arrives, reflecting server responsiveness and network latency.

Time to Interactive

TTI

A performance metric marking when a page has rendered and is reliably able to respond to user input quickly, after the main thread finishes heavy startup work.

TLS

Transport Layer Security

Transport Layer Security, the cryptographic protocol that encrypts and authenticates data in transit; it secures HTTPS and succeeded the deprecated SSL.

TLS Handshake

The negotiation at the start of a secure connection where client and server agree on a cipher, verify the server's certificate, and establish session keys.

Total Blocking Time

TBT

A lab performance metric summing the time the main thread was blocked by long tasks between first contentful paint and interactivity, approximating input responsiveness.

transform

A CSS property that visually repositions, rotates, scales, or skews an element in 2D or 3D without disturbing the surrounding layout, making it efficient to animate.

transition

A CSS property that smoothly animates a property from one value to another over a duration when the value changes, such as fading a color on hover.

Tree Shaking

dead code elimination

A bundler optimization that removes unused exports from the final output by statically analyzing ES module imports, shrinking the shipped bundle to only the code actually used.

Truthy and Falsy

Truthy · Falsy

How JavaScript values coerce to boolean in conditionals; falsy values are false, 0, '', null, undefined, NaN, and everything else is truthy.

Two-way Binding

A data-binding pattern where a UI control and its underlying state stay synchronized in both directions, so editing the input updates the state and vice versa.

Type Alias

A TypeScript declaration (type) that gives a name to any type, including unions, intersections, tuples, and primitives, for reuse and readability.

Type Annotation

A TypeScript syntax that declares the expected type of a variable, parameter, or return value, which the compiler checks at build time and then erases from the emitted JavaScript.

Type Assertion

as · Type Cast

A TypeScript mechanism (value as Type) that tells the compiler to treat a value as a specific type; it changes only compile-time checking and performs no runtime conversion.

Type Guard

Type Narrowing

A TypeScript expression or function that narrows a value to a more specific type within a scope, using checks like typeof, instanceof, in, or a custom 'is' predicate.

TypeScript

TS

A typed superset of JavaScript that adds static type checking at compile time, catching type errors before runtime. It compiles down to plain JavaScript and is widely used in modern frontend codebases.

Uncontrolled Component

A form input that keeps its own value in the DOM, read on demand (for example via a ref) rather than tracked in framework state.

unknown Type

unknown

A TypeScript top type that can hold any value but, unlike any, must be narrowed with a type check before its value can be used, making it the safer alternative.

URL

Uniform Resource Locator · URI · link

Uniform Resource Locator, the address of a web resource, composed of a scheme, host, optional port, path, query string, and fragment. It tells the browser what to fetch and from where.

useEffect

A React hook that runs side effects (data fetching, subscriptions, DOM updates) after render, with a dependency array controlling when it re-runs and an optional cleanup function.

User-Agent

A request header string identifying the client software (browser, version, operating system) making the request; servers sometimes use it to adapt responses.

useState

A React hook that adds local state to a function component, returning the current value and a setter that triggers a re-render when called.

Utility Types

Built-in TypeScript generic types that transform other types, such as Partial, Required, Pick, Omit, Record, and ReturnType, reducing boilerplate.

Utility-First CSS

Tailwind · atomic CSS

A styling approach using many small single-purpose classes composed directly in markup, popularized by Tailwind, trading semantic class names for speed and consistency without leaving the HTML.

V8

Google's open-source JavaScript and WebAssembly engine that powers Chrome and Node.js, compiling JavaScript to native machine code with just-in-time optimization.

Vary Header

A response header listing which request headers a cache must account for when deciding whether a stored response can be reused, such as Vary: Accept-Encoding.

Vendor Prefix

A browser-specific prefix (like -webkit- or -moz-) once required on experimental CSS properties; automated tooling now adds them, and most modern features need none.

Viewport

viewport meta

The visible area of a web page in the browser window. The viewport meta tag tells mobile browsers to match the device width so responsive layouts render at the intended scale.

Viewport Meta Tag

An HTML meta tag (name="viewport") that controls how a page scales on mobile devices; setting width=device-width and initial-scale=1 is the basis of responsive design.

Viewport Units

vw · vh

CSS length units (vw, vh, vmin, vmax) sized as a percentage of the viewport's dimensions, enabling layouts that scale with the browser window.

Virtual DOM

vDOM

An in-memory representation of the UI that a framework diffs against the previous version to compute the minimal set of real DOM changes, avoiding costly full re-renders. Popularized by React.

Virtual Scrolling

Windowing · List Virtualization

A technique that renders only the list items currently within (or near) the viewport and recycles them as the user scrolls, keeping large lists fast and memory-light.

Vite

A fast frontend build tool that serves source over native ES modules during development for instant startup and bundles with Rollup for production.

Void Element

Empty Element

An HTML element that has no content and no closing tag, such as img, br, input, and hr; it is self-contained by definition.

Vue

Vue.js

A progressive JavaScript framework for building user interfaces, featuring a reactive data model, template syntax, single-file components, and an approachable adoption curve.

W3C

World Wide Web Consortium

The World Wide Web Consortium, an international body that develops and publishes open standards for the web such as HTML, CSS, and accessibility guidelines.

WAI-ARIA

ARIA Specification

The Accessible Rich Internet Applications specification defining roles, states, and properties that make dynamic and custom widgets understandable to assistive technologies.

WCAG

Web Content Accessibility Guidelines

Web Content Accessibility Guidelines, the internationally recognized standard for accessible web content, organized around being perceivable, operable, understandable, and robust, with A, AA, and AAA conformance levels.

WeakMap

A JavaScript collection keyed by objects that holds its keys weakly, so entries can be garbage-collected when no other reference to the key object remains, avoiding memory leaks.

Web App Manifest

manifest.json

A JSON file that describes a progressive web app's name, icons, theme colors, and display mode, enabling installation to the home screen and a standalone app-like experience.

Web Audio API

A browser API for generating, processing, and routing audio through a graph of nodes, used for games, music apps, and sound effects with precise timing.

Web Component

web components

A browser-native standard for building reusable, encapsulated custom elements using custom element definitions, the Shadow DOM, and HTML templates, usable across frameworks or with none.

Web Font

@font-face

A font downloaded by the browser (via @font-face and formats like WOFF2) so a page can use typefaces not installed on the user's device, at the cost of extra loading.

Web Share API

A browser API (navigator.share) that invokes the operating system's native share dialog so users can send a page's link or content to other apps.

Web Storage

localStorage · sessionStorage

Browser APIs for storing key-value string data on the client: localStorage persists across sessions, while sessionStorage clears when the tab closes. Both are simpler and larger than cookies.

Web Worker

A script that runs JavaScript on a background thread separate from the main UI thread, letting heavy computation proceed without freezing the interface. It communicates via message passing.

WebAssembly

WASM

A low-level binary instruction format that runs in the browser at near-native speed, letting languages like Rust, C, and Go target the web for performance-critical work alongside JavaScript.

WebGL

Web Graphics Library

A browser API that exposes GPU-accelerated 2D and 3D graphics rendering to JavaScript via an OpenGL ES-based interface, drawing onto a canvas.

WebGPU

A modern browser API providing lower-level, higher-performance access to GPU compute and rendering than WebGL, designed for advanced graphics and machine-learning workloads.

WebP

A modern image format offering efficient lossy and lossless compression with transparency, producing smaller files than JPEG or PNG for comparable quality.

Webpack

A widely used module bundler that builds a dependency graph of an application's assets and outputs optimized bundles, extensible through loaders and plugins.

WebRTC

Web Real-Time Communication

Web Real-Time Communication, a set of browser APIs enabling peer-to-peer audio, video, and data connections directly between clients, used for video calls and live streaming.

WebSocket

ws

A protocol providing a persistent, full-duplex connection between browser and server over a single TCP socket, enabling real-time bidirectional messaging for chat, live updates, and collaborative apps.

WHATWG

Web Hypertext Application Technology Working Group

The Web Hypertext Application Technology Working Group, a community that maintains living standards including the HTML and DOM specifications.

will-change

A CSS property hinting to the browser that a property is about to be animated, letting it optimize ahead of time, such as promoting the element to its own compositor layer.

WOFF2

Web Open Font Format 2, the current compressed font format for the web, offering smaller file sizes than WOFF and broad browser support.

X-Frame-Options

A legacy response header that controls whether a page may be embedded in a frame or iframe, used to prevent clickjacking; largely superseded by the CSP frame-ancestors directive.

XMLHttpRequest

XHR

The original browser API for making asynchronous HTTP requests from JavaScript, the engine behind classic AJAX. It is largely superseded by the simpler Fetch API.

Yarn

An alternative Node package manager introducing features like lockfiles, workspaces, and offline caching, historically a faster and more deterministic option than early npm.

z-index

A CSS property that controls the stacking order of positioned elements along the z-axis; higher values render in front, but only within the same stacking context.

Data & Databases

351

Ad Hoc Query

A one-off query written to answer a specific, immediate question rather than as part of a predefined report. Ad hoc analysis lets users explore data flexibly.

Additive Measure

A numeric fact that can be meaningfully summed across every dimension, such as sales amount. Additivity determines which aggregations produce correct results.

Adjacency

In graph databases, the direct connection between two nodes joined by an edge. Storing adjacency directly is what lets graph databases traverse relationships without expensive joins.

Aggregate Table

Summary Table

A precomputed summary table that stores measures rolled up to a coarser grain, such as daily totals, to speed common queries. It trades storage and refresh cost for faster analytics.

Aggregation

Combining many rows into summary values using functions like sum, count, average, min, or max, usually grouped by one or more categorical columns.

Alternate Key

A candidate key that was not selected as the primary key but still uniquely identifies rows. It is typically enforced with a unique constraint.

Anti Join

An operation that returns rows from one table for which no matching row exists in another. It is commonly expressed with NOT EXISTS or NOT IN and is the complement of a semi join.

Anti-Entropy

A background process in distributed stores that compares replicas and reconciles differences to bring them into agreement, often using Merkle trees. It repairs divergence that read repair misses.

Apache Arrow

Arrow

A language-independent, in-memory columnar data format designed for efficient analytics and zero-copy data sharing between systems. It avoids repeated serialization when moving data between tools.

Apache Hudi

Hudi

An open table format that brings incremental upserts, deletes, and change streams to data-lake storage, enabling efficient record-level updates. It supports near-real-time ingestion into lakes.

Apache Iceberg

Iceberg

An open table format for huge analytic datasets that provides ACID transactions, schema and partition evolution, and snapshot-based time travel over files in object storage. It decouples table metadata from any single query engine.

Apache Spark

Spark

A distributed data processing engine that runs computations in memory across a cluster, supporting batch, streaming, SQL, and machine learning workloads. It is much faster than classic MapReduce for iterative jobs.

Apache Thrift

Thrift

A binary serialization and remote procedure call framework that defines data types and service interfaces in a language-neutral schema. It generates code for many languages from one definition.

Approximate Nearest Neighbor

ANN

A class of algorithms that find vectors close to a query vector quickly by trading exactness for speed, rather than scanning every vector. It makes similarity search practical over huge vector collections.

At-Least-Once Delivery

A messaging guarantee that every message is delivered one or more times, so no message is lost but duplicates are possible. Consumers must be idempotent to handle repeats safely.

At-Most-Once Delivery

A messaging guarantee that every message is delivered zero or one times, so duplicates never occur but messages may be lost on failure. It favors low latency over reliability.

Atomicity

The ACID property guaranteeing that all operations in a transaction either complete together or have no effect at all. A partially applied transaction is impossible.

Attribute

A named property that describes an entity, corresponding to a column in a relational table, such as a customer's email. Each attribute has a data type and domain of allowed values.

Avro

Apache Avro

A compact, row-oriented binary serialization format that embeds its schema with the data, well suited to streaming and evolving message payloads.

B-Tree Index

A balanced tree index structure that keeps data sorted and supports efficient equality and range lookups in logarithmic time. It is the default index type in most relational databases.

B+ Tree

A variant of the B-tree in which all actual data pointers live in the leaf nodes, which are linked together for fast sequential scanning. This structure underlies most relational database indexes.

Backfill

Loading or reprocessing historical data through a pipeline to populate a new table or correct past results, as opposed to processing only new incoming data.

Backup

A copy of data kept separately so it can be restored after loss, corruption, or disaster. Backups vary from full copies to incremental changes since the last backup.

BASE

A consistency model for distributed systems—Basically Available, Soft state, Eventual consistency—that favors availability and scale over the strict guarantees of ACID.

Bitmap Index

An index that represents the presence of each distinct value as a bit vector across rows, enabling fast boolean combinations. It is efficient for low-cardinality columns in analytical workloads.

Block Storage

A storage architecture that exposes raw fixed-size blocks that an operating system or database formats and manages directly. It offers low latency and is typical for transactional databases.

Boyce-Codd Normal Form

BCNF

A stricter version of third normal form requiring that for every functional dependency, the determinant is a candidate key. It resolves certain anomalies that 3NF can leave in tables with overlapping candidate keys.

Bridge Table

Associative Table · Junction Table

A table that resolves a many-to-many relationship between a fact and a dimension, or between hierarchical members, often carrying an allocation weight. It lets facts join cleanly to grouped dimension members.

Broadcast Join

Map-Side Join

A distributed join strategy that copies a small table to every node so it can be joined locally with partitions of a large table, avoiding a costly shuffle. It is efficient only when one side is small enough to replicate.

Broker

A server in a messaging or streaming system that stores messages and serves them to consumers. A cluster of brokers provides scalability and fault tolerance.

BSON

Binary JSON

Binary JSON, a binary-encoded serialization of JSON-like documents that adds data types such as dates and binary blobs and is faster to traverse. It is the storage format used by some document databases.

Bucketing

Clustering

A physical data-organization technique that distributes rows into a fixed number of buckets by hashing a column, so joins and aggregations on that column can skip shuffling. It complements partitioning for large tables.

Business Intelligence

BI

The tools and practices for collecting, analyzing, and presenting data to support business decisions, spanning reporting, dashboards, and self-service analytics.

Cache

caching layer

A fast, often in-memory store that holds frequently accessed data to reduce latency and load on the primary database, typically with expiry or eviction policies.

Calculated Field

Computed Column

A derived column in a report or model whose value is computed from other fields using a formula rather than stored directly. It enables metrics like margins or ratios without changing source data.

Candidate Key

A minimal set of columns that can uniquely identify every row in a table, meaning no column can be removed without losing uniqueness. A table may have several candidate keys, one of which is chosen as the primary key.

Cardinality

In data modeling, the type of relationship between two tables—one-to-one, one-to-many, or many-to-many; in query optimization, the number of distinct values in a column.

Cardinality Estimation

The optimizer's process of predicting how many rows a query operation will produce, based on table statistics. Accurate estimates are critical for choosing good execution plans.

Causal Consistency

A consistency model that guarantees operations related by cause and effect are seen in the same order by all nodes, while allowing unrelated operations to be seen in any order. It is stronger than eventual but weaker than strong consistency.

Change Data Capture

CDC

A technique that detects and streams row-level changes—inserts, updates, deletes—from a source database so downstream systems stay synchronized in near real time.

Change Log

Changelog

An ordered record of every modification made to a dataset, used for auditing, replication, and rebuilding state. Change-data-capture systems produce and consume change logs.

Check Constraint

A rule that restricts the values allowed in a column by evaluating a boolean expression on each insert or update, such as requiring an age to be greater than zero. Rows that fail the check are rejected.

Clustered Index

An index that determines the physical order in which rows are stored on disk, so the table data itself is the index leaf level. A table can have only one clustered index.

Cohort Analysis

An analytical technique that groups records by a shared starting characteristic, such as signup month, and tracks each group's behavior over time. It reveals how outcomes differ across cohorts.

Cold Storage

Low-cost storage for data that is accessed rarely and can tolerate high retrieval latency, such as archives and backups. It trades access speed for much lower cost per byte.

Column

field · attribute

A named field in a database table that holds a single attribute of a defined data type, applied consistently across every row.

Column Pruning

Projection Pushdown

A query optimization for columnar formats that reads only the columns a query references and skips the rest. It is a major reason columnar storage is fast for analytics.

Column-Family Store

Column-Family Database

A NoSQL database model that groups related columns into families and stores data by row key, scaling to very wide, sparse tables across a cluster. It suits high write throughput over huge datasets.

Columnar Compression

Compression that exploits the similarity of values within a single column, such as run-length or dictionary encoding, to shrink storage dramatically. Column stores compress far better than row stores as a result.

Columnar Store

column-oriented database · columnar database

A database that stores data by column rather than by row, allowing analytical queries to scan only needed columns with high compression and throughput.

Common Table Expression

CTE · WITH Clause

A named temporary result set defined with the WITH clause that can be referenced within a single query. CTEs improve readability and can be recursive to traverse hierarchies.

Compaction

A background process in log-structured stores that merges and rewrites data files to remove obsolete versions and deleted rows, reclaiming space and improving read speed. It trades I/O now for faster reads later.

Composite Index

Compound Index · Multi-Column Index

An index built on two or more columns, useful for queries that filter or sort on those columns together. Column order in the index matters because it determines which prefixes can be used.

Composite Key

compound key

A primary key composed of two or more columns that together uniquely identify a row, used when no single column is sufficient.

Conceptual Data Model

A high-level, technology-independent model that captures the main entities of a business domain and their relationships. It focuses on meaning rather than implementation detail.

Conformed Dimension

A dimension table that is shared consistently across multiple fact tables or data marts, so measures can be compared across subjects. Conformed dimensions enable enterprise-wide reporting.

Connection Pool

connection pooling

A cache of reusable open database connections that applications borrow and return, avoiding the overhead of opening a new connection per request.

Consensus

The problem of getting a group of distributed nodes to agree on a single value or ordering of operations despite failures. Algorithms such as Paxos and Raft solve it and underlie replicated state machines.

Consistency (ACID)

The ACID property guaranteeing that a transaction moves the database from one valid state to another, preserving all defined rules and constraints. It differs from the distributed-systems notion of consistency.

Consistent Hashing

A hashing scheme that maps keys and nodes onto a ring so that adding or removing a node moves only a small fraction of keys. It is widely used to distribute data across a changing set of servers.

Constraint

A rule enforced by the database on column or table values—such as NOT NULL, UNIQUE, CHECK, or foreign key—that guarantees data integrity at write time.

Consumer

A client that reads and processes messages from a queue or streaming topic. Consumers may work alone or in groups that share the load of a topic's partitions.

Consumer Group

A set of consumers that cooperatively read a topic so that each partition is handled by exactly one member, enabling parallel and scalable consumption. If a member fails, its partitions are reassigned.

Correlated Subquery

A subquery that references columns from the outer query and is therefore re-evaluated for each outer row. It is more expressive but often slower than an uncorrelated subquery.

Cost-Based Optimization

CBO

A query optimization approach that estimates the resource cost of alternative execution plans using table statistics and chooses the cheapest. It contrasts with rule-based optimization that follows fixed heuristics.

Covering Index

An index that contains all the columns a query needs, allowing the database to answer the query from the index alone without reading the table. This avoids extra lookups and speeds reads.

Cross Join

Cartesian Join

A join that produces the Cartesian product of two tables, pairing every row of one with every row of the other. With no join condition, the result size is the product of the two row counts.

CSV

Comma-Separated Values

Comma-Separated Values: a plain-text tabular format where each line is a row and fields are delimited by commas. Simple and universal but schema-less and untyped.

Cube

OLAP cube

A multidimensional structure that pre-aggregates measures across dimensions, letting analysts slice, dice, and drill through data quickly in OLAP tools.

Dashboard

A visual interface that consolidates key metrics, charts, and tables onto one screen, giving an at-a-glance view of performance or system state.

Data Anonymization

The irreversible transformation of data to remove or obscure identifying information so individuals cannot be re-identified. Unlike pseudonymization, it cannot be reversed with a key.

Data Archiving

The practice of moving inactive but still valuable data out of primary systems into lower-cost, long-term storage while keeping it retrievable. It keeps operational databases lean and controls cost.

Data Catalog

A searchable inventory of an organization's data assets with metadata, ownership, and descriptions, helping users discover, understand, and trust available data.

Data Classification

The process of categorizing data by sensitivity or type, such as public, internal, or confidential, to apply appropriate handling and access controls. It is a foundation for security and governance policies.

Data Cleansing

Data Cleaning · Data Scrubbing

The process of detecting and correcting errors, inconsistencies, and inaccuracies in data, such as fixing typos, standardizing formats, and removing duplicates. It improves fitness for analysis and operations.

Data Contract

A formal, versioned agreement between data producers and consumers specifying the schema, semantics, and quality guarantees of a dataset. It prevents breaking changes from silently reaching downstream users.

Data Control Language

DCL

The subset of SQL used to manage access rights, primarily the GRANT and REVOKE statements that assign or remove privileges. DCL governs who can perform which operations.

Data Deduplication Key

A field or combination of fields used to identify duplicate records so they can be collapsed into one. Choosing a robust dedup key is central to data cleansing and stream deduplication.

Data Definition Language

DDL

The subset of SQL used to define and modify database structure, including CREATE, ALTER, and DROP statements for tables, indexes, and schemas. DDL changes the shape of the database rather than its data.

Data Dictionary

A centralized reference that documents the meaning, format, allowed values, and relationships of data elements in a system. It helps users and developers interpret data consistently.

Data Enrichment

The process of enhancing a dataset by adding related information from other internal or external sources, such as appending demographics to customer records. It increases the analytical value of the data.

Data Fabric

An architecture that provides a unified, integrated layer of data access and management across distributed sources using metadata and automation. It aims to connect data wherever it lives without forcing consolidation.

Data Federation

Query Federation · Data Virtualization

An integration approach that lets queries access data from multiple separate sources as if they were one, without physically consolidating it. Data stays in place and is combined at query time.

Data Freshness

Data Latency

A measure of how recent the data in a system is relative to the source events it represents, often expressed as lag. It is a key quality dimension for pipelines and dashboards.

Data Governance

The policies, roles, and processes that manage data availability, integrity, security, and compliance across an organization, defining who can do what with which data.

Data Ingestion

The process of collecting and importing data from source systems into a storage or processing platform, whether in batches or streams. It is the first stage of most data pipelines.

Data Lake

A storage repository that holds large volumes of raw data in its native format—structured, semi-structured, and unstructured—until it is needed for processing or analysis.

Data Lakehouse

lakehouse

An architecture that combines a data lake's low-cost, flexible storage with a warehouse's schema, transactions, and query performance, often via open table formats.

Data Lineage

The traceable record of data's origin and its movement and transformations through pipelines, showing where each value came from and how it was derived.

Data Lineage Graph

A visual or queryable map showing how data flows and transforms from its origins through pipelines to final reports. It supports impact analysis and root-cause debugging when data looks wrong.

Data Manipulation Language

DML

The subset of SQL used to query and change data, including SELECT, INSERT, UPDATE, and DELETE statements. DML operates on the rows within existing structures.

Data Mart

A subset of a data warehouse scoped to a single business area or team, giving that group faster, focused access to the data relevant to its analytics.

Data Masking

A technique that replaces sensitive data values with realistic but fictitious substitutes so datasets can be used for testing or analysis without exposing real information. The structure is preserved while the true values are hidden.

Data Mesh

An organizational and architectural approach that treats data as a product owned by decentralized domain teams, with self-serve platform infrastructure and federated governance. It shifts away from a single central data team.

Data Migration

The process of moving data from one system, schema, or format to another, typically involving extraction, transformation, validation, and cutover planning.

Data Modeling

The practice of defining how data is structured, related, and constrained—conceptual, logical, and physical—so it accurately represents the domain and serves its use cases.

Data Observability

The practice of continuously monitoring the health of data pipelines across dimensions such as freshness, volume, schema, and distribution to detect problems early. It applies system-monitoring ideas to data itself.

Data Pipeline

An automated sequence of steps that moves and processes data from source to destination, handling extraction, transformation, validation, and loading along the way.

Data Profiling

Examining a dataset to summarize its structure, value distributions, null rates, and anomalies, informing quality checks and modeling decisions.

Data Profiling Statistics

Summary measures produced by examining a dataset, such as null rates, distinct counts, value ranges, and pattern frequencies. They reveal quality issues and inform how data should be modeled.

Data Quality

The degree to which data is accurate, complete, consistent, timely, and fit for its intended use, measured and maintained through profiling and validation.

Data Residency

The requirement that data be stored and processed within a specific geographic or jurisdictional boundary, often to satisfy legal or regulatory rules. It constrains where cloud and replication systems may place data.

Data Retention

Retention Policy

The policy governing how long data is kept before it is archived or deleted, balancing business need, cost, and legal requirements. Enforced retention limits liability and storage growth.

Data Silo

A collection of data controlled by one team or system and not readily accessible to the rest of the organization. Silos hinder integrated analysis and are a common target for data integration efforts.

Data Skew

Partition Skew

An uneven distribution of data across partitions or keys, causing some tasks or nodes to handle far more work than others and slowing the whole job. Skew is a common cause of poor parallel performance.

Data Sovereignty

The principle that data is subject to the laws and governance of the country in which it is collected or stored. It shapes decisions about data residency and cross-border transfer.

Data Steward

A person accountable for the quality, definitions, and appropriate use of a specific set of data within an organization. Data stewards are a core role in a data governance program.

Data Transformation

The step in a pipeline that converts, cleans, reshapes, and enriches source data into the structure and semantics the target requires. It is the T in both ETL and ELT.

Data Validation

Checking incoming data against expected rules—types, ranges, formats, completeness—and rejecting or flagging records that fail, protecting downstream integrity.

Data Vault

A data warehouse modeling method that separates business keys, relationships, and descriptive attributes into hubs, links, and satellites. It is designed for auditability, scalability, and handling change over time.

Data Visualization

Data Viz

The graphical representation of data using charts, graphs, and maps to reveal patterns, trends, and outliers that are hard to see in raw numbers. It is central to analytics and business intelligence.

Data Warehouse

EDW

A central repository of integrated, historical data optimized for analytical queries and reporting, typically structured, cleaned, and organized for business intelligence.

Data Warehouse Grain Statement

An explicit declaration of exactly what one row of a fact table represents, such as one row per order line per day. Fixing the grain first is the foundational step of dimensional design.

Database

DB

An organized collection of structured data stored electronically and managed by a database management system (DBMS), enabling efficient storage, retrieval, and modification of that data.

Database Cursor

A control structure that lets a program iterate through the rows of a query result one at a time. Cursors trade throughput for fine-grained row-by-row processing.

Database Statistics

Optimizer Statistics

Summary information the optimizer keeps about tables and columns, such as row counts, value distributions, and distinct-value counts. Stale statistics lead to poor query plans.

DataFrame

A distributed table-like data structure organized into named columns, providing a higher-level API than raw records for filtering, joining, and aggregating. It appears in Spark, pandas, and similar tools.

Dead Letter Queue

DLQ

A separate queue where messages are routed when they cannot be processed or delivered after repeated attempts. It isolates problem messages for later inspection without blocking the main flow.

Deduplication

dedup

Identifying and removing duplicate records so each real-world entity or event is represented once, improving data quality and the accuracy of counts.

Degenerate Dimension

A dimension attribute, such as an order number, stored directly in the fact table because it has no other descriptive attributes worth a separate table. It provides grouping and drill context without a dimension join.

Delta Lake

An open table format that adds ACID transactions, schema enforcement, and time travel on top of data-lake files such as Parquet. It brings warehouse-like reliability to object storage.

Denormalization

Deliberately introducing redundancy into a schema—often by duplicating columns or precomputing joins—to speed up reads at the cost of extra storage and write complexity.

Deserialization

Unmarshalling

The process of reconstructing an in-memory data structure from a serialized byte stream or text representation. Untrusted input during deserialization is a common security risk.

Dictionary Encoding

A compression technique that replaces repeated column values with small integer codes referencing a lookup dictionary of distinct values. It saves space and speeds scans on low-cardinality columns.

Dimension

dimension table

In dimensional modeling, a table of descriptive, categorical attributes—such as product, customer, or date—used to filter, group, and label the numeric facts.

Dimensional Modeling

A data warehouse design method that organizes data into fact tables of measurements surrounded by descriptive dimension tables. It optimizes for query performance and business readability rather than normalization.

Dirty Read

A concurrency anomaly in which a transaction reads data written by another transaction that has not yet committed and might roll back. It is prevented by the read committed isolation level and above.

Document Database

document store

A NoSQL database that stores semi-structured records as self-contained documents, typically JSON or BSON, allowing flexible, nested schemas per record.

Domain

In data modeling, the set of allowed values and the data type that an attribute may take, such as valid dates or a list of status codes. Constraints enforce an attribute's domain.

Downsampling

In time-series systems, the reduction of high-frequency data to a coarser interval by aggregating points, such as turning per-second readings into hourly averages. It saves storage while preserving long-term trends.

Drill-Down

An OLAP operation that navigates from summarized data to finer detail, such as expanding a yearly total into its quarters. It is the inverse of roll-up.

Drill-Through

A reporting interaction that navigates from a summarized value to a detailed report or the underlying transaction records behind it. It lets users investigate the source of a number.

Durability

The ACID property guaranteeing that once a transaction commits, its effects survive crashes and power loss. It is typically ensured by writing to persistent logs before acknowledging the commit.

ELT

Extract Load Transform

Extract, Load, Transform: a pattern that loads raw data into the target system first, then transforms it in place using the warehouse's own compute.

Entity

In data modeling, a distinguishable thing about which data is stored, such as a customer, product, or order, typically becoming a table. Entities have attributes and participate in relationships.

Entity-Attribute-Value

EAV

A flexible data model that stores each fact as a row naming the entity, the attribute, and its value, rather than a fixed column per attribute. It handles sparse or evolving attributes but complicates querying.

Entity-Relationship Diagram

ERD · ER diagram

A visual model of a database's entities, their attributes, and the relationships between them, used to design and document relational schemas.

Equijoin

A join whose condition uses equality to match column values between tables, the most common join form. Joins using other operators such as ranges are called non-equijoins.

ETL

Extract Transform Load

Extract, Transform, Load: a pipeline pattern that pulls data from sources, cleans and reshapes it, then loads the finished result into a target store such as a warehouse.

Exactly-Once Semantics

Exactly-Once Processing

A processing guarantee that each event affects the results once and only once, even amid retries and failures. It is the hardest delivery guarantee and usually relies on idempotence and transactional commits.

EXCEPT

MINUS

A set operator that returns rows from the first query that do not appear in the second, effectively a set difference. Some databases call the same operation MINUS.

Execution Plan

query plan

The step-by-step strategy the database engine uses to run a query, showing the operations, join methods, and index usage chosen by the optimizer.

EXPLAIN

EXPLAIN PLAN

A SQL command that shows the query optimizer's chosen execution plan without running the query, revealing join order, index usage, and estimated costs. It is the primary tool for diagnosing slow queries.

Extract Load Transform Pipeline

ELT Pipeline

A pipeline pattern that loads raw data into the target system first and transforms it there using the target's compute, in contrast to transforming before loading. It leverages powerful cloud warehouses for the heavy work.

Fact Constellation

Galaxy Schema

A warehouse schema in which multiple fact tables share common dimension tables, forming a network of stars. It models complex domains with several related business processes.

Fact Table

The central table in a dimensional model that stores measurable, numeric events—such as sales or shipments—along with foreign keys to its dimension tables.

Factless Fact Table

A fact table that records the occurrence of events or the existence of relationships without any numeric measures. It is queried mainly by counting rows, such as student attendance events.

Fan-Out

A messaging pattern in which a single published message is delivered to many subscribers or queues at once. It decouples one producer from multiple independent consumers.

First Normal Form

1NF

The lowest level of database normalization, requiring that every column hold a single atomic value and that there be no repeating groups or arrays within a row. It is the starting point for eliminating redundancy.

Foreign Key

FK

A column or set of columns that references the primary key of another table, enforcing referential integrity by linking related records across tables.

Full Load

A data-loading strategy that reads and replaces the entire source dataset each run. It is simple and self-correcting but costly for large tables compared with incremental loads.

Full Outer Join

A join that returns all rows from both tables, matching where possible and filling unmatched columns on either side with nulls. It combines the behavior of left and right outer joins.

Full Table Scan

Sequential Scan

A query execution strategy that reads every row of a table rather than using an index. It is efficient when a large fraction of rows is needed but slow for selective lookups on big tables.

Full-Text Index

A specialized index over the words in text columns that supports linguistic searches such as phrase and proximity matching. It typically uses an inverted structure rather than a B-tree.

Functional Dependency

A relationship where the value of one set of columns uniquely determines the value of another, written as X determines Y. Functional dependencies are the theoretical basis for normalization.

Funnel Analysis

An analytical technique that measures how many entities progress through the sequential stages of a process, revealing where the largest drop-offs occur. It is common in product and marketing analytics.

Fuzzy Matching

Approximate Matching

A technique for identifying records that refer to the same entity despite spelling, formatting, or typographical differences, using similarity scores rather than exact equality. It underlies deduplication and record linkage.

Golden Record

Single Version of Truth

The single, authoritative, deduplicated version of an entity assembled from multiple sources in master data management. It represents the trusted best-known values for that entity.

Gossip Protocol

A decentralized communication method in which nodes periodically exchange state with random peers, spreading information across a cluster like a rumor. It is used for membership and failure detection without a central coordinator.

Grain

granularity

The level of detail a fact table records, meaning what a single row represents—such as one line item or one daily total. It defines what can be measured.

Graph Database

A database that models data as nodes and edges, making relationship-heavy queries—such as shortest path or network traversal—efficient and natural to express.

Graph Traversal

The operation of navigating a graph database by following edges from node to node to answer relationship questions, such as finding friends of friends. Traversals make multi-hop relationship queries efficient.

GROUP BY

A SQL clause that collapses rows sharing the same values in specified columns into summary groups, over which aggregate functions like SUM and COUNT are computed. It is the basis of most reporting queries.

Hadoop Distributed File System

HDFS

A distributed file system that stores very large files as blocks replicated across many commodity machines for fault tolerance and high throughput. It is the storage foundation of the Hadoop ecosystem.

Hash Index

An index that stores keys in a hash table, giving near-constant-time exact-match lookups but no support for range queries. It suits equality searches on high-cardinality columns.

Hash Join

A join algorithm that builds an in-memory hash table on the smaller input's join keys, then probes it with the larger input. It excels at large equijoins without useful indexes.

Hash Partitioning

A partitioning method that assigns rows to partitions by applying a hash function to a key, spreading data evenly. It gives balanced distribution but no ordering across partitions.

HAVING

A SQL clause that filters groups produced by GROUP BY based on aggregate conditions, such as keeping only groups with a count above ten. It applies after grouping, unlike WHERE which applies before.

HNSW

Hierarchical Navigable Small World

Hierarchical Navigable Small World, a graph-based index for approximate nearest neighbor search that navigates layered proximity graphs to find similar vectors fast. It is a common index in vector databases.

HOLAP

Hybrid OLAP

Hybrid OLAP, an architecture that combines MOLAP and ROLAP by keeping aggregated summaries in a cube while leaving detailed data in relational tables. It balances query speed against storage.

Horizontal Scaling

Scale-Out

Increasing capacity by adding more machines that share the workload, rather than enlarging a single machine. It underlies distributed databases but requires the system to coordinate across nodes.

Hot Partition

Hotspot

A partition that receives a disproportionate share of reads or writes, becoming a performance bottleneck while others sit idle. Poor key design is the usual cause.

Hot Storage

High-performance storage for frequently accessed data that must be retrieved with low latency. It costs more per byte than colder tiers but serves active workloads.

Idempotent Consumer

A message consumer designed so that processing the same message more than once produces the same result as processing it once. It is essential for safely handling at-least-once delivery.

Identity Column

Auto-Increment · Serial

A column that automatically assigns a new incrementing value for each inserted row, often used as a surrogate primary key. It removes the need for the application to supply the key.

In-Memory Database

A database that keeps its working dataset in RAM rather than on disk, delivering very low latency for caching, sessions, and real-time workloads.

Incremental Load

Delta Load

A data-loading strategy that transfers only records that are new or changed since the last run, rather than reloading everything. It reduces processing time and load on source systems.

Index

A data structure, often a B-tree, that speeds up row lookups on one or more columns at the cost of extra storage and slower writes.

Inmon Methodology

Top-Down Approach

A top-down data warehouse approach that first builds a normalized enterprise-wide repository, from which dependent dimensional data marts are derived. It emphasizes a single integrated source of truth.

Inner Join

A join that returns only the rows with matching values in both tables, discarding rows that have no counterpart on either side.

INTERSECT

A set operator that returns only the rows present in the results of both queries. The two queries must return compatible column structures.

Inverted Index

A data structure that maps each term to the list of documents or records that contain it, enabling fast full-text search. It is the core index of most search engines.

Isolation (ACID)

The ACID property guaranteeing that concurrently executing transactions do not interfere, producing results as if they ran in some serial order. Isolation levels tune how strictly this holds.

Isolation Level

A setting that controls how much one transaction's changes are visible to other concurrent transactions, trading consistency against concurrency. Standard levels range from read uncommitted to serializable.

Join

A SQL operation that combines rows from two or more tables based on a related column, producing a result set that draws fields from each.

JSON Lines

JSONL · NDJSON

A text format in which each line is a separate, complete JSON object, making large datasets streamable and appendable line by line. It is easier to process incrementally than a single large JSON array.

Junk Dimension

A dimension that combines several low-cardinality flags and indicators into a single table to avoid cluttering the fact table with many small columns. It simplifies the schema.

Kappa Architecture

A big-data design that processes all data as a single stream, reprocessing history by replaying the log when logic changes, avoiding the batch layer of the lambda architecture. It simplifies to one code path.

Key-Value Store

key-value database

A NoSQL database that stores data as simple key-to-value pairs with fast lookups by key, ideal for caching, sessions, and high-throughput simple access patterns.

Kimball Methodology

Bottom-Up Approach

A bottom-up data warehouse approach that builds dimensional data marts around business processes and integrates them through conformed dimensions. It prioritizes fast delivery of business-ready analytics.

KPI

Key Performance Indicator

Key Performance Indicator: a quantifiable metric tied to a business objective, tracked over time to measure progress toward a defined goal.

Lambda Architecture

A big-data design that runs a batch layer for accurate historical results and a speed layer for low-latency recent results, merging both at query time. It tolerates the complexity of two code paths for completeness and freshness.

Late-Arriving Dimension

Early-Arriving Fact

A dimension record whose descriptive detail arrives after the related fact has already been loaded, forcing the warehouse to insert a placeholder and update it later. It is a common ETL edge case.

Leader Election

The process by which distributed nodes choose a single coordinator to serialize decisions, and select a new one if it fails. It is a building block of many replication and consensus schemes.

Left Join

Left Outer Join

An outer join that returns all rows from the left table and the matching rows from the right table, filling unmatched right-side columns with nulls. It preserves every left-side record regardless of matches.

Linearizability

A strong consistency guarantee that each operation appears to take effect instantaneously at some point between its start and finish, consistent with real-time order. It makes a distributed store behave like a single copy.

List Partitioning

A partitioning method that assigns rows to partitions according to a discrete list of key values, such as one partition per region. It suits columns with a fixed set of categories.

Log Compaction

A retention strategy for log-based streaming systems that keeps only the latest message for each key rather than every message. It lets a topic serve as a compact, up-to-date snapshot of state.

Log-Structured Merge Tree

LSM Tree

A storage structure that buffers writes in memory and periodically flushes them as sorted files on disk, merging files in the background. It gives high write throughput and underlies many NoSQL engines.

Logical Data Model

A model that details entities, attributes, keys, and relationships without committing to a specific database technology. It refines the conceptual model toward implementation.

MapReduce

A programming model for processing large datasets in parallel across a cluster by splitting work into a map step that transforms records and a reduce step that aggregates them. It popularized large-scale distributed batch processing.

Massively Parallel Processing

MPP

An architecture that spreads a query across many independent nodes, each with its own CPU and storage, that process portions of the data simultaneously. It powers large analytical data warehouses.

Master Data Management

MDM · master data

The discipline of maintaining a single, authoritative version of core business entities—customers, products, suppliers—so systems share consistent reference data.

Materialization

The process of computing and physically storing a query result or intermediate dataset so later reads avoid recomputing it. Materialized views are a common example.

Materialized View

A view whose query results are physically stored and periodically refreshed, trading storage and staleness for much faster reads on expensive queries.

Medallion Architecture

Bronze Silver Gold

A data-lakehouse design that refines data through successive layers, commonly bronze for raw ingestion, silver for cleaned and conformed data, and gold for business-ready aggregates. Each layer raises data quality and usability.

Memtable

An in-memory, sorted write buffer in an LSM-tree store that absorbs incoming writes before they are flushed to disk as an SSTable. It keeps recent data fast to read and write.

Merkle Tree

Hash Tree

A tree of hashes in which each leaf hashes a data block and each parent hashes its children, so a single root hash summarizes all the data. It lets systems detect and locate differences between replicas efficiently.

MessagePack

A compact binary serialization format that encodes JSON-like data structures more efficiently than text JSON. It is designed for fast, small-footprint interchange.

Metadata

Data that describes other data—such as column types, source, owner, creation time, and meaning—used to organize, discover, and govern datasets.

Metric

measure

A single quantitative measure derived from data, such as revenue or conversion rate, defined by a consistent calculation so it can be tracked and compared.

MOLAP

Multidimensional OLAP

Multidimensional OLAP, an architecture that stores aggregated data in an optimized multidimensional cube for very fast query response. It precomputes aggregations at the cost of storage and load time.

Multitenancy

An architecture in which a single database or application instance serves multiple isolated customers, or tenants, whose data is kept logically separate. It reduces cost but requires careful isolation and per-tenant limits.

Multiversion Concurrency Control

MVCC

A technique in which the database keeps multiple versions of a row so readers see a consistent snapshot without blocking writers. It powers snapshot isolation in many modern databases.

Narrow Table

Long Table

A table with few columns, often storing data in a long entity-attribute-value form so new attributes need no schema change. It maximizes flexibility at the cost of query complexity.

Natural Key

Business Key

A primary key formed from data that already has business meaning, such as a Social Security number or ISBN, rather than a generated value. It ties row identity to real-world attributes that may change over time.

Nested Loop Join

A join algorithm that scans the outer table and, for each row, looks up matching rows in the inner table. It is efficient when one side is small or the inner side has a useful index.

NewSQL

Databases that provide the horizontal scalability of NoSQL systems while retaining the relational model and ACID transactions of traditional SQL databases.

Non-Additive Measure

A numeric fact that cannot be summed across any dimension, such as a ratio or percentage. It must be aggregated with averages or recomputed from its component measures.

Non-Clustered Index

Secondary Index

A separate index structure that stores key values with pointers back to the table rows, leaving the underlying table order unchanged. A table can have many non-clustered indexes.

Non-Repeatable Read

A concurrency anomaly where a transaction reads the same row twice and gets different values because another transaction modified and committed it in between. Repeatable read isolation prevents it.

NoSQL

non-relational

A broad category of non-relational databases—document, key-value, columnar, and graph—that trade a fixed schema and strict relations for flexibility and horizontal scale.

Null

A special marker indicating the absence of a value in a column, distinct from zero or an empty string, requiring three-valued logic in comparisons.

Object Storage

Object Store

A storage architecture that manages data as objects with metadata and a unique identifier in a flat namespace, accessed over an API rather than a file hierarchy. It scales massively and is the foundation of data lakes.

Object-Relational Mapping

ORM

A technique and library layer that maps database tables to application objects, letting developers work with data as native objects instead of raw SQL.

Offset

A monotonically increasing position identifier for a message within a partition of a log-based streaming system. Consumers track their offset to know which messages they have already processed.

OLAP

Online Analytical Processing

Online Analytical Processing: systems optimized for complex, read-heavy analytical queries over large historical datasets, aggregating across many dimensions.

OLTP

Online Transaction Processing

Online Transaction Processing: systems optimized for many short, concurrent read-write transactions such as order entry, prioritizing fast, reliable individual operations.

ORC

Optimized Row Columnar

The Optimized Row Columnar file format, a columnar storage format for big-data systems that stores data by column with lightweight indexes and compression. It is optimized for analytical read performance in the Hadoop ecosystem.

Outer Join

left join · right join · full join

A join that returns matched rows plus unmatched rows from one or both tables, filling missing values with nulls. Variants are left, right, and full outer joins.

PACELC Theorem

An extension of the CAP theorem stating that during a network partition a system trades availability against consistency, and else, in normal operation, it trades latency against consistency. It captures tradeoffs CAP omits.

Parquet

Apache Parquet

An open columnar storage format that compresses well and enables fast column-selective reads, making it a common choice for analytical data lakes and warehouses.

Partition Pruning

An optimization in which the query engine skips reading partitions that cannot contain rows matching the query's filters. It dramatically reduces scanned data in partitioned tables.

Partitioning

Dividing a table into smaller physical segments by a key such as date or region, so queries can scan only relevant partitions and maintenance stays manageable.

Paxos

A family of consensus algorithms that lets distributed nodes agree on a value even when some fail, using rounds of proposals and acceptances. It is correct but notoriously difficult to understand and implement.

Personally Identifiable Information

PII

Any data that can identify a specific individual on its own or when combined with other data, such as name, address, or national ID number. Its handling is tightly regulated by privacy laws.

Pessimistic Concurrency Control

A strategy that locks data as soon as a transaction reads or writes it, blocking others until the lock is released. It prevents conflicts up front but reduces concurrency.

Phantom Read

A concurrency anomaly where a transaction re-runs a query and sees new rows that another transaction inserted and committed in between. Serializable isolation prevents phantoms.

Physical Data Model

A model that specifies exactly how data is stored in a particular database, including tables, columns, data types, indexes, and partitions. It is the blueprint the database is built from.

Point-in-Time Recovery

PITR

A database recovery capability that restores data to its exact state as of a chosen past moment, typically by combining a backup with replayed transaction logs. It limits data loss after corruption or error.

Polyglot Persistence

The practice of using several different database technologies within one application, each chosen for the workload it handles best. For example, a relational store for transactions and a graph store for relationships.

Predicate

A condition in a query that evaluates to true or false for each row, such as the expression in a WHERE clause. Predicates determine which rows a query returns.

Predicate Pushdown

An optimization that moves filter conditions as close to the data source as possible, so fewer rows are read and transferred. It is especially valuable in distributed and columnar query engines.

Prepared Statement

Parameterized Query

A precompiled SQL template with placeholders for parameters that is parsed once and executed many times with different values. It improves performance and prevents SQL injection.

Primary Index vs Secondary Index

clustered index · non-clustered index

A primary (clustered) index determines the physical order of rows on disk, while a secondary (non-clustered) index is a separate structure pointing back to rows.

Primary Key

PK

A column or set of columns whose values uniquely identify each row in a table. It cannot be null and must be unique across all rows.

Producer

A client that publishes messages or events into a queue or streaming topic. Producers decide the topic and often the partitioning key for each record.

Property Graph

A graph data model in which both nodes and edges can carry key-value properties and labels, letting relationships hold their own attributes. It is the model behind many graph databases.

Pseudonymization

The replacement of identifying fields with reversible artificial identifiers, so data can be re-linked to individuals only with separately held additional information. It reduces exposure while retaining the ability to rejoin data.

Query

A request to retrieve or manipulate data in a database, typically expressed in a query language such as SQL, returning a result set or altering stored data.

Query Latency

The elapsed time between issuing a query and receiving its results. Reducing latency through indexing, caching, and better plans is a central goal of database tuning.

Query Optimizer

The database component that analyzes a query and chooses an efficient execution plan, weighing indexes, join order, and statistics to minimize cost.

Quorum

The minimum number of nodes in a distributed system that must acknowledge an operation for it to be considered successful. Read and write quorums are tuned to balance consistency, availability, and latency.

Raft

A consensus algorithm designed to be easier to understand than Paxos, achieving agreement through leader election and log replication. It is widely used in modern distributed databases and coordination services.

Range Partitioning

A partitioning method that assigns rows to partitions based on value ranges of a key, such as dates by month. It supports efficient range queries and partition pruning but can create skew.

Read Committed

An isolation level that guarantees a transaction only reads data that has been committed, preventing dirty reads but still allowing non-repeatable and phantom reads. It is the default in many databases.

Read Repair

A technique in eventually consistent stores where a read that detects stale replicas updates them to the latest value as a side effect. It gradually converges data during normal reads.

Read Uncommitted

The weakest isolation level, allowing a transaction to see uncommitted changes from others and therefore permitting dirty reads. It maximizes concurrency at the expense of consistency.

Read-Your-Writes Consistency

A guarantee that once a client has written a value, its subsequent reads will reflect that write. It is a common session-level consistency expectation in distributed systems.

Record Linkage

Entity Resolution

The process of identifying and joining records across different datasets that refer to the same real-world entity, even without a shared key. It combines deterministic and probabilistic matching.

Redo Log

A log of committed changes used during recovery to reapply work that had not yet reached the data files at the time of a crash. It ensures durability of committed transactions.

Reference Data

Relatively static data that defines the permissible values other data can take, such as country codes, currency codes, or status lists. It is managed centrally to keep classifications consistent across systems.

Referential Cascade

Cascade Delete

A foreign-key behavior that automatically propagates a delete or update from a parent row to its dependent child rows, such as ON DELETE CASCADE. It keeps related data consistent without manual cleanup.

Referential Constraint Violation

An error raised when an operation would leave a foreign key pointing to a nonexistent parent row, breaking referential integrity. The database rejects the operation to keep relationships valid.

Referential Data

reference data · lookup data

Relatively static lookup data—such as country codes or status values—shared across systems to standardize categorical fields. Also called reference data.

Referential Integrity

The guarantee that every foreign key value corresponds to an existing primary key in the referenced table, preventing orphaned or dangling records.

Referential Join Key

The column used to relate a fact or child table to its dimension or parent table, typically a foreign key matching the parent's primary or surrogate key. It defines how tables connect in queries.

Referential Lookup

An ETL operation that resolves a source key to its corresponding target key or attribute by looking it up in a reference or dimension table. It is fundamental to loading facts with surrogate keys.

Relation

The formal term in relational theory for a table: a set of tuples sharing the same attributes. It is the mathematical basis of relational databases.

Relational Database

RDBMS

A database that organizes data into tables of rows and columns with defined relationships between them, queried and manipulated using SQL and governed by a fixed schema.

Repeatable Read

An isolation level guaranteeing that rows read once will return the same values if read again within the transaction, preventing dirty and non-repeatable reads. Phantoms may still occur in some implementations.

Resilient Distributed Dataset

RDD

Spark's core abstraction: an immutable, partitioned collection of records that can be rebuilt from its lineage if a node fails. RDD operations are recorded as a directed graph and executed lazily.

Right Join

Right Outer Join

An outer join that returns all rows from the right table and matching rows from the left table, with nulls where the left side has no match. It is the mirror image of a left join.

ROLAP

Relational OLAP

Relational OLAP, an architecture that answers multidimensional queries directly against a relational database using SQL rather than a precomputed cube. It scales to large data but can be slower than MOLAP.

Role-Playing Dimension

A single dimension table referenced multiple times by one fact table in different roles, such as an order date and a ship date both pointing to a date dimension. Aliased views give each role a distinct name.

Roll-Up

An OLAP operation that aggregates data to a higher level of a hierarchy, such as summarizing daily sales into monthly totals. It reduces detail to reveal broader patterns.

Row

record · tuple

A single record in a database table representing one instance of an entity, holding a value for each of the table's columns.

Row-Oriented Storage

Row Store

A physical layout that stores all fields of a record together, so whole rows are read and written efficiently. It suits transactional workloads that touch many columns of few rows.

Run-Length Encoding

RLE

A compression technique that stores a repeated value once together with the count of consecutive repetitions instead of each occurrence. It is very effective on sorted, low-cardinality columns.

Savepoint

A named marker within a transaction that allows a partial rollback to that point without discarding the entire transaction. It supports finer-grained error recovery.

Schema

The formal definition of a database's structure, specifying tables, columns, data types, keys, and relationships. It acts as the blueprint the data must conform to.

Schema Drift

The unplanned divergence of a data source's structure over time—added, removed, or retyped fields—that can silently break downstream pipelines and queries.

Schema Evolution

The managed process of changing a schema over time while remaining compatible with existing data and consumers, common in streaming and columnar formats.

Schema Registry

A central service that stores and versions the schemas used by messages in a streaming system, enforcing compatibility as they evolve. Producers and consumers validate data against it.

Schema Validation

The process of checking that incoming data conforms to an expected structure, types, and rules before it is accepted. It prevents malformed records from corrupting downstream systems.

Schema-on-Read

An approach that stores raw data without a fixed structure and applies a schema only when the data is queried. It gives flexibility for varied and evolving data, common in data lakes.

Schema-on-Write

An approach that enforces a defined schema when data is loaded, rejecting records that do not conform. It guarantees structure and quality up front, typical of relational databases and warehouses.

Second Normal Form

2NF

A normalization level, building on first normal form, that requires every non-key column to depend on the whole primary key rather than just part of a composite key. It removes partial dependencies.

Secondary Index (NoSQL)

An index in a NoSQL store on an attribute other than the primary key, letting queries filter on non-key fields at the cost of extra storage and write overhead. Not all NoSQL engines support them efficiently.

Selectivity

The fraction of rows a query predicate is expected to return, where a low fraction means high selectivity. Optimizers use selectivity estimates to decide whether an index is worthwhile.

Self Join

A join in which a table is joined to itself, usually using table aliases, to relate rows within the same table such as employees to their managers. It treats one physical table as two logical ones.

Self-Service BI

An approach that gives business users tools to build their own reports and dashboards without depending on IT for each request. It shifts routine analysis to the people who need the answers.

Semantic Layer

metrics layer

An abstraction that maps raw database structures to consistent business terms and metric definitions, so analysts query concepts rather than raw tables.

Semi Join

An operation that returns rows from one table where a matching row exists in another, without duplicating or including the second table's columns. It answers existence questions, often expressed with EXISTS or IN.

Semi-Additive Measure

A numeric fact that can be summed across some dimensions but not others, such as an account balance that adds across accounts but not across time. It requires care when aggregating over time.

Sequence

A database object that generates a stream of unique numbers, commonly used to populate surrogate key columns. Sequences produce values independently of any single table.

Serializable

The strictest isolation level, guaranteeing that concurrent transactions produce the same result as if they had run one after another. It eliminates all read anomalies at the cost of reduced concurrency.

Session Window

A stream-processing window that groups events by periods of activity separated by gaps of inactivity, so its length varies per key. It is used to analyze bursts such as user sessions.

Shuffle

The stage in a distributed computation that redistributes and groups intermediate data across nodes so that related records land together for aggregation. It is often the most expensive part of a job due to network and disk cost.

Skew Join Optimization

A technique that detects heavily skewed join keys and handles them specially, such as splitting the hot key across tasks, to prevent a few overloaded workers from slowing a distributed join. It balances the workload.

Slice and Dice

OLAP operations that filter a cube to a single value of one dimension (slice) or select a subcube across several dimensions (dice). They let analysts examine data from different angles.

Sliding Window

A stream-processing window of fixed size that advances by a small step, so consecutive windows overlap and each event may fall into several. It produces smoother, continuously updated aggregations.

Slowly Changing Dimension

SCD

A technique for tracking changes to dimension attributes over time, ranging from overwriting the old value to keeping full history as new versioned rows.

Snapshot

A read-only, point-in-time copy of a dataset or database that captures its exact state at the moment it was taken. Snapshots support backups, consistent reads, and time-travel queries.

Snapshot Isolation

An isolation level in which each transaction reads from a consistent snapshot of the database taken at its start, so it never sees others' concurrent changes. It avoids most read anomalies using multiversioning.

Snowflake Schema

A dimensional design that normalizes dimension tables into related sub-tables, reducing redundancy at the cost of more joins than a star schema.

Sort-Merge Join

Merge Join

A join algorithm that sorts both inputs on the join key and then merges them in a single pass. It works well when inputs are already sorted or for range-based join conditions.

Sparse Column

A column that holds a null value for the vast majority of rows, so the storage engine can optimize by not reserving space for the nulls. Wide-column stores handle sparsity naturally.

Split-Brain

A failure condition in which a network partition causes two parts of a cluster to each believe they are the sole active leader, risking divergent, conflicting writes. Quorum and fencing mechanisms guard against it.

SQL

Structured Query Language

Structured Query Language, the standard declarative language for defining, querying, and manipulating data in relational databases.

SQL Injection

A security vulnerability in which attacker-supplied input is concatenated into a SQL statement and executed as code, allowing unauthorized data access or modification. Parameterized queries are the standard defense.

SSTable

Sorted String Table

A Sorted String Table: an immutable on-disk file of key-value pairs stored in sorted key order, used by LSM-tree databases. Its immutability simplifies concurrency and enables efficient merges.

Star Schema

A dimensional design where a central fact table connects directly to surrounding denormalized dimension tables, giving simple, fast analytical queries.

Stored Procedure

sproc

A named set of SQL statements stored in and executed by the database engine, used to encapsulate reusable logic and reduce round trips from the application.

Strong Consistency

A guarantee that every read returns the most recent committed write, so all clients see a single up-to-date value. It simplifies reasoning but can reduce availability during partitions.

Subquery

Nested Query

A query nested inside another query, used in a WHERE, FROM, or SELECT clause to compute an intermediate result. It lets one query feed values or a derived table into a larger one.

Surrogate Key

Synthetic Key

An artificial, system-generated identifier (often an auto-incrementing integer or UUID) used as a primary key instead of any meaningful business attribute. It stays stable even when business data changes.

Surrogate Key Pipeline

The warehouse process that assigns stable surrogate keys to dimension rows and looks them up when loading facts, decoupling the warehouse from changing source keys. It is central to dimensional loading.

Table

relation

A structured collection of related data in a relational database, organized as rows (records) and columns (fields), where each row represents one entity instance.

Temporal Table

System-Versioned Table

A table that automatically tracks the history of its rows over time, recording when each version was valid so past states can be queried. It supports point-in-time analysis without manual history keeping.

Third Normal Form

3NF

A normalization level requiring that non-key columns depend only on the primary key and not on other non-key columns. It eliminates transitive dependencies to reduce update anomalies.

Tiered Storage

A strategy that automatically places data on different storage classes according to how often it is accessed, moving cold data to cheaper tiers over time. It balances cost against performance.

Time Bucket

Time Bin

A fixed interval used to group time-series data points for aggregation, such as five-minute or daily buckets. Bucketing turns continuous timestamps into regular reporting periods.

Time Travel

Temporal Query

A feature of some table formats and databases that lets queries read data as it existed at a past timestamp or version. It supports auditing, reproducibility, and recovery from mistakes.

Time-Series Database

TSDB

A database optimized for timestamped data points, offering efficient ingestion, retention, and time-windowed queries for metrics, sensor, and event data.

Tombstone

A marker written to indicate that a record has been deleted in an append-only or replicated store, since data is not removed in place. Tombstones are purged later during compaction.

Topic

In a publish-subscribe or streaming system, a named category or feed to which producers write messages and from which consumers read. Topics organize event streams by subject.

Trigger

A procedure that the database automatically executes in response to events such as inserts, updates, or deletes on a table, often to enforce rules or maintain audit trails.

TSV

Tab-Separated Values

Tab-Separated Values, a plain-text tabular format like CSV but using tab characters to separate fields. Tabs reduce the ambiguity that commas cause in free text.

Tumbling Window

A stream-processing window that divides time into fixed-size, non-overlapping intervals, so each event belongs to exactly one window. It is used for regular periodic aggregations such as per-minute counts.

Tunable Consistency

A feature of some distributed databases that lets each operation choose how many replicas must respond, trading consistency against latency and availability. It allows per-query control over the consistency spectrum.

Two-Phase Commit

2PC

A distributed protocol that coordinates a transaction across multiple systems by first asking all participants to prepare, then telling them all to commit or abort. It ensures atomicity across nodes but blocks if the coordinator fails.

Two-Phase Locking

2PL

A concurrency control protocol in which a transaction acquires all the locks it needs in a growing phase and releases them in a shrinking phase, never acquiring after releasing. It guarantees serializable schedules.

Type 1 Slowly Changing Dimension

SCD Type 1

A dimension-handling method that overwrites an attribute with its new value, keeping no history of the prior one. It is simple but loses the ability to report on past states.

Type 2 Slowly Changing Dimension

SCD Type 2

A dimension-handling method that preserves history by adding a new row for each change, marked with effective dates or a current-flag. It lets analyses reflect the attribute values as they were at any past time.

Undo Log

A record of the prior values of changed data, used to roll back uncommitted transactions and to provide consistent read snapshots. It complements the redo log during recovery.

UNION

A set operator that combines the rows of two queries into one result and removes duplicate rows by default. UNION ALL keeps duplicates and is faster because it skips the deduplication step.

Unique Constraint

Unique Key

A rule that forces the values in a column or set of columns to be distinct across all rows, preventing duplicates. Unlike a primary key, a unique constraint can usually allow one null value.

Upsert

merge

An operation that inserts a row if its key does not exist and updates it if it does, commonly used to merge incoming data without duplicates.

Vector Clock

A data structure of per-node counters that tracks causal ordering of events across a distributed system and detects concurrent, potentially conflicting updates. It underpins conflict resolution in some replicated stores.

Vectorized Execution

Vectorized Processing

A query execution technique that processes data in batches of column values at once rather than one row at a time, using CPU efficiently. It greatly speeds analytical queries on columnar data.

Vertical Scaling

Scale-Up

Increasing capacity by adding more CPU, memory, or storage to a single machine. It is simple but bounded by the largest available server and creates a single point of failure.

View

A named, stored query that presents data as a virtual table. It simplifies complex queries and can restrict access without duplicating the underlying data.

Watermark

A marker in stream processing that estimates how far event time has progressed, signaling that events earlier than it are unlikely to arrive. It lets the system decide when to finalize window results despite late data.

Watermarking Column

High-Water Mark

A column, usually a timestamp or incrementing id, used by incremental loads to track which records have already been processed so only new ones are pulled. It enables efficient repeated extraction.

Wide Table

A table with a very large number of columns, often denormalized to avoid joins in analytics. It trades storage redundancy for simpler, faster reads.

Wide-Column Store

column-family store

A NoSQL database that stores data in rows with dynamic, sparse column families, scaling horizontally for very large, high-write workloads.

Window Function

A SQL function that computes a value across a set of rows related to the current row—such as running totals or rankings—without collapsing them into one group.

Write-Ahead Logging

WAL

A durability technique in which changes are recorded to a sequential log on disk before the actual data pages are modified. On crash, the log is replayed to recover committed work.

Infrastructure & DevOps

334

A Record

A DNS record type that maps a domain name directly to an IPv4 address.

Active-Active

A redundancy configuration in which multiple instances or sites handle traffic simultaneously, sharing load and providing continued service if one fails.

Active-Passive

Hot Standby

A redundancy configuration in which a standby instance or site remains idle until the primary fails, at which point it takes over to restore service.

Agentless

A configuration management or monitoring approach that requires no software installed on target machines, typically connecting over standard protocols like SSH to do its work.

Alert Fatigue

The desensitization that occurs when responders receive too many alerts, especially noisy or low-value ones, causing important alerts to be missed or ignored.

Alert Runbook

A predefined set of diagnostic and remediation steps linked to a specific alert, guiding responders through investigating and resolving that condition.

Alerting

alerts

Automatically notifying responders when monitored signals cross defined thresholds or conditions, so problems get attention before or as they impact users.

Annotation

A key-value pair attached to Kubernetes objects for storing non-identifying metadata such as build information or tooling configuration, unlike labels which are used for selection.

Ansible

An agentless configuration-management and automation tool that uses declarative YAML playbooks over SSH to provision, configure, and deploy across many machines.

Anycast

A network routing method in which one IP address is advertised from many locations, so requests are automatically sent to the nearest or best-performing node.

Apache Kafka

Kafka

A widely used distributed event streaming platform that stores events in partitioned, replicated logs, supporting high-throughput publishing and consumption at scale.

API Server

kube-apiserver

The central Kubernetes control-plane component that exposes the cluster's REST API, validates and processes requests, and is the single gateway through which all other components read and write cluster state.

Application Performance Monitoring

APM

A category of tools that track the performance, availability, and errors of applications end to end, often combining metrics, traces, and code-level diagnostics.

Artifact Promotion

Moving the exact same built artifact through environments unchanged, so what was tested in staging is bit-for-bit identical to what runs in production.

Artifact Registry

artifact repository

A repository for storing and versioning build artifacts—packages, binaries, or images—so pipelines can publish and later retrieve exact, immutable versions.

Auto-scaling

autoscaling · elastic scaling

Automatically adding or removing compute capacity in response to demand or metrics, so a system meets load without over-provisioning during quiet periods.

Autoscaling Group

ASG · instance group

A managed set of interchangeable instances that a cloud provider grows or shrinks automatically to a target size or metric, replacing failed members to maintain capacity.

Autoscaling Policy

The rules that govern when and how an autoscaler adds or removes capacity, typically based on target metrics, thresholds, and cooldown periods.

Availability

The proportion of time a system is operational and able to serve requests, commonly expressed as a percentage of uptime over a period.

Availability Zone

AZ

One or more isolated data centers within a cloud region with independent power and networking, so deploying across zones survives a single facility's failure.

Backend as a Service

BaaS

A cloud model that provides ready-made backend features such as databases, authentication, and storage through APIs, so developers can build apps without managing server-side infrastructure.

Bake Time

Soak Time

A defined waiting period after deploying a new version during which it serves traffic while being monitored, so problems can surface before the rollout continues.

Bare Metal

A physical server dedicated to a single tenant with no hypervisor layer, giving applications direct access to hardware for maximum performance and control.

Base Image

The foundational container image, such as a minimal operating system or language runtime, on which an application image is built by adding further layers.

Bastion Host

Jump Box · Jump Host

A hardened, tightly controlled server that provides the single secured entry point for administrative access into a private network, reducing the exposure of internal systems.

Blameless Postmortem

An incident review that focuses on the systemic causes and improvements rather than assigning individual fault, encouraging honest analysis and organizational learning.

Blast Radius

The scope of components, users, or data that a given failure or change could affect, which teams work to minimize so incidents stay contained.

Blue-Green Database Migration

A technique for changing a database schema with minimal downtime by running old and new schema versions in parallel and shifting traffic once the new version is verified.

Build Runner

CI Runner · Build Agent

A machine or process that executes the jobs of a CI/CD pipeline, checking out code, running builds and tests, and reporting results back to the orchestrator.

Bulkhead Pattern

A resilience pattern that isolates resources into separate pools so that a failure or overload in one part of a system cannot exhaust resources and take down the rest.

Burn Rate

The pace at which an error budget is being consumed relative to the SLO window, used to trigger alerts when reliability is degrading unusually fast.

Cache Eviction

The automatic removal of entries from a cache to free space, governed by a policy such as least-recently-used when the cache reaches capacity.

Cache Hit

A request that is satisfied directly from a cache because the requested data is already stored there, avoiding a slower fetch from the origin.

Cache Miss

A request that cannot be served from the cache because the data is absent or stale, forcing a fetch from the underlying source.

Cache Warming

Cache Preheating

Pre-loading a cache with data likely to be requested, so that early users experience cache hits instead of slow misses after a deployment or restart.

Cache-aside

Lazy Loading

A caching pattern where the application first checks the cache and, on a miss, loads data from the source and stores it in the cache for next time.

Canary Analysis

The automated comparison of key metrics between a small canary release and the stable version to decide whether to continue or abort a rollout.

Capacity Planning

The practice of forecasting future demand and provisioning enough resources ahead of time so a system can meet its performance and availability targets.

Cascading Failure

A failure that spreads from one component to others as they become overloaded or lose a dependency, potentially bringing down a large part of a system.

Cattle vs Pets

A philosophy contrasting disposable, interchangeable servers managed in bulk (cattle) with individually maintained, irreplaceable servers (pets), favoring the former for scalable, automated infrastructure.

Change Failure Rate

A DevOps performance metric measuring the percentage of deployments that cause a failure requiring remediation, reflecting release quality and stability.

Change Management

The controlled process of proposing, reviewing, approving, and tracking changes to production systems to reduce the risk of disruption.

Chaos Engineering

Deliberately injecting failures—killing instances, adding latency, dropping traffic—into a system to verify it degrades gracefully and to find weaknesses before they cause outages.

Chaos Experiment

A controlled, hypothesis-driven test that injects a specific failure into a system to verify it behaves as expected under adverse conditions, the core unit of chaos engineering.

Chef

A configuration management tool that defines infrastructure as code using Ruby-based recipes and cookbooks to describe how systems should be configured.

CI/CD Pipeline

pipeline · deployment pipeline

An automated sequence of stages—build, test, and deploy—that code changes flow through, giving fast, repeatable feedback and releases with minimal manual work.

CIDR Block

CIDR

A compact way to express a range of IP addresses as a base address followed by a slash and a routing-prefix length (for example a /16 block), used to define the address space of a network or subnet.

Cloud Bursting

A hybrid pattern in which an application runs in a private environment and offloads overflow demand to a public cloud during peak load, then scales back afterward.

Cloud Computing

the cloud

Renting computing resources (servers, storage, networking) on demand over the internet from a provider, paying for what you use instead of owning hardware.

Cloud Native

An approach to building and running applications that fully exploits cloud elasticity, using containers, microservices, declarative APIs, and automation so systems scale and recover automatically.

Cloud Region Failover

The process of shifting traffic and workloads from a failed or degraded cloud region to a healthy one to maintain service continuity.

Cloud-init

A widely used tool that customizes a cloud instance during its first boot, applying user-supplied configuration such as packages, users, and scripts to a fresh machine image.

Cluster

A group of machines pooled and managed together as one system to run containerized workloads, with a control plane scheduling work across the worker nodes.

Cluster Autoscaler

A component that automatically adds or removes worker nodes in a Kubernetes cluster based on whether pending pods have somewhere to run and whether nodes are underused.

CNAME Record

Canonical Name Record

A DNS record that aliases one domain name to another, so lookups for the alias are resolved by following the canonical name it points to.

Cold Start

The added latency incurred when a serverless function or container must be initialized from scratch because no warm instance is available to handle an incoming request.

Compute Instance

Instance

A virtual server provisioned in a cloud environment with a defined amount of CPU, memory, and storage that runs an operating system and applications.

Concurrency Limit

A cap on how many instances of a serverless function or requests a service will handle simultaneously, used to control cost and protect downstream systems.

Config as Code

Managing application and system configuration in version-controlled files rather than through manual changes, making settings reproducible, reviewable, and auditable.

ConfigMap

A Kubernetes object that stores non-confidential configuration data as key-value pairs, letting pods consume settings without hard-coding them into container images.

Configuration Drift

drift

The gradual divergence of a system's actual state from its intended configuration due to manual changes or ad hoc fixes, which reproducible IaC aims to prevent.

Configuration Management

Automating the setup and ongoing enforcement of software and settings across servers so they stay consistent and drift is corrected rather than fixed by hand.

Consumption-based Pricing

Pay-as-you-go · Usage-based Pricing

A billing model in which customers pay only for the resources they actually use, such as compute time, storage, or requests, rather than a fixed capacity.

Container

A lightweight, isolated package of an application plus its dependencies that shares the host OS kernel, making it far smaller and faster to start than a virtual machine.

Container Image

image · docker image

A read-only, layered template containing an application and its dependencies. Running an image produces a container; images are built from a recipe like a Dockerfile.

Container Network Interface

CNI

A specification and set of plugins that define how networking is configured for containers, giving each pod an IP address and connecting it to the cluster network.

Container Registry

image registry

A storage service for container images that build systems push to and clusters pull from, with public and private options.

Container Runtime

containerd · runtime

The low-level software that actually runs containers on a host by managing their processes, isolation, and images; orchestrators like Kubernetes drive it.

Container Runtime Interface

CRI

The Kubernetes API that decouples the kubelet from any specific container runtime, allowing runtimes such as containerd to be plugged in without changing Kubernetes.

Container Storage Interface

CSI

A standard that lets storage vendors write plugins to expose their systems to container orchestrators, enabling dynamic provisioning and mounting of persistent volumes.

containerd

A lightweight, industry-standard container runtime that manages the full container lifecycle on a host, including image transfer, execution, storage, and networking.

Content-based Routing

Directing requests to different backends based on the content of the request, such as its URL path, headers, or method, typically at a layer 7 load balancer or gateway.

Control Plane

master node

The set of components that manage a cluster's overall state—scheduling workloads, tracking node health, and reconciling actual state toward the declared desired state.

Cooldown Period

A wait interval enforced after a scaling action during which no further scaling occurs, preventing rapid oscillation as metrics settle.

Cordon and Drain

A Kubernetes maintenance procedure that first marks a node unschedulable (cordon) and then gracefully evicts its pods to other nodes (drain) so the node can be safely worked on.

Counter

A monitoring metric type that only ever increases, used to track cumulative quantities such as the total number of requests or errors since a process started.

Cron Job

scheduled job · cron

A task scheduled to run automatically at fixed times or intervals, defined by a cron expression; the standard way to run periodic maintenance and batch work.

Cutover

Go-live

The moment or process of switching operations from an old system or version to a new one, after which the new system carries production traffic.

DaemonSet

A Kubernetes controller that ensures a copy of a specified pod runs on every node (or a selected subset), commonly used for log collectors, monitoring agents, and networking components.

Dark Launch

Releasing a feature to production in a hidden or disabled state so it can be tested with real traffic and infrastructure before being exposed to users.

Data Center

A physical facility that houses computing, storage, and networking equipment along with the power, cooling, and connectivity needed to run them reliably.

Data Egress

Egress · Egress Traffic

Network traffic leaving a cloud provider's network toward the internet or another region, which is typically metered and billed, unlike inbound traffic which is often free.

Data Plane

The part of a system that carries and processes the actual application traffic; in a service mesh, it is the set of proxies that handle requests between services.

Database as a Service

DBaaS · Managed Database

A managed cloud offering that provisions, operates, patches, and scales a database on the customer's behalf, exposing it as a ready-to-use endpoint.

DDoS Protection

Services and techniques that detect and absorb distributed denial-of-service attacks, keeping a target reachable by filtering out malicious traffic floods.

Declarative Configuration

declarative

Describing the desired end state of a system and letting tooling figure out the steps to reach it, rather than scripting each imperative action.

Deploy

deployment

The step that installs and activates a built artifact into a running environment such as staging or production, making the new version live.

Deployment (Kubernetes)

A Kubernetes object that declares the desired state for a set of identical pods and manages rolling updates and rollbacks by controlling ReplicaSets.

Deployment Frequency

A DevOps performance metric measuring how often an organization successfully releases changes to production, with elite teams deploying on demand.

Desired State

The target configuration an operator declares for a system; the platform continuously works to make the actual state match it, correcting deviations automatically.

Disaster Recovery

DR

The plans and tooling to restore systems and data after a major outage or catastrophe, often measured by recovery time and recovery point objectives.

Distributed Cache

A cache spread across multiple nodes so that its capacity and throughput scale horizontally and data remains available if individual nodes fail.

Distributed Tracing

tracing · trace

Following a single request as it hops across multiple services, recording timing at each step, to pinpoint where latency or failures occur in a distributed system.

DNS Record

An entry in a DNS zone that maps a name to data, such as an address or another name, telling resolvers how to answer queries for that name.

Docker

The most common toolset for building, packaging, and running containers, defining images with a Dockerfile and running them from a local engine or in production.

Dockerfile

A text file of ordered instructions that defines how to build a container image, specifying the base image, dependencies, files, and startup command.

Domain Name System

DNS

The internet's distributed directory that translates human-readable domain names into the IP addresses machines use to locate one another.

DORA Metrics

A set of four widely cited measures of software delivery performance: deployment frequency, lead time for changes, change failure rate, and time to restore service.

Drift Detection

The process of comparing the real state of infrastructure against its declared configuration to find manual or out-of-band changes that have caused it to diverge.

Dynamic Application Security Testing

DAST

Security testing that probes a running application from the outside to find vulnerabilities such as injection flaws, without access to its source code.

East-West Traffic

Network traffic that flows between services within a data center or cluster, as opposed to traffic entering or leaving it.

Elastic IP

Static IP

A static public IP address that can be allocated to an account and remapped between instances, so a fixed address survives instance replacement.

Elasticity

Cloud Elasticity

The ability of a system to automatically add or remove resources in response to changing demand, so capacity closely tracks the current workload.

Encryption at Rest

Encrypting stored data so that it is unreadable without the keys, protecting it if the underlying storage media or backups are accessed by an attacker.

Encryption in Transit

Encrypting data as it travels across a network, typically with TLS, so that it cannot be read or tampered with while moving between systems.

Envelope Encryption

A technique in which data is encrypted with a data key, and that data key is itself encrypted with a master key, so only the small master key must be tightly protected.

Environment

dev/staging/prod

An isolated instance of a system—such as development, staging, or production—used to build, test, and run software at different stages with separate config and data.

Ephemeral Environment

Preview Environment · Review Environment

A temporary, on-demand environment spun up to test a specific change, such as a pull request, and torn down automatically once it is no longer needed.

Ephemeral Storage

Temporary storage tied to an instance's lifetime that is lost when the instance stops or is replaced, contrasted with persistent volumes that outlive it.

Error Budget

The allowable amount of unreliability implied by an SLO—for example the 0.1% of downtime a 99.9% target permits—spent to balance new-feature risk against stability.

Error Rate

The proportion of requests that fail out of the total handled over a period, a primary signal of service health used in monitoring and SLOs.

etcd

A distributed, consistent key-value store that serves as the backing datastore for Kubernetes cluster state, holding all configuration and coordination data.

Event Streaming

The continuous capture and processing of events as an ordered, replayable log, enabling many consumers to read the same stream at their own pace.

Exactly-once Delivery

A messaging guarantee that each message is processed one and only one time, typically achieved through a combination of deduplication and transactional handling.

Exponential Backoff

Retry with Backoff

A retry strategy that progressively increases the wait time between attempts, reducing load on a struggling service and improving the chance of eventual success.

Failback

The process of returning operations to the original primary system or site after it has recovered, following a prior failover to a backup.

Failover

Automatically switching to a redundant standby component or site when the primary fails, restoring service with minimal interruption.

Fault Injection

The deliberate introduction of failures such as latency, errors, or resource exhaustion into a system to observe how it responds and to verify its resilience.

Fault Tolerance

The ability of a system to keep operating correctly despite the failure of some components, achieved through redundancy, isolation, and graceful degradation.

Feature Toggle Management

The systematic control of feature flags across environments, letting teams enable, disable, or target features to specific users without redeploying code.

File Storage

Network File Storage · NAS

A storage service that organizes data as files in a hierarchy of directories and is accessed over network file protocols, allowing multiple clients to share the same file system.

Function as a Service

FaaS

A serverless model in which developers deploy individual functions that the platform runs on demand in response to events, automatically scaling and billing only for execution time.

Game Day

Disaster Recovery Drill

A planned exercise in which a team deliberately triggers failures or incident scenarios in a controlled way to test system resilience and practice response procedures.

Gateway Load Balancer

A load balancer that transparently distributes traffic to a fleet of virtual network appliances such as firewalls or inspection tools, scaling them behind a single entry point.

Gauge

A monitoring metric type that can rise and fall, used to capture instantaneous values such as current memory usage, queue depth, or temperature.

GeoDNS

Geo Routing · Geographic Routing

A DNS technique that returns different answers based on the geographic location of the requester, directing users to the nearest server or region.

GitOps

An operating model where a Git repository is the single source of truth for infrastructure and deployments, and automation continuously reconciles the live system to match it.

Global Load Balancing

GSLB

Load balancing that distributes traffic across servers in multiple geographic regions, routing users to the closest or healthiest location for performance and resilience.

Golden Image

A pre-configured, hardened, and validated machine image used as the standard baseline for provisioning servers, ensuring every instance starts identically.

Golden Signals

Four Golden Signals

The four key metrics recommended for monitoring a user-facing system: latency, traffic, errors, and saturation.

Grafana

A popular open-source platform for visualizing metrics, logs, and traces through customizable dashboards that connect to many data sources.

Headroom

The spare capacity kept in reserve beyond current demand so a system can absorb spikes and failures without degrading.

Health Check

liveness probe · readiness probe

A periodic probe that reports whether a service instance is alive and ready to serve, letting load balancers and orchestrators route around unhealthy targets.

Health Endpoint

Healthcheck Endpoint

A dedicated URL an application exposes so that load balancers and orchestrators can poll it to determine whether the instance is healthy and should receive traffic.

Helm

Helm chart

A package manager for Kubernetes that bundles related manifests into reusable, parameterized charts, making applications easier to install, version, and configure.

High Availability

HA

Designing a system to minimize downtime, typically by removing single points of failure through redundancy and automatic failover across instances or zones.

Histogram

A monitoring metric that groups observations into buckets to capture the distribution of values, enabling calculation of percentiles for latency and similar measurements.

Horizontal Pod Autoscaler

HPA

A Kubernetes controller that automatically adjusts the number of pod replicas in a workload based on observed metrics such as CPU utilization or custom signals.

Hybrid Cloud

An architecture that combines private cloud or on-premises infrastructure with public cloud services, allowing workloads and data to move between them.

Hypervisor

VMM

The software layer that creates and runs virtual machines, allocating physical CPU, memory, and I/O among them while keeping each guest isolated.

IaaS

Infrastructure as a Service

Infrastructure as a Service: the provider rents raw virtualized compute, storage, and networking, and you manage the OS, runtime, and applications on top.

Identity and Access Management

IAM

The set of policies and services that define and enforce who can access which resources and what actions they may perform.

Image Baking

The practice of building a fully configured machine image ahead of time so instances launch ready to run, rather than configuring each instance after boot.

Image Layer

One of the stacked, read-only filesystem changes that make up a container image; layers are cached and shared between images to save space and speed up builds.

Image Tag

A human-readable label attached to a container image version, such as a release number or 'latest', used to identify and pull a specific build from a registry.

Immutable Backup

A backup that cannot be modified or deleted for a set retention period, protecting recovery data against ransomware and accidental or malicious deletion.

Immutable Deployment

A release approach that provisions entirely new infrastructure for each version and never modifies running servers, so rollbacks simply switch back to the previous unchanged set.

Immutable Infrastructure

A practice where servers are never modified after deployment; changes ship as freshly built replacements, reducing configuration drift and making rollbacks predictable.

Immutable Infrastructure Rollback

Reverting to a previous known-good version by redeploying its unchanged, pre-built infrastructure image rather than trying to undo in-place changes.

Immutable Log

An append-only record of events that cannot be altered after being written, providing a reliable audit trail and the basis for event streaming and replay.

Immutable Release Artifact

A versioned build output that is never modified after creation, so the exact same artifact can be reliably promoted, deployed, and audited across environments.

Immutable Tag

A container registry setting that prevents an existing image tag from being overwritten, guaranteeing that a given tag always refers to the same image for reproducible deployments.

In-memory Cache

A cache that stores data in RAM for very fast reads and writes, used to accelerate access to frequently requested data at the cost of volatility.

Incident

An unplanned disruption or degradation of service that requires a response, tracked through detection, mitigation, resolution, and follow-up.

Ingress

In Kubernetes, a resource and controller that manages external HTTP/HTTPS access to services in a cluster, providing routing rules, TLS, and virtual hosting.

Ingress Controller

A component that implements the rules defined by Kubernetes Ingress resources, typically running a reverse proxy that routes external HTTP and HTTPS traffic to services inside the cluster.

Ingress Rule

A routing directive within a Kubernetes Ingress resource that maps a hostname or URL path to a specific backend service.

Init Container

A specialized Kubernetes container that runs to completion before the main application containers start, used for setup tasks like waiting on dependencies or preparing data.

Instance Type

A named cloud configuration that specifies a virtual machine's CPU, memory, storage, and network characteristics, letting users pick a size and profile suited to their workload.

Instrumentation

Adding code or agents to an application to emit metrics, logs, and traces, so its behavior can be observed and measured.

Internet Gateway

A component that connects a cloud virtual network to the public internet, enabling resources with public addresses to send and receive external traffic.

Inventory

The list of hosts and groups that a configuration management tool targets, along with their connection details and variables.

Jitter

Random variation added to retry or scheduling intervals so that many clients do not synchronize their attempts, preventing coordinated bursts of load.

Job (Kubernetes)

A Kubernetes object that runs one or more pods to completion for a batch task, tracking success and retrying failed pods until the work finishes.

Key Management Service

KMS

A managed system that creates, stores, rotates, and controls access to cryptographic keys, letting applications encrypt data without handling raw key material directly.

Kube-proxy

A network component running on each Kubernetes node that maintains the routing rules needed to forward traffic to the correct pods behind a Service.

kubectl

The command-line tool for interacting with a Kubernetes cluster, used to deploy applications, inspect resources, view logs, and manage cluster objects via the API server.

Kubelet

The agent that runs on every Kubernetes worker node, registering the node with the control plane and ensuring the containers described by pod specifications are running and healthy.

Kubernetes

k8s

The dominant open-source container orchestration platform, scheduling containers across a cluster and handling scaling, networking, rollouts, and self-healing declaratively.

Kubernetes Operator

operator

A custom controller that encodes operational knowledge for a specific application, automating tasks like provisioning, upgrades, and backups by continuously reconciling desired state.

Kubernetes Secret

A Kubernetes object for storing small amounts of sensitive data such as passwords, tokens, or keys, which pods can mount or reference without embedding the values in images.

Layer 4 Load Balancing

Load balancing that distributes traffic based on transport-layer information such as IP address and TCP or UDP port, without inspecting the application content.

Layer 7 Load Balancing

Load balancing that makes routing decisions using application-layer data such as HTTP headers, paths, and cookies, enabling content-based routing.

Lead Time for Changes

A DevOps performance metric measuring the elapsed time from a code change being committed to it running in production, reflecting delivery speed.

Least Connections

A load balancing algorithm that sends each new request to the backend server currently handling the fewest active connections, favoring less-busy servers.

Least Privilege

A security principle that grants each user, service, or process only the minimum permissions needed to perform its function, limiting the damage from compromise or error.

Linting

Lint

Automated static checking of source code against style and correctness rules to catch bugs, formatting issues, and questionable patterns before code is merged.

Liveness Probe

A Kubernetes health check that determines whether a container is still functioning; if it fails, the platform restarts the container to recover from deadlocks or hangs.

Load Balancer

LB

A component that distributes incoming traffic across multiple servers or instances to improve capacity and availability, routing around unhealthy targets.

Load Shedding

A protective technique in which a system deliberately rejects or drops some requests when overloaded, preserving its ability to serve the rest rather than collapsing entirely.

Log Aggregation

Collecting log data from many sources into a central system where it can be indexed, searched, and correlated across services.

Log Level

A severity label attached to a log message, such as debug, info, warning, or error, used to filter and prioritize output.

Log Rotation

The automatic archiving and cutover of log files once they reach a size or age limit, preventing logs from filling up disk space.

Logging

logs

Recording timestamped, often structured events from applications and infrastructure to a central store, providing the detailed narrative used for debugging and audit.

Machine Image

VM Image · AMI

A packaged template containing an operating system, configuration, and installed software used to launch new virtual machine instances in a consistent state.

Maintenance Window

A scheduled, communicated period during which planned changes or disruptive work are performed on a system, when reduced availability is expected and accepted.

Managed Kubernetes

A cloud offering in which the provider operates the Kubernetes control plane and handles its upgrades and availability, leaving customers to run their workloads on worker nodes.

Mean Time Between Failures

MTBF

The average operating time between successive failures of a system or component, used to gauge reliability.

Mean Time to Detect

MTTD

The average time between when a failure begins and when it is detected, a metric that reflects the effectiveness of monitoring and alerting.

Mean Time to Recovery

MTTR

The average time it takes to restore service after a failure, a core reliability metric that measures how quickly a team detects and resolves incidents.

Merge Queue

A system that serializes the merging of pull requests by testing each change against the latest main branch before merging, preventing broken integrations from landing.

Metric Cardinality

Cardinality

The number of unique combinations of label values a metric can take; high cardinality dramatically increases the storage and query cost of a monitoring system.

Metrics

Numeric measurements sampled over time—like request rate, error rate, latency, and resource use—that quantify system behavior and feed dashboards and alerts.

Module (IaC)

A reusable, parameterized package of infrastructure-as-code that encapsulates a set of resources so the same pattern can be deployed consistently across projects.

Monitoring

Continuously collecting and evaluating system signals against expectations to detect failures and degradation, typically driving dashboards and alerts.

Monolith

Monolithic Architecture

An application built and deployed as a single, unified unit, where all functionality shares one codebase and process, contrasted with microservices.

Multi-cloud

The use of cloud services from more than one provider, typically to avoid vendor lock-in, improve resilience, or place workloads where each provider performs best.

Multi-region

An architecture that runs a system across multiple geographic regions to improve latency for distributed users and to survive the failure of an entire region.

Multi-stage Build

A container build technique that uses multiple intermediate build stages in one Dockerfile so that only the final artifacts are copied into a small runtime image, reducing size and attack surface.

Multi-tenancy

multitenancy

An architecture where a single instance of software or infrastructure serves multiple isolated customers (tenants), sharing resources while keeping their data separate.

Mutual TLS

mTLS

A security setup where both the client and the server present certificates to authenticate each other before establishing an encrypted connection, common in service meshes for zero-trust communication.

NAT Gateway

Network Address Translation Gateway

A managed network address translation service that lets instances in a private subnet initiate outbound internet connections while remaining unreachable from inbound traffic.

Network ACL

NACL

A stateless set of allow and deny rules applied at the subnet boundary that filters traffic entering and leaving the subnet, acting as a coarse layer of network security.

Nines of Availability

Five Nines

A shorthand for uptime targets expressed as a number of nines, where each additional nine cuts allowable downtime roughly tenfold, so five nines means about five minutes of downtime per year.

Node (cluster)

worker node

A single worker machine (physical or virtual) in a cluster that runs containers or pods and is managed by the control plane.

Node Affinity

A Kubernetes scheduling rule that attracts or requires pods to run on nodes matching specified labels, used to place workloads on suitable hardware or zones.

Node Pool

Node Group

A group of worker nodes within a cluster that share the same configuration, such as machine type or labels, allowing different workloads to target different hardware.

North-South Traffic

Network traffic that flows into or out of a data center or cluster, such as requests from external users, as opposed to internal service-to-service traffic.

Object Lifecycle Policy

A rule set that automatically transitions or deletes stored objects based on age or access patterns, moving them to cheaper tiers or expiring them to control storage cost.

Observability Pipeline

The chain of collection, processing, and routing that carries telemetry from sources to storage and analysis tools, often enriching, filtering, or sampling data along the way.

On-call

on-call rotation

A rotation in which designated engineers are responsible for responding to alerts and incidents outside normal hours, typically via a paging system.

On-demand Instance

Cloud compute capacity billed by the second or hour with no long-term commitment, offering maximum flexibility at a higher unit price than reserved or spot options.

Open Container Initiative

OCI

An open governance project that defines industry standards for container image formats and runtimes, ensuring interoperability across container tools and platforms.

OpenTelemetry

OTel

A vendor-neutral, open-source standard and toolset for generating, collecting, and exporting telemetry data such as traces, metrics, and logs from applications.

Origin Server

The authoritative source server that holds the original content a CDN caches and serves; the CDN fetches from the origin when it does not have a fresh cached copy.

PaaS

Platform as a Service

Platform as a Service: the provider manages the servers and runtime so you deploy application code without provisioning or patching the underlying infrastructure.

Percentile

p99 · p95

A statistic describing the value below which a given percentage of observations fall; in monitoring, high percentiles like p99 reveal worst-case latencies that averages hide.

Persistent Volume

PV

Storage whose lifecycle is independent of the workload using it, so data survives a container or instance being replaced; the durable counterpart to ephemeral storage.

Pipeline as Code

Defining CI/CD pipelines in version-controlled configuration files stored alongside application code, so build and deploy processes are reviewable, reproducible, and auditable.

Pipeline Stage

A distinct phase in a CI/CD pipeline, such as build, test, or deploy, that groups related steps and often must succeed before the next stage runs.

Playbook

A file that describes an ordered set of automation tasks to run against target hosts in a configuration management tool, defining the desired configuration in a readable format.

Pod

The smallest deployable unit in Kubernetes: one or more tightly coupled containers that share networking and storage and are scheduled together on a node.

Pod Disruption Budget

PDB

A Kubernetes policy that limits how many pods of an application can be voluntarily taken down at once during maintenance, preserving a minimum level of availability.

Point of Presence

PoP

A physical network location, such as an edge data center, where a provider places servers to bring content and connectivity closer to end users.

Postmortem

retrospective · RCA

A written analysis after an incident that documents what happened, why, and what to change, ideally blameless so teams learn without punishing individuals.

Predictive Scaling

An autoscaling approach that uses forecasts of future demand, often from historical patterns, to provision capacity ahead of anticipated load rather than reacting after it arrives.

Private Cloud

Cloud infrastructure dedicated to a single organization, either hosted on-premises or by a third party, offering cloud-style elasticity and self-service while keeping resources isolated from other tenants.

Private Connectivity

Direct Connect · Private Link

A dedicated or virtual network link between an organization and a cloud provider that bypasses the public internet, offering more consistent latency and improved security.

Progressive Delivery

A release approach that rolls out changes gradually to increasing subsets of users while monitoring health, combining techniques like canary releases and feature flags to limit risk.

Prometheus

A widely used open-source monitoring system that scrapes metrics from targets, stores them as time series, and provides a query language for alerting and analysis.

Provider (IaC)

A plugin in an infrastructure-as-code tool that translates declarative configuration into API calls for a specific platform, such as a cloud, DNS, or SaaS provider.

Provisioning

Setting up and configuring infrastructure—servers, networks, storage, permissions—so it's ready to run workloads, increasingly done through code rather than by hand.

Public Cloud

A cloud computing model in which compute, storage, and networking resources are owned and operated by a third-party provider and delivered over the public internet, shared among many customers on a pay-as-you-go basis.

Public Key Infrastructure

PKI

The framework of certificate authorities, keys, and policies that manages digital certificates and public-key encryption to establish trust between parties.

Puppet

A configuration management tool that uses a declarative language and a pull model, where agents on managed nodes periodically fetch and enforce the desired configuration.

Rate Limiter

A component that enforces a cap on how many requests a client may make in a time window, protecting services from abuse and overload.

Read Replica

A copy of a database that receives updates from the primary and serves read-only queries, offloading read traffic and improving scalability and availability.

Readiness Probe

A Kubernetes health check that determines whether a container is ready to receive traffic; until it passes, the pod is kept out of Service load balancing.

Real User Monitoring

RUM

Observability that captures performance and behavior data from actual users' interactions with an application, reflecting genuine real-world experience.

Reconciliation Loop

Control Loop

A continuous control cycle in which a controller observes the current state, compares it to the desired state, and takes action to close any gap.

Recovery Point Objective

RPO

The maximum acceptable amount of data loss measured in time, defining how far back a recovery may reset the system after an outage.

Recovery Time Objective

RTO

The maximum acceptable duration to restore a system to operation after a disruption, guiding disaster recovery design and investment.

Recreate Deployment

A deployment strategy that terminates all instances of the old version before starting the new one, causing brief downtime but ensuring only a single version runs at a time.

RED Method

A monitoring approach for request-driven services that tracks Rate, Errors, and Duration to summarize service health.

Redis

A popular open-source in-memory data store used as a cache, message broker, and lightweight database, supporting rich data structures and very low latency access.

Redundancy

Duplicating critical components or data so that if one fails, a standby takes over without loss of service—a foundation of high availability.

Region

A distinct geographic area where a cloud provider operates data centers; choosing a region affects latency, data residency, and which services are available.

Release Promotion

Promotion

The process of advancing a build or artifact through successive environments, such as from staging to production, once it passes the gates at each stage.

Remote State

Storing infrastructure-as-code state in a shared, centralized backend rather than locally, so teams can collaborate safely and the state is backed up and lockable.

ReplicaSet

A Kubernetes controller that ensures a specified number of identical pod replicas are running at all times, replacing any that fail or are deleted.

Reserved Instance

RI

A billing commitment to use a specific amount of cloud compute capacity for a fixed term, typically one or three years, in exchange for a substantial discount over on-demand pricing.

Resilience

A system's ability to withstand faults and disruptions and to recover quickly to normal operation, maintaining acceptable service throughout.

Resource Limit

The maximum amount of CPU or memory a Kubernetes container may consume; exceeding a memory limit typically causes the container to be terminated.

Resource Request

The minimum amount of CPU or memory a Kubernetes container is guaranteed, used by the scheduler to decide which node can host the pod.

Reverse Proxy

A server that sits in front of backend services, receiving client requests and forwarding them, often adding TLS termination, caching, routing, or load balancing.

Right-sizing

Adjusting the allocated resources of an instance or workload to match its actual usage, eliminating waste from over-provisioning while avoiding performance shortfalls.

Role-Based Access Control

RBAC

An access model that grants permissions to roles rather than individuals, so users receive access by being assigned roles that match their responsibilities.

Rolling Deployment

rolling update

Updating instances in batches so some run the new version while others still serve the old one, keeping the service available throughout the release.

Rollout

The controlled process of releasing a new version of an application to running infrastructure, often progressively across instances while monitoring health.

Round Robin

A load balancing algorithm that distributes incoming requests to backend servers in a fixed rotating order, giving each an equal share regardless of load.

Route Table

A set of rules that determines where network traffic is directed based on its destination address, controlling how packets move within and out of a subnet.

Runbook

playbook

A documented, step-by-step procedure for handling a specific operational task or incident, giving responders a repeatable path especially under pressure.

SaaS

Software as a Service

Software as a Service: fully managed applications delivered over the internet, typically by subscription, with no installation or infrastructure work for the user.

Sampling

The practice of recording only a subset of traces or events to control the volume and cost of telemetry data while preserving representative visibility.

Saturation

The degree to which a resource such as CPU, memory, or disk is fully utilized; high saturation signals that a component is becoming a bottleneck.

Scale to Zero

The ability of a serverless or elastic platform to reduce a workload's running instances to none when idle, so no compute cost is incurred until traffic returns.

Scheduler (Kubernetes)

kube-scheduler

The control-plane component that assigns newly created pods to nodes based on resource requirements, constraints, affinity rules, and available capacity.

Secret Management

secrets management

Securely storing, distributing, rotating, and auditing sensitive values like API keys and passwords, keeping them out of source code and delivering them only to authorized workloads.

Secret Rotation

The regular, automated replacement of credentials such as passwords, keys, and tokens so that any leaked secret is valid for only a limited window.

Secrets Vault

vault

A dedicated encrypted store that centralizes secrets and hands them out on demand with access controls, rotation, and audit logging instead of scattering them in files.

Security Group

A virtual, stateful firewall attached to cloud instances that controls inbound and outbound traffic using allow rules based on ports, protocols, and source or destination.

Selector

Label Selector

A query that matches Kubernetes objects by their labels, used by controllers and services to determine which pods they act on.

Self-healing

Auto-remediation

The capability of a system to automatically detect failures and restore healthy operation, for example by restarting crashed components or replacing unhealthy instances.

Serverless Container

Container as a Service · CaaS

A model in which containers are run by a managed platform that handles provisioning and scaling automatically, so users deploy containers without managing servers or clusters.

Service (Kubernetes)

A Kubernetes abstraction that provides a stable network address and load balancing across a changing set of pods selected by labels.

Service Account

A non-human identity used by an application, service, or automated process to authenticate and access resources, with its own scoped permissions.

Service Discovery

The mechanism by which services in a distributed system automatically find the network locations of the other services they depend on, without hard-coded addresses.

Service Level Objective Window

SLO Window

The rolling time span, such as 30 days, over which an SLO's target and its error budget are measured.

Session Affinity

Sticky Session

A load balancing behavior that consistently routes a given client's requests to the same backend instance, useful when server-side session state is not shared.

Shared Responsibility Model

The division of security and operational duties between a cloud provider and its customer: the provider secures the underlying infrastructure while the customer secures its own data, configurations, and access.

Sidecar

sidecar container

A helper container running alongside the main application container in the same pod to add capabilities like logging, proxying, or security without changing the app.

Single Point of Failure

SPOF

A component whose failure alone would cause an entire system to stop working, eliminated through redundancy to improve availability.

SLA

Service Level Agreement

Service Level Agreement: a formal commitment, often contractual, to a level of service such as uptime, with defined consequences or credits if it's missed.

SLI

Service Level Indicator

Service Level Indicator: the actual measured value of a service quality metric, such as the percentage of successful requests, used to evaluate an SLO.

SLO

Service Level Objective

Service Level Objective: an internal target for a reliability metric—like 99.9% availability over a month—that teams commit to and measure against.

Smoke Test

A quick, shallow set of checks run after a build or deployment to confirm that the most critical functionality works before deeper testing or full release.

Software Bill of Materials

SBOM

A formal, machine-readable inventory of all components, libraries, and dependencies in a piece of software, used to track licensing and known vulnerabilities.

Span

A single timed operation within a distributed trace, representing one unit of work such as a service call, with a start time, duration, and metadata.

Split Brain

A failure condition in a clustered system where a network partition causes two sides to each believe they are the sole authority, risking conflicting writes and data corruption.

Spot Instance

Preemptible Instance

Spare cloud compute capacity offered at a steep discount that the provider can reclaim with little notice, suitable for fault-tolerant or interruptible workloads.

SRE

Site Reliability Engineering

Site Reliability Engineering: a discipline that applies software engineering to operations, using SLOs, error budgets, and automation to run reliable systems at scale.

Staging Environment

staging

A production-like environment for final testing of a release before it goes live, meant to catch issues that only surface under realistic configuration and data.

Startup Probe

A Kubernetes health check that gives slow-starting containers time to initialize before liveness and readiness probes begin, preventing premature restarts.

State File

A record, used by tools like Terraform, mapping declared resources to the real infrastructure they manage so the tool can detect drift and plan changes.

State Locking

A mechanism that prevents two infrastructure-as-code operations from modifying the same state file simultaneously, avoiding corruption and conflicting changes.

Stateful Service

A service that retains data or session state across requests, which complicates scaling and replacement because that state must be preserved or migrated.

StatefulSet

A Kubernetes controller for stateful applications that gives each pod a stable network identity and persistent storage, and manages ordered, predictable deployment and scaling.

Stateless Service

A service that keeps no client session data between requests, so any instance can handle any request, making it easy to scale horizontally and replace.

Static Application Security Testing

SAST

Automated analysis of source code or binaries for security vulnerabilities without executing the program, typically run early in a CI/CD pipeline.

Storage Class

A category of storage that trades off cost against access speed, durability, or availability, letting users match data to the right tier such as hot, cool, or archive.

Storage Tiering

The automatic or policy-driven movement of data between storage classes based on how frequently it is accessed, to balance performance and cost.

Structured Logging

The practice of emitting logs as machine-parsable key-value data, such as JSON, rather than free-form text, making logs easier to search, filter, and analyze.

Subnet

Subnetwork

A subdivision of a network's IP address range that groups resources together, often used to separate public-facing and private resources or to place them in specific availability zones.

Supply Chain Security

The practice of securing every stage of software creation and delivery, from dependencies and build systems to artifacts, against tampering and compromise.

Synthetic Monitoring

Active Monitoring

Proactively testing a system by running scripted, simulated user transactions on a schedule to measure availability and performance from the outside.

Taint and Toleration

A Kubernetes mechanism where a taint on a node repels pods that do not have a matching toleration, used to reserve nodes for specific workloads.

Telemetry

The automated collection and transmission of metrics, logs, and traces from systems to monitoring tools, forming the raw data behind observability.

Terraform

A popular tool for provisioning infrastructure as code declaratively across many providers, tracking managed resources in a state file to plan and apply changes.

Terraform Apply

Apply

The step in which an infrastructure-as-code tool executes the changes needed to make real infrastructure match the declared configuration.

Terraform Plan

Plan

A preview step in which an infrastructure-as-code tool compares the declared configuration to the current state and reports exactly what it would create, change, or destroy before any action is taken.

Throttling

Deliberately limiting the rate at which a client or system may consume a resource or service, to protect capacity and ensure fair usage.

Thundering Herd

A performance problem where many clients simultaneously retry or refresh at the same moment, overwhelming a service, often mitigated with jitter and backoff.

Time Series Database

TSDB

A database optimized for storing and querying data points indexed by time, such as metrics, well-suited to monitoring and observability workloads.

Timeout

A limit on how long an operation may take before it is abandoned and treated as a failure, preventing callers from waiting indefinitely on unresponsive dependencies.

TLS Certificate

SSL Certificate

A digital document that binds a public key to a domain identity and is issued by a certificate authority, enabling encrypted, authenticated HTTPS connections.

TLS Termination

SSL Termination · SSL Offloading

The point at which encrypted TLS connections are decrypted, often at a load balancer or proxy, so that backend servers can process plain traffic and offload cryptographic work.

Toil

In site reliability engineering, the repetitive, manual, automatable operational work that scales with system size and produces no lasting value, which teams aim to reduce through automation.

Trace Context

The identifiers propagated between services so that individual spans can be linked into a single end-to-end distributed trace of a request.

Transit Gateway

A network hub that connects many virtual private clouds and on-premises networks through a single gateway, simplifying routing in large multi-network environments.

TTL (DNS)

Time to Live

A value on a DNS record specifying how long resolvers may cache it before querying again, balancing lookup speed against how quickly changes propagate.

Uptime

availability

The proportion of time a system is operational and available, often expressed in nines (99.9% is roughly 8.8 hours of downtime a year).

USE Method

A monitoring approach for resources that examines Utilization, Saturation, and Errors to quickly locate performance bottlenecks.

Virtual Machine

VM

A software-emulated computer that runs its own operating system on shared physical hardware, isolated from other VMs by a hypervisor.

Virtual Private Cloud

VPC

A logically isolated section of a public cloud where a customer can define its own IP address ranges, subnets, route tables, and gateways, as if running a private network.

Volume

A block storage device attached to a compute instance that presents raw disk capacity the operating system formats and uses like a physical drive.

VPC Peering

Peering

A network connection that links two virtual private clouds so their resources can communicate using private IP addresses as if on the same network.

Warm Cache

A cache that already holds frequently requested data so most requests are served quickly, as opposed to a cold cache that must first be populated from the source.

Warm Pool

A set of pre-initialized, ready-to-use instances kept on standby so an autoscaling group can add capacity almost instantly instead of booting from cold.

Warm Standby

A disaster recovery setup that keeps a scaled-down copy of the environment running and ready, so it can quickly take over and scale up when the primary fails.

Web Application Firewall

WAF

A security layer that inspects and filters HTTP traffic to an application, blocking common web attacks such as injection and cross-site scripting before they reach the origin.

Write-back Cache

Write-behind Cache

A caching strategy that writes data to the cache immediately and defers writing to the underlying store, improving write speed but risking data loss if the cache fails.

Write-through Cache

A caching strategy in which every write updates both the cache and the underlying store synchronously, keeping them consistent at the cost of slower writes.

Zero Downtime Deployment

zero-downtime deploy

Releasing a new version without any interruption to users, achieved with strategies like rolling, blue-green, or canary deployments plus health checks and draining.

Zero Trust

A security model that assumes no user or system is inherently trusted, requiring every request to be authenticated, authorized, and continuously verified regardless of network location.

802.1X

An IEEE standard for port-based network access control that authenticates devices before allowing them onto a wired or wireless network. It commonly works with RADIUS and certificates.

ABAC

Attribute-Based Access Control

Attribute-Based Access Control, a model that decides access dynamically from attributes of the user, resource, action, and environment, allowing fine-grained context-aware policies.

Acceptable Use Policy

AUP

A policy that defines how employees and users may use an organization's systems, networks, and data. It sets boundaries and consequences to reduce misuse and risk.

Access Token

bearer token

A credential issued after authentication that a client presents to prove authorization for specific resources, usually short-lived and scoped to limit misuse if stolen.

Account Takeover

ATO

An attack outcome in which an adversary gains full control of a legitimate user's account, often via stolen credentials, phishing, or session theft. It enables fraud, data theft, and further compromise.

Accountability

The security property that actions can be traced to the responsible individual or system, supporting audit and enforcement. Logging, unique identities, and non-repudiation enable it.

ACL

Access Control List

Access Control List, a list attached to a resource that specifies which identities are allowed or denied particular operations on it.

Adaptive Authentication

risk-based authentication

An authentication approach that adjusts the verification requirements based on contextual signals such as device, location, and behavior. High-risk contexts trigger stronger challenges while trusted ones stay frictionless.

Advanced Persistent Threat

APT

A sophisticated, well-resourced adversary that gains and maintains long-term covert access to a target to pursue strategic goals. APTs emphasize stealth and persistence over quick gains.

Adware

Software that displays or injects unwanted advertisements, sometimes bundled with tracking or other unwanted behavior. While often merely intrusive, some variants act as spyware.

AES

Advanced Encryption Standard · Rijndael

The Advanced Encryption Standard, a symmetric block cipher adopted by the U.S. government and used worldwide to encrypt data with 128-, 192-, or 256-bit keys. It is the de facto standard for protecting data at rest and in transit.

Air Gap

air-gapped

A physical isolation strategy in which a system or network has no connection to unsecured networks such as the internet. It protects the most sensitive systems, though removable media can still bridge the gap.

Allowlisting

whitelisting · allow list

A control that permits only explicitly approved entities, applications, or addresses and denies everything else by default. It is more restrictive and generally safer than blocklisting.

Amplification Attack

reflection attack

A denial-of-service technique that abuses services which return large responses to small spoofed requests, multiplying the traffic aimed at a victim. DNS and NTP have historically been common amplifiers.

Anonymization

Irreversibly transforming data so individuals can no longer be identified from it, even in combination with other data. It supports privacy when data must be used or shared.

Antivirus

AV · anti-malware

Software that detects, blocks, and removes malware using signatures, heuristics, and behavioral analysis. It is a foundational endpoint control, increasingly folded into broader endpoint protection suites.

Argon2

The winner of the Password Hashing Competition, a modern memory-hard key-derivation function with variants tuned for resistance to GPU and side-channel attacks. It is the recommended default for new password storage.

ARP Spoofing

ARP poisoning

An attack on a local network where an adversary sends forged Address Resolution Protocol messages to associate their MAC address with another host's IP. It enables man-in-the-middle interception of local traffic.

Asymmetric Encryption

public-key cryptography · public-key encryption

Encryption using a mathematically linked key pair, where a public key encrypts and only the matching private key decrypts. It enables secure key exchange and digital signatures without sharing a secret.

Attack Surface

The total set of points where an attacker could try to enter, extract data from, or affect a system, including exposed services, inputs, interfaces, and accounts.

Attack Surface Reduction

ASR

The deliberate minimization of the ways an attacker can interact with a system, by disabling features, closing ports, and limiting exposure. It is a proactive complement to detection and response.

Attack Tree

A diagram that models how an attacker could reach a goal, with the objective at the root and progressively specific methods as branches. It helps analysts reason about attack paths and defenses.

Attack Vector

The path or method an attacker uses to gain unauthorized access to a system, such as phishing, an exposed service, or a malicious attachment. Reducing available vectors shrinks the attack surface.

Attribute-Based Encryption

ABE

A public-key scheme where decryption is possible only if a user's attributes satisfy a policy embedded in the ciphertext. It enables fine-grained, policy-driven access to encrypted data.

Attribution

The process of determining which threat actor is responsible for an attack based on technical, behavioral, and contextual evidence. It is difficult and uncertain because attackers deliberately obscure their identity.

Audit Log

audit trail

A chronological, tamper-resistant record of security-relevant events and actions within a system. It supports monitoring, forensic investigation, and accountability.

Authenticated Encryption

AEAD

A class of encryption schemes that simultaneously guarantee the confidentiality and the integrity/authenticity of data, so tampering is detected on decryption. Modes like AES-GCM and ChaCha20-Poly1305 are common examples.

Authentication

AuthN

The process of verifying that a user, device, or service is who or what it claims to be, typically using passwords, tokens, biometrics, or cryptographic keys.

Authenticity

The assurance that a message, transaction, or identity is genuine and originates from its claimed source. It is established through authentication mechanisms and digital signatures.

Authorization

AuthZ

The process of determining what an authenticated identity is permitted to do, granting or denying access to specific resources and actions.

Authorization Code Flow

The most common OAuth 2.0 flow where a client receives a short-lived authorization code that it exchanges server-side for tokens. Keeping tokens off the browser makes it the recommended flow for web apps.

Backdoor

A hidden method of bypassing normal authentication to gain access to a system, whether planted maliciously or left in as an insecure shortcut.

Baiting

A social-engineering tactic that lures victims with something enticing, such as a free download or an abandoned USB drive, to deliver malware or steal credentials. It exploits curiosity and greed.

Baseline Configuration

security baseline

A documented, approved set of secure settings that systems are configured to and measured against. Deviations from the baseline are flagged as potential misconfigurations or drift.

bcrypt

A password-hashing function built on the Blowfish cipher with a tunable cost factor that increases computation as hardware improves. Its deliberate slowness makes large-scale password cracking impractical.

Biometric Authentication

Verifying identity using unique physical or behavioral traits such as fingerprints, facial geometry, or voice. It provides convenience but raises concerns because biometrics cannot be reset if compromised.

Birthday Attack

A cryptographic attack that exploits the mathematics of the birthday paradox to find hash collisions faster than brute force. It informs the required output size of secure hash functions.

Block Cipher

A symmetric encryption algorithm that transforms fixed-size blocks of plaintext into ciphertext using a secret key. It is combined with a mode of operation to encrypt data longer than a single block.

Blocklisting

blacklisting · deny list · denylisting

A control that denies known-bad entities, applications, or addresses while allowing everything else by default. It is easier to maintain than allowlisting but cannot stop unknown threats.

Blue Team

The defenders responsible for monitoring, detecting, and responding to attacks and hardening systems. They are the counterpart to the offensive red team in security exercises.

Botnet

A network of compromised devices, or bots, controlled by an attacker to carry out coordinated actions such as DDoS attacks or spam. The controller directs them through a command-and-control channel.

Break-Glass Account

emergency access account

A highly privileged emergency account kept for use only when normal access paths fail, with strict controls and monitoring. Its use is logged and alerted because it bypasses routine safeguards.

Broken Access Control

A category of flaws where users can act outside their intended permissions, such as viewing others' data or reaching admin functions. It ranks among the top web risks and is countered by enforcing authorization on every request server-side.

Brute Force

brute-force attack

An attack that systematically tries many possible passwords or keys until the correct one is found. Strong secrets, rate limiting, and account lockouts make it impractical.

Bug Bounty

A program that pays external security researchers for responsibly reporting vulnerabilities they discover in an organization's systems. It crowdsources security testing under defined rules.

Business Continuity Plan

BCP

A documented strategy for keeping essential operations running during and after a disruptive event. It complements disaster recovery by addressing the broader organization, not just IT.

Business Email Compromise

BEC

A fraud in which attackers impersonate a trusted executive, vendor, or partner over email to trick employees into transferring funds or sensitive data. It often uses compromised or spoofed accounts and little or no malware.

Business Logic Vulnerability

A flaw in the intended workflow or rules of an application that an attacker abuses without breaking any technical control, such as bypassing purchase limits. It is hard to detect with automated scanners and requires human review.

Certificate Pinning

pinning · public-key pinning

A defense in which an application only accepts a specific expected certificate or public key for a host, rejecting all others even if signed by a trusted CA. It thwarts attacks that rely on fraudulently issued certificates.

Certificate Revocation List

CRL

A signed list published by a certificate authority naming certificates that have been revoked before their expiry. Clients consult it to avoid trusting compromised or invalidated certificates.

Certificate Signing Request

CSR

A block of encoded data a party sends to a certificate authority to request a digital certificate. It contains the applicant's public key and identifying information, signed by the corresponding private key.

Certificate Transparency

CT

A framework of public, append-only logs that record issued TLS certificates so misissued or fraudulent ones can be detected. Domain owners monitor the logs for unexpected certificates.

ChaCha20-Poly1305

A modern authenticated encryption construction pairing the ChaCha20 stream cipher with the Poly1305 message authentication code. It is fast in software and used as a TLS cipher, especially on mobile devices.

Chain of Custody

The documented, unbroken record of who handled a piece of evidence, when, and how, from collection to presentation. It preserves the integrity and admissibility of forensic evidence.

Chain of Trust

certificate chain

The linked sequence of certificates from a trusted root down through intermediates to an end-entity certificate. A client validates each signature in the chain to decide whether to trust the endpoint.

CIA Triad

Confidentiality Integrity Availability

The core model of information security, standing for Confidentiality, Integrity, and Availability. It frames security goals as keeping data secret, unaltered, and accessible to authorized users.

Cipher Block Chaining

CBC

A block cipher mode in which each plaintext block is XORed with the previous ciphertext block before encryption, so identical blocks produce different output. It requires a random initialization vector and is vulnerable to padding-oracle attacks if misused.

Cipher Suite

A named combination of algorithms for key exchange, authentication, bulk encryption, and message integrity selected during a TLS handshake. Servers are hardened by disabling weak suites.

Ciphertext

The scrambled, unreadable output produced by encrypting plaintext with a cipher and key. Without the correct key, it should reveal nothing about the original data.

Claims

Statements about a subject, such as a user's name, roles, or email, carried inside a token like a JWT. Applications base authorization decisions on the claims a trusted issuer asserts.

Cloud Security Posture Management

CSPM

Tools and practices that continuously assess cloud environments for misconfigurations and compliance violations. They help catch risky settings such as publicly exposed storage before attackers do.

Code Signing

Attaching a digital signature to software so users can verify its author and confirm it has not been altered since signing. It underpins trust in software distribution and updates.

Collision Resistance

The property that it is computationally infeasible to find two different inputs that produce the same hash output. Losing this property, as MD5 did, breaks the security of signatures and integrity checks.

Command and Control

C2 · C&C

The infrastructure and channels an attacker uses to communicate with and direct compromised systems. Detecting and blocking its traffic is a key defense against active intrusions and botnets.

Command Injection

OS command injection

A vulnerability where attacker-controlled input is passed to a system shell, allowing arbitrary operating-system commands to run. It is prevented by avoiding shell calls and validating or escaping input.

Compensating Control

An alternative safeguard used when a primary or required control is not feasible, providing comparable protection. It is common in compliance frameworks when a standard requirement cannot be met directly.

Compliance

Conforming to laws, regulations, standards, or contractual obligations that mandate specific security and privacy practices. It is often verified through audits and certifications.

Confidentiality

The principle that information is accessible only to those authorized to see it, one of the three pillars of the CIA triad. Encryption and access control are its primary safeguards.

Container Security

The discipline of securing containerized workloads across their images, registries, runtime, and orchestration. It covers image scanning, least-privilege configuration, and isolation between containers.

Containment

The incident-response phase focused on limiting the spread and impact of an active security incident, such as isolating affected systems. It buys time to eradicate the threat without further damage.

Content Security Policy

CSP

A browser security mechanism, delivered via an HTTP header, that restricts which sources of scripts, styles, and other content a page may load. It is a strong mitigation against cross-site scripting and data injection.

Continuous Monitoring

The ongoing collection and analysis of security data across systems to maintain real-time awareness of posture and threats. It underpins timely detection and informed risk decisions.

Corrective Control

A safeguard that restores systems and limits damage after a security event, such as backups, patching, and incident response. It works alongside preventive and detective controls.

Credential

Any secret or proof used to authenticate an identity, such as a password, API key, certificate, or token. Protecting credentials is central to access security.

Credential Stuffing

An attack that uses username and password pairs leaked from one breach to try logging into other services, exploiting password reuse. MFA and breach monitoring counter it.

Cryptanalysis

The study of analyzing cryptographic systems to find weaknesses and recover protected information without the key. It drives the retirement of algorithms once practical attacks are discovered.

Cryptographic Hash Function

A one-way function that maps arbitrary input to a fixed-size digest such that the input cannot be feasibly recovered and small changes produce very different outputs. It underpins integrity checks, signatures, and password storage.

Cryptographically Secure Pseudorandom Number Generator

CSPRNG

A random-number generator whose output is unpredictable enough for cryptographic use, meaning an attacker cannot guess future or past values. It is required for keys, nonces, and session tokens.

Cryptojacking

The unauthorized use of a victim's computing resources to mine cryptocurrency for an attacker. It degrades performance and raises costs while often going unnoticed.

CSRF

Cross-Site Request Forgery · XSRF

Cross-Site Request Forgery, an attack that tricks an authenticated user's browser into sending an unwanted request to a trusted site. Anti-CSRF tokens and SameSite cookies defend against it.

CVE

Common Vulnerabilities and Exposures

Common Vulnerabilities and Exposures, a public catalog that assigns a unique identifier to each disclosed security vulnerability so the industry can reference it consistently.

CVSS

Common Vulnerability Scoring System

Common Vulnerability Scoring System, an open framework that rates the severity of a vulnerability on a 0 to 10 scale based on its exploitability and impact.

Cyber Hygiene

security hygiene

The routine practices that keep systems and accounts healthy and secure, such as patching, strong passwords, backups, and least privilege. Consistent basics prevent a large share of incidents.

Cyber Kill Chain

kill chain

A model describing the sequential stages of an intrusion, from reconnaissance through delivery, exploitation, and actions on objectives. Defenders aim to break the chain at any stage to stop the attack.

DAST

Dynamic Application Security Testing

Dynamic Application Security Testing, which probes a running application from the outside to find vulnerabilities such as injection and misconfiguration. It complements static analysis by testing real runtime behavior.

Data at Rest

Information stored on disk, in databases, or on backup media rather than moving across a network. Protecting it typically relies on encryption and access controls.

Data Breach

breach

An incident in which confidential or protected information is accessed, disclosed, or stolen by an unauthorized party.

Data Exfiltration

data theft

The unauthorized transfer of data out of a system or network to an attacker-controlled destination. Detecting and blocking it is a goal of egress filtering and data loss prevention.

Data in Transit

data in motion

Information actively moving across a network between systems or users. It is protected primarily with transport encryption such as TLS to prevent interception.

DDoS

Distributed Denial of Service

Distributed Denial of Service, an attack that overwhelms a target with traffic from many compromised systems to make it unavailable. Rate limiting, filtering, and scrubbing services help absorb it.

Deep Packet Inspection

DPI

Examining the full contents of network packets, including application-layer payloads, rather than just headers. It enables advanced filtering, intrusion detection, and policy enforcement.

Defense in Depth

layered security

A strategy of layering multiple independent security controls so that if one fails, others still protect the asset. No single control is trusted as the sole line of defense.

Dependency Scanning

Automatically checking a project's declared libraries against vulnerability databases to flag components with known flaws. It is a core part of software supply-chain security and CI pipelines.

Deprovisioning

The timely removal of a user's accounts and access rights when they leave or no longer need them. Prompt deprovisioning prevents orphaned accounts from becoming attack vectors.

Detective Control

A safeguard that identifies and alerts on security events as or after they occur, such as intrusion detection, logging, and monitoring. It enables timely response.

DevSecOps

An approach that embeds security practices and automation directly into DevOps workflows so security is a shared, continuous responsibility. It integrates scanning, policy, and monitoring into CI/CD pipelines.

Dictionary Attack

A password-cracking method that tries words and common variations from a curated list rather than every possible combination. It exploits the tendency to choose predictable passwords.

Diffie-Hellman Key Exchange

DH · Diffie-Hellman

A method that lets two parties establish a shared secret over an insecure channel without ever transmitting the secret itself. It underpins forward secrecy in modern secure communication protocols.

Digital Certificate

X.509 certificate · TLS certificate

A signed electronic document that binds a public key to an identity such as a domain or organization. It is issued by a certificate authority and underpins TLS trust.

Digital Forensics

computer forensics

The practice of collecting, preserving, and analyzing digital evidence to reconstruct events, often after a security incident or for legal purposes. It emphasizes maintaining evidence integrity and a documented chain of custody.

Digital Signature

A cryptographic value created with a private key that lets anyone verify, using the matching public key, that a message is authentic and unaltered.

Directory Traversal

path traversal

A vulnerability where crafted file paths containing sequences like dot-dot-slash let an attacker access files outside the intended directory. It is prevented by canonicalizing paths and validating them against an allowlist.

DLP

Data Loss Prevention

Data Loss Prevention, tools and policies that detect and block the unauthorized transfer of sensitive data outside an organization's controlled boundaries.

DMZ

demilitarized zone · perimeter network

A demilitarized zone, a network segment that hosts internet-facing services while isolating them from the internal network. It limits exposure so a compromised public server cannot directly reach internal systems.

DNS Spoofing

DNS cache poisoning · DNS poisoning

An attack that corrupts DNS resolution so victims are directed to attacker-controlled addresses instead of legitimate ones. DNSSEC and encrypted DNS help defend against it.

DNSSEC

Domain Name System Security Extensions

A set of extensions that add cryptographic signatures to DNS records so resolvers can verify their authenticity and integrity. It defends against DNS spoofing and cache poisoning.

DOM-based XSS

A cross-site scripting variant where malicious script executes because client-side JavaScript writes untrusted data into the page's Document Object Model. The vulnerability lives entirely in the browser rather than the server response.

DoS

Denial of Service

Denial of Service, an attack that exhausts a system's resources or exploits a flaw to make a service unavailable to legitimate users, typically from a single source.

Downgrade Attack

protocol downgrade

An attack that forces two parties to negotiate a weaker, more vulnerable protocol or cipher than they support. Protocol designs and policies that reject insecure options defend against it.

DREAD

A risk-rating model that scores threats on Damage, Reproducibility, Exploitability, Affected users, and Discoverability. It helps prioritize which issues to address first, though it can be subjective.

Drive-by Download

The automatic download and execution of malware simply from visiting a compromised or malicious webpage, without the user clicking to install. It exploits browser or plugin vulnerabilities.

ECDSA

Elliptic Curve Digital Signature Algorithm

The Elliptic Curve Digital Signature Algorithm, a signing scheme that produces compact signatures using elliptic-curve keys. It is widely used in TLS certificates, cryptocurrencies, and secure boot.

EDR

Endpoint Detection and Response

Endpoint Detection and Response, software on laptops and servers that continuously records endpoint activity to detect, investigate, and respond to threats at the device level.

Egress Filtering

Controlling and inspecting outbound traffic leaving a network to block data exfiltration, malware callbacks, and connections to malicious hosts. It complements the more common inbound filtering.

Elliptic Curve Cryptography

ECC

A family of public-key algorithms based on the algebra of elliptic curves over finite fields. It achieves equivalent security to RSA with much smaller keys, making it efficient for constrained devices and modern TLS.

Encryption

The transformation of readable data into ciphertext using an algorithm and key, so that only parties holding the correct key can recover the original plaintext.

End-to-End Encryption

E2EE

Encryption in which only the communicating endpoints can read the messages, so intermediaries including the service provider cannot access the plaintext.

Endpoint Protection

endpoint security · EPP

A suite of technologies that secures devices such as laptops, servers, and phones through antivirus, firewalls, encryption, and detection and response. It defends the many entry points into an organization.

Eradication

The incident-response phase where the root cause and all traces of an attack, such as malware and unauthorized access, are removed from affected systems. It precedes safe recovery.

Exploit

A piece of code or a technique that takes advantage of a specific vulnerability to cause unintended behavior such as unauthorized access or code execution.

Fail-Secure

fail-closed

A design principle where a system defaults to a secure, access-denying state when it fails, rather than granting access. It prioritizes protection over availability during faults.

Federation

identity federation

An arrangement in which multiple organizations or domains trust a common identity provider so users can authenticate once and access resources across boundaries. It enables cross-domain single sign-on without duplicating accounts.

FIDO2

Fast IDentity Online 2

An open authentication standard combining WebAuthn and the Client to Authenticator Protocol to enable strong, phishing-resistant, passwordless login. It uses public-key credentials bound to the origin site.

Fileless Malware

Malicious activity that runs primarily in memory and abuses legitimate system tools rather than writing executable files to disk. Its avoidance of files makes it harder for traditional antivirus to detect.

Firewall

A network security control that monitors and filters incoming and outgoing traffic against defined rules, blocking unauthorized connections between networks or hosts.

Full Disk Encryption

FDE

A technique that encrypts an entire storage volume so all data is unreadable without the correct key or credentials. It protects data on lost or stolen devices.

Fuzzing

fuzz testing

An automated testing technique that feeds large volumes of malformed or random input to a program to uncover crashes and security bugs. It is effective at finding memory-safety and parsing flaws.

Galois/Counter Mode

GCM · AES-GCM

An authenticated encryption mode for block ciphers that provides both confidentiality and integrity in a single pass. It is widely used in TLS because it detects tampering as well as encrypting.

GDPR

General Data Protection Regulation

The European Union's General Data Protection Regulation governing the collection, processing, and protection of personal data, with significant penalties for violations. It grants individuals rights over their data and obliges organizations to safeguard it.

Hardcoded Secret

hardcoded credential

A credential such as a password, API key, or token embedded directly in source code or configuration. It is a serious risk because anyone with code access, or a leaked repository, gains that secret.

Hardening

system hardening

Reducing a system's attack surface by removing unnecessary services, closing ports, applying secure settings, and patching. It follows secure baselines and benchmarks.

Hardware Security Module

HSM

A tamper-resistant physical device that generates, stores, and uses cryptographic keys so the keys never leave protected hardware. It is used for certificate authorities, payment systems, and high-value signing.

HIPAA

Health Insurance Portability and Accountability Act

The U.S. Health Insurance Portability and Accountability Act, which sets requirements for protecting the privacy and security of health information. Covered entities must implement administrative, physical, and technical safeguards.

HKDF

HMAC-based Key Derivation Function

A HMAC-based key derivation function that extracts and expands input keying material into one or more strong cryptographic keys. It is widely used in modern protocols such as TLS 1.3 and Signal.

HMAC

Hash-based Message Authentication Code

Hash-based Message Authentication Code, a construction that combines a secret key with a hash function to verify both the integrity and authenticity of a message.

Homomorphic Encryption

A form of encryption that allows computation to be performed directly on ciphertext, producing an encrypted result that matches operations on the plaintext. It enables processing sensitive data without decrypting it.

Honeypot

A decoy system deliberately made attractive to attackers so their activity can be detected, studied, and diverted away from real assets.

HOTP

HMAC-based One-Time Password

An HMAC-based One-Time Password algorithm that generates codes from a shared secret and an incrementing counter. It is the counter-based counterpart to the time-based TOTP.

HSTS

HTTP Strict Transport Security

HTTP Strict Transport Security, a response header that instructs browsers to only connect to a site over HTTPS and never fall back to unencrypted HTTP. It defends against protocol-downgrade and SSL-stripping attacks.

IAST

Interactive Application Security Testing

Interactive Application Security Testing, which instruments a running application to observe code execution and data flow, combining strengths of static and dynamic testing. It reports vulnerabilities with runtime context and low false positives.

ID Token

A signed token in OpenID Connect that conveys the authenticated user's identity and claims to the client application. Unlike an access token, its purpose is to prove who the user is rather than to authorize resource access.

Identity Governance

IGA

The policies and processes for managing digital identities and their entitlements, including access reviews, certifications, and role management. It ensures access stays appropriate over time and supports compliance.

Identity Provider

IdP

A service that authenticates users and issues assertions or tokens about their identity to relying applications. It is the trusted source of identity in single sign-on and federation.

IDS

Intrusion Detection System

Intrusion Detection System, a tool that monitors network or host activity for suspicious patterns and raises alerts, without automatically blocking the traffic it observes.

Image Scanning

Analyzing container or virtual-machine images for known vulnerabilities, embedded secrets, and misconfigurations before deployment. It is a gate in secure container pipelines.

Incident Response

IR

The organized process of preparing for, detecting, containing, eradicating, and recovering from a security breach, followed by lessons-learned review.

Indicator of Compromise

IOC

An observable artifact, such as a malicious file hash, IP address, or registry change, that suggests a system has been breached. Defenders use IOCs to detect and hunt for intrusions.

Initialization Vector

IV

A random or unique value fed into a cipher alongside the key so that encrypting the same plaintext twice yields different ciphertext. Reusing an IV with the same key can catastrophically weaken encryption.

Injection

A class of vulnerabilities where untrusted input is interpreted as part of a command or query, letting attackers alter its meaning. SQL, command, and LDAP injection are examples, defended by input validation and parameterization.

Input Validation

The practice of checking that incoming data conforms to expected type, length, format, and range before processing. It is a primary defense against injection and many other input-driven attacks.

Insecure Deserialization

A flaw where an application deserializes untrusted data without validation, potentially leading to remote code execution or privilege escalation. It is mitigated by avoiding native deserialization of user input and using safe data formats.

Insecure Direct Object Reference

IDOR

An access-control flaw where an application exposes internal identifiers, such as record IDs in URLs, and fails to verify the user is authorized to access them. Attackers change the identifier to reach other users' data.

Insider Threat

A risk originating from people with legitimate access, such as employees or contractors, who misuse it maliciously or negligently. Controls include least privilege, monitoring, and separation of duties.

Integer Overflow

A bug where an arithmetic operation produces a value too large for its data type, wrapping around to an unexpected result. It can lead to memory corruption and security vulnerabilities.

Integrity

The principle that data remains accurate and unaltered except by authorized changes, part of the CIA triad. Hashing, digital signatures, and checksums help verify it.

Intermediate Certificate

A certificate that sits between a root certificate and an end-entity certificate in the chain of trust, signed by the root and used to sign server certificates. It lets authorities keep the root key offline for safety.

IPS

Intrusion Prevention System

Intrusion Prevention System, a tool that detects malicious activity like an IDS and actively blocks or drops the offending traffic in real time.

IPsec

Internet Protocol Security

A protocol suite that authenticates and encrypts IP packets to secure communications at the network layer, commonly used to build VPN tunnels. It operates transparently to applications.

ISO 27001

ISO/IEC 27001

An international standard specifying requirements for establishing and maintaining an information security management system. Organizations can be certified against it to demonstrate systematic risk management.

Just-in-Time Access

JIT access

Granting elevated or sensitive access only for the moment it is needed and revoking it automatically afterward. It shrinks the window of exposure compared with standing privileges.

JWT

JSON Web Token

JSON Web Token, a compact, signed token format that encodes claims about an identity or session as JSON. It lets services verify assertions without a database lookup, but is only as safe as its signature and expiry handling.

Kerberos

A network authentication protocol that uses tickets issued by a trusted Key Distribution Center to let clients and services prove identity without sending passwords over the network. It is the backbone of Windows domain authentication.

Key Derivation Function

KDF

An algorithm that derives one or more cryptographic keys from a secret input such as a password or master key. Password-oriented KDFs are deliberately slow to resist brute-force cracking.

Key Escrow

An arrangement in which copies of cryptographic keys are held by a trusted third party so data can be recovered under defined conditions. It aids recovery and lawful access but introduces a central point of compromise.

Key Length

key size

The size of a cryptographic key measured in bits, which sets an upper bound on the effort needed to brute-force it. Longer keys are exponentially harder to break but cost more to compute.

Key Management

KMS

The full lifecycle of generating, distributing, storing, rotating, and retiring cryptographic keys. Poor key management is a leading cause of cryptographic failures even when the algorithms are strong.

Key Rotation

The practice of periodically replacing cryptographic keys or credentials with new ones to limit the window of exposure if a key is compromised.

Keylogger

Software or hardware that records a user's keystrokes to capture passwords, messages, and other sensitive input. Captured data is typically relayed to an attacker.

Lateral Movement

The techniques attackers use to progress from an initial foothold to other systems within a network in pursuit of their objective. Segmentation and least privilege slow it down.

LDAP

Lightweight Directory Access Protocol

The Lightweight Directory Access Protocol, used to query and manage directory services that store users, groups, and other identity data. It commonly backs enterprise authentication and authorization.

Least Functionality

The hardening principle that systems should provide only the capabilities, services, and ports essential to their purpose. Disabling everything unnecessary reduces the attack surface.

Living off the Land

LOLBins

An attacker technique that abuses legitimate, already-installed system tools and binaries to carry out malicious actions while blending in with normal activity. It evades defenses that look for foreign malware.

Logic Bomb

Malicious code that lies dormant until a specific condition, such as a date or event, triggers its payload. It is often planted by insiders to activate after they leave.

Malvertising

malicious advertising

The use of online advertising networks to distribute malware by embedding malicious code in ads. Because ads are served across many legitimate sites, it can reach large audiences.

Malware

malicious software

Malicious software designed to damage, disrupt, or gain unauthorized access to systems, including viruses, worms, trojans, spyware, and ransomware.

Man-in-the-Middle

MITM · on-path attack

An attack where an adversary secretly intercepts and possibly alters communication between two parties who believe they are talking directly. Strong encryption and certificate validation defend against it.

Mass Assignment

over-posting

A vulnerability where a framework automatically binds request parameters to object fields, letting attackers set properties they should not control, such as an admin flag. It is mitigated by explicitly allowlisting bindable fields.

MD5

Message Digest 5

A legacy 128-bit hash function that is now considered cryptographically broken because practical collision attacks exist. It should not be used for security purposes, though it survives for non-security checksums.

Mean Time to Respond

MTTR

A metric measuring the average time to contain or remediate an incident after it is detected. It gauges the effectiveness of an organization's response capability.

Memory Forensics

The analysis of a system's volatile memory to uncover running processes, injected code, and artifacts that never touch disk. It is essential for investigating fileless and in-memory attacks.

Message Authentication Code

MAC

A short tag computed from a message and a shared secret key that verifies both the integrity and the authenticity of the message. Unlike a plain hash, it cannot be forged without knowing the key.

MFA

Multi-Factor Authentication · 2FA · two-factor authentication

Multi-Factor Authentication, which requires two or more independent proofs of identity from different categories such as something you know, have, or are. It resists account takeover even when a password leaks.

Microsegmentation

A fine-grained form of segmentation that applies security policies down to individual workloads or applications rather than broad network zones. It is a key enabler of zero-trust architectures.

MITRE ATT&CK

A publicly available knowledge base of adversary tactics and techniques observed in real-world attacks, organized into a matrix. Defenders use it to map detections, assess coverage, and communicate about threats.

Network Access Control

NAC

A set of technologies that enforce policy on devices seeking to connect to a network, verifying identity and posture before granting access. It can quarantine noncompliant or unknown devices.

Network Address Translation

NAT

A technique that rewrites IP address information in packet headers, commonly mapping many private addresses to one public address. While primarily for address conservation, it also hides internal network structure.

Network Segmentation

Dividing a network into isolated zones so that a compromise in one segment cannot freely reach others. It limits lateral movement and contains breaches.

Next-Generation Firewall

NGFW

A firewall that adds deep packet inspection, application awareness, and integrated intrusion prevention beyond traditional port-and-protocol filtering. It can enforce policy based on the application and user, not just addresses.

NIST Cybersecurity Framework

NIST CSF

A voluntary framework from the U.S. National Institute of Standards and Technology that organizes security activities into core functions such as Identify, Protect, Detect, Respond, and Recover. It helps organizations manage and communicate cyber risk.

Non-Repudiation

The assurance that a party cannot credibly deny having performed an action, such as sending a message or signing a document. Digital signatures and secure logs provide it.

Nonce

number used once

A number used only once in a cryptographic operation to guarantee freshness and prevent replay. Reusing a nonce with the same key can break the security of many schemes.

OAuth Scope

scope

A parameter that limits the specific permissions an access token grants, such as read-only access to a resource. Scopes let applications request only the access they need under least privilege.

OCSP

Online Certificate Status Protocol

The Online Certificate Status Protocol, a real-time method for checking whether a specific certificate has been revoked without downloading a full revocation list. OCSP stapling lets a server present a fresh signed status to clients.

One-Time Pad

An encryption scheme that XORs plaintext with a truly random key at least as long as the message, used only once. It offers provable perfect secrecy but is impractical because of key-distribution demands.

Open Redirect

A flaw where an application redirects users to a URL supplied in a parameter without validation, enabling phishing that abuses the trusted domain. It is fixed by validating redirect targets against an allowlist.

OpenID Connect

OIDC

An identity layer built on top of OAuth 2.0 that adds standardized user authentication and profile information, commonly used to power single sign-on across web and mobile apps.

OTP

One-Time Password · TOTP

One-Time Password, a code valid for a single login or transaction, often time-based, that adds a second authentication factor resistant to reuse.

OWASP

Open Worldwide Application Security Project

The Open Worldwide Application Security Project, a nonprofit community that publishes free tools, guidance, and standards for software security. Its Top Ten and testing guides are industry references.

OWASP Top Ten

A periodically updated list of the ten most critical web application security risks, published by OWASP as an awareness and prioritization baseline. Categories include broken access control, injection, and cryptographic failures.

Packet Filtering

A firewall technique that allows or blocks traffic based on packet header fields such as source, destination, port, and protocol. It is stateless and fast but cannot track connection context.

Packet Sniffing

network sniffing

Capturing and inspecting network traffic as it passes over a medium, used for legitimate troubleshooting or malicious eavesdropping. Encryption defends against sniffing of sensitive data.

Padding Oracle Attack

An attack that decrypts ciphertext by observing whether a server accepts or rejects manipulated messages based on their padding. It exploits information leaked by improper error handling in block-cipher modes like CBC.

Parameterized Query

prepared statement

A database query in which user input is passed as bound parameters kept separate from the SQL code. Because input can never be interpreted as commands, it is the definitive defense against SQL injection.

Pass-the-Hash

An attack in which an adversary authenticates using a captured password hash instead of the plaintext password. It lets attackers move through Windows environments without cracking credentials.

Passkey

A phishing-resistant credential based on public-key cryptography that replaces passwords, with the private key stored on the user's device and synced across their ecosystem. It builds on the FIDO2 and WebAuthn standards.

Passphrase

A password composed of a sequence of words or a long phrase, chosen for high entropy and memorability. Length makes passphrases resistant to brute-force attacks.

Password Hashing

Storing passwords as the output of a slow, salted one-way function rather than in plaintext or reversible form. It ensures that a database breach does not immediately expose usable passwords.

Password Manager

A tool that generates, stores, and autofills strong unique passwords in an encrypted vault protected by a master secret. It lets users avoid reuse without memorizing many credentials.

Password Policy

A set of rules governing password strength, length, expiration, and reuse to reduce guessable credentials. Modern guidance favors length and breach-checking over forced periodic rotation.

Password Spraying

An attack that tries a few common passwords across many accounts to avoid triggering lockouts that target repeated attempts on one account. Monitoring for distributed failed logins helps detect it.

Passwordless Authentication

An approach that verifies users without a shared secret password, relying instead on cryptographic keys, biometrics, or one-time links. It removes the risks of reused and phishable passwords.

Patch Management

The disciplined process of acquiring, testing, and deploying software updates to fix vulnerabilities and bugs across systems in a timely, tracked way.

PBKDF2

Password-Based Key Derivation Function 2

A password-based key derivation function that repeatedly applies a hash function with a salt over many iterations to slow down brute-force attacks. It is a widely deployed standard for storing and stretching passwords.

PCI DSS

Payment Card Industry Data Security Standard

The Payment Card Industry Data Security Standard, a set of requirements for organizations that store, process, or transmit cardholder data. It mandates controls such as encryption, access restriction, and monitoring.

Penetration Testing

pentest · pen test · ethical hacking

An authorized, simulated attack against a system to find and demonstrate exploitable weaknesses before real attackers do, followed by a report of findings and fixes.

Perfect Forward Secrecy

PFS · Forward Secrecy

A property of key-exchange protocols where compromise of a long-term private key does not expose past session traffic, because each session uses ephemeral keys. TLS achieves it with ephemeral Diffie-Hellman.

Phishing

A social-engineering attack in which fraudulent messages impersonate a trusted source to trick recipients into revealing credentials or installing malware. Awareness training and email filtering are common defenses.

PKCE

Proof Key for Code Exchange

Proof Key for Code Exchange, an OAuth extension that binds an authorization request to the client that made it using a one-time secret. It prevents intercepted authorization codes from being redeemed by attackers, especially on mobile and single-page apps.

PKI

Public Key Infrastructure

Public Key Infrastructure, the framework of certificate authorities, keys, certificates, and policies that manages the creation, distribution, and revocation of digital certificates.

Plaintext

cleartext

The original, readable data before encryption is applied. It is the input to an encryption algorithm and the output of decryption.

Policy Decision Point

PDP

The component that evaluates access requests against policies and returns an allow or deny decision to the enforcement point. Separating decision from enforcement is central to modern authorization architectures.

Policy Enforcement Point

PEP

The component in an access-control architecture that intercepts requests and enforces the decision returned by a policy decision point. It is where allow-or-deny is actually applied.

Polymorphic Malware

Malware that changes its code or appearance with each infection to evade signature-based detection while preserving its behavior. Detection relies on behavioral and heuristic analysis.

Port Scanning

Probing a host to discover which network ports are open and what services listen on them. Defenders monitor for scans as reconnaissance signals, while attackers use them to map targets.

Post-Incident Review

post-mortem · lessons learned

A structured retrospective after an incident to determine what happened, how it was handled, and what to improve. Conducted blamelessly, it turns incidents into lasting defensive gains.

Post-Quantum Cryptography

PQC · quantum-safe cryptography

Cryptographic algorithms designed to remain secure against attacks by large-scale quantum computers, which would break RSA and elliptic-curve schemes. Standards bodies are selecting lattice- and hash-based algorithms as replacements.

Pretexting

A social-engineering technique where an attacker invents a plausible scenario or false identity to persuade a victim to share information or grant access. It relies on building false trust rather than technical exploits.

Preventive Control

A safeguard designed to stop a security event before it happens, such as access controls, firewalls, and encryption. It contrasts with detective and corrective controls.

Private Key

The secret half of an asymmetric key pair, kept confidential by its owner and used to decrypt data or create digital signatures. Its compromise breaks the security of the key pair.

Privilege Bracketing

A secure-coding practice of elevating privileges only for the narrow window an operation requires and dropping them immediately afterward. It limits the impact of a bug during high-privilege execution.

Privilege Escalation

Gaining higher access rights than intended, either vertically to an admin role or horizontally to another user's data, usually by exploiting a misconfiguration or vulnerability.

Privileged Access Management

PAM

A discipline and set of tools for securing, controlling, and auditing accounts with elevated permissions, such as administrators. It includes vaulting credentials, just-in-time access, and session monitoring.

Proxy Server

forward proxy

An intermediary that forwards client requests to destination servers, providing caching, filtering, and anonymity. As a security control it can enforce policy and inspect traffic on behalf of clients.

Public Key

The freely shareable half of an asymmetric key pair, used to encrypt data for the key owner or to verify signatures they created with the private key.

Purple Team

A collaborative exercise where offensive (red) and defensive (blue) teams work together, sharing findings in real time to improve detection and response. It maximizes learning from adversary simulation.

RADIUS

Remote Authentication Dial-In User Service

The Remote Authentication Dial-In User Service protocol that centralizes authentication, authorization, and accounting for network access such as VPNs and Wi-Fi. It lets many network devices defer to a single identity source.

Rainbow Table

A precomputed lookup table that maps hash values back to their original plaintext passwords to speed up cracking. Adding a unique salt to each password defeats rainbow-table attacks.

Ransomware

Malware that encrypts a victim's files or systems and demands payment to restore access. Reliable, tested backups and network segmentation are key defenses.

RASP

Runtime Application Self-Protection

Runtime Application Self-Protection, security built into an application that monitors its own execution and blocks attacks in real time from inside the app. It has full context about how requests are processed.

RBAC

Role-Based Access Control

Role-Based Access Control, a model that grants permissions to roles rather than individuals, so users receive access by being assigned to roles matching their job function.

Red Team

red teaming

A group that emulates real adversaries to test an organization's defenses end to end, probing people, processes, and technology against realistic attack scenarios.

Reflected XSS

A cross-site scripting attack where injected script is immediately echoed back in the response to a crafted request, typically via a malicious link. It requires tricking a victim into triggering the request.

Refresh Token

A long-lived credential issued alongside a short-lived access token that lets a client obtain new access tokens without re-prompting the user. It must be stored securely because it grants renewed access.

Replay Attack

An attack that captures valid data such as an authentication message and retransmits it later to impersonate a party or repeat an action. Nonces, timestamps, and session binding defend against it.

Reproducible Build

A build process that always produces bit-for-bit identical output from the same source, allowing independent verification that a binary corresponds to its source code. It strengthens trust against tampered build systems.

Residual Risk

The risk that remains after security controls have been applied. Organizations decide whether to accept it or invest in further mitigation.

Responsible Disclosure

coordinated vulnerability disclosure

A process where a researcher privately reports a vulnerability to the affected vendor and allows time to fix it before public disclosure. It balances user protection with vendor remediation.

Return-Oriented Programming

ROP

An exploitation technique that chains together small existing code fragments ending in return instructions to bypass defenses that block injected code. It is used to defeat non-executable memory protections.

Risk Assessment

The process of identifying assets, threats, and vulnerabilities and estimating the likelihood and impact of potential security events. Its output guides where to invest in controls.

Risk Management

The ongoing discipline of identifying, evaluating, and treating security risks by accepting, mitigating, transferring, or avoiding them. It aligns security investment with business priorities.

Root Certificate

A self-signed certificate at the top of a trust chain, held by a certificate authority and pre-installed in operating systems and browsers. All certificates it signs inherit trust from it.

Rootkit

Malware designed to gain and hide privileged, persistent access to a system, often by tampering with the operating system to conceal its presence. Its stealth makes detection and removal difficult.

RSA

Rivest-Shamir-Adleman

A widely used asymmetric (public-key) cryptosystem based on the difficulty of factoring large products of prime numbers. It supports both encryption and digital signatures using a mathematically linked public and private key pair.

Salt

A random value added to a password before hashing so that identical passwords produce different hashes, defeating precomputed lookup tables and slowing bulk cracking.

SAML

Security Assertion Markup Language

Security Assertion Markup Language, an XML-based standard for exchanging authentication and authorization assertions between an identity provider and a service provider, widely used for enterprise SSO.

Sandbox

sandboxing

An isolated environment that runs untrusted code or files with restricted access to the host, so any malicious behavior is contained and observable without harming real systems.

SAST

Static Application Security Testing

Static Application Security Testing, which analyzes source code or binaries for vulnerabilities without running the program. It catches issues early but can produce false positives.

SBOM

Software Bill of Materials

Software Bill of Materials, a formal inventory of the components and dependencies in a piece of software, used to track vulnerabilities across the supply chain.

SCIM

System for Cross-domain Identity Management

The System for Cross-domain Identity Management, an open standard that automates exchanging user identity information between identity providers and applications. It streamlines provisioning and deprovisioning across services.

scrypt

A password-hashing and key-derivation function designed to be memory-hard, requiring large amounts of RAM to compute. This raises the cost of building specialized cracking hardware.

Secret Scanning

Automatically searching code, commits, and configuration for accidentally committed credentials such as API keys and passwords. It helps catch leaked secrets before or after they reach a repository.

Secure by Default

The principle that a product's out-of-the-box configuration should be its most secure state, requiring users to deliberately loosen rather than tighten settings. It protects users who never change defaults.

Secure by Design

An engineering approach that builds security into a product's architecture and defaults from the outset rather than adding it later. It treats security as a foundational requirement.

Secure Coding

Programming practices that prevent common vulnerabilities, such as validating input, encoding output, handling errors safely, and avoiding dangerous functions. It shifts security responsibility onto developers.

Secure SDLC

SSDLC · Secure Software Development Life Cycle

A software development life cycle that integrates security activities such as threat modeling, secure coding, and testing into every phase rather than bolting them on at the end. It reduces vulnerabilities before release.

Security Audit

A systematic review of an organization's systems, policies, and controls against a standard or baseline to assess compliance and identify gaps.

Security Awareness Training

Educating users to recognize and respond to security threats such as phishing and social engineering. Because people are a frequent attack target, it is a key layer of defense.

Security Control

countermeasure

A safeguard or countermeasure implemented to reduce risk by preventing, detecting, or correcting security issues. Controls are commonly classified as technical, administrative, or physical.

Security Headers

HTTP response headers such as CSP, HSTS, X-Frame-Options, and X-Content-Type-Options that instruct browsers to enforce protective behaviors. Setting them hardens web applications against common client-side attacks.

Security Misconfiguration

Weaknesses arising from insecure default settings, unnecessary features, verbose errors, or missing hardening. It is one of the most common causes of breaches and is addressed by secure baselines and configuration review.

Security Policy

A formal document that defines an organization's rules, responsibilities, and expectations for protecting information and systems. It provides the governing framework for security controls and behavior.

Security Posture

The overall strength of an organization's security, reflecting its controls, policies, and readiness to prevent, detect, and respond to threats. It is assessed to prioritize improvements.

Security Token Service

STS

A service that issues, validates, and exchanges security tokens used to authenticate and authorize access across systems. It is central to federated identity and single sign-on architectures.

Self-Signed Certificate

A certificate signed with its own private key rather than by a trusted certificate authority. It provides encryption but no third-party identity assurance, so browsers warn users about it.

Separation of Duties

segregation of duties · SoD

A control that divides critical tasks among multiple people so no single individual can complete a sensitive process alone. It reduces fraud and the impact of a single compromised account.

Server-Side Request Forgery

SSRF

A vulnerability where an attacker coerces a server into making requests to unintended destinations, often internal services or cloud metadata endpoints. Defenses include allowlisting outbound targets and blocking internal address ranges.

Server-Side Template Injection

SSTI

A vulnerability where user input is embedded into a server-side template engine and executed, often leading to remote code execution. It is prevented by never treating user input as template code.

Service Provider

SP · relying party

In federated identity, the application or resource that relies on an identity provider to authenticate users. Also called the relying party, it consumes tokens or assertions rather than managing credentials itself.

Session Fixation

An attack in which an adversary sets or predicts a victim's session identifier before login so they can hijack the authenticated session afterward. It is prevented by regenerating the session ID upon authentication.

Session Hijacking

The takeover of a valid user session by stealing or guessing its session identifier, letting an attacker impersonate the victim. Defenses include secure cookies, TLS, and short session lifetimes.

Session Key

A temporary symmetric key negotiated for a single communication session and discarded afterward. Using short-lived keys limits the damage if any one key is later exposed.

Session Token

session ID

A unique identifier issued after login that a server uses to recognize a user's ongoing session across requests. It must be random, secret, and transmitted securely to prevent hijacking.

SHA-256

Secure Hash Algorithm 256

A cryptographic hash function from the SHA-2 family that produces a fixed 256-bit digest from any input. It is used for integrity checks, digital signatures, certificates, and blockchain proof-of-work.

Shift Left Security

shift-left

The practice of moving security activities earlier in the development life cycle, closer to design and coding, rather than testing only before release. Finding issues earlier lowers the cost of fixing them.

Side-Channel Attack

An attack that extracts secrets by measuring physical or behavioral characteristics of a system, such as timing, power consumption, or electromagnetic emissions, rather than breaking the algorithm. Constant-time implementations help resist it.

SIEM

Security Information and Event Management

Security Information and Event Management, a platform that aggregates and correlates logs and events from across an environment to detect threats and support investigation.

Single Logout

SLO

A federation feature that terminates a user's sessions across all connected applications when they log out of one. It complements single sign-on to prevent lingering authenticated sessions.

SLSA

Supply-chain Levels for Software Artifacts

Supply-chain Levels for Software Artifacts, a framework of graduated requirements for build integrity and provenance. It helps organizations measure and improve resistance to supply-chain tampering.

Smishing

SMS phishing

Phishing conducted via SMS text messages that lure victims to malicious links or prompt them to disclose information. The brevity and urgency of texts make it effective.

SOAR

Security Orchestration, Automation, and Response

Security Orchestration, Automation, and Response, a category of tools that automate and coordinate security workflows and incident response using predefined playbooks. It reduces manual effort and speeds reaction time.

SOC

Security Operations Center

Security Operations Center, a team and facility that continuously monitors, detects, analyzes, and responds to cybersecurity incidents across an organization.

SOC 2

Service Organization Control 2

A widely used auditing framework that evaluates a service organization's controls against Trust Services Criteria such as security, availability, and confidentiality. A SOC 2 report gives customers assurance about a vendor's practices.

Social Engineering

Manipulating people into divulging information or taking unsafe actions by exploiting trust, urgency, or authority rather than attacking technology directly.

Software Composition Analysis

SCA

Scanning a project's third-party and open-source dependencies to identify known vulnerabilities and license risks. It is essential because most modern applications rely heavily on external components.

Software Supply Chain Security

Protecting the integrity of everything that goes into producing and delivering software, including dependencies, build tools, and pipelines. It guards against compromised components and tampered releases.

Spear Phishing

A targeted phishing attack tailored to a specific individual or organization using personalized details to appear credible. Its customization makes it more convincing than mass phishing.

Split Tunneling

A VPN configuration where only some traffic is routed through the encrypted tunnel while the rest goes directly to the internet. It improves performance but can bypass security inspection for the direct traffic.

Spyware

Malicious software that covertly gathers information about a user or system and sends it to a third party. It ranges from adware trackers to keyloggers and surveillance tools.

SSO

Single Sign-On

Single Sign-On, an authentication scheme letting a user access multiple applications with one set of credentials and a single login session, typically via a central identity provider.

Stateful Firewall

A firewall that tracks the state of active connections and makes decisions based on the context of a session, not just individual packets. It can automatically permit return traffic for allowed outbound connections.

Steganography

The practice of hiding the existence of a message by concealing it within another file such as an image or audio track. Unlike encryption, it aims to avoid detection rather than to scramble content.

Step-Up Authentication

Requiring an additional or stronger authentication factor when a user attempts a sensitive action, even if already logged in. It balances usability with protection for high-risk operations.

Stored XSS

persistent XSS

A cross-site scripting attack where the malicious payload is saved on the server, such as in a comment, and served to every visitor who views it. Its persistence makes it especially damaging.

Stream Cipher

A symmetric cipher that encrypts data one bit or byte at a time by combining it with a pseudorandom keystream. It is efficient for real-time data and unpredictable-length streams.

Supply-Chain Attack

software supply-chain attack

An attack that compromises a trusted third-party component, dependency, or vendor to reach its downstream users. Verifying signatures and pinning dependencies reduce the risk.

Symmetric Encryption

secret-key encryption

Encryption in which the same secret key both encrypts and decrypts the data. It is fast and suited to bulk data, but requires securely sharing the key between parties.

SYN Flood

A denial-of-service attack that sends many TCP connection requests without completing the handshake, exhausting the target's connection resources. SYN cookies are a standard mitigation.

Tabletop Exercise

A discussion-based drill where a team walks through a simulated incident scenario to test plans, roles, and decisions without touching live systems. It reveals gaps in preparedness before a real event.

Threat Actor

adversary

An individual or group responsible for a security incident or malicious activity, ranging from opportunistic criminals to nation-state groups. Understanding their motives and capabilities informs defense.

Threat Hunting

The proactive search through networks and systems for signs of undetected malicious activity, rather than waiting for alerts. It assumes adversaries may already be present and looks for subtle traces.

Threat Intelligence

cyber threat intelligence · CTI

Curated, analyzed information about adversaries, their tactics, and indicators that helps organizations anticipate and defend against attacks. It ranges from strategic trends to operational IOCs.

Threat Model

threat modeling

A structured analysis of a system that identifies its assets, potential attackers, attack surfaces, and likely threats, so defenses can be prioritized against realistic risks.

Threat Modeling

A structured process of identifying assets, potential threats, and mitigations early in design to reason about how a system could be attacked. Frameworks like STRIDE guide the analysis.

Time-of-Check to Time-of-Use

TOCTOU

A race-condition vulnerability where the state of a resource changes between when it is validated and when it is used, allowing an attacker to substitute a malicious resource. It commonly affects file operations.

Timing Attack

A side-channel attack that infers secret information by measuring how long operations take to complete. Comparing secrets in constant time is a standard defense.

TOTP

Time-based One-Time Password

A Time-based One-Time Password algorithm that generates short-lived numeric codes from a shared secret and the current time. Authenticator apps use it as a second factor.

Trojan

trojan horse

Malware disguised as legitimate software to trick users into running it, after which it performs hidden malicious actions such as opening a backdoor or stealing data.

Trust Boundary

A line in a system where data or requests move between components with different levels of trust, such as from user input to server code. Security controls like validation and authorization are concentrated at these boundaries.

Trusted Platform Module

TPM

A dedicated secure chip on a device that stores keys and measurements to support disk encryption, secure boot, and device attestation. It binds secrets to specific hardware.

Two-Factor Authentication

2FA

A subset of multi-factor authentication that requires exactly two distinct proofs of identity, such as a password plus a one-time code. It substantially reduces the impact of stolen passwords.

Typosquatting

URL hijacking

Registering domain names or package names that resemble legitimate ones, relying on typos or confusion to redirect users or deliver malicious code. It is a common vector in phishing and supply-chain attacks.

Use-After-Free

A memory-safety vulnerability where a program continues to use a pointer after the memory it referenced has been freed. Attackers can exploit it to corrupt memory and execute arbitrary code.

Vishing

voice phishing

Voice phishing, in which attackers use phone calls or voicemail to trick victims into revealing information or taking harmful actions. It often impersonates banks, support desks, or authorities.

VPN

Virtual Private Network

Virtual Private Network, a service that creates an encrypted tunnel over a public network, protecting traffic in transit and letting remote users securely reach private resources.

Vulnerability Disclosure Policy

VDP

A published statement inviting security researchers to report vulnerabilities and defining the rules and safe harbor for doing so. It channels good-faith reporting into a coordinated process.

Vulnerability Management

The continuous process of identifying, classifying, prioritizing, remediating, and verifying security weaknesses across systems. It combines scanning, risk scoring, and patching into an ongoing program.

Vulnerability Scanning

vulnerability scan

The automated inspection of systems, networks, or applications against a database of known weaknesses to produce a prioritized list of issues to remediate.

WAF

Web Application Firewall

Web Application Firewall, a filter that inspects HTTP traffic to and from a web application and blocks malicious requests such as injection or scripting attempts.

Watering Hole Attack

An attack that compromises a website known to be frequented by a target group, infecting visitors when they browse it. It reaches victims indirectly through sites they already trust.

WebAuthn

Web Authentication

A W3C web standard API that lets browsers and websites authenticate users with public-key credentials from security keys, platform authenticators, or passkeys. It is a core component of FIDO2.

Whaling

CEO fraud

A spear-phishing attack aimed at high-value targets such as executives, often to authorize fraudulent payments or reveal sensitive data. It leverages the authority of senior roles.

Worm

Self-replicating malware that spreads across networks on its own, without needing to attach to a host file or user action. Its automatic propagation can cause rapid, widespread infection.

X.509

The standard format defining the structure of public-key certificates used in TLS and other PKI systems. It specifies fields such as subject, issuer, validity period, and public key.

XML External Entity

XXE

A vulnerability in XML parsers that process external entity references, letting attackers read local files, reach internal systems, or trigger denial of service. It is mitigated by disabling external entity resolution.

Zero-Day

0-day · zero-day vulnerability

A vulnerability unknown to the vendor and unpatched at the time it is exploited, giving defenders zero days to prepare a fix before attacks occur.

Zero-Knowledge Proof

ZKP

A cryptographic method by which one party proves to another that a statement is true without revealing any information beyond the truth of the statement itself. It enables authentication and verification while preserving privacy.

Systems & Networking

263

802.11

Wi-Fi

The family of IEEE standards that defines wireless local area networking, commonly known as Wi-Fi. Successive amendments such as 802.11n, ac, and ax raise speed, capacity, and efficiency.

Address Space

The range of memory addresses a process can reference, mapped by the operating system to physical memory and backing storage. Each process typically has its own isolated virtual address space.

Arithmetic Logic Unit

ALU

The digital circuit within a CPU that performs arithmetic and bitwise logical operations on integer operands. It is a core component of the processor's execution stage.

ARM

A family of RISC processor architectures known for high power efficiency, widely used in smartphones, embedded devices, and increasingly in laptops and servers. Chip vendors license the designs and build their own implementations.

ARP

Address Resolution Protocol

A protocol that maps a known IP address to its corresponding MAC address on a local network so frames can be delivered. Hosts cache these mappings in an ARP table.

Assembly Language

assembler

A low-level programming language that uses human-readable mnemonics corresponding closely to a processor's machine instructions. An assembler translates it into machine code.

Authoritative DNS

A DNS server that holds the definitive records for a domain and answers queries about it from its own configured zone data rather than from cache. Its responses are the source of truth for that domain.

Autonomous System

AS

A collection of IP networks and routers under a single administrative domain that presents a common routing policy to the internet, identified by a unique AS number. The Border Gateway Protocol routes between autonomous systems.

Bandwidth

The maximum rate at which data can be transferred over a network link, typically measured in bits per second. It sets the ceiling on throughput but does not by itself determine actual speed.

Bash

Bourne Again Shell

A widely used Unix shell and command language that serves as the default interactive shell on many Linux distributions. It supports scripting features such as variables, control flow, functions, and command substitution.

BGP

Border Gateway Protocol

The routing protocol that exchanges reachability information between autonomous systems and makes the internet's inter-domain routing decisions. It selects paths based on policies and attributes rather than purely on shortest distance.

BIOS

Basic Input/Output System

The low-level firmware that initializes hardware and starts the boot process when a computer powers on, handing off to the operating-system loader. UEFI is its modern replacement.

Bootloader

boot loader

A small program that runs after firmware initialization to locate, load, and transfer control to the operating system kernel. On PCs, GRUB is a widely used example.

Branch Prediction

A CPU technique that guesses the outcome of a conditional branch before it is resolved so the pipeline can keep fetching instructions speculatively. A correct guess avoids stalls, while a misprediction forces the pipeline to be flushed.

Broadcast Address

A special address that delivers a packet to every host on a given subnet at once. In IPv4 it is the address with all host bits set to one.

Broadcast Domain

The set of network devices that will all receive a broadcast frame sent by any one of them. Routers bound broadcast domains, while switches by default extend them.

Byzantine Fault Tolerance

BFT

The ability of a distributed system to reach correct agreement even when some nodes fail arbitrarily or behave maliciously, including sending conflicting information. It requires more nodes and more complex protocols than tolerating simple crash failures.

Cache Coherence

The property that ensures multiple CPU caches holding copies of the same memory location present a consistent view when one is modified. Protocols such as MESI enforce it in multiprocessor systems.

Cache Hierarchy

The layered arrangement of progressively larger but slower caches (typically L1, L2, and L3) between the CPU registers and main memory. Each level buffers the level below it to reduce average access time.

Cache Line

cache block

The fixed-size block of contiguous memory that a CPU cache transfers and stores as a single unit, commonly 64 bytes. Access patterns that fit within cache lines exploit spatial locality for speed.

cgroups

control groups

A Linux kernel feature that limits, accounts for, and isolates the resource usage, such as CPU, memory, and I/O, of groups of processes. It is a foundational building block for containers.

chmod

A Unix command that changes the permission bits of files and directories, controlling read, write, and execute access for the owner, group, and others. Permissions can be set symbolically or as an octal number.

chown

A Unix command that changes the user owner and optionally the group of a file or directory. Only privileged users can transfer ownership to another user.

CIDR

Classless Inter-Domain Routing

A method of allocating IP addresses and routing using a prefix length suffix such as /24 instead of fixed class boundaries, enabling flexible subnet sizes and route aggregation. The suffix counts the network bits.

Circuit Switching

A communication method that establishes a dedicated end-to-end path reserved for the entire duration of a session, as in the traditional telephone network. It guarantees capacity but wastes it when the link is idle.

CISC

Complex Instruction Set Computer

A processor design philosophy featuring a large set of complex, variable-length instructions, some of which perform multi-step operations in a single instruction. The x86 architecture is the classic example.

CLI

Command-Line Interface

A text-based interface where users type commands to operate software or the operating system, contrasted with a graphical interface. It is favored for automation, scripting, and precise control.

Clock Speed

clock rate · clock frequency

The rate at which a CPU executes its basic timing cycles, measured in hertz, commonly gigahertz. It sets an upper bound on instruction throughput but does not alone determine real-world performance.

Collision Domain

A network segment where two devices transmitting at the same time can cause their signals to collide. Switches place each port in its own collision domain, unlike hubs which share one.

Compare-and-Swap

CAS

An atomic instruction that updates a memory location to a new value only if it currently holds an expected value, reporting whether it succeeded. It is a fundamental building block for lock-free algorithms.

Completely Fair Scheduler

CFS

The default process scheduler in the Linux kernel that aims to give each runnable task a fair proportion of CPU time, tracked with a per-task virtual runtime. It picks the task with the lowest accumulated runtime to run next.

Congestion Control

TCP congestion control

The mechanisms by which TCP and similar protocols adjust their sending rate to avoid overwhelming the network, using signals like packet loss or delay. Algorithms such as slow start and congestion avoidance manage the sender's window.

Convoy Effect

A performance problem in which many short processes wait behind a single long-running one holding a shared resource or the CPU, degrading overall throughput. It is characteristic of first-come-first-served scheduling.

Cooperative Multitasking

non-preemptive multitasking

A scheduling model in which running tasks voluntarily yield control of the CPU rather than being preempted by the operating system. A misbehaving task that never yields can freeze the entire system.

Copy-on-Write

COW

An optimization in which multiple processes or data structures share the same physical pages until one attempts to modify them, at which point a private copy is made. It makes operations like fork cheap by deferring duplication until a write actually occurs.

Core

CPU core

An independent processing unit within a CPU capable of executing its own stream of instructions, so that a multi-core processor can run several tasks truly in parallel. Modern chips commonly integrate many cores on a single die.

CPU

processor · Central Processing Unit

The central processing unit that executes instructions and performs the arithmetic, logic, and control operations of a computer. Modern CPUs have multiple cores that run instructions in parallel.

CPU-Bound

compute-bound

Describes a task whose completion time is limited chiefly by processor speed rather than by input/output or memory. Such tasks spend most of their time computing rather than waiting.

Cron

cron job · scheduled job

A time-based job scheduler on Unix-like systems that runs commands automatically at specified intervals defined by a crontab. Each entry uses five fields for minute, hour, day, month, and weekday.

Daemon

service

A background process that runs continuously without direct user interaction, typically providing a service such as logging, scheduling, or handling network requests. On Windows the equivalent is a service.

Datacenter Rack

server rack · 19-inch rack

A standardized frame, measured in units of height called U, that mounts and organizes servers, switches, and other equipment in a data center. It standardizes physical dimensions, power, and cooling for stacked hardware.

Datagram

A self-contained, independently routed unit of data sent over a packet-switched network without a prior connection or guaranteed delivery. UDP transmits application data as datagrams.

Default Gateway

The router a host sends packets to when the destination lies outside its own subnet. It serves as the exit point from the local network toward the rest of the internet.

Demand Paging

A virtual memory technique that loads a page into physical memory only when it is first accessed, rather than loading an entire program up front. It reduces startup time and memory use at the cost of occasional page faults.

Device File

device node

A special file, typically under /dev on Unix systems, that provides a program interface to a hardware or virtual device via ordinary read and write operations. Character devices transfer data byte by byte while block devices transfer fixed-size blocks.

DHCP

Dynamic Host Configuration Protocol

A protocol that automatically assigns IP addresses, subnet masks, gateways, and DNS servers to devices joining a network, removing the need for manual configuration. Leases are time-limited and renewable.

Dining Philosophers Problem

A classic concurrency thought experiment illustrating deadlock and starvation, in which philosophers seated around a table need two shared forks to eat. It demonstrates the challenge of allocating limited resources without deadlock.

Direct Memory Access

DMA

A hardware feature that lets peripherals transfer data to and from main memory without routing every byte through the CPU. It frees the processor to do other work during large data transfers.

Distributed Hash Table

DHT

A decentralized system that provides a hash-table lookup service where key-value pairs are spread across many nodes, each responsible for a portion of the key space. Peer-to-peer networks use it to locate data without a central index.

DNS Resolver

resolver

The client-side component or service that accepts a name query and works to obtain its answer, either from cache or by consulting authoritative servers. A recursive resolver does the full lookup on the client's behalf.

DNS Zone

A contiguous portion of the domain name namespace that is administered by a single authority and stored in a zone file. Delegation lets a zone hand off responsibility for subdomains to other zones.

Dynamic Routing

Routing in which routers exchange information using protocols to build and update their routing tables automatically as network conditions change. It adapts to failures and topology changes without manual reconfiguration.

Emulation

The technique of imitating the behavior of one system, such as a different CPU architecture or hardware device, entirely in software so that software built for it can run. It is more flexible but generally slower than native execution or hardware-assisted virtualization.

Endianness

byte order

The convention for the order in which the bytes of a multi-byte value are stored in memory or transmitted. Big-endian stores the most significant byte first, while little-endian stores the least significant byte first.

Ephemeral Port

dynamic port

A short-lived, dynamically assigned port number a client uses as the source of an outgoing connection, drawn from a high-numbered range. It is released when the connection closes.

epoll

A Linux system call interface for scalable I/O event notification that lets a program monitor many file descriptors and be told which are ready, without scanning all of them each time. It scales better than the older select and poll interfaces for large numbers of connections.

Ethernet

The dominant family of wired local-area network technologies defining cabling, framing, and media access at the physical and data link layers. Speeds range from megabit to hundreds of gigabits per second.

Exec

exec() · execve

A family of Unix system calls that replaces the current process image with a new program, loading the new executable into the existing process so it keeps the same process ID. It is commonly paired with fork so a shell can spawn a child and have it run a different command.

File Descriptor

fd

A small non-negative integer a Unix-like kernel returns when a process opens a file, socket, or pipe, used as a handle for subsequent read and write calls. By convention 0, 1, and 2 are standard input, output, and error.

File System

filesystem

The method an operating system uses to organize, name, store, and retrieve data on storage devices, tracking files, directories, and metadata. Common designs include journaling and copy-on-write.

Filesystem Hierarchy Standard

FHS

A convention that defines the directory structure and contents of Unix-like systems, specifying the purpose of directories such as /bin, /etc, /var, and /usr. It gives distributions a consistent layout.

Firmware

Low-level software stored in non-volatile memory on a hardware device that controls its basic operation, such as a motherboard's BIOS/UEFI or a drive's controller code. It sits between the hardware and higher-level software.

Flow Control

A mechanism that prevents a fast sender from overwhelming a slow receiver by regulating the rate of data transfer, typically through a window the receiver advertises. It operates end-to-end, distinct from network-wide congestion control.

Fragmentation

The condition in which free memory or storage is broken into many small, non-contiguous pieces, so a large allocation may fail even though enough total space exists. External fragmentation scatters free space between allocations, while internal fragmentation wastes space within fixed-size units.

fsck

file system check

A Unix utility that checks a file system for structural inconsistencies and repairs them, typically run after an unclean shutdown. Journaling file systems reduce how often a full check is required.

FTP

File Transfer Protocol

An older protocol for transferring files between a client and server over a network, using separate control and data channels. It transmits credentials and data unencrypted, so secure alternatives are preferred.

Full-Duplex

A communication mode in which data can flow in both directions simultaneously over a link. It contrasts with half-duplex, where transmission can occur in only one direction at a time.

Gateway

default gateway

A node, typically a router, that serves as the entry and exit point between one network and another, forwarding traffic destined for outside the local subnet. The default gateway is where hosts send off-network packets.

Green Thread

user-level thread

A thread scheduled by a language runtime or library in user space rather than by the operating system kernel. Green threads are lightweight and cheap to create but cannot transparently use multiple CPU cores unless mapped onto kernel threads.

Guest Operating System

guest OS

The operating system that runs inside a virtual machine, unaware that its hardware is virtualized. Multiple guests can run simultaneously on one physical host under a hypervisor.

Half-Duplex

A communication mode in which data can flow in both directions over a link but only one direction at a time. Devices must take turns transmitting, as with a walkie-talkie.

Harvard Architecture

A computer design that uses physically separate memories and buses for instructions and data, allowing them to be fetched simultaneously. Many CPUs use a modified form with split instruction and data caches.

HDD

Hard Disk Drive · hard disk

A hard disk drive that stores data magnetically on spinning platters read by moving heads, offering large capacity at low cost but slower access than flash. It is now often used for bulk or archival storage.

Heartbeat

A periodic signal that a component sends to indicate it is still alive, allowing others to detect its failure when the signal stops arriving. It is a basic mechanism for failure detection in clusters and distributed systems.

I/O-Bound

Describes a task whose progress is limited mainly by the speed of input/output operations, such as disk or network access, rather than by the CPU. Such tasks spend much of their time waiting rather than computing.

ICMP

Internet Control Message Protocol

A control and error-reporting protocol used by network devices to send diagnostic messages such as destination-unreachable or time-exceeded. Tools like ping and traceroute rely on it.

IMAP

Internet Message Access Protocol

A protocol for retrieving and managing email that keeps messages on the server, letting a user access the same mailbox from multiple devices with folders and state synchronized. It contrasts with POP3, which typically downloads and removes mail.

Init System

init

The first user-space process the kernel starts (traditionally PID 1), responsible for bringing up the rest of the system's services and reaping orphaned processes. systemd and SysV init are common implementations.

Inode

A file system data structure that stores a file's metadata, such as size, ownership, permissions, timestamps, and the locations of its data blocks, but not its name. Directory entries map names to inode numbers.

Instruction Cycle

fetch-decode-execute cycle

The basic sequence a CPU repeats to run a program: fetch the next instruction, decode it, execute it, and store the result. It is also called the fetch-decode-execute cycle.

Instruction Pipeline

pipelining

A CPU technique that overlaps the execution of multiple instructions by dividing processing into sequential stages, such as fetch, decode, execute, and write-back. Like an assembly line, it increases throughput even though each instruction still takes several stages.

Instruction Set Architecture

ISA

The abstract interface between hardware and software that defines a processor's instructions, registers, data types, and memory model. Programs compiled for one ISA run on any processor that implements it.

Inter-Process Communication

IPC

The set of mechanisms that let separate processes exchange data and coordinate, including pipes, message queues, shared memory, and sockets. It is necessary because processes have isolated address spaces by default.

Interrupt

A signal to the processor from hardware or software that pauses current execution to run a handler for an urgent event, such as I/O completion. It lets the CPU respond to events without constant polling.

IP Address

Internet Protocol Address

A numeric label assigned to each device on a network that identifies it and enables routing of packets to and from it. It operates at the network layer and comes in IPv4 and IPv6 forms.

IPv4

The fourth version of the Internet Protocol, using 32-bit addresses written as four dotted decimal numbers, giving roughly 4.3 billion possible addresses. Its exhaustion drove adoption of IPv6 and NAT.

IPv6

The successor to IPv4 using 128-bit addresses written in hexadecimal groups, providing a vastly larger address space and built-in features like simplified headers and stateless address autoconfiguration.

iSCSI

Internet SCSI

A protocol that carries SCSI storage commands over TCP/IP networks, letting servers access remote block storage as if it were locally attached. It enables IP-based storage area networks without dedicated Fibre Channel hardware.

Job Control

A shell feature that lets a user run multiple commands as jobs and move them between the foreground and background, suspend them, and resume them. Commands like bg, fg, and jobs manage these states.

Journaling File System

A file system that records pending changes in a dedicated log, or journal, before applying them, so that after a crash it can quickly recover to a consistent state. It avoids the lengthy full-disk checks required by non-journaling designs.

Kernel

The core of an operating system that manages hardware, memory, processes, and system calls, mediating between applications and the machine. It runs in a privileged mode isolated from user programs.

Kernel Space

The protected memory region and privileged execution mode reserved for the operating system kernel, giving it direct access to hardware and all system resources. Faults here can crash the whole system, unlike faults confined to user space.

Kernel Thread

A thread that the operating system kernel knows about and schedules directly, so it can be assigned to any CPU core. Blocking one kernel thread does not block the others in the same process.

Kill

A Unix command and system call that sends a signal to a process identified by its process ID, most often to request termination. Despite the name, it can deliver any signal, not only ones that end a process.

Lamport Timestamp

Lamport clock

A simple logical clock scheme that assigns increasing numbers to events so that if one event causally precedes another, its timestamp is smaller. It establishes a consistent partial ordering of events without synchronized physical clocks.

Least Recently Used

LRU

A cache and page-replacement policy that evicts the item that has gone unused for the longest time, on the assumption that recently used items are likely to be used again soon. It approximates optimal replacement while being practical to implement.

Live Migration

The process of moving a running virtual machine from one physical host to another with little or no perceptible downtime, by copying its memory state while it continues executing. It supports load balancing and maintenance without stopping services.

Loadable Kernel Module

LKM · kernel module

A piece of code, such as a device driver or file system, that can be inserted into and removed from a running kernel without rebooting. It lets a monolithic kernel be extended dynamically.

Localhost

loopback

The hostname that refers to the current machine, resolving to the loopback address so traffic never leaves the device. It is used to test network services on the same computer.

Lock Contention

A performance problem that arises when multiple threads frequently compete for the same lock, forcing them to wait and serialize their execution. Reducing it often requires finer-grained locking or lock-free techniques.

Logical Clock

A mechanism for ordering events in a distributed system based on causal relationships rather than physical time, since perfectly synchronized real clocks are impractical. Lamport timestamps and vector clocks are common implementations.

Logical Volume Manager

LVM

A layer that abstracts physical disks into flexible pools from which resizable logical volumes are carved, decoupling volume size from underlying hardware. It supports online resizing, snapshots, and spanning multiple disks.

Loopback Interface

A virtual network interface a host uses to send traffic to itself, associated with the address 127.0.0.1 in IPv4 or ::1 in IPv6. It lets network software be tested without any physical network.

MAC Address

Media Access Control address · hardware address

A hardware identifier assigned to a network interface, usually 48 bits shown as six hexadecimal pairs, used to deliver frames within a local network segment. It operates at the data link layer.

Maximum Segment Size

MSS

The largest amount of payload data, in bytes, that a TCP segment can carry, negotiated during connection setup and derived from the link's MTU. Choosing it well avoids fragmentation.

Memory Barrier

memory fence · fence

An instruction that constrains the CPU and compiler from reordering memory operations across it, ensuring a specific ordering of reads and writes between threads. It is essential for correctness on architectures with weak memory ordering.

Memory Management

The operating-system function that allocates, tracks, and reclaims a system's RAM among processes, enforcing isolation and handling allocation and freeing. It includes paging, protection, and virtual memory.

Memory Management Unit

MMU

The hardware component that translates virtual addresses to physical addresses, enforces memory protection, and cooperates with the operating system on paging. It relies on page tables and a translation lookaside buffer.

Memory Model

The formal rules of a language or hardware platform that define how memory operations by one thread become visible to others, including permissible reorderings. Programmers rely on it to reason about correctness in concurrent code.

Memory-Mapped File

mmap

A file whose contents are mapped directly into a process's virtual address space so it can be read and written as if it were memory, with the kernel paging data to and from disk. It avoids explicit read and write calls and can be shared between processes.

Microkernel

An operating system design that keeps the kernel minimal, running only essential services like scheduling and IPC in privileged mode while pushing drivers and file systems into user space. It improves modularity and fault isolation at some cost to performance.

Monitor

A concurrency construct that bundles shared data with the procedures that operate on it and guarantees that only one thread executes inside at a time, often paired with condition variables for waiting. Many languages provide it through synchronized methods or blocks.

Monolithic Kernel

An operating system design in which the entire kernel, including device drivers, file systems, and networking, runs in a single privileged address space. It typically offers high performance but larger fault surface than a microkernel.

Mount Point

mount

A directory in the existing file system tree at which the contents of a storage device or another file system are attached and made accessible. The mount operation grafts the device's root onto that directory.

MQTT

Message Queuing Telemetry Transport

A lightweight publish-subscribe messaging protocol designed for constrained devices and low-bandwidth networks, common in IoT. Clients exchange messages through a broker organized by topics.

MTU

Maximum Transmission Unit

The maximum transmission unit, the largest packet size a network link can carry without fragmentation, commonly 1500 bytes on Ethernet. Mismatched MTU values can cause performance problems or dropped packets.

Multicast

A network delivery method that sends a single packet stream to a selected group of interested receivers simultaneously, rather than to all hosts or just one. It is efficient for applications like streaming media to many subscribers.

Multicore Processor

multi-core CPU

A single physical chip that contains two or more independent processing cores, each able to execute instructions concurrently. It provides parallelism without the cost and complexity of multiple separate CPUs.

Multilevel Feedback Queue

MLFQ

A scheduling scheme with several priority queues where a process can move between queues based on its observed CPU behavior. Interactive, I/O-bound tasks stay in high-priority queues while CPU-bound tasks drift downward.

Named Pipe

FIFO

A pipe that appears as a special file in the file system, allowing unrelated processes to communicate by opening it by name. It provides a first-in-first-out byte stream between a writer and a reader.

Namespaces

Linux namespaces

A Linux kernel feature that gives a set of processes their own isolated view of system resources such as process IDs, network interfaces, mounts, and hostnames. Together with cgroups, namespaces are the core mechanism behind containers.

NAT

Network Address Translation

A technique where a router rewrites the source or destination IP addresses of packets, commonly mapping many private addresses to one public address. It conserves public IPs and adds a layer of isolation.

NDP

Neighbor Discovery Protocol

The IPv6 protocol that hosts and routers use to discover each other's link-layer addresses, find routers, and perform address autoconfiguration on a local link. It replaces the roles that ARP and parts of ICMP play in IPv4.

Network Attached Storage

NAS

A dedicated file-serving appliance connected to a network that provides shared file-level storage to clients over protocols such as NFS or SMB. It differs from a SAN, which provides block-level access.

Network Interface Card

NIC · network adapter

The hardware component that connects a computer to a network, providing a physical port and a unique MAC address. It handles the electrical or optical signaling and framing at the link layer.

NFS

Network File System

A protocol that lets a client access files on a remote server over a network as if they were local, using remote procedure calls. It is a long-standing standard for file sharing among Unix-like systems.

Nice Value

A Unix priority hint, ranging from -20 to 19, that biases the scheduler toward or away from a process. A higher nice value makes a process lower priority, meaning it is nicer to others.

NTP

Network Time Protocol

A protocol that synchronizes the clocks of computers over a network to within milliseconds of a reference time source, compensating for variable transmission delay. Accurate clocks matter for logging, security, and distributed systems.

NUMA

Non-Uniform Memory Access

A multiprocessor memory design in which each processor has faster access to its local memory than to memory attached to other processors. Software that ignores this locality can suffer significant performance penalties.

NVMe

Non-Volatile Memory Express

A high-performance interface and protocol for accessing solid-state storage over the PCI Express bus, designed to exploit the parallelism of flash memory. It offers far lower latency and higher throughput than the older SATA/AHCI interface.

Opcode

operation code

The portion of a machine instruction that specifies the operation to be performed, such as add or load, distinct from the operands it acts on. The CPU's decoder interprets it to control execution.

Orphan Process

A process whose parent has terminated before it did. On Unix systems it is adopted by the init process (PID 1), which then becomes responsible for reaping it when it exits.

OSI Model

Open Systems Interconnection model

A seven-layer conceptual framework (physical, data link, network, transport, session, presentation, application) describing how network functions stack from wires to applications. It is a teaching model, not a strict implementation.

OSPF

Open Shortest Path First

A link-state interior gateway protocol that routers within an autonomous system use to build a map of the network and compute shortest paths using Dijkstra's algorithm. It converges quickly and scales through hierarchical areas.

Out-of-Order Execution

OoO execution

A CPU technique that executes instructions as their operands become available rather than strictly in program order, then retires results in order. It keeps execution units busy and hides the latency of slow operations.

Overcommitment

overcommit

The practice of allocating more virtual resources, such as memory or CPU, to virtual machines than the physical host actually has, on the assumption that they will not all be fully used at once. It raises utilization but risks contention if demand spikes.

Packet

datagram

A formatted unit of data carried across a packet-switched network, containing a header with addressing and control information plus a payload. Large messages are split into many packets that are reassembled at the destination.

Packet Loss

The failure of one or more transmitted packets to reach their destination, caused by congestion, faulty hardware, or signal problems. TCP recovers by retransmitting, while UDP applications must handle it themselves.

Packet Switching

A networking method that breaks data into individually addressed packets routed independently across shared links and reassembled at the destination. It uses network capacity efficiently and underlies the internet, unlike dedicated circuit switching.

Page Cache

buffer cache

An in-memory cache the kernel maintains of recently accessed file data, so repeated reads and writes can be served from RAM instead of slow storage. Dirty pages in it are written back to disk lazily or on sync.

Page Fault

An exception raised when a program accesses a virtual page that is not currently present in physical memory. The kernel handles it by loading the page from disk (a major fault) or fixing up mappings (a minor fault), then resuming the instruction.

Page Replacement Algorithm

The policy a virtual memory system uses to choose which page to evict from physical memory when a new page must be loaded and no free frame exists. Common choices include least recently used, first-in-first-out, and clock.

Page Table

A per-process data structure the memory management unit uses to translate virtual page numbers into physical frame numbers. Multi-level and hashed page tables reduce the memory needed to store these mappings.

Paging

swapping

The memory-management scheme that divides virtual and physical memory into fixed-size pages and maps between them, swapping pages to disk when RAM is scarce. Excessive swapping is called thrashing.

Paravirtualization

A virtualization technique in which the guest operating system is modified to be aware it is virtualized and cooperates with the hypervisor through efficient interfaces. It can outperform full virtualization by avoiding costly emulation of privileged operations.

Partition

A logical division of a physical storage device into independent regions, each of which can hold its own file system or serve as swap. A partition table such as MBR or GPT records their boundaries.

Permissions

file permissions

The access-control settings that determine which users or processes may read, write, or execute a file or resource. Unix-like systems express these as owner, group, and other with read, write, and execute bits.

Ping

A utility that tests reachability of a host by sending ICMP echo request packets and measuring the round-trip time of the replies. It is a first-line tool for diagnosing connectivity and latency.

Pipe

A unidirectional Unix IPC channel that connects the output of one process to the input of another, forming a first-in-first-out byte stream. Anonymous pipes exist only between related processes, while named pipes persist in the file system.

Pipeline Hazard

pipeline stall

A situation in a pipelined CPU that prevents the next instruction from executing in its scheduled cycle, classified as data, control, or structural. Hazards are resolved by stalling, forwarding, or reordering.

POP3

Post Office Protocol

A simple protocol for retrieving email in which a client typically downloads messages from the server and then deletes them from it. It suits single-device access but lacks the multi-device synchronization of IMAP.

Port

A numeric identifier (0–65535) that lets a single host distinguish multiple network services or connections, paired with an IP address to form an endpoint. Well-known ports include 80 for HTTP and 443 for HTTPS.

Port Forwarding

A technique that redirects network traffic arriving on a particular port and address to a different internal host or port, commonly configured on routers with NAT. It exposes an internal service to external clients.

POSIX

Portable Operating System Interface

A family of IEEE standards that defines a common application programming interface, shell, and utilities for Unix-like operating systems, promoting software portability across them. Compliance lets programs run on different POSIX systems with little change.

Preemption

The act of interrupting a currently running task so the scheduler can assign the CPU to another task. It is the mechanism that makes preemptive multitasking possible.

Preemptive Multitasking

A scheduling approach in which the operating system can forcibly interrupt a running task to give the CPU to another, typically using a timer interrupt. It prevents any single task from monopolizing the processor.

Primary-Replica

master-slave · leader-follower

A replication topology in which one node accepts all writes and propagates changes to one or more read-only replicas. It simplifies consistency but makes the primary a single point of write availability.

Priority Inversion

A scheduling anomaly in which a high-priority task is blocked waiting on a resource held by a low-priority task, while a medium-priority task keeps the low-priority one from running. Priority inheritance protocols are a common remedy.

Priority Scheduling

A scheduling policy that runs the highest-priority ready process first, using either static or dynamically adjusted priorities. Without aging, low-priority processes can suffer starvation.

Process Control Block

PCB · task control block

A data structure the kernel maintains for each process, storing its state, program counter, CPU registers, memory mappings, open files, and scheduling information. The kernel saves and restores this block during a context switch.

Process ID

PID

A unique numeric identifier the operating system assigns to each running process, used to reference it in system calls such as signalling or termination. IDs are typically recycled after a process ends.

procfs

/proc · proc filesystem

A virtual file system, mounted at /proc on Linux, that presents kernel and process information as files, letting programs read runtime state through ordinary file operations. Each running process appears as a numbered directory.

Program Counter

PC · instruction pointer

A CPU register that holds the memory address of the next instruction to be fetched and executed. It advances automatically and is altered by jumps, branches, and calls.

Promiscuous Mode

A network interface setting in which the adapter passes all frames it receives to the operating system, not just those addressed to it. Packet sniffers and network analyzers rely on it to capture other hosts' traffic on a shared segment.

Protection Ring

privilege ring · CPU ring

A hierarchy of hardware-enforced privilege levels that isolates code by how much access it is granted, with the innermost ring (ring 0) reserved for the kernel and outer rings for user programs. Transitions between rings are controlled and mediated by the CPU.

Quality of Service

QoS

A set of techniques for prioritizing and managing network traffic so that important flows receive adequate bandwidth, low latency, or low loss. It is essential for real-time applications like voice and video.

RAID

Redundant Array of Independent Disks

A technique that combines multiple physical disks into one logical unit to improve performance, redundancy, or both. Different levels trade off striping, mirroring, and parity in various ways.

RAID 0

striping

A RAID level that stripes data across two or more disks to improve throughput, with no redundancy. Capacity and speed scale with disk count, but the failure of any single disk destroys the entire array.

RAID 1

mirroring

A RAID level that mirrors identical data onto two or more disks so the array survives the loss of any single disk. It provides redundancy and fast reads at the cost of halving usable capacity.

RAID 10

RAID 1+0

A nested RAID configuration that mirrors data and then stripes across the mirrors, combining the redundancy of RAID 1 with the performance of RAID 0. It tolerates multiple disk failures as long as no mirrored pair is lost entirely.

RAID 5

A RAID level that stripes data with distributed parity across three or more disks, allowing the array to survive a single disk failure. It balances usable capacity, performance, and redundancy but suffers slow writes due to parity computation.

RAM

Random Access Memory · main memory

Random-access memory, the fast volatile working memory a computer uses to hold running programs and their data. Its contents are lost when power is removed.

Readers-Writers Problem

A classic synchronization problem concerning coordinated access to a shared resource when many threads read and some write, aiming to allow concurrent reads while giving writers exclusive access. Different formulations prioritize readers or writers to avoid starvation.

Real-Time Operating System

RTOS

An operating system designed to guarantee that tasks meet strict timing deadlines, prioritizing predictability over raw throughput. Hard real-time systems treat a missed deadline as a failure, while soft real-time systems tolerate occasional misses.

Recursive DNS

A DNS server behavior in which the server, on receiving a query it cannot answer directly, performs the full chain of lookups from the root down and returns the final answer to the client. It offloads the lookup work from the client and caches results.

Redirection

A shell feature that reroutes a command's standard input, output, or error to or from files rather than the terminal, using operators like greater-than and less-than. It lets programs read from and write to files without built-in file handling.

Reentrant

Describes code that can be safely entered again before a previous execution completes, such as when interrupted and re-invoked, because it does not rely on shared mutable static state. Reentrant functions are important for signal handlers and recursion.

Register

A small, extremely fast storage location inside a CPU that holds data, addresses, or instructions currently being processed. Registers are the fastest memory in the hierarchy and are directly manipulated by machine instructions.

RISC

Reduced Instruction Set Computer

A processor design philosophy favoring a small set of simple, fixed-length instructions that each execute quickly and pipeline efficiently. ARM and RISC-V are prominent examples.

Root

superuser

The all-powerful administrative user account on Unix-like systems, having user ID 0 and unrestricted access to every file and operation. Running as root routinely is discouraged because mistakes and compromises are unbounded.

Root Name Server

One of the servers at the top of the DNS hierarchy that answers queries for the root zone by directing resolvers to the appropriate top-level domain servers. There are 13 logical root server identities, each replicated widely via anycast.

Round-Robin Scheduling

A preemptive scheduling algorithm that gives each ready process an equal, fixed time slice in cyclic order. It is simple and starvation-free but does not account for task priority.

Round-Trip Time

RTT

The time it takes for a signal to travel from a source to a destination and for a response to return. It is a key measure of network latency and influences protocol performance such as TCP throughput.

Router

A network device that forwards packets between different networks by consulting a routing table and choosing next hops toward the destination. It operates at the network layer and connects local networks to the wider internet.

Routing Table

A data structure in a router or host that maps destination networks to the next hop and outgoing interface for forwarding packets. Routers consult it to choose the best path for each packet.

SATA

Serial ATA

A widely used interface standard for connecting storage devices such as hard drives and solid-state drives to a computer's motherboard. It succeeded the older parallel ATA and was itself surpassed by NVMe for high-speed SSDs.

Scheduler

The operating-system component that decides which process or thread runs on a CPU and for how long, balancing responsiveness and fairness. Algorithms include round-robin and priority-based scheduling.

Sector

The smallest physically addressable unit on a disk, traditionally 512 bytes and now often 4096 bytes on modern drives. File systems group sectors into larger allocation units called blocks or clusters.

Segmentation

A memory-management scheme that divides a program's address space into variable-length logical segments such as code, data, and stack, each with its own base and limit. It supports protection and sharing at the segment granularity, in contrast to fixed-size paging.

Setuid Bit

setuid · suid

A special Unix permission bit that, when set on an executable, makes it run with the privileges of the file's owner rather than the user who launched it. It is powerful but a common target for privilege-escalation attacks.

SFTP

SSH File Transfer Protocol

A file transfer protocol that runs over an SSH connection, providing encrypted authentication and data transfer. Despite the similar name, it is unrelated to FTP over TLS.

Shared Memory

An IPC technique in which two or more processes map the same region of physical memory into their address spaces so they can exchange data without kernel-mediated copying. It is the fastest form of IPC but requires explicit synchronization to avoid races.

Shebang

hashbang · #!

The character sequence at the very start of a script that specifies the interpreter used to execute it, written as a hash and exclamation mark followed by the interpreter path. The kernel reads it to launch the correct interpreter.

Shell

A program that interprets user commands and launches other programs, acting as the interface between the user and the operating system. Common examples include bash, zsh, and PowerShell.

SIGKILL

A Unix signal that forces a process to terminate immediately and cannot be caught, blocked, or ignored. It is used as a last resort when a process will not shut down in response to gentler signals.

Signal

An asynchronous software notification the operating system delivers to a process to inform it of an event, such as termination requests, illegal memory access, or a child's exit. A process can catch, ignore, or accept the default action for most signals.

SIGTERM

The default Unix signal for requesting a process to terminate gracefully, which the process may catch to clean up before exiting. It contrasts with SIGKILL, which cannot be caught or ignored.

Simultaneous Multithreading

SMT · Hyper-Threading

A CPU technique in which a single physical core executes instructions from multiple hardware threads at once to keep its execution units busier. Intel markets its implementation as Hyper-Threading.

SMB

Server Message Block · CIFS

A network file-sharing protocol, widely used on Windows, that provides shared access to files, printers, and other resources over a network. Its open implementation on Unix-like systems is called Samba.

SMTP

Simple Mail Transfer Protocol

The standard protocol for sending and relaying email between mail servers and from clients to servers. Retrieval of mail is handled by separate protocols such as IMAP or POP3.

SNMP

Simple Network Management Protocol

A protocol for monitoring and managing network devices such as routers, switches, and servers by querying and setting values organized in a management information base. Agents on devices expose data that management systems poll.

Socket

An endpoint for network communication identified by an IP address and port, through which a program sends and receives data. The socket API is the standard way applications access TCP and UDP.

Spanning Tree Protocol

STP

A layer-2 protocol that prevents loops in a switched Ethernet network by selectively disabling redundant links to form a loop-free tree. It reactivates blocked links if an active one fails.

Spatial Locality

The tendency of a program to access memory locations near ones it has recently accessed, such as sequential array elements. Caches exploit it by fetching whole cache lines rather than single bytes.

Speculative Execution

A CPU optimization that executes instructions ahead of knowing whether they are actually needed, discarding the results if a prediction proves wrong. It boosts performance but has enabled side-channel attacks such as Spectre.

SR-IOV

Single Root I/O Virtualization

A hardware specification that lets a single physical PCI Express device, such as a network card, present multiple isolated virtual functions that virtual machines can access directly. It improves I/O performance by bypassing the hypervisor's software switching.

SSD

Solid State Drive

A solid-state drive that stores data in flash memory with no moving parts, offering much faster access and lower latency than a spinning hard disk. It has largely replaced HDDs for primary storage.

SSH

Secure Shell

A protocol for secure, encrypted remote login and command execution over an untrusted network, authenticating with passwords or key pairs. It also tunnels other traffic and underlies secure file transfer.

Standard Streams

stdin · stdout · stderr

The three default I/O channels a Unix process opens at startup: standard input, standard output, and standard error. They can be redirected to files or connected between programs via pipes.

Static Routing

Routing in which network paths are configured manually by an administrator and do not change automatically. It is simple and predictable but does not adapt to link failures on its own.

Sticky Bit

A special Unix permission bit that, when set on a directory, restricts file deletion within it to each file's owner. It is commonly applied to shared world-writable directories such as /tmp.

Storage Area Network

SAN

A dedicated high-speed network that provides block-level access to consolidated storage, presenting remote disks to servers as if locally attached. It is distinct from network-attached storage, which serves files rather than raw blocks.

Subnet Mask

netmask

A 32-bit value that separates an IPv4 address into its network and host portions, with set bits marking the network prefix. It tells a host which addresses are on its local network versus reachable through a router.

Subnetting

The practice of dividing a larger IP network into smaller sub-networks by extending the network portion of the address with additional mask bits. It improves address efficiency, routing, and administrative control.

sudo

superuser do

A Unix command that lets a permitted user run a command with the privileges of another user, typically the superuser, according to a configured policy. It provides controlled, auditable privilege escalation without sharing the root password.

Superblock

A file system metadata structure that records global information about the volume, such as its size, block size, and the location of key tables. Because losing it can render a volume unusable, file systems keep backup copies.

Superscalar

A processor design that issues and executes more than one instruction per clock cycle by using multiple execution units. It exploits instruction-level parallelism to raise throughput.

Swap Space

swap · page file

Disk storage the operating system uses to hold memory pages evicted from RAM, extending effective memory capacity beyond physical limits. Excessive reliance on it degrades performance because disk is far slower than RAM.

Switch

A network device that forwards frames between devices on the same local network by learning their MAC addresses and sending traffic only to the correct port. It operates mainly at the data link layer.

Symmetric Multiprocessing

SMP

A system architecture in which two or more identical CPUs share a single main memory and are controlled by one operating system instance, with any processor able to run any task. It contrasts with asymmetric designs where processors have dedicated roles.

System Bus

bus

The set of parallel electrical pathways that carry data, addresses, and control signals between a computer's CPU, memory, and peripherals. It is conceptually divided into data, address, and control buses.

System Call

syscall

A controlled entry point through which a user program requests a service from the kernel, such as reading a file or opening a socket. It transitions execution from user mode to kernel mode.

systemd

A widely used Linux init system and service manager that starts services in parallel using dependency information, manages daemons through units, and supervises system state. It replaced older sequential init scripts on most modern distributions.

TCP

Transmission Control Protocol

A connection-oriented transport protocol that provides reliable, ordered, error-checked delivery of a byte stream between applications using acknowledgments and retransmission. It underlies most web and email traffic.

TCP/IP Model

internet protocol suite

The practical four-layer model (link, internet, transport, application) that describes how the internet protocol suite actually operates. It is the framework that TCP, IP, and HTTP are built around.

Telnet

An early protocol for accessing a remote command-line interface over a network. Because it transmits data, including passwords, in plaintext, it has largely been replaced by SSH for security.

Temporal Locality

The tendency of a program to reuse the same memory locations within a short time window, such as a variable inside a loop. Caches exploit it by keeping recently used data close to the CPU.

Test-and-Set

An atomic instruction that sets a memory location to a value and returns its previous value in one indivisible step. It is a classic primitive for implementing simple locks.

Thrashing

A degraded state in which a system spends most of its time swapping pages between memory and disk rather than doing useful work, because the active working set exceeds available RAM. Throughput collapses even as the CPU stays busy servicing page faults.

Three-Way Handshake

The three-message exchange (SYN, SYN-ACK, ACK) that establishes a TCP connection and synchronizes sequence numbers between two hosts before data transfer. It ensures both sides are ready and agree on initial state.

Time Slice

quantum · time quantum

The fixed interval of CPU time a scheduler allocates to a process or thread before it may be preempted in favor of another. Shorter slices improve responsiveness but increase context-switch overhead.

Traceroute

tracert

A diagnostic tool that maps the path packets take to a destination by eliciting responses from each router hop along the way, showing per-hop latency. It uses increasing TTL values to reveal the route.

Translation Lookaside Buffer

TLB

A small, fast hardware cache in the CPU that stores recently used virtual-to-physical address translations to avoid walking the page table on every access. A TLB miss forces a slower page-table lookup.

Trap

exception

A synchronous transfer of control into the kernel triggered by the currently executing instruction, such as a system call, a page fault, or a divide-by-zero exception. Unlike a hardware interrupt, it is caused by the running program itself.

TRIM

A command that lets the operating system tell a solid-state drive which blocks are no longer in use so they can be erased in advance. It preserves write performance and reduces write amplification over the drive's life.

TTL

Time To Live

A field that limits a packet or record's lifespan; in IP it is a hop counter decremented by each router to prevent loops, and in DNS it is the seconds a record may be cached before refreshing.

Tunnel

tunneling

A technique that encapsulates one network protocol inside another, allowing traffic to traverse an intermediate network as if through a private link. Tunnels underlie VPNs and connections across incompatible networks.

Type 1 Hypervisor

bare-metal hypervisor · native hypervisor

A hypervisor that runs directly on the physical hardware without an underlying host operating system, managing guest virtual machines itself. This bare-metal design is common in data centers for its efficiency and isolation.

Type 2 Hypervisor

hosted hypervisor

A hypervisor that runs as an application on top of a conventional host operating system, which mediates its access to hardware. This hosted design is common on desktops for running guest operating systems alongside normal software.

udev

The Linux device manager that dynamically creates and removes device nodes in /dev as hardware is added or removed, and applies naming and permission rules. It replaced static device files and earlier hotplug mechanisms.

UDP

User Datagram Protocol

A connectionless transport protocol that sends datagrams without handshakes, ordering, or delivery guarantees, trading reliability for low overhead and speed. Common for DNS, streaming, gaming, and VoIP.

UEFI

Unified Extensible Firmware Interface

The modern firmware interface between an operating system and platform hardware that replaces legacy BIOS, adding features like secure boot and support for larger disks. It initializes the system at startup.

umask

A Unix setting that specifies which permission bits are removed from the default when new files and directories are created. It provides a baseline for default file security.

Unicast

A network delivery method in which a packet is sent from one sender to exactly one identified receiver. It is the most common form of communication on IP networks.

User Space

userland

The region of memory and the restricted privilege level in which application code runs, isolated from direct access to hardware and kernel data structures. Programs reach privileged functions only through system calls.

vCPU

virtual CPU

A virtual CPU presented to a guest operating system by a hypervisor, which schedules it onto physical processor cores. The number of vCPUs a virtual machine has bounds the parallelism it can use.

Virtual Memory

A memory abstraction that gives each process its own contiguous address space, backed by a mix of physical RAM and disk, managed transparently by the OS. Paging moves inactive pages to disk to free RAM.

Virtualization

The abstraction of physical hardware into multiple isolated virtual machines, each running its own operating system on shared resources. It underpins cloud computing and efficient server consolidation.

VLAN

Virtual LAN

A virtual LAN that logically segments a physical network into isolated broadcast domains, so devices behave as if on separate networks regardless of physical location. It improves security and traffic management.

Von Neumann Architecture

A computer design in which instructions and data share the same memory and the same bus to the CPU. Its single shared path can create a bottleneck between processing and memory.

VXLAN

Virtual Extensible LAN

An overlay networking technology that encapsulates layer-2 Ethernet frames inside UDP packets so virtual networks can span layer-3 boundaries. It vastly expands the number of isolated segments beyond the VLAN limit and is common in data centers.

Wear Leveling

A technique used by solid-state drives that distributes write and erase operations evenly across all flash memory cells to prevent any single cell from wearing out prematurely. It extends the usable lifetime of the drive.

Well-Known Ports

The range of TCP and UDP port numbers from 0 to 1023 reserved by convention for standard services, such as 80 for HTTP and 22 for SSH. On many systems, binding to them requires elevated privileges.

Wildcard

glob

A special character used in shell filename expansion or pattern matching to stand for one or more other characters, such as the asterisk matching any sequence. The shell expands these globs into matching file names before running a command.

Working Set

The set of memory pages a process is actively using during a given time window. Keeping a process's working set resident in physical memory avoids thrashing and page-fault overhead.

WPA2

Wi-Fi Protected Access 2

A widely deployed security standard for Wi-Fi networks that uses AES-based encryption to protect wireless traffic and control access. It succeeded the weaker WPA and WEP and was itself followed by WPA3.

Write Amplification

A phenomenon in solid-state drives where the amount of data physically written to flash exceeds the amount the host requested, due to garbage collection and block erasure. High write amplification reduces performance and shortens drive lifespan.

Write-Ahead Log

WAL

A durability technique in which changes are appended to an append-only log on stable storage before being applied to the main data, so the system can recover by replaying the log after a crash. Databases and file systems rely on it for atomicity and durability.

x86-64

AMD64 · x64

The 64-bit extension of the x86 instruction set architecture, supporting larger address spaces and more registers while remaining backward compatible with 32-bit x86 software. It dominates desktop, laptop, and server processors.

ZFS

A combined file system and volume manager that provides pooled storage, copy-on-write snapshots, end-to-end checksums for data integrity, and built-in RAID-like redundancy. It is valued for reliability on large storage systems.

Zombie Process

defunct process

A process that has finished executing but still has an entry in the process table because its parent has not yet read its exit status. It consumes no memory or CPU but occupies a process table slot until the parent reaps it with wait.

Supply Chain & Operations

360

3PL

Third-Party Logistics

Third-Party Logistics: an outside provider that handles warehousing, transportation, or fulfillment on behalf of a company rather than doing it in-house.

4PL

Fourth-Party Logistics

Fourth-Party Logistics: a provider that manages and orchestrates an entire logistics network, often coordinating multiple 3PLs on the client's behalf.

5S

A workplace organization method — Sort, Set in order, Shine, Standardize, Sustain — that creates clean, efficient, and visually controlled work areas.

A3 Problem Solving

A3 Report

A structured lean problem-solving method that captures background, analysis, countermeasures, and follow-up on a single A3-sized sheet to drive disciplined thinking.

ABC Analysis

ABC classification

A classification that ranks items by value or usage into A, B, and C groups so control effort concentrates on the high-value few rather than the trivial many.

Acceptable Quality Level

AQL

The maximum percentage of defective units that is considered acceptable in a sampling plan as a satisfactory process average.

Acceptance Sampling

A quality control technique that inspects a random sample from a lot and accepts or rejects the entire lot based on the sample results rather than inspecting every unit.

Advanced Planning and Scheduling

APS

A category of software and methods that plan production and material requirements using constraint-based, finite-capacity logic, considering machines, materials, and labor simultaneously rather than the infinite-capacity assumptions of basic MRP.

Aggregate Planning

Production Planning

Medium-term planning that balances overall supply and demand at a product-family level by adjusting workforce, inventory, subcontracting, and production rates.

Agile Supply Chain

A supply chain designed for rapid, flexible response to volatile or unpredictable demand, prioritizing responsiveness over lowest unit cost.

Allocated Inventory

Committed Inventory

On-hand stock that has been reserved or committed against specific orders and is therefore not available to fulfill other demand.

Andon

A visual signaling system, often a light or board, that alerts operators and supervisors to problems on the line so they can respond immediately.

Anticipation Inventory

Inventory built ahead of expected demand to cover seasonal peaks, promotions, plant shutdowns, or other predictable future surges.

Approved Vendor List

AVL · Approved Supplier List

A controlled register of suppliers that have been qualified to provide specific materials or services, from which buyers are authorized to purchase.

ASN

Advance Ship Notice · Advance Shipping Notice

Advance Ship Notice: an electronic notification sent by a supplier before a shipment arrives, detailing contents, packaging, and expected delivery.

Assemble-to-Order

ATO

A hybrid strategy that stocks common components and subassemblies and assembles the final configured product only after receiving a customer order.

Autonomous Maintenance

A total productive maintenance practice in which operators perform routine cleaning, inspection, and minor upkeep of their own equipment to catch problems early.

Available Inventory

The quantity of an item that is on hand and not yet committed to any order, calculated as on-hand minus allocated stock.

Available-to-Deliver

The quantity of finished goods physically available and ready to ship to satisfy customer orders in the immediate term.

Available-to-Promise

ATP

The uncommitted portion of inventory and planned production that can be promised to new customer orders for a given date.

Available-to-Promise Logic

The calculation that compares uncommitted supply against demand over time to tell salespeople how much of a product can be promised to a new order and when.

Backflushing

Backflush

An inventory method that automatically deducts component quantities from stock based on the reported completion of a parent item, rather than issuing each component individually.

Backhaul

The return leg of a transportation trip, ideally carrying revenue freight to avoid an empty return and improve asset utilization.

Backorder

A customer order that cannot be filled from current stock and is recorded to be shipped once inventory is replenished.

Base Stock

A replenishment policy in which each unit of demand triggers an order for one unit, keeping the inventory position at a constant target level.

Batch Picking

A picking method in which one operator collects items for several orders in a single pass through the warehouse, then sorts them by order afterward.

Bill of Distribution

A structure that defines the replenishment relationships between stocking locations in a distribution network, analogous to a bill of materials for products.

Bill of Lading

BOL · B/L

A legal transport document issued by a carrier that acknowledges receipt of goods, states the terms of carriage, and can serve as a title document.

Bill of Resources

Bill of Capacity

A listing of the key resources and capacity required to produce a unit of a product family, used in rough-cut capacity planning.

Bin Location

Storage Location

A specific addressable storage position within a warehouse, used to direct putaway and picking and to locate stock precisely.

Blanket Order

blanket purchase order

A long-term purchase agreement for a total quantity or value over a period, released in smaller scheduled shipments to secure pricing and supply.

BOM

Bill of Materials

Bill of Materials: the structured list of components, sub-assemblies, and quantities required to build one unit of a finished product, often organized into multiple levels.

BOM Explosion

The process of expanding a multi-level bill of materials to calculate the total quantity of every component needed for a given number of finished units.

Bonded Warehouse

A secured facility authorized by customs where imported goods may be stored without paying duty until they are withdrawn for use or re-export.

Book Inventory

The quantity of an item shown in the accounting or system records, as distinct from the physically counted amount.

Bottleneck

constraint

The resource or step with the least capacity in a process, which limits total throughput and where improvement efforts yield the greatest gain.

Break-Bulk

The handling of cargo that is loaded individually rather than in containers, or the process of dividing bulk shipments into smaller lots for distribution.

Bullwhip Effect

Forrester effect

The amplification of demand variability as orders move upstream in a supply chain, where small end-customer swings cause large swings at suppliers.

Capable-to-Promise

CTP

An order-promising capability that checks not only finished inventory but also the ability to produce, considering materials and capacity, before committing a delivery date.

Capacity Requirements Planning

CRP

The detailed process of converting planned and released production orders into workload at each work center and comparing that load against available capacity by time period.

Carrier

A company that physically transports freight or passengers, contracting with shippers to move goods by road, rail, air, or sea.

Carrying Cost

holding cost

The total cost of holding inventory over time, including capital, storage, insurance, obsolescence, and shrinkage, usually expressed as a percent of inventory value.

Cash-to-Cash Cycle

cash conversion cycle · C2C

The time between paying suppliers and collecting cash from customers, combining inventory days and receivable days less payable days.

Category Management

A strategic procurement approach that groups related goods and services into categories and manages each with a tailored sourcing strategy.

Causal Forecasting

A forecasting approach that predicts demand from one or more independent variables believed to drive it, such as price, promotions, or economic indicators.

Cellular Manufacturing

Work Cell

The arrangement of equipment and workstations into cells that process a family of similar parts in sequence, reducing travel, handling, and lead time.

Certificate of Origin

COO

A trade document declaring the country in which goods were produced, used to determine tariffs and eligibility under trade agreements.

Changeover

The set of activities required to convert a machine or line from producing one product to another, whose time directly affects batch size and flexibility.

Chase Strategy

An aggregate planning approach that varies production and workforce to match demand period by period, minimizing inventory but incurring hiring, firing, and flexibility costs.

Coefficient of Variation

CV

The ratio of the standard deviation of demand to its mean, a normalized measure of demand variability used to classify items and size safety stock.

COGS

Cost of Goods Sold

Cost of Goods Sold: the direct costs of producing or purchasing the goods a company sold in a period, used to calculate gross margin and inventory turns.

Cold Chain

A temperature-controlled supply chain that keeps perishable or sensitive goods within a required temperature range from production through delivery.

Collaborative Planning, Forecasting and Replenishment

CPFR

A business practice in which trading partners share demand information and jointly develop forecasts and replenishment plans to reduce inventory and stockouts.

Common Carrier

A transportation company that offers its services to the general public to move freight under published rates and standard liability terms.

Common Cause Variation

The natural, inherent variation in a process that arises from many small random sources and is present as long as the process is stable.

Configurable Bill of Materials

Super BOM · Configurable BOM

A bill of materials that contains selectable options and rules, from which a specific product structure is generated when a customer's configuration is chosen.

Configure-to-Order

CTO

A strategy where a product is built from selectable options and features specified by the customer at order time, typically using a configurable bill of materials.

Consensus Forecast

A single agreed-upon demand forecast reconciled across sales, marketing, finance, and operations, typically as the output of a demand review.

Consignment Inventory

Stock physically held by the buyer but still owned by the supplier until it is consumed or sold, deferring the buyer's payment and ownership risk.

Consolidation

The combining of multiple smaller shipments into a single larger load to reduce transportation cost per unit.

Constant Work in Process

CONWIP

A pull production control method that caps the total amount of work in process in a system, releasing new work only as completed work exits.

Contract Manufacturing

An arrangement in which a company outsources the production of its products to a third-party manufacturer that builds to the company's specifications.

Control Chart

Shewhart Chart

A time-ordered graph of a process measurement with a center line and statistically derived control limits, used to detect when a process shifts out of stable behavior.

Control Plan

A document that specifies the methods, measurements, and reactions used to control a process and keep its output within specification.

Control Tower

A centralized hub of people, process, and technology that provides end-to-end visibility and coordinates decisions and responses across a supply chain.

Corrective and Preventive Action

CAPA

A formal quality process that both corrects an existing nonconformance and puts measures in place to prevent its recurrence.

Cost of Poor Quality

COPQ

The total cost incurred because products or processes are not defect-free, including scrap, rework, inspection, warranty, and lost business.

Costed Bill of Materials

Costed BOM

A bill of materials that rolls up the cost of every component and operation to calculate the total standard cost of the parent item.

Cross-docking

A logistics practice where inbound goods are unloaded and moved directly to outbound shipping with little or no storage, cutting handling and dwell time.

Croston's Method

A forecasting technique designed for intermittent or lumpy demand that separately estimates the size of demand and the interval between demands.

Cube Utilization

Cubic Utilization

A measure of how efficiently the available volume of a truck, container, or storage space is filled with product.

Cumulative Lead Time

Stacked Lead Time

The longest total time required to produce an item if no inventory existed at any level, summing the lead times along the longest path through the bill of materials.

Customs Broker

A licensed agent who prepares and submits documentation and payments to clear imported goods through customs on behalf of importers.

Cycle Count

A method of auditing inventory accuracy by counting a subset of items on a rotating schedule rather than shutting down for a full physical count.

Cycle Stock

Working Stock

The portion of inventory that is depleted and replenished through the normal ordering cycle, sized to meet expected demand between replenishments.

Cycle Time

The time to complete one unit or one pass of a process from start to finish, distinct from lead time which includes waiting and queuing.

Days of Inventory

days on hand · DIO

The average number of days current inventory would last at the current sales rate, calculated as inventory divided by daily cost of goods sold.

Dead Stock

obsolete inventory

Inventory that has had no movement over an extended period and is unlikely to sell, tying up capital and warehouse space.

Deadhead

Empty Miles

A leg of a transportation trip in which a vehicle travels empty, generating cost without revenue.

Deconsolidation

The process of breaking down a large consolidated shipment into individual consignments for final delivery to different destinations.

Decoupling Inventory

Buffer Inventory

Stock held between successive operations or stages so that each can run independently, absorbing differences in their rates and buffering disruptions.

Defects Per Million Opportunities

DPMO

A Six Sigma metric that normalizes defect rates by expressing the number of defects per one million opportunities for a defect to occur.

Demand Aggregation

The combining of demand across products, customers, or locations to create a more stable and forecastable total, often improving planning accuracy.

Demand Planning

The process of forecasting future customer demand to guide inventory, production, and procurement decisions across the supply chain.

Demand Review

The step in the sales and operations planning cycle where stakeholders reconcile forecasts into an unconstrained consensus demand plan.

Demand Sensing

The use of near-real-time signals such as point-of-sale data, orders, and shipments to detect short-term shifts in demand faster than traditional forecasting.

Demand Time Fence

A point in the near-term planning horizon inside which the master schedule is driven by actual customer orders rather than the forecast, protecting execution from forecast changes.

Demurrage

A charge levied by a carrier or port when equipment such as a container or railcar is held beyond the allowed free time at a terminal.

Dependent Demand

Demand for a component or material that is derived from the demand for its parent item through the bill of materials, so it is calculated rather than forecast.

Detention

A fee charged when a shipper or receiver keeps a carrier's trailer or driver beyond the allotted free time for loading or unloading.

Digital Twin

A dynamic virtual model of a physical supply chain or asset, fed by real data, used to simulate scenarios, test decisions, and optimize operations.

Dimensional Weight

Dim Weight · Volumetric Weight

A pricing figure that reflects a package's volume rather than its actual weight, used by carriers to charge for bulky but light shipments.

Direct Procurement

The purchasing of goods, raw materials, and components that go directly into a company's products.

Distribution Center

DC

A warehouse facility focused on the rapid receipt, storage, and shipment of goods to downstream customers or stores rather than long-term storage.

Distribution Requirements Planning

DRP

The application of time-phased MRP logic across a distribution network to plan replenishment from central warehouses to regional and local stocking locations.

DMAIC

The core Six Sigma improvement roadmap consisting of five phases: Define, Measure, Analyze, Improve, and Control.

Dock Scheduling

Dock Appointment Scheduling

The planning and assignment of appointment times for inbound and outbound trucks at warehouse dock doors to smooth labor and reduce congestion and detention.

Drayage

The short-distance movement of freight, especially the trucking of ocean containers between a port or rail terminal and a nearby facility.

Drop Shipping

dropship

A fulfillment model where the seller passes customer orders to a supplier who ships directly to the buyer, so the seller never holds the inventory.

Drum-Buffer-Rope

DBR

A Theory of Constraints scheduling method where the constraint sets the pace (drum), a time buffer protects it, and material release is tied to the constraint's rate (rope).

Dual Sourcing

The practice of qualifying and buying an item from two suppliers to reduce dependence on a single source and improve supply resilience.

Economic Production Quantity

EPQ

The production lot size that minimizes total setup and holding cost when units are produced and consumed gradually rather than received all at once.

EDI

Electronic Data Interchange

Electronic Data Interchange: the standardized computer-to-computer exchange of business documents such as purchase orders, invoices, and ship notices between partners.

End Item

Finished Good

The final finished product sold to a customer, sitting at the top level of its bill of materials with no parent.

Engineer-to-Order

ETO

A strategy in which product design and engineering begin only after an order is placed, used for highly customized or unique products.

Engineering Bill of Materials

EBOM

A bill of materials that reflects the product as designed by engineering, organized by function or design structure rather than how it is built.

EOQ

Economic Order Quantity

Economic Order Quantity: the order size that minimizes total ordering and holding cost, derived from demand rate, order cost, and carrying cost.

ERP

Enterprise Resource Planning

Enterprise Resource Planning: integrated software that runs core business processes — finance, procurement, inventory, manufacturing, and sales — on a shared data model.

Excess and Obsolete Inventory

E&O · SLOB

Stock that exceeds foreseeable demand or is no longer usable or sellable, often written down or disposed of at a loss.

Expediting

The act of accelerating the production or delivery of an order that is at risk of being late, often at additional cost.

Exponential Smoothing

A forecasting method that computes the new forecast as a weighted blend of the last actual demand and the previous forecast, controlled by a smoothing constant between zero and one.

Failure Mode and Effects Analysis

FMEA

A systematic method for identifying potential failure modes in a product or process, assessing their severity, occurrence, and detectability, and prioritizing preventive actions.

FEFO

First-Expired First-Out

First-Expired, First-Out: a picking rule that ships the stock with the earliest expiration date first, used for perishable and regulated goods.

FIFO

First-In First-Out

First-In, First-Out: an inventory method where the oldest stock is used or sold first, common for perishable goods and a standard cost-flow assumption.

Fill Rate

The percentage of customer demand met from available stock without backorder, measured by units, lines, or orders filled complete.

Finite Capacity Scheduling

Finite Scheduling

A scheduling approach that assigns work to resources only up to their available capacity, delaying tasks that would exceed limits rather than assuming unlimited capacity.

Firm Planned Order

FPO

A planned order whose quantity and due date a planner has locked so that MRP will not automatically change or reschedule it during the next planning run.

First Pass Yield

FPY

The percentage of units that complete a process correctly the first time without any rework or scrap.

Fishbone Diagram

Ishikawa Diagram · Cause-and-Effect Diagram

A cause-and-effect diagram that organizes potential causes of a problem into categories branching off a central spine, aiding root cause analysis.

Five Whys

5 Whys

An iterative problem-solving technique that asks why repeatedly, typically five times, to drill from a symptom down to its underlying root cause.

Fixed Order Quantity

FOQ

A lot-sizing rule that always orders the same predetermined quantity whenever a replenishment is triggered, regardless of the exact net requirement.

Forecast Bias

A systematic tendency for forecasts to run consistently above or below actual demand, revealing over- or under-forecasting rather than random error.

Forecast Consumption

The MRP mechanism by which incoming actual customer orders reduce or replace the forecast so that demand is not double-counted in the plan.

Forecast Error

The difference between forecasted demand and actual demand for a period, the basis for measuring forecast accuracy and sizing safety stock.

Forecast Value Added

FVA

A metric that compares the accuracy of a forecast against a simple naive benchmark to determine whether each forecasting step actually improves the result.

Forecasting

Estimating future demand using historical data, statistical models, and market inputs, expressed with an accompanying measure of error such as MAPE.

Foreign Trade Zone

FTZ · Free Trade Zone

A designated area treated as outside a country's customs territory, allowing goods to be stored, handled, or processed with deferred, reduced, or eliminated duties.

Freight

Goods transported in bulk by truck, rail, sea, or air, or the charge for that transport; a major and variable cost element in landed product cost.

Freight Audit

The review of carrier invoices against contracted rates and shipment records to catch billing errors and recover overcharges.

Freight Broker

An intermediary that arranges transportation between shippers and carriers without owning the trucks, matching loads to available capacity.

Freight Class

A standardized classification used in less-than-truckload shipping that groups commodities by density, handling, stowability, and liability to determine rates.

Freight Forwarder

A third-party service provider that arranges the movement of goods on behalf of shippers, coordinating carriers, documentation, and customs across modes.

Fulfillment

order fulfillment

The end-to-end process of receiving, picking, packing, and shipping customer orders, including returns handling.

Fulfillment Center

A facility optimized for picking, packing, and shipping individual customer orders, especially for e-commerce.

Full Truckload

FTL

A shipping mode in which a shipment fills or is priced as an entire truck, moving directly from origin to destination without consolidation.

Gauge Repeatability and Reproducibility

Gauge R&R · GR&R

A study that quantifies how much of the variation in measurements comes from the measurement system itself, separating operator and equipment variation from true part variation.

Gemba

Genba

The Japanese lean term for the actual place where work is done and value is created; managers practice going to the gemba to observe problems firsthand.

Genealogy

The recorded lineage of a finished unit linking it to the specific lots, batches, and components used to make it, enabling forward and backward traceability.

Goods Receipt

GR

The transaction that records the arrival of ordered goods into inventory, increasing stock and enabling invoice matching against the purchase order.

Goods-to-Person

GTP

An automated fulfillment approach where storage or robotic systems bring items to a stationary picker rather than the picker traveling to the goods.

Gross Margin Return on Investment

GMROI

A profitability metric that divides gross margin by the average inventory cost, showing how much gross profit is earned for each unit of money invested in inventory.

Gross Requirements

The total demand for an item in each planning period before netting out on-hand stock and scheduled receipts, as computed in MRP.

Harmonized System Code

HS Code · Harmonized Tariff Code

An internationally standardized numeric code that classifies traded products for customs duties, tariffs, and trade statistics.

Hedge Inventory

Inventory accumulated to protect against anticipated events such as price increases, currency swings, strikes, or supply shortages.

Heijunka

Production Leveling

A lean method of leveling production by volume and product mix so that a fairly constant, evenly distributed workload flows through the system despite variable customer orders.

Holt-Winters Method

Triple Exponential Smoothing

A triple exponential smoothing technique that forecasts data containing both a trend and seasonality by smoothing level, trend, and seasonal components separately.

Hoshin Kanri

Policy Deployment

A strategic planning method that aligns an organization's goals from top management down to daily activities and back up, ensuring everyone works toward shared breakthrough objectives.

Hub-and-Spoke

A distribution network design in which shipments flow through central hubs that consolidate and redistribute freight to outlying spoke locations.

Incoterms

International Commercial Terms

Standardized international trade terms published by the ICC that define where responsibility, cost, and risk transfer between buyer and seller in a shipment.

Indented Bill of Materials

Indented BOM

A multi-level bill displayed with each level indented under its parent, showing the full hierarchy of assemblies, subassemblies, and components at a glance.

Independent Demand

Demand for an item that comes from customers or the market and must be forecast, such as finished goods, rather than being calculated from the demand for a parent item.

Indirect Procurement

The purchasing of goods and services that support operations but do not go into the finished product, such as office supplies, services, and maintenance items.

Infinite Loading

A planning approach that schedules work against a resource without regard to its capacity limit, producing a load profile that may exceed what the resource can actually do.

Integrated Business Planning

IBP

An advanced evolution of sales and operations planning that aligns strategy, demand, supply, product, and finance into a single reconciled plan on a rolling horizon.

Intermittent Demand

Lumpy Demand

Demand that occurs sporadically with many periods of zero demand, making it hard to forecast with standard smoothing methods.

Intermodal Transport

Intermodal

The movement of freight in a single container or trailer across two or more modes such as truck, rail, and ocean without handling the goods themselves when changing modes.

Inventory Accuracy

A measure of how closely recorded inventory quantities match the physical counts, usually expressed as a percentage of locations or items within tolerance.

Inventory Position

The quantity used in reorder decisions equal to on-hand stock plus on-order quantity minus any backorders or allocations.

Inventory Turnover

inventory turns · stock turn

A ratio of cost of goods sold to average inventory over a period, measuring how many times stock is sold and replaced; higher generally signals leaner inventory.

ISO 9001

An internationally recognized standard that specifies requirements for a quality management system, emphasizing process control, customer focus, and continual improvement.

Jidoka

Autonomation

A lean principle of building quality into the process by giving machines and operators the ability to detect abnormalities and stop automatically to prevent defects.

JIT

Just-in-Time

Just-in-Time: a production and inventory strategy that pulls material to arrive only as needed, minimizing stock but requiring reliable supply and short lead times.

Just-in-Case

JIC

An inventory philosophy that deliberately holds extra stock as a buffer against uncertainty and disruption, trading higher carrying cost for lower risk of shortage.

Just-in-Sequence

JIS

An extension of just-in-time delivery in which components arrive not only at the right time but in the exact sequence they will be consumed on the assembly line.

Kaizen

continuous improvement

A practice of continuous, incremental improvement driven by the people doing the work, often run as focused short-duration improvement events.

Kitting

Grouping individual components into a single ready-to-use package or work-order kit ahead of assembly or shipment to speed downstream handling.

Landed Cost

The total cost of a product delivered to its destination, including purchase price, freight, duties, insurance, and handling.

Last Mile

Last-Mile Delivery

The final leg of delivery from a local distribution point to the end customer, often the most expensive and complex part of the logistics chain.

Lead Time

The elapsed time between placing an order and receiving it, or between starting and finishing production; a core input to reorder points and safety stock.

Lead Time Offset

The scheduling adjustment in MRP that releases a component order earlier than its parent's due date by the amount of the component's lead time.

Lean

lean manufacturing

A management philosophy focused on maximizing customer value while systematically eliminating waste in processes, flow, and inventory.

Less Than Truckload

LTL

A shipping mode for freight that does not fill an entire trailer, where multiple shippers' consignments are consolidated onto one truck and priced by weight and class.

Level Strategy

An aggregate planning approach that keeps production and workforce steady while absorbing demand swings with inventory and backorders.

LIFO

Last-In First-Out

Last-In, First-Out: an inventory cost-flow method that assumes the most recently acquired stock is consumed first, affecting valuation under changing prices.

Line Balancing

The assignment of tasks to workstations on an assembly line so that each has a nearly equal workload matched to takt time, minimizing idle time and bottlenecks.

Little's Law

A fundamental relationship stating that the average work in process equals the average throughput rate multiplied by the average flow time through a stable process.

Load Leveling

Load Balancing

The practice of smoothing the workload placed on resources over time to avoid alternating overloads and idle periods, improving flow and utilization.

Lot Number

Batch Number

An identifier assigned to a specific batch of material produced or received together, enabling traceability and quality control across that batch.

Lot Size

batch size

The quantity produced or purchased in a single batch, balancing setup or ordering cost against the cost of holding the resulting inventory.

Lot Sizing

The rule or policy used to convert net requirements into order quantities, such as lot-for-lot, fixed order quantity, or period order quantity.

Lot-for-Lot

L4L

A lot-sizing rule that orders exactly the net requirement for each period, minimizing inventory carried but placing an order in every period that has demand.

Low-Level Code

A number MRP assigns to each item indicating the lowest level at which it appears in any bill of materials, ensuring all requirements for a component are accumulated before it is planned.

Make-to-Order

MTO

A production strategy where manufacturing of a finished item begins only after a customer order is received, reducing finished-goods inventory at the cost of longer delivery.

Make-to-Stock

MTS

A production strategy where finished goods are manufactured to a forecast and held in inventory so customer orders can be filled immediately from stock.

Manufacturing Bill of Materials

MBOM

A bill of materials structured to reflect how a product is actually assembled on the shop floor, including intermediate assemblies and process steps.

Master Scheduler

The person responsible for building and maintaining the master production schedule, balancing demand against capacity and material availability.

Material Master

item master

The central record in an ERP that holds all attributes of a material — identifiers, units, planning parameters, and costs — reused across every transaction.

Maverick Spend

Rogue Spend

Purchasing that occurs outside of established contracts, approved suppliers, or procurement processes, undermining negotiated pricing and control.

Mean Absolute Deviation

MAD

A measure of forecast accuracy equal to the average of the absolute differences between forecast and actual demand across periods.

Mean Absolute Percent Error

MAPE

A forecast accuracy measure expressing the average absolute error as a percentage of actual demand, allowing comparison across items of different volume.

Milk Run

A routed delivery or pickup that visits multiple stops in a single trip on a regular schedule, common in lean supplier replenishment.

Min-Max Inventory

A replenishment method that reorders up to a maximum level whenever on-hand stock falls to or below a minimum level.

Modular Bill of Materials

Modular BOM

A bill of materials arranged by option modules rather than by end product, letting a small number of modules define many configurations for planning and configuration.

MOQ

Minimum Order Quantity

Minimum Order Quantity: the smallest quantity a supplier will accept in a single order, which can force buyers to hold more inventory than immediately needed.

Move Time

The time required to physically transport a job from one work center to the next in a routing.

Moving Average

A forecasting method that averages demand over a fixed number of recent periods, smoothing out short-term fluctuations to estimate the next period.

MPS

Master Production Schedule

Master Production Schedule: the time-phased plan of which finished goods to produce, in what quantity, and when, that drives MRP for lower-level components.

MRO

Maintenance Repair and Operations

Maintenance, Repair, and Operations: the supplies and spare parts consumed in running and maintaining a facility rather than becoming part of the product.

MRP

Material Requirements Planning

Material Requirements Planning: a calculation that translates a production plan and bill of materials into time-phased purchase and production orders, netting demand against on-hand and on-order inventory.

MRP II

Manufacturing Resource Planning

Manufacturing Resource Planning: an extension of MRP that adds capacity, labor, and financial planning so material and resource requirements are reconciled against realistic plant capacity.

Muda

Waste

The Japanese lean term for waste, meaning any activity that consumes resources without adding value from the customer's perspective.

Multi-level BOM

indented BOM

A bill of materials that spans several tiers of sub-assemblies, where each parent explodes into its own child components down to raw materials.

Mura

Unevenness

The Japanese lean term for unevenness or variability in flow and workload, one of the three sources of waste addressed by leveling.

Muri

Overburden

The Japanese lean term for overburden, the excessive strain placed on people or equipment beyond their reasonable capacity.

Naive Forecast

The simplest forecast, which uses the most recent actual demand as the prediction for the next period; often used as a baseline to judge more complex methods.

Nearshoring

Moving sourcing or production to a country geographically close to the point of demand to shorten lead times and lower logistics risk compared with distant offshoring.

Net Change Planning

An MRP processing method that re-plans only the items affected by recent transactions since the last run, rather than regenerating the entire plan from scratch.

Net Requirements

The demand remaining after subtracting available inventory and scheduled receipts from gross requirements, driving new planned orders in MRP.

New Product Introduction

NPI

The process of bringing a new product to market, including forecasting demand without history, ramping supply, and phasing out predecessors.

Newsvendor Model

Newsboy Problem

A classic inventory model that determines the optimal one-time order quantity for a perishable or single-period product by balancing the cost of overstocking against understocking.

Nonconformance

Nonconformity · NCR

A departure of a product or process from its specified requirements, which must be documented, dispositioned, and often subjected to corrective action.

Obsolescence

The decline in an item's usefulness or value because it has been superseded, its demand has disappeared, or it has passed its usable life.

OEE

Overall Equipment Effectiveness

Overall Equipment Effectiveness: a manufacturing metric combining availability, performance, and quality into a single percentage of ideal productive output.

Offshoring

Relocating production or sourcing to a distant, typically lower-cost country to reduce unit costs, usually at the expense of longer and riskier supply lines.

On-Hand Inventory

The physical quantity of an item currently held in a stocking location, regardless of whether it is allocated or available.

One-Piece Flow

Continuous Flow · Single-Piece Flow

A lean method of moving products through processing one unit at a time rather than in batches, exposing problems and reducing lead time and work in process.

Operation

A single step in a routing that describes work performed at a specific work center, including its standard setup and run times.

Order Confirmation

order acknowledgment

A supplier's acknowledgment of a purchase order that confirms the items, quantities, prices, and promised delivery dates it will fulfill.

Order Cycle Time

Order Lead Time

The elapsed time from when a customer places an order until it is received, a key measure of supply chain responsiveness.

Order Management

OMS

The processes and systems for capturing, tracking, and fulfilling customer orders from placement through delivery and post-sale service.

Order Penetration Point

Decoupling Point · Customer Order Decoupling Point

The point in a supply chain where a specific customer order is assigned to a product, dividing forecast-driven upstream activity from order-driven downstream activity.

Order Policy

The rule that determines how MRP sizes replenishment orders for an item, such as lot-for-lot, fixed order quantity, or period order quantity.

Order-to-Cash

O2C · OTC

The end-to-end business process spanning from receiving a customer order through fulfillment, invoicing, and collecting payment.

Ordering Cost

Setup Cost

The fixed cost incurred each time an order is placed or a production run is set up, independent of the quantity ordered; a key input to economic order quantity.

OTIF

On-Time In-Full

On-Time In-Full: a service metric counting an order as successful only when it is delivered both by the promised date and in the complete quantity.

Overproduction

The lean waste of making more, sooner, or faster than the next process or customer requires, which ties up capacity and hides other problems.

Par Level

A predefined target stock quantity for an item that is periodically restored by ordering enough to bring the on-hand amount back up to that level.

Parent Item

In a bill of materials, an item that is manufactured from one or more component items listed directly beneath it.

Pareto Chart

A bar chart that orders categories of a problem by frequency or impact from largest to smallest, highlighting the vital few causes that account for most of the effect.

Pareto Principle

80/20 Rule

The observation that roughly 80 percent of effects come from about 20 percent of causes, underlying ABC analysis where a small share of items drives most of the value.

Payment Terms

The agreed conditions under which a buyer pays a supplier, such as the time allowed before payment is due and any early-payment discounts.

Pegging

An MRP feature that traces a component's requirement upward to the specific parent order, sales order, or forecast that created it, showing why the demand exists.

Perfect Order

Perfect Order Rate

An order delivered complete, on time, damage-free, and with correct documentation; the perfect order rate is the percentage of orders meeting all these criteria.

Period Order Quantity

POQ

A lot-sizing rule that groups the net requirements of a fixed number of future periods into a single order to reduce the frequency of ordering.

Perpetual Inventory

An inventory system that updates stock records continuously with each receipt and issue, in contrast to periodic counts done at intervals.

Phantom Assembly

phantom BOM

A BOM item that is built and consumed in the same production step and never stocked, passed straight through in MRP to its parent's components.

Physical Inventory

Wall-to-Wall Count

A complete count of all stock in a facility at a point in time, typically to reconcile book records with actual quantities.

Pick and Pack

The warehouse activity of selecting ordered items from storage and packaging them for shipment, a core driver of fulfillment labor cost.

Pick-to-Light

An order-picking system that uses illuminated indicators at storage locations to direct pickers to the correct bin and quantity, reducing errors and search time.

Pipeline Inventory

In-Transit Inventory

Goods that are in transit or in process within the supply chain and therefore not yet available to use or sell, also called in-transit inventory.

Plan-Do-Check-Act

PDCA · Deming Cycle

An iterative four-step improvement cycle for planning a change, implementing it, checking the results, and standardizing or adjusting based on what was learned.

Planned Order

A suggested order for material or production that MRP generates automatically to meet net requirements; it exists only in the plan until a planner firms or releases it.

Planning Bill of Materials

Planning BOM

An artificial or grouping bill used for forecasting and master scheduling that assigns planning percentages to options or family members rather than representing a real buildable product.

Planning Horizon

The length of time into the future covered by a plan or schedule, beyond which demand is treated as forecast rather than firm.

Planning Time Fence

A boundary in the master schedule inside which the system will not automatically create or reschedule orders, requiring planner intervention to make changes.

Poka-yoke

mistake-proofing

A mistake-proofing technique that designs a process or device to prevent or immediately detect errors, so defects cannot pass downstream.

Postponement

delayed differentiation

A strategy that delays final product configuration or localization until as late as possible, reducing forecast risk and finished-goods variety.

PPAP

Production Part Approval Process

Production Part Approval Process: a standardized method for suppliers to demonstrate that their process can reliably produce a part meeting all requirements.

Predictive Maintenance

PdM

Maintenance triggered by the actual condition of equipment, using sensors and analytics to service assets just before failure is likely.

Preventive Maintenance

PM

Scheduled maintenance performed at planned intervals to reduce the likelihood of equipment failure, based on time or usage rather than condition.

Process Capability

Cpk · Cp

A measure of how well a stable process can produce output within specification limits, commonly expressed by the indices Cp and Cpk.

Procure-to-Pay

P2P

The end-to-end business process spanning from requisitioning and ordering goods through receiving them and paying the supplier.

Procurement

purchasing

The overall function of acquiring goods and services, spanning sourcing, negotiation, purchasing, and supplier management from need to payment.

Proof of Delivery

POD

Documentation, often a signed or electronic receipt, confirming that a shipment was delivered to and accepted by the recipient.

Pull System

A production approach where downstream consumption signals upstream replenishment, so work is made only in response to actual demand.

Purchase Order

PO

A buyer's formal, legally binding document authorizing a supplier to deliver specified goods or services at agreed quantities, prices, and dates.

Purchase Price Variance

PPV

The difference between the actual price paid for a purchased item and its standard or expected price, used to monitor procurement performance.

Purchase Requisition

Requisition · PR

An internal request that authorizes the procurement function to buy specified goods or services, typically converted into a purchase order once approved.

Push System

A production approach that makes goods to a forecast and pushes them downstream regardless of immediate demand, risking excess or obsolete stock.

Push-Pull Boundary

The point in a supply chain that separates forecast-driven push activities upstream from order-driven pull activities downstream, set at the decoupling point.

Put-away

The warehouse process of moving received goods from the dock to their designated storage locations and recording those locations in the system.

Queue Time

The time a job waits at a work center before processing begins; it is often the largest component of total manufacturing lead time.

Rate of Sale

Sell Rate

The average speed at which a product sells over a period, used to plan replenishment and gauge inventory coverage.

Regenerative Planning

Regeneration

An MRP processing method that completely rebuilds the material plan for all items from the master schedule at each run, as opposed to net change planning.

Reorder Point

ROP

The inventory level at which a replenishment order is triggered, typically calculated as expected demand during lead time plus safety stock.

Reshoring

The practice of returning previously offshored manufacturing or sourcing back to the company's home country, often to shorten lead times or reduce risk.

Reverse Auction

A competitive sourcing event in which pre-qualified suppliers submit progressively lower bids in real time to win a buyer's business.

Reverse Logistics

The management of goods moving backward through the supply chain, including returns, repairs, recycling, refurbishment, and disposal.

Rework

Additional processing performed on a defective item to bring it up to specification so it can be used or sold, consuming extra time and cost.

RFP

Request for Proposal

Request for Proposal: a solicitation asking suppliers to propose how they would meet a need, evaluated on approach and value as well as price.

RFQ

Request for Quotation

Request for Quotation: a document sent to suppliers asking for priced offers on defined items or services, used to compare bids during sourcing.

Risk Pooling

The reduction of overall demand variability and required safety stock achieved by aggregating demand across locations, products, or time.

Rolled Throughput Yield

RTY

The probability that a unit passes through all steps of a multi-step process defect-free, calculated by multiplying the first pass yields of every step.

Root Cause Analysis

RCA

A structured investigation that identifies the fundamental underlying cause of a problem rather than its symptoms, so that a lasting corrective action can be taken.

Rough-Cut Capacity Planning

RCCP

A high-level check that validates the master production schedule against key constrained resources before committing to detailed material planning.

Route Optimization

The use of algorithms to determine the most efficient sequence and paths for deliveries, minimizing distance, time, or cost subject to constraints.

Routing

The defined sequence of operations, work centers, and standard times required to manufacture a product, paired with the BOM to drive scheduling and costing.

Run Time

The portion of an operation's time that is spent actually processing units, typically expressed as a rate per piece multiplied by the order quantity.

S&OP

Sales and Operations Planning

Sales and Operations Planning: a recurring cross-functional process that aligns demand forecasts with supply, inventory, and financial plans over a medium-term horizon.

Safety Lead Time

A planning buffer that schedules receipts earlier than strictly required to protect against timing variability, distinct from quantity-based safety stock.

Safety Stock

buffer stock

Buffer inventory held to protect against variability in demand or supply lead time, reducing the risk of a stockout between replenishments.

Sales Order

SO

A seller's internal document confirming a customer's request to buy, capturing items, quantities, prices, and delivery terms that drive fulfillment.

SCOR Model

Supply Chain Operations Reference

Supply Chain Operations Reference: a standard framework that defines supply-chain processes — plan, source, make, deliver, return, enable — with common metrics.

Scrap

Material or product that is defective beyond economical repair and must be discarded, representing a loss of material, labor, and capacity.

Seasonal Index

A multiplier that expresses how much a given period's demand typically deviates from the average, used to add seasonality back into a deseasonalized forecast.

Seasonality

A repeating pattern of demand variation tied to the time of year, month, week, or day, such as higher sales during holidays.

Sell-Through Rate

The percentage of received or available inventory that is sold over a given period, indicating how quickly stock moves.

Service Level

A target for the ability to meet demand from stock, commonly stated as the probability of not stocking out during a replenishment cycle or the fraction of demand filled on time.

Setup Reduction

The systematic effort to shorten changeover time between products, enabling smaller batches, greater flexibility, and lower inventory.

Setup Time

changeover time

The time to changeover a machine or line from one product to another, a driver of lot sizing and a target of quick-changeover improvement.

Seven Basic Quality Tools

7 QC Tools

A set of simple graphical techniques for quality improvement: check sheet, histogram, Pareto chart, cause-and-effect diagram, scatter diagram, control chart, and flowchart or stratification.

Seven Wastes

7 Wastes · TIMWOOD

The classic lean categories of non-value-adding activity: transport, inventory, motion, waiting, overproduction, overprocessing, and defects.

Shelf Life

The length of time a product remains usable, safe, or sellable under specified storage conditions before it expires.

Should-Cost Analysis

Should-Costing

A method of estimating what a purchased item ought to cost by building up material, labor, overhead, and margin, used to negotiate with suppliers from a fact base.

Shrinkage

The loss of inventory between recorded receipt and sale due to theft, damage, spoilage, administrative error, or miscounting.

Single Sourcing

The deliberate choice to buy an item from one supplier even though alternatives exist, to gain volume leverage or closer collaboration while accepting concentration risk.

Single-Level Bill of Materials

Single-Level BOM

A bill of materials that lists only the immediate components of a parent item, without exploding those components into their own sub-components.

Six Sigma

6 Sigma

A data-driven methodology that reduces process variation and defects toward a target of 3.4 defects per million opportunities, often structured as DMAIC.

SKU

Stock Keeping Unit

Stock Keeping Unit: a unique identifier for a distinct sellable or stockable item, distinguishing variations such as size, color, or packaging.

Slotting

Slotting Optimization

The practice of deciding where to store each item in a warehouse to minimize travel, congestion, and handling based on velocity, size, and pick relationships.

SMED

Single-Minute Exchange of Die

Single-Minute Exchange of Die: a lean method to cut changeover time to under ten minutes, enabling smaller lot sizes and more flexible scheduling.

Sole Sourcing

A situation where only one supplier is capable of providing an item, so there is no choice of vendor and supply risk is elevated.

Sourcing

strategic sourcing

The process of identifying, evaluating, and selecting suppliers to meet a company's material and service needs at target cost, quality, and risk.

Spaghetti Diagram

A visual tool that traces the physical path of a product, person, or material through a process, revealing excess travel and wasted motion.

Special Cause Variation

Assignable Cause

Variation arising from a specific, identifiable, and often correctable source that is not part of the normal process, signaling that the process is out of control.

Spend Analysis

The systematic review of purchasing data to understand how much is spent, with whom, and on what, in order to find savings and consolidation opportunities.

Standard Cost

A predetermined, planned cost for a material, labor operation, or finished item used for valuing inventory and measuring variances against actual costs.

Standard Work

Standardized Work

A documented, agreed-upon best method for performing a task at the current takt, forming the baseline for training and continuous improvement.

Standard Work in Process

Standard WIP

The minimum amount of in-process inventory needed to keep operations running smoothly at the current standard work, held deliberately rather than as excess.

Statistical Process Control

SPC

The use of statistical methods, especially control charts, to monitor a process, distinguish normal variation from unusual variation, and keep the process stable.

Stock-to-Sales Ratio

A retail metric comparing the amount of inventory on hand at the start of a period to the sales during that period.

Stockout

out of stock

A condition where demand for an item exceeds available inventory, resulting in lost sales, backorders, or production stoppage.

Stockout Cost

Shortage Cost

The economic penalty of not having an item available when demanded, including lost sales, backorder handling, expediting, and lost customer goodwill.

Strategic Sourcing

A structured, data-driven procurement process that continuously evaluates and selects suppliers to optimize total value across cost, quality, and risk.

Subassembly

An assembled unit that is itself a component of a higher-level assembly, having its own bill of materials and often its own work order.

Supermarket

In lean systems, a controlled store of standard inventory between processes from which a downstream process pulls what it needs, triggering upstream replenishment.

Supplier

vendor

An external party that provides goods, components, or services to a company; supplier performance is tracked on quality, cost, and delivery reliability.

Supplier Qualification

Supplier Onboarding

The evaluation and approval process a supplier must pass, covering capability, quality systems, and financial health, before it can be used for production purchases.

Supplier Relationship Management

SRM

The discipline of systematically managing interactions with suppliers to maximize value, including performance, development, risk, and collaboration.

Supplier Scorecard

A structured rating of a supplier's performance across metrics such as quality, on-time delivery, cost, and responsiveness, used to manage and develop the relationship.

Supplier Tiering

Tier 1 · Tier 2

The classification of suppliers by their position relative to the manufacturer, where tier-one suppliers ship directly to it and tier-two suppliers feed the tier-one suppliers.

Supply Chain Resilience

The capacity of a supply chain to anticipate, withstand, adapt to, and recover from disruptions while maintaining continuity of supply.

Supply Chain Risk Management

SCRM

The disciplined identification, assessment, and mitigation of risks that could disrupt the flow of materials, information, or funds across a supply chain.

Supply Chain Visibility

The ability to track and access accurate, timely information about orders, inventory, and shipments across the end-to-end supply chain.

Supply Review

The step in the sales and operations planning cycle where the demand plan is tested against capacity, materials, and constraints to produce a feasible supply plan.

Takt Time

The rate at which units must be completed to meet customer demand, calculated as available production time divided by demand over that period.

Theory of Constraints

TOC

A management philosophy holding that a system's output is limited by a small number of constraints, and that improvement should focus on identifying and elevating the binding constraint.

Three-Way Match

3-way match

An accounts-payable control that verifies a supplier invoice against the purchase order and the goods-receipt record before payment is approved.

Time Fence

A boundary in the planning horizon inside which changes to the schedule are frozen or restricted to protect near-term stability of production.

Time Series Analysis

Time Series

A family of forecasting techniques that project future demand purely from the historical pattern of the demand series over time.

TMS

Transportation Management System

Transportation Management System: software that plans, executes, and optimizes the movement of freight, including carrier selection, routing, and freight audit.

Total Cost of Ownership

TCO

The full cost of acquiring and using a product or service over its life, including purchase price plus delivery, quality, maintenance, downtime, and disposal costs.

Total Landed Cost

Landed Cost Analysis

The complete cost of getting a product to its destination, including purchase price, freight, insurance, duties, taxes, and handling.

Total Productive Maintenance

TPM

A program that maximizes equipment effectiveness by involving all employees in preventing breakdowns, defects, and losses through proactive and autonomous maintenance.

Toyota Production System

TPS

The manufacturing philosophy developed by Toyota that pursues the elimination of waste through just-in-time flow and built-in quality, the origin of lean manufacturing.

Traceability

The ability to follow the movement and history of a product, its components, and materials forward and backward through the supply chain.

Tracking Signal

A running measure of cumulative forecast error divided by the mean absolute deviation, used to detect when a forecast has developed a persistent bias.

Trend

The long-term upward or downward direction in a demand series, separate from seasonal or random variation.

Twenty-foot Equivalent Unit

TEU

A standard measure of container capacity based on the volume of a twenty-foot shipping container, used to describe ship and terminal throughput.

Two-Bin System

A simple visual replenishment method using two containers of an item; when the first is emptied it triggers a reorder while the second bin covers demand during the lead time.

Value Chain

The full sequence of activities a company performs to design, produce, market, deliver, and support a product, each stage adding value on the way to the customer.

Value Stream Mapping

VSM

A lean technique that diagrams the material and information flow needed to deliver a product, exposing waste and lead-time drivers across the whole process.

Vendor Lead Time

supplier lead time

The elapsed time from placing a purchase order with a supplier to receiving the goods, a key input to reorder points and safety stock.

Vertical Integration

A strategy in which a company owns multiple stages of its supply chain, such as suppliers or distributors, to gain control over cost, quality, and supply.

Visual Management

The use of visual signals, boards, and controls to make the state of work, standards, and problems immediately obvious to everyone in the workplace.

VMI

Vendor-Managed Inventory

Vendor-Managed Inventory: an arrangement where the supplier monitors and replenishes the customer's stock based on shared demand and inventory data.

Water Spider

Mizusumashi

A lean role in which a dedicated worker replenishes materials and supplies to production lines on a fixed route so operators can stay focused on value-adding work.

Wave Picking

A warehouse method that releases groups of orders to be picked together in scheduled waves, coordinating labor and downstream processes like packing and shipping.

Weeks of Supply

WOS

An inventory metric expressing how many weeks current stock would last at the expected rate of demand.

Weighted Moving Average

A moving average that assigns greater weight to more recent periods so the forecast responds faster to recent changes in demand.

Where-used

where-used analysis

A reverse BOM query that lists every parent assembly or product a given component appears in, used to assess the impact of a part change or shortage.

WIP

Work in Process · Work in Progress

Work in Process: partially completed goods that have entered production but are not yet finished, representing inventory and capital tied up on the floor.

WMS

Warehouse Management System

Warehouse Management System: software that directs and tracks warehouse operations such as receiving, put-away, picking, packing, and inventory location.

Work Center

A defined production resource — a machine, cell, or group of workers — against which operations are scheduled and capacity is measured.

Work Order

production order · job order

An authorization to produce a specified quantity of an item by a due date, consuming components per the BOM and following the routing.

XYZ Analysis

A classification that ranks items by the variability or predictability of their demand, complementing ABC value classification to guide inventory policy.

Yard Management

YMS

The coordination of trailers, containers, and vehicles in a facility's yard, including check-in, dock assignment, and moves between staging and doors.

Yield

first-pass yield

The proportion of started units that emerge as good, sellable output, with scrap and rework accounting for the remainder.

Zone Picking

A picking method that divides the warehouse into zones, with each picker handling only their zone as an order passes through or is consolidated across zones.

Zone Skipping

A parcel shipping strategy that trucks a consolidated load closer to its destination region before injecting it into the carrier network, saving on zone-based rates.

Link copied