{"nodes":[{"id":"ai/accuracy","term":{"en":"Accuracy","da":"Nøjagtighed (accuracy)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"The share of all cases a model gets right; simple to read, but it can look excellent when the thing you care about is rare.","da":"Andelen af alle tilfælde, en model rammer rigtigt - let at læse, men den kan se flot ud, når det, man leder efter, er sjældent."},"aka":{"en":["classification accuracy"],"da":["accuracy","træfsikkerhed"]},"depth":3,"degree":4,"requires":["ai/confusion-matrix","ai/classification"],"collides":false,"mentions":["ai/classification","ai/confusion-matrix","ai/precision","ai/recall","ai/f1-score"]},{"id":"ai/activation-function","term":{"en":"Activation function","da":"Aktiveringsfunktion"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"The rule each unit in a neural network applies to its summed input, letting the network learn curved rather than straight patterns.","da":"Reglen, hver enhed i et neuralt netværk bruger på sit samlede input, så netværket kan lære krumme og ikke kun lige mønstre."},"aka":{"en":["nonlinearity"],"da":["activation function"]},"depth":0,"degree":2,"requires":[],"collides":false,"mentions":["ai/neural-network","cs/network"]},{"id":"ai/adversarial-example","term":{"en":"Adversarial example","da":"Adversarielt eksempel"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"An input altered on purpose, often in ways people cannot see, so that a trained AI model gives a confident but wrong answer.","da":"Et input, der er ændret med vilje, ofte usynligt for mennesker, så en færdigtrænet AI-model svarer forkert med stor sikkerhed."},"era":2013,"aka":{"en":["adversarial input"],"da":["adversarielt input"]},"depth":2,"degree":4,"requires":["ai/machine-learning","ai/inference"],"collides":false,"mentions":["ai/machine-learning","ai/neural-network","security/threat-actor","ai/inference","security/it-operations","security/malware","ai/accuracy"]},{"id":"ai/agent-instructions-file","term":{"en":"Agent instructions file","da":"Instruktionsfil til agenter"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"A plain text file kept with the code that tells AI tools the project's rules, commands and habits before they start work.","da":"En almindelig tekstfil, der ligger sammen med koden og fortæller AI-værktøjer projektets regler, kommandoer og vaner, før de går i gang."},"era":2025,"aka":{"en":["AGENTS.md","CLAUDE.md","rules file"],"da":["AGENTS.md","CLAUDE.md","regelfil"]},"depth":7,"degree":6,"requires":["ai/coding-agent"],"collides":false,"mentions":["platform/version-control","ai/coding-agent","ai/context-window"]},{"id":"ai/agent-memory","term":{"en":"Agent memory","da":"Agenthukommelse"},"domain":["ai"],"cluster":"agents","summary":{"en":"Notes an AI agent saves outside the model and reads back later, so it can carry facts and past work from one chat to the next.","da":"Noter, en AI-agent gemmer uden for modellen og læser igen senere, så den kan huske fakta og tidligere arbejde mellem adskilte samtaler."},"era":2023,"aka":{"en":["long-term memory"],"da":["langtidshukommelse"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["ai/ai-agent","cs/database","ai/vector-database","ai/context-window","ai/ai-coding-assistant","cs/log"]},{"id":"ai/agent-sandbox","term":{"en":"Agent sandbox","da":"Agent-sandkasse"},"domain":["ai","security"],"cluster":"agents","summary":{"en":"A walled-off space where an AI agent runs code and uses tools, so a mistake or trick cannot reach the rest of your systems.","da":"Et lukket rum, hvor en AI-agent kører kode og bruger værktøjer, så en fejl eller et trick ikke kan nå resten af ens systemer."},"aka":{"en":["sandboxing"],"da":["sandboxing"]},"depth":5,"degree":7,"requires":["ai/ai-agent"],"collides":false,"mentions":["ai/ai-agent","platform/container","platform/virtual-machine","cs/network","security/it-operations","ai/coding-agent","cs/internet"]},{"id":"ai/agent-to-agent-protocol","term":{"en":"Agent2Agent protocol (A2A)","da":"Agent2Agent-protokol (A2A)"},"domain":["ai"],"cluster":"agents","summary":{"en":"An open standard that lets AI agents built by different companies find each other, hand over tasks and share results.","da":"En åben standard, der lader AI-agenter bygget af forskellige firmaer finde hinanden, give opgaver videre og dele resultater."},"era":2025,"aka":{"en":["A2A","Agent2Agent"],"da":["A2A","Agent2Agent"]},"depth":5,"degree":4,"requires":["ai/ai-agent"],"collides":false,"mentions":["ai/ai-agent","cs/protocol"]},{"id":"ai/agentic-workflow","term":{"en":"Agentic workflow","da":"Agentisk arbejdsgang"},"domain":["ai"],"cluster":"agents","summary":{"en":"A fixed chain of steps written in code, where a language model does some of the steps but does not choose the order.","da":"En fast kæde af trin skrevet i kode, hvor en sprogmodel udfører nogle af trinene, men ikke selv vælger rækkefølgen."},"era":2024,"aka":{"en":["LLM workflow"],"da":["LLM-arbejdsgang"]},"depth":4,"degree":6,"requires":["ai/large-language-model","ai/prompt"],"collides":false,"mentions":["ai/large-language-model","ai/ai-agent","ai/prompt"]},{"id":"ai/ai-agent","term":{"en":"AI agent","da":"AI-agent"},"domain":["ai"],"cluster":"llm","summary":{"en":"An AI system that does not just answer but acts - it plans steps and uses tools such as email, files or web search to reach a goal.","da":"Et AI-system, der ikke bare svarer, men handler - det planlægger trin og bruger værktøjer som mail, filer eller websøgning for at nå et mål."},"era":2023,"aka":{"en":["agentic AI"],"da":["agentisk AI"]},"depth":4,"degree":18,"requires":["ai/large-language-model","ai/prompt"],"collides":false,"mentions":["ai/large-language-model","cs/account"]},{"id":"ai/ai-bias","term":{"en":"AI bias","da":"Bias i AI"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"When an AI system treats some people or cases unfairly because of one-sided data or design choices.","da":"Når et AI-system systematisk behandler nogle mennesker eller sager uretfærdigt på grund af skæve data eller valg i designet."},"era":2016,"aka":{"en":["algorithmic bias","machine learning bias"],"da":["algoritmisk bias","skævhed i AI"]},"depth":2,"degree":15,"requires":["ai/training-data","ai/machine-learning"],"collides":false,"mentions":["ai/training-data"]},{"id":"ai/ai-code-review","term":{"en":"AI code review","da":"AI-kodegennemgang"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"Using a large language model to read proposed code changes and leave comments on bugs, risks and style before a person approves them.","da":"At lade en stor sprogmodel læse foreslåede kodeændringer og kommentere fejl, risici og stil, før et menneske godkender dem."},"aka":{"en":["AI-assisted code review"],"da":["AI-assisteret kodegennemgang"]},"depth":3,"degree":7,"requires":["ai/large-language-model"],"collides":false,"mentions":["ai/large-language-model","security/risk","platform/version-control","security/vulnerability","cs/database"]},{"id":"ai/ai-coding-assistant","term":{"en":"AI coding assistant","da":"AI-kodeassistent"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"A tool built into a programmer's editor that suggests, explains and rewrites code using a large language model.","da":"Et værktøj i programmørens editor, der foreslår, forklarer og omskriver kode ved hjælp af en stor sprogmodel."},"era":2021,"aka":{"en":["coding assistant","AI code assistant"],"da":["kodeassistent","AI-kodehjælper"]},"depth":3,"degree":9,"requires":["ai/large-language-model","ai/context-window"],"collides":false,"mentions":["ai/large-language-model","ai/code-completion","security/it-operations"]},{"id":"ai/ai-governance","term":{"en":"AI governance","da":"AI-governance"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"The rules, roles and checks an organisation uses to decide which AI it uses and to keep that use safe, lawful and fair.","da":"De regler, roller og kontroller, en organisation bruger til at vælge sin AI og holde brugen sikker, lovlig og fair."},"aka":{"en":["AI management system","responsible AI"],"da":["ledelsessystem for AI","ansvarlig AI"]},"depth":5,"degree":9,"requires":["ai/artificial-intelligence","security/risk-management"],"collides":false,"mentions":["security/governance","security/risk-management","security/risk-assessment","ai/eu-ai-act"]},{"id":"ai/ai-pair-programming","term":{"en":"AI pair programming","da":"AI-parprogrammering"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"Writing code together with an AI tool in a running back-and-forth, where the human stays in charge and checks every change.","da":"At skrive kode sammen med et AI-værktøj i en løbende dialog, hvor mennesket bestemmer og tjekker hver ændring."},"era":2021,"aka":{"en":["pair programming with AI"],"da":["parprogrammering med AI"]},"depth":4,"degree":4,"requires":["ai/ai-coding-assistant"],"collides":false,"mentions":["ai/ai-coding-assistant"]},{"id":"ai/ai-red-teaming","term":{"en":"AI red teaming","da":"AI red teaming"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Testers attack an AI system on purpose, before and after release, to find ways it can be tricked into harmful or unsafe behaviour.","da":"Testere angriber med vilje et AI-system før og efter lancering for at finde måder, det kan narres til skadelig eller usikker adfærd."},"era":2023,"aka":{"en":["red teaming of AI systems"],"da":["red teaming af AI-systemer"]},"depth":1,"degree":7,"requires":["ai/artificial-intelligence"],"collides":false,"mentions":["security/threat-actor","ai/prompt-injection","security/data-breach","ai/model-training","ai/eu-ai-act"]},{"id":"ai/ai-supply-chain-attack","term":{"en":"AI supply chain attack","da":"Angreb på AI-forsyningskæden"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Attacking the ready-made parts an AI system is built from - shared models, datasets or plug-in files - instead of the system itself.","da":"At angribe de færdige dele, et AI-system er bygget af - delte modeller, datasæt eller tilføjelser - i stedet for selve systemet."},"aka":{"en":["ML supply chain attack","model supply chain attack"],"da":["angreb på ML-forsyningskæden"]},"depth":3,"degree":8,"requires":["platform/software-supply-chain","ai/model-weights"],"collides":false,"mentions":["ai/model-weights","ai/lora","ai/training-data","security/it-operations","ai/open-weight-model","cs/server"]},{"id":"ai/alignment","term":{"en":"AI alignment","da":"AI-alignment"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"The work of making an AI system aim for what people actually intend, and refuse what they would not accept.","da":"Arbejdet med at få et AI-system til at stræbe efter det, mennesker faktisk mener, og afvise det, de ikke vil acceptere."},"aka":{"en":["value alignment"],"da":["værdialignment","value alignment"]},"depth":2,"degree":6,"requires":["ai/artificial-intelligence","ai/model-training"],"collides":false,"mentions":["ai/open-weight-model","ai/ai-agent"]},{"id":"ai/artificial-intelligence","term":{"en":"Artificial intelligence (AI)","da":"Kunstig intelligens (AI)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Computer systems that do tasks we normally link to human thinking, such as spotting patterns, answering questions or making choices.","da":"Computersystemer, der løser opgaver, vi forbinder med menneskelig tænkning, fx at genkende mønstre, svare på spørgsmål eller træffe valg."},"era":1956,"aka":{"en":["AI"],"da":["AI"]},"depth":0,"degree":9,"requires":[],"collides":false,"mentions":["ai/label","security/risk","ai/eu-ai-act"]},{"id":"ai/attention-mechanism","term":{"en":"Attention mechanism","da":"Attention-mekanisme"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"The step inside a model that decides, for each token, which other tokens in the input matter most right now.","da":"Det trin i en model, der for hvert token afgør, hvilke andre tokens i inputtet der betyder mest lige nu."},"era":2014,"aka":{"en":["attention","self-attention"],"da":["attention","self-attention"]},"depth":2,"degree":7,"requires":["ai/embedding"],"collides":false,"mentions":["ai/token","ai/neural-network","ai/embedding","ai/context-window"]},{"id":"ai/backpropagation","term":{"en":"Backpropagation","da":"Backpropagation"},"domain":["ai"],"cluster":"training","summary":{"en":"The bookkeeping method that works out, layer by layer from the output back, how much each weight in a network added to its mistake.","da":"Den regnemetode, der lag for lag fra output og bagud finder ud af, hvor meget hver vægt i et netværk bidrog til fejlen."},"era":1986,"aka":{"en":["backprop","backward pass"],"da":["backprop","tilbagepropagering"]},"depth":4,"degree":6,"requires":["ai/neural-network","ai/gradient-descent"],"collides":false,"mentions":["cs/network","ai/neural-network","ai/gradient-descent","ai/model-weights","ai/deep-learning"]},{"id":"ai/batch-size","term":{"en":"Batch size","da":"Batchstørrelse"},"domain":["ai"],"cluster":"training","summary":{"en":"How many examples a model looks at together before it updates itself once during model training.","da":"Hvor mange eksempler en model ser på samlet, før den opdaterer sig selv én gang under modeltræning."},"aka":{"en":["mini-batch size"],"da":["batch size"]},"depth":2,"degree":5,"requires":["ai/model-training"],"collides":false,"mentions":["ai/model-training","ai/training-data","ai/gradient-descent","ai/gpu","ai/learning-rate"]},{"id":"ai/benchmark","term":{"en":"Benchmark","da":"Benchmark"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"A shared, public set of tasks with a fixed way of scoring, so that different models can be compared on the same terms.","da":"Et fælles, offentligt sæt opgaver med en fast måde at give point på, så forskellige modeller kan sammenlignes på lige vilkår."},"aka":{"en":["benchmark suite","benchmark dataset"],"da":["benchmark-suite","benchmarkdatasæt"]},"depth":3,"degree":4,"requires":["ai/test-set"],"collides":false,"mentions":["ai/large-language-model","ai/training-data"]},{"id":"ai/bias-variance-tradeoff","term":{"en":"Bias-variance trade-off","da":"Bias-varians-afvejning"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"The tension between a model too simple to catch the real pattern and one so flexible that it chases chance details in its examples.","da":"Spændingen mellem en model, der er for simpel til at fange det egentlige mønster, og en så fleksibel, at den jagter tilfældige detaljer."},"aka":{"en":["bias-variance tradeoff","bias-variance dilemma"],"da":["bias-variance trade-off","bias-varians-dilemmaet"]},"depth":4,"degree":3,"requires":["ai/overfitting","ai/underfitting"],"collides":false,"mentions":["ai/training-data","ai/validation-set"]},{"id":"ai/chain-of-thought","term":{"en":"Chain-of-thought (CoT)","da":"Tankekæde (chain-of-thought)"},"domain":["ai"],"cluster":"prompting","summary":{"en":"Getting a language model to write out its steps before the final answer, which tends to help on sums, logic and planning.","da":"At få en sprogmodel til at skrive sine mellemregninger ud før det endelige svar, hvilket ofte hjælper på regnestykker, logik og planlægning."},"era":2022,"aka":{"en":["CoT","chain-of-thought prompting"],"da":["CoT","chain-of-thought"]},"depth":2,"degree":5,"requires":["ai/next-token-prediction"],"collides":false,"mentions":["ai/large-language-model"]},{"id":"ai/chunking","term":{"en":"Chunking","da":"Opdeling i bidder (chunking)"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"Cutting long documents into smaller passages before storing them, so a search can return just the part that answers a question.","da":"At skære lange dokumenter op i mindre afsnit, før de gemmes, så en søgning kan hente netop den del, der besvarer et spørgsmål."},"aka":{"en":["text splitting"],"da":["tekstopdeling"]},"depth":2,"degree":4,"requires":["ai/token","ai/context-window"],"collides":false,"mentions":["ai/token","ai/embedding","ai/context-window"]},{"id":"ai/classification","term":{"en":"Classification","da":"Klassifikation"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Teaching a computer to sort each new case into one of a fixed set of groups, such as approve or reject, or real attack or false alarm.","da":"At lære en computer at sortere hvert nyt tilfælde i én af nogle faste grupper, fx godkend eller afvis, ægte angreb eller falsk alarm."},"aka":{"en":[],"da":["klassificering","classification"]},"depth":0,"degree":13,"requires":[],"collides":false,"mentions":["security/false-positive","ai/machine-learning","ai/label"]},{"id":"ai/clustering","term":{"en":"Clustering","da":"Klyngeanalyse (clustering)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Letting a computer put similar items into groups by itself, with no names or right answers given in advance.","da":"At lade en computer selv dele ting, der ligner hinanden, op i grupper, uden at navne eller rigtige svar er givet på forhånd."},"aka":{"en":[],"da":["clustering","klyngedannelse"]},"depth":1,"degree":7,"requires":["ai/training-data"],"collides":false,"mentions":["ai/machine-learning","ai/label"]},{"id":"ai/code-completion","term":{"en":"Code completion","da":"Kodefuldførelse (code completion)"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"Greyed-out code that appears as you type, predicting the next line or block so you can accept it with one key.","da":"Grå kode, der dukker op, mens du skriver, og gætter næste linje eller blok, så du kan tage imod den med én tast."},"aka":{"en":["AI code completion","inline code suggestions"],"da":["AI-kodefuldførelse","kodeforslag i linjen"]},"depth":3,"degree":5,"requires":["ai/fill-in-the-middle","ai/next-token-prediction"],"collides":false,"mentions":["ai/feature","ai/fill-in-the-middle"]},{"id":"ai/coding-agent","term":{"en":"Coding agent","da":"Kodeagent"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"An AI that is given a programming task and carries it out itself - reading files, running commands and editing code until done.","da":"En AI, der får en programmeringsopgave og selv udfører den - læser filer, kører kommandoer og retter kode, til den er færdig."},"era":2024,"aka":{"en":["agentic coding tool","software engineering agent"],"da":["agentisk kodeværktøj"]},"depth":6,"degree":14,"requires":["ai/tool-calling"],"collides":false,"mentions":["ai/ai-agent","platform/version-control","ai/tool-calling"]},{"id":"ai/computer-use","term":{"en":"Computer use","da":"Computerbrug (computer use)"},"domain":["ai"],"cluster":"agents","summary":{"en":"Letting an AI agent work a computer like a person does - it looks at pictures of the screen and moves the mouse and types.","da":"At lade en AI-agent betjene en computer, som et menneske gør - den ser på billeder af skærmen, flytter musen og skriver."},"era":2024,"aka":{"en":["computer-using agent"],"da":["computerbrugende agent"]},"depth":5,"degree":6,"requires":["ai/ai-agent","ai/multimodal-model"],"collides":false,"mentions":["ai/ai-agent","ai/tool-calling","ai/multimodal-model","cs/api"]},{"id":"ai/confusion-matrix","term":{"en":"Confusion matrix","da":"Forvekslingsmatrix (confusion matrix)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"A small table that counts, for every true class, how often a model gave each answer, showing exactly which mistakes it makes.","da":"En lille tabel, der for hver sand klasse tæller, hvor ofte en model gav hvert svar - og viser præcis, hvilke fejl den begår."},"aka":{"en":["error matrix"],"da":["confusion matrix","fejlmatrix"]},"depth":2,"degree":8,"requires":["ai/classification","ai/supervised-learning"],"collides":false,"mentions":["ai/classification","security/false-positive","ai/accuracy","ai/precision","ai/recall"]},{"id":"ai/context-engineering","term":{"en":"Context engineering","da":"Context engineering"},"domain":["ai"],"cluster":"prompting","summary":{"en":"Choosing all a language model gets to see for a task - instructions, fetched documents, tool results, notes - not just the wording.","da":"At vælge alt, hvad en LLM får at se til en opgave - instruktioner, hentede dokumenter, værktøjsresultater og noter - og ikke kun ordlyden."},"era":2025,"depth":2,"degree":6,"requires":["ai/context-window"],"collides":false,"mentions":["ai/large-language-model","ai/context-window","ai/system-prompt","ai/token","ai/coding-agent"]},{"id":"ai/context-window","term":{"en":"Context window","da":"Kontekstvindue"},"domain":["ai"],"cluster":"llm","summary":{"en":"The most text, counted in tokens, that a language model can take in and keep in view at one time, including its own answer.","da":"Den største mængde tekst, målt i tokens, som en sprogmodel kan tage ind og have for øje på én gang, inklusive sit eget svar."},"aka":{"en":["context length"],"da":["kontekstlængde"]},"depth":1,"degree":12,"requires":["ai/token"],"collides":false,"mentions":["ai/token","ai/large-language-model","ai/prompt"]},{"id":"ai/convolutional-neural-network","term":{"en":"Convolutional neural network (CNN)","da":"Foldningsnetværk (CNN)"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"A neural network built for pictures - it slides small pattern checks across an image to find edges, then shapes, then whole objects.","da":"Et neuralt netværk bygget til billeder - små mønstertjek glider hen over billedet og finder kanter, så former, så hele genstande."},"era":1989,"aka":{"en":["CNN","ConvNet"],"da":["CNN","konvolutionelt neuralt netværk"]},"depth":5,"degree":6,"requires":["ai/backpropagation"],"collides":false,"mentions":["ai/neural-network","ai/feature","ai/transformer"]},{"id":"ai/cosine-similarity","term":{"en":"Cosine similarity","da":"Cosinuslighed"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"A score from -1 to 1 for how closely two lists of numbers point the same way, used to tell how alike two embeddings are in meaning.","da":"En score fra -1 til 1 for, hvor meget to lister af tal peger i samme retning, brugt til at afgøre, hvor ens to embeddings er i betydning."},"depth":2,"degree":5,"requires":["ai/embedding"],"collides":false,"mentions":["ai/embedding","cs/password"]},{"id":"ai/cross-validation","term":{"en":"Cross-validation","da":"Krydsvalidering"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"Checking a model fairly by splitting the examples into parts and letting each part in turn be the one held back for testing.","da":"At vurdere en model retfærdigt ved at dele eksemplerne op i dele og lade hver del på skift være den, der holdes tilbage til test."},"aka":{"en":["k-fold cross-validation"],"da":["k-fold-krydsvalidering","cross-validation"]},"depth":1,"degree":3,"requires":["ai/training-data"],"collides":false,"mentions":["security/risk"]},{"id":"ai/data-drift","term":{"en":"Data drift","da":"Dataskred (data drift)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"The slow or sudden change in real-world data after a model goes live, so it no longer looks like what the model learned from.","da":"Den langsomme eller pludselige ændring i virkelighedens data, efter en model er sat i drift, så de ikke længere ligner det, den lærte af."},"aka":{"en":["dataset shift","distribution shift"],"da":["datasætskred"]},"depth":1,"degree":4,"requires":["ai/training-data","ai/inference"],"collides":false,"mentions":["ai/inference","ai/training-data","cs/service"]},{"id":"ai/data-labeling","term":{"en":"Data labeling","da":"Datamærkning (data labeling)"},"domain":["ai"],"cluster":"training","summary":{"en":"Having people (or tools) attach the right answer to each example, such as “cat”, “complaint” or “angry”, so a model can learn from it.","da":"At lade mennesker (eller værktøjer) sætte det rigtige svar på hvert eksempel - “kat”, “klage”, “vred” - så en model kan lære af det."},"aka":{"en":["data annotation","data labelling"],"da":["data labeling","annotering"]},"depth":1,"degree":3,"requires":["ai/training-data"],"collides":false,"mentions":["ai/supervised-learning","ai/training-data","security/business-impact-analysis"]},{"id":"ai/data-poisoning","term":{"en":"Data poisoning","da":"Dataforgiftning (data poisoning)"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Slipping false or harmful examples into the data an AI learns from so that it later behaves the way an attacker wants.","da":"At smugle falske eller skadelige eksempler ind i de data, en AI lærer af, så den senere opfører sig, som en angriber ønsker."},"aka":{"en":["training data poisoning","model poisoning"],"da":["forgiftning af træningsdata"]},"depth":2,"degree":6,"requires":["ai/model-training"],"collides":false,"mentions":["security/threat-actor","security/integrity","ai/machine-learning","ai/label","ai/training-data"]},{"id":"ai/decision-tree","term":{"en":"Decision tree","da":"Beslutningstræ"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A model that reaches an answer by asking a chain of yes or no questions about the input, each answer leading to the next question.","da":"En model, der når frem til et svar ved at stille en række ja/nej-spørgsmål om input, hvor hvert svar fører til det næste spørgsmål."},"aka":{"en":["CART","classification tree","regression tree"],"da":["beslutningstræer","klassifikationstræ","regressionstræ"]},"depth":2,"degree":7,"requires":["ai/feature"],"collides":false,"mentions":["ai/training-data","ai/feature"]},{"id":"ai/decoder","term":{"en":"Decoder","da":"Decoder"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"The half of a model that writes output one token at a time, each new token based only on what came before it.","da":"Den halvdel af en model, der skriver output ét token ad gangen, hvor hvert nyt token kun bygger på det, der kom før."},"depth":3,"degree":7,"requires":["ai/token","ai/attention-mechanism"],"collides":false,"mentions":["ai/token","ai/neural-network","ai/encoder","ai/large-language-model"]},{"id":"ai/deep-learning","term":{"en":"Deep learning","da":"Deep learning"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Machine learning that uses neural networks with many stacked layers, the approach behind modern image, speech and language tools.","da":"Maskinlæring med neurale netværk i mange lag oven på hinanden - metoden bag moderne værktøjer til billeder, tale og sprog."},"era":2012,"aka":{"en":[],"da":["dyb læring"]},"depth":1,"degree":10,"requires":["ai/neural-network"],"collides":false,"mentions":["ai/machine-learning","ai/neural-network","ai/feature"]},{"id":"ai/deepfake","term":{"en":"Deepfake","da":"Deepfake"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"A fake but convincing video, image or voice recording made with AI to show someone saying or doing what they never did.","da":"Falsk, men overbevisende video, billede eller stemme lavet med AI, der viser nogen sige eller gøre noget, de aldrig har gjort."},"era":2017,"aka":{"en":["voice clone","synthetic media"],"da":["stemmekloning","syntetiske medier"]},"depth":3,"degree":8,"requires":["ai/deep-learning","ai/generative-ai"],"collides":false,"mentions":["ai/deep-learning","cs/account","ai/eu-ai-act"]},{"id":"ai/diffusion-model","term":{"en":"Diffusion model","da":"Diffusionsmodel"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"The kind of generative AI behind many image makers, which starts from random static and cleans it up step by step into a picture.","da":"Den slags generativ AI bag mange billedgeneratorer, der starter fra tilfældig sne og renser den trin for trin til et billede."},"era":2020,"aka":{"en":["denoising diffusion model"],"da":["støjfjernende diffusionsmodel"]},"depth":2,"degree":7,"requires":["ai/deep-learning"],"collides":false,"mentions":["ai/generative-ai","ai/deep-learning","ai/prompt","ai/deepfake"]},{"id":"ai/dimensionality-reduction","term":{"en":"Dimensionality reduction","da":"Dimensionsreduktion"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Squeezing many inputs about each example into a few new ones that keep most of what tells the examples apart.","da":"At presse mange input om hvert eksempel sammen til få nye, der bevarer det meste af det, der adskiller eksemplerne."},"aka":{"en":["dimension reduction"],"da":["reduktion af dimensioner"]},"depth":2,"degree":5,"requires":["ai/feature"],"collides":false,"mentions":["ai/feature"]},{"id":"ai/embedding","term":{"en":"Embedding","da":"Embedding"},"domain":["ai"],"cluster":"llm","summary":{"en":"A list of numbers that stands for the meaning of a piece of text, so that texts with similar meaning end up with similar numbers.","da":"En liste af tal, der står for betydningen af et stykke tekst, så tekster med lignende betydning ender med lignende tal."},"era":2013,"aka":{"en":["vector embedding"],"da":["vektorrepræsentation"]},"depth":1,"degree":16,"requires":["ai/neural-network","ai/token"],"collides":false,"mentions":["ai/neural-network","ai/token"]},{"id":"ai/embedding-model","term":{"en":"Embedding model","da":"Embedding-model"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"A model that reads a piece of text and gives back an embedding instead of writing an answer.","da":"En model, der læser et stykke tekst og giver en embedding tilbage i stedet for at skrive et svar."},"aka":{"en":["embedder"],"da":["embedder"]},"depth":2,"degree":7,"requires":["ai/embedding","ai/transformer"],"collides":false,"mentions":["ai/embedding","ai/neural-network","ai/transformer","ai/cosine-similarity","ai/label"]},{"id":"ai/encoder","term":{"en":"Encoder","da":"Encoder"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"The half of a model that reads the whole input at once and turns it into embeddings that capture its meaning.","da":"Den halvdel af en model, der læser hele inputtet på én gang og gør det til embeddings, som fanger betydningen."},"depth":3,"degree":7,"requires":["ai/token","ai/embedding","ai/attention-mechanism"],"collides":false,"mentions":["ai/embedding","ai/neural-network","ai/token","ai/label"]},{"id":"ai/epoch","term":{"en":"Epoch","da":"Epoke (epoch)"},"domain":["ai"],"cluster":"training","summary":{"en":"One complete pass of model training through every example in the training data; training often runs for several.","da":"Én fuld gennemgang af alle eksempler i træningsdata under modeltræning; træningen kører ofte flere."},"aka":{"en":["training epoch"],"da":["epoch","træningsepoke"]},"depth":1,"degree":4,"requires":["ai/training-data"],"collides":false,"mentions":["ai/model-training","ai/training-data","ai/hyperparameter","ai/validation-set","ai/underfitting","ai/overfitting"]},{"id":"ai/eu-ai-act","term":{"en":"EU AI Act","da":"EU's AI-forordning"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"The EU law that sorts AI systems by how much harm they could cause and sets stricter rules the higher the risk.","da":"EU-loven, der inddeler AI-systemer efter, hvor stor skade de kan gøre, og stiller skrappere krav, jo højere risikoen er."},"era":2024,"aka":{"en":["AI Act","Artificial Intelligence Act","Regulation (EU) 2024/1689"],"da":["AI-forordningen","AI Act","forordning (EU) 2024/1689"]},"depth":4,"degree":13,"requires":["security/risk","ai/artificial-intelligence"],"collides":false,"mentions":["security/risk","security/eu-regulation","ai/deepfake","ai/general-purpose-ai-model","cs/log"]},{"id":"ai/excessive-agency","term":{"en":"Excessive agency","da":"Overdreven handlefrihed (excessive agency)"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Giving an AI system more tools, rights or freedom to act than its job needs, so one wrong or tricked step can do real damage.","da":"At give et AI-system flere værktøjer, rettigheder eller mere frihed, end opgaven kræver, så ét forkert skridt kan gøre reel skade."},"era":2023,"depth":6,"degree":8,"requires":["ai/ai-agent","ai/tool-calling"],"collides":false,"mentions":["security/vulnerability","ai/large-language-model","cs/permission","security/risk"]},{"id":"ai/explainability","term":{"en":"Explainability","da":"Forklarlighed"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"How well people can understand why an AI system reached a particular result.","da":"Hvor godt mennesker kan forstå, hvorfor et AI-system nåede frem til et bestemt resultat."},"era":2016,"aka":{"en":["explainable AI","XAI","interpretability"],"da":["forklarbar AI","XAI"]},"depth":2,"degree":7,"requires":["ai/machine-learning"],"collides":false,"mentions":[]},{"id":"ai/f1-score","term":{"en":"F1 score","da":"F1-score"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"One number that blends precision and recall, so it stays low unless a model both finds the real cases and avoids wrong flags.","da":"Ét tal, der vejer præcision og genkaldelse sammen og kun bliver højt, når modellen både finder de ægte tilfælde og undgår fejlmarkeringer."},"era":1979,"aka":{"en":["F-score","F-measure"],"da":["F-mål","F1-mål"]},"depth":4,"degree":4,"requires":["ai/precision","ai/recall"],"collides":false,"mentions":["ai/precision","ai/recall","security/it-operations","ai/accuracy"]},{"id":"ai/feature","term":{"en":"Feature","da":"Feature (inputvariabel)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"One measurable fact about an example, such as a price or an age, that a model reads as input when it makes a guess.","da":"Én målbar oplysning om et eksempel, fx en pris eller en alder, som en model læser som input, når den skal gætte."},"aka":{"en":["input variable"],"da":["inputvariabel","forklarende variabel"]},"depth":1,"degree":9,"requires":["ai/training-data"],"collides":false,"mentions":["ai/training-data","ai/label"]},{"id":"ai/feature-engineering","term":{"en":"Feature engineering","da":"Feature engineering"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Turning raw records into useful inputs for a model, by picking, cleaning, combining and reshaping the facts it will read.","da":"At omsætte rå registreringer til nyttige input for en model ved at vælge, rense, kombinere og omforme de oplysninger, den skal læse."},"depth":2,"degree":4,"requires":["ai/feature"],"collides":false,"mentions":["ai/feature","ai/model-training"]},{"id":"ai/few-shot-prompting","term":{"en":"Few-shot prompting","da":"Few-shot prompting"},"domain":["ai"],"cluster":"prompting","summary":{"en":"Showing a language model a handful of worked examples inside the request, so it copies the pattern for the new case.","da":"At vise en sprogmodel en håndfuld løste eksempler i selve forespørgslen, så den efterligner mønstret i det nye tilfælde."},"era":2020,"depth":4,"degree":5,"requires":["ai/prompt"],"collides":false,"mentions":["ai/large-language-model","ai/prompt","ai/inference","ai/model-weights","cs/service","ai/fine-tuning","ai/context-window"]},{"id":"ai/fill-in-the-middle","term":{"en":"Fill-in-the-middle (FIM)","da":"Fill-in-the-middle (FIM)"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"A training trick that teaches a model to write the missing piece between the text before a gap and the text after it.","da":"Et træningstrick, der lærer en model at skrive det manglende stykke mellem teksten før et hul og teksten efter det."},"era":2022,"aka":{"en":["FIM","infilling","code infilling"],"da":["FIM","infilling"]},"depth":2,"degree":5,"requires":["ai/next-token-prediction","ai/token"],"collides":false,"mentions":["ai/model-training","ai/pretraining","ai/token","ai/next-token-prediction"]},{"id":"ai/fine-tuning","term":{"en":"Fine-tuning","da":"Finjustering (fine-tuning)"},"domain":["ai"],"cluster":"llm","summary":{"en":"Giving an already trained model a short extra round of training on a smaller, focused set of examples to change how it behaves.","da":"At give en allerede trænet model en kort ekstra træningsrunde på et mindre, målrettet sæt eksempler for at ændre dens adfærd."},"aka":{"en":[],"da":["fine-tuning","finjustering"]},"depth":0,"degree":11,"requires":[],"collides":false,"mentions":["ai/model-training","ai/model-weights","ai/large-language-model","security/personal-data"]},{"id":"ai/foundation-model","term":{"en":"Foundation model","da":"Grundmodel (foundation model)"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"A large model built once on huge amounts of broad data and then reused as the starting point for many different tasks.","da":"En stor model, der bygges én gang på enorme mængder bred data og derefter genbruges som udgangspunkt for mange forskellige opgaver."},"era":2021,"aka":{"en":[],"da":["foundation model"]},"depth":3,"degree":9,"requires":["ai/pretraining","ai/self-supervised-learning"],"collides":false,"mentions":["ai/deep-learning","ai/pretraining","ai/self-supervised-learning","ai/fine-tuning","ai/prompt","security/business-impact-analysis","security/vulnerability"]},{"id":"ai/general-purpose-ai-model","term":{"en":"General-purpose AI model (GPAI)","da":"AI-model til almen brug (GPAI)"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"The EU AI Act's name for a broad model that can handle many different tasks and be built into many other AI products.","da":"EU's AI-forordnings betegnelse for en bred model, der kan klare mange forskellige opgaver og bygges ind i mange andre AI-produkter."},"era":2024,"aka":{"en":["GPAI","GPAI model"],"da":["GPAI","GPAI-model"]},"depth":5,"degree":4,"requires":["ai/eu-ai-act"],"collides":false,"mentions":["ai/eu-ai-act","ai/model-training","security/risk","ai/large-language-model","ai/training-data"]},{"id":"ai/generative-ai","term":{"en":"Generative AI","da":"Generativ AI"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"AI that creates new content (text, images, sound, code) in the style of the examples it learned from, instead of only sorting or scoring.","da":"AI, der skaber nyt indhold - tekst, billeder, lyd, kode - i stil med de eksempler, den har lært af, i stedet for kun at sortere eller score."},"era":2022,"aka":{"en":["GenAI"],"da":["GenAI","generativ kunstig intelligens"]},"depth":2,"degree":9,"requires":["ai/deep-learning"],"collides":false,"mentions":["ai/deep-learning","ai/training-data","security/threat-actor"]},{"id":"ai/gpu","term":{"en":"Graphics processing unit (GPU)","da":"Grafikprocessor (GPU)"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"A chip first built to draw screen images that does thousands of small sums at once, which is why it now runs most AI work.","da":"En chip bygget til skærmbilleder, der laver tusindvis af små beregninger på én gang og derfor nu driver det meste AI-arbejde."},"era":1999,"aka":{"en":["GPU"],"da":["GPU"]},"depth":0,"degree":8,"requires":[],"collides":false,"mentions":["security/data-processor","ai/neural-network","security/it-operations","ai/open-weight-model","ai/model-weights","cs/service"]},{"id":"ai/gradient-boosting","term":{"en":"Gradient boosting","da":"Gradient boosting"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A method that adds small decision trees one after another, each built to fix the mistakes the trees before it still make.","da":"En metode, der tilføjer små beslutningstræer ét ad gangen, hvor hvert nyt træ bygges til at rette de fejl, de tidligere træer stadig laver."},"aka":{"en":["gradient boosted trees","GBM","XGBoost"],"da":["gradient boosted trees","GBM","XGBoost"]},"depth":3,"degree":4,"requires":["ai/decision-tree","ai/loss-function"],"collides":false,"mentions":["ai/decision-tree","ai/loss-function","ai/deep-learning"]},{"id":"ai/gradient-descent","term":{"en":"Gradient descent","da":"Gradientnedstigning (gradient descent)"},"domain":["ai"],"cluster":"training","summary":{"en":"The step-by-step method most models learn by, which nudges every setting a little in whichever direction makes the error shrink.","da":"Den trinvise metode, de fleste modeller lærer med - skub hver indstilling en smule i den retning, der gør fejlen mindre."},"aka":{"en":["stochastic gradient descent"],"da":["gradient descent"]},"depth":3,"degree":6,"requires":["ai/loss-function","ai/model-parameter"],"collides":false,"mentions":["security/nudging","ai/loss-function","ai/model-parameter","ai/hyperparameter","ai/learning-rate","ai/neural-network","ai/model-training"]},{"id":"ai/grounding","term":{"en":"Grounding","da":"Forankring (grounding)"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"Tying a model's answer to sources supplied with the question, so each claim can be traced back to a given document.","da":"At binde en models svar til kilder, der gives med spørgsmålet, så hver påstand kan føres tilbage til et bestemt dokument."},"aka":{"en":["grounded generation"],"da":["forankret generering"]},"depth":3,"degree":4,"requires":["ai/large-language-model","ai/context-window"],"collides":false,"mentions":["ai/context-window"]},{"id":"ai/guardrails","term":{"en":"Guardrails","da":"Guardrails (sikkerhedsværn)"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"Checks placed around an AI system that block unsafe requests going in and harmful or leaking answers coming out.","da":"Kontroller rundt om et AI-system, der stopper usikre forespørgsler på vej ind og skadelige eller lækkende svar på vej ud."},"aka":{"en":["AI guardrails","safety filters"],"da":["AI-guardrails","sikkerhedsfiltre"]},"depth":3,"degree":7,"requires":["ai/large-language-model"],"collides":false,"mentions":["ai/large-language-model","ai/jailbreak","security/personal-data","cs/service","ai/model-training"]},{"id":"ai/hallucination","term":{"en":"Hallucination","da":"Hallucination"},"domain":["ai"],"cluster":"llm","summary":{"en":"When an AI model states something false or made up - a fact, a quote, a source - in the same confident tone as a true answer.","da":"Når en AI-model finder på noget, der ikke er sandt - et faktum, et citat, en kilde - og siger det lige så sikkert som et sandt svar."},"era":2022,"aka":{"en":["confabulation","AI hallucination","LLM hallucination"],"da":["konfabulering","AI-hallucination","sprogmodel-hallucination","opdigtede svar"]},"depth":1,"degree":12,"requires":["ai/inference"],"collides":false,"mentions":[]},{"id":"ai/human-in-the-loop","term":{"en":"Human-in-the-loop (HITL)","da":"Menneske i løkken (HITL)"},"domain":["ai"],"cluster":"agents","summary":{"en":"Designing an AI system so a person must check or approve its work at key points before it takes effect.","da":"At indrette et AI-system, så en person skal tjekke eller godkende dets arbejde på vigtige punkter, før det får virkning."},"aka":{"en":["HITL"],"da":["HITL","human-in-the-loop"]},"depth":0,"degree":11,"requires":[],"collides":false,"mentions":["ai/ai-agent"]},{"id":"ai/hybrid-search","term":{"en":"Hybrid search","da":"Hybrid søgning"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"Running a word-matching search and a meaning-based search side by side and merging their results into one list.","da":"At køre en ordbaseret og en betydningsbaseret søgning side om side og flette deres resultater sammen til én liste."},"depth":4,"degree":4,"requires":["ai/keyword-search","ai/semantic-search"],"collides":false,"mentions":["ai/keyword-search","ai/semantic-search","ai/label"]},{"id":"ai/hyperparameter","term":{"en":"Hyperparameter","da":"Hyperparameter"},"domain":["ai"],"cluster":"training","summary":{"en":"A setting a person chooses before model training starts, such as step size or number of rounds, and that the model does not learn itself.","da":"En indstilling, et menneske vælger, før modeltræningen starter - fx skridtstørrelse eller antal runder - som modellen ikke selv lærer."},"aka":{"en":["training setting"],"da":["træningsindstilling"]},"depth":2,"degree":8,"requires":["ai/model-training"],"collides":false,"mentions":["ai/model-training","ai/learning-rate","ai/training-data","ai/validation-set","ai/batch-size"]},{"id":"ai/inference","term":{"en":"Inference","da":"Inferens"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Using an already trained model to produce an answer for new input, which is what happens each time you ask a chat assistant something.","da":"At bruge en færdigtrænet model til at give et svar på nyt input - det, der sker, hver gang du spørger en chatassistent om noget."},"depth":0,"degree":13,"requires":[],"collides":false,"mentions":["ai/model-weights","ai/label","cs/server","cs/service","security/risk"]},{"id":"ai/instruction-tuning","term":{"en":"Instruction tuning","da":"Instruktionstilpasning (instruction tuning)"},"domain":["ai"],"cluster":"training","summary":{"en":"Extra training on many written requests paired with good answers, which turns a text-continuing base model into one that follows orders.","da":"Ekstra træning på skrevne forespørgsler med gode svar, som gør en basismodel, der blot fortsætter tekst, til en, der følger ordrer."},"era":2021,"aka":{"en":["supervised fine-tuning","SFT"],"da":["instruction tuning","SFT"]},"depth":3,"degree":9,"requires":["ai/pretraining","ai/large-language-model"],"collides":false,"mentions":["ai/model-training","ai/fine-tuning","ai/large-language-model","ai/pretraining","cs/service","ai/open-weight-model"]},{"id":"ai/jailbreak","term":{"en":"Jailbreak","da":"Jailbreak"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Talking an AI chat assistant out of its own safety rules with cleverly worded requests, such as role-play or made-up emergencies.","da":"At snakke en AI-chatbot fra dens egne sikkerhedsregler med snedigt formulerede forespørgsler som rollespil eller opdigtede nødsituationer."},"era":2022,"aka":{"en":["jailbreaking","LLM jailbreak"],"da":["jailbreaking"]},"depth":5,"degree":7,"requires":["ai/system-prompt","ai/large-language-model","ai/alignment"],"collides":false,"mentions":["ai/prompt","ai/large-language-model","ai/model-training","ai/system-prompt","security/denial-of-service","security/risk"]},{"id":"ai/k-means","term":{"en":"k-means clustering","da":"k-means-klyngeanalyse"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A method that splits data into a chosen number of groups by moving each group's centre until every point sits with its nearest centre.","da":"En metode, der deler data i et valgt antal grupper ved at flytte hver gruppes midtpunkt, til hvert punkt hører til det nærmeste midtpunkt."},"aka":{"en":["k-means"],"da":["k-means"]},"depth":2,"degree":4,"requires":["ai/feature","ai/unsupervised-learning"],"collides":false,"mentions":["ai/clustering"]},{"id":"ai/keyword-search","term":{"en":"Keyword search","da":"Nøgleordssøgning"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"Finding texts that contain the same words as the question, ranked by how often those words appear and how rare they are overall.","da":"At finde tekster, der indeholder de samme ord som spørgsmålet, rangeret efter hvor ofte ordene står der, og hvor sjældne de er i alt."},"aka":{"en":["lexical search","full-text search","BM25"],"da":["leksikalsk søgning","fritekstsøgning","BM25"]},"depth":0,"degree":4,"requires":[],"collides":false,"mentions":[]},{"id":"ai/knowledge-cutoff","term":{"en":"Knowledge cutoff","da":"Vidensgrænse (knowledge cutoff)"},"domain":["ai"],"cluster":"llm","summary":{"en":"The date after which a language model saw no new text, so on its own it knows nothing about events that came later.","da":"Datoen, hvorefter en sprogmodel ikke har set ny tekst, så den af sig selv intet ved om begivenheder, der kom senere."},"aka":{"en":["training cutoff","cutoff date"],"da":["knowledge cutoff","skæringsdato"]},"depth":2,"degree":6,"requires":["ai/training-data","ai/model-training"],"collides":false,"mentions":["ai/large-language-model","ai/training-data"]},{"id":"ai/knowledge-distillation","term":{"en":"Knowledge distillation","da":"Vidensdestillation (distillation)"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"Training a small “student” model to copy the answers of a large “teacher” model, so it keeps much of the skill at a fraction of the size.","da":"At træne en lille “elev”-model til at efterligne svar fra en stor “lærer”-model, så den bevarer meget af evnen i langt mindre format."},"era":2015,"aka":{"en":["distillation","model distillation"],"da":["destillation","modeldestillation"]},"depth":2,"degree":5,"requires":["ai/model-training"],"collides":false,"mentions":["ai/model-training","ai/training-data","cs/service","cs/server"]},{"id":"ai/kv-cache","term":{"en":"KV cache","da":"KV-cache"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"Memory where a language model keeps work it already did on earlier tokens, so each new word does not mean rereading everything.","da":"Hukommelse, hvor en sprogmodel gemmer arbejdet med tidligere tokens, så hvert nyt ord ikke kræver, at alt læses forfra."},"aka":{"en":["key-value cache"],"da":["key-value-cache"]},"depth":3,"degree":9,"requires":["ai/attention-mechanism","ai/token"],"collides":false,"mentions":["ai/large-language-model","ai/token","ai/inference","ai/transformer","ai/attention-mechanism","ai/gpu","ai/model-weights","ai/context-window"]},{"id":"ai/label","term":{"en":"Label","da":"Label (mærkat)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"The right answer attached to a training example, such as \"spam\" or a sale price, that a model learns to give on its own.","da":"Det rigtige svar knyttet til et træningseksempel, fx \"spam\" eller en salgspris, som en model lærer selv at give."},"aka":{"en":["target variable","ground truth"],"da":["målvariabel"]},"depth":0,"degree":3,"requires":[],"collides":false,"mentions":["ai/model-training","ai/training-data","ai/supervised-learning"]},{"id":"ai/large-language-model","term":{"en":"Large language model (LLM)","da":"Stor sprogmodel (LLM)"},"domain":["ai"],"cluster":"llm","summary":{"en":"A very large model trained on huge amounts of text to predict the next word, which lets it write, sum up and answer in fluent language.","da":"En meget stor model, trænet på enorme mængder tekst til at forudsige det næste ord, så den kan skrive, opsummere og svare i flydende sprog."},"era":2020,"aka":{"en":["LLM","language model"],"da":["LLM","sprogmodel"]},"depth":2,"degree":31,"requires":["ai/transformer","ai/token"],"collides":false,"mentions":["ai/deep-learning","ai/transformer","ai/model-weights","ai/token","ai/prompt","cs/internet","security/it-operations","security/risk"]},{"id":"ai/latency","term":{"en":"Latency","da":"Latens"},"domain":["ai","cs"],"cluster":"ai-infrastructure","summary":{"en":"How long one request has to wait from being sent until its answer arrives - for an AI chat, the pause before and while it replies.","da":"Hvor længe én forespørgsel skal vente, fra den sendes, til svaret kommer - for en AI-chat pausen før og mens den svarer."},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["ai/large-language-model","ai/prompt","ai/token","cs/service"]},{"id":"ai/learning-rate","term":{"en":"Learning rate","da":"Læringsrate"},"domain":["ai"],"cluster":"training","summary":{"en":"The setting that decides how big a step a model takes each time it adjusts itself to make fewer mistakes during learning.","da":"Indstillingen, der afgør, hvor store skridt en model tager, hver gang den justerer sig selv for at lave færre fejl under læringen."},"aka":{"en":["step size"],"da":["learning rate","skridtlængde"]},"depth":4,"degree":3,"requires":["ai/gradient-descent"],"collides":false,"mentions":["ai/hyperparameter","ai/gradient-descent","ai/model-weights","ai/loss-function","ai/model-training","ai/fine-tuning"]},{"id":"ai/linear-regression","term":{"en":"Linear regression","da":"Lineær regression"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A simple model that predicts a number by adding up each input times its own weight, choosing the weights that fit past examples best.","da":"En enkel model, der forudsiger et tal som en vægtet sum af input, hvor vægtene er dem, der passer bedst til tidligere eksempler."},"aka":{"en":["ordinary least squares","OLS"],"da":["mindste kvadraters metode","OLS"]},"depth":3,"degree":5,"requires":["ai/feature","ai/loss-function"],"collides":false,"mentions":["ai/model-weights","ai/regression","ai/feature","ai/training-data"]},{"id":"ai/llm-as-a-judge","term":{"en":"LLM-as-a-judge","da":"LLM som dommer (LLM-as-a-judge)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"Using one large language model to grade the answers of another against a written scoring guide, instead of paying people to read them all.","da":"At lade én stor sprogmodel bedømme en andens svar efter en skriftlig bedømmelsesguide i stedet for at lade mennesker læse dem alle."},"era":2023,"aka":{"en":["LLM judge","model-graded evaluation"],"da":["LLM-dommer"]},"depth":3,"degree":4,"requires":["ai/large-language-model"],"collides":false,"mentions":["ai/large-language-model","ai/model-evaluation","ai/system-prompt"]},{"id":"ai/logistic-regression","term":{"en":"Logistic regression","da":"Logistisk regression"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A simple model that sorts cases into two groups by turning a weighted sum of the inputs into a chance between 0 and 1.","da":"En enkel model, der sorterer sager i to grupper ved at gøre en vægtet sum af input til en sandsynlighed mellem 0 og 1."},"aka":{"en":["logit model"],"da":["logit-model"]},"depth":4,"degree":4,"requires":["ai/feature","ai/linear-regression"],"collides":false,"mentions":["ai/classification","ai/feature","ai/model-weights","ai/training-data"]},{"id":"ai/lora","term":{"en":"Low-rank adaptation (LoRA)","da":"Low-rank adaptation (LoRA)"},"domain":["ai"],"cluster":"training","summary":{"en":"A cheap way to fine-tune a big model - freeze the original weights and train only a small add-on that nudges its behaviour.","da":"En billig måde at finjustere en stor model på - frys de oprindelige vægte og træn kun en lille adapter, der justerer dens adfærd."},"era":2021,"aka":{"en":["LoRA adapter"],"da":["LoRA-adapter"]},"depth":3,"degree":3,"requires":["ai/model-weights"],"collides":false,"mentions":["ai/model-weights","security/nudging","ai/fine-tuning","ai/model-parameter","ai/open-weight-model","ai/gpu"]},{"id":"ai/loss-function","term":{"en":"Loss function","da":"Tabsfunktion (loss function)"},"domain":["ai"],"cluster":"training","summary":{"en":"The scoring rule that turns how wrong a model's answer is into a single number, which model training then tries to push down.","da":"Den pointregel, der gør, hvor forkert en models svar er, til ét tal, som modeltræningen så forsøger at presse ned."},"aka":{"en":["cost function","objective function"],"da":["loss function","omkostningsfunktion"]},"depth":2,"degree":8,"requires":["ai/machine-learning"],"collides":false,"mentions":["ai/model-training","ai/model-parameter","ai/training-data"]},{"id":"ai/machine-learning","term":{"en":"Machine learning","da":"Maskinlæring"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Building computer systems that find patterns in examples and use them to make guesses, instead of following rules a person wrote.","da":"At bygge computersystemer, der finder mønstre i eksempler og gætter ud fra dem i stedet for at følge regler skrevet af et menneske."},"era":1959,"aka":{"en":["ML"],"da":["ML","machine learning"]},"depth":1,"degree":18,"requires":["ai/training-data"],"collides":false,"mentions":["ai/training-data"]},{"id":"ai/mcp-server","term":{"en":"MCP server","da":"MCP-server"},"domain":["ai"],"cluster":"agents","summary":{"en":"A small program that offers tools or data to AI apps through the Model Context Protocol, such as reading mail or searching files.","da":"Et lille program, der tilbyder værktøjer eller data til AI-apps via Model Context Protocol, fx at læse mail eller søge i filer."},"era":2024,"depth":6,"degree":7,"requires":["ai/tool-calling"],"collides":false,"mentions":["ai/model-context-protocol","ai/prompt","cs/internet","cs/account"]},{"id":"ai/mixture-of-experts","term":{"en":"Mixture of experts (MoE)","da":"Mixture of experts (MoE)"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"A way to build a very large model where only a few of its many parts do the work for each token, so answers cost far less.","da":"En måde at bygge en meget stor model på, hvor kun få af dens mange dele arbejder for hvert token, så svar koster langt mindre."},"era":1991,"aka":{"en":["MoE"],"da":["MoE"]},"depth":3,"degree":5,"requires":["ai/model-parameter"],"collides":false,"mentions":["ai/token","ai/neural-network","cs/network","ai/gpu"]},{"id":"ai/model-card","term":{"en":"Model card","da":"Modelkort (model card)"},"domain":["ai"],"cluster":"ai-risk","summary":{"en":"A short fact sheet that ships with an AI model and says what it is for, how it was tested and where it falls short.","da":"Et kort faktaark, der følger med en AI-model og fortæller, hvad den er beregnet til, hvordan den er testet, og hvor den kommer til kort."},"era":2019,"depth":3,"degree":9,"requires":["ai/model-evaluation","ai/training-data"],"collides":false,"mentions":["ai/training-data","ai/model-evaluation","ai/open-weight-model"]},{"id":"ai/model-context-protocol","term":{"en":"Model Context Protocol (MCP)","da":"Model Context Protocol (MCP)"},"domain":["ai"],"cluster":"agents","summary":{"en":"An open standard for plugging tools and data into AI assistants, so each tool is hooked up once and works in many apps.","da":"En åben standard for at koble værktøjer og data til AI-assistenter, så hvert værktøj kobles på én gang og virker i mange apps."},"era":2024,"aka":{"en":["MCP"],"da":["MCP"]},"depth":5,"degree":8,"requires":["cs/api","cs/client"],"collides":false,"mentions":["cs/protocol","cs/client","ai/mcp-server","ai/prompt","cs/json","cs/server"]},{"id":"ai/model-evaluation","term":{"en":"Model evaluation (evals)","da":"Modelevaluering (evals)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"The practice of checking how well an AI system does its job, with scores, public tests, human review and deliberate attacks.","da":"Praksis med at kontrollere, hvor godt et AI-system løser sin opgave - med tal, offentlige tests, menneskelig gennemgang og bevidste angreb."},"aka":{"en":["AI evaluation"],"da":["AI-evaluering"]},"depth":2,"degree":17,"requires":["ai/machine-learning"],"collides":false,"mentions":["ai/accuracy","ai/f1-score","ai/benchmark","ai/llm-as-a-judge","ai/ai-red-teaming","ai/large-language-model","ai/eu-ai-act"]},{"id":"ai/model-parameter","term":{"en":"Model parameter","da":"Modelparameter"},"domain":["ai"],"cluster":"training","summary":{"en":"One of the numbers inside a model that is set by learning from data; their count is how model size is usually stated.","da":"Et af de tal inde i en model, der fastsættes ved at lære af data; antallet af dem er den måde, modelstørrelse normalt opgives på."},"aka":{"en":["learned parameter"],"da":["lært parameter"]},"depth":2,"degree":9,"requires":["ai/machine-learning"],"collides":false,"mentions":["ai/model-weights","ai/model-training","ai/large-language-model"]},{"id":"ai/model-serving","term":{"en":"Model serving","da":"Modelservering (model serving)"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"Keeping a trained model running on machines so other programs can send it questions over an API and get answers back.","da":"At holde en trænet model kørende på maskiner, så andre programmer kan sende den spørgsmål via et API og få svar tilbage."},"aka":{"en":["inference serving","model hosting"],"da":["inference serving","modelhosting"]},"depth":5,"degree":11,"requires":["ai/inference","cs/api"],"collides":false,"mentions":["cs/api","ai/model-weights","ai/inference","cs/service","security/it-operations","ai/open-weight-model","ai/gpu","ai/model-training"]},{"id":"ai/model-training","term":{"en":"Model training","da":"Modeltræning"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"The costly, one-off stage where a model looks at training data again and again and tunes its internal numbers until its guesses improve.","da":"Den dyre, engangsfase, hvor en model ser træningsdata igen og igen og justerer sine interne tal, indtil dens gæt bliver bedre."},"aka":{"en":["training"],"da":["træning"]},"depth":1,"degree":27,"requires":["ai/training-data"],"collides":false,"mentions":["ai/training-data","ai/model-weights","ai/large-language-model"]},{"id":"ai/model-weights","term":{"en":"Model weights","da":"Modelvægte (weights)"},"domain":["ai"],"cluster":"training","summary":{"en":"The learned numbers that set how strongly each part of a neural network influences the next; in practice, the file that is the model.","da":"De lærte tal, der styrer, hvor stærkt hver del af et neuralt netværk påvirker den næste - i praksis den fil, der er modellen."},"aka":{"en":["weights","weight file"],"da":["weights","vægte"]},"depth":2,"degree":8,"requires":["ai/model-training"],"collides":false,"mentions":["ai/neural-network","ai/model-parameter","ai/gradient-descent","ai/model-training","ai/inference"]},{"id":"ai/multi-agent-system","term":{"en":"Multi-agent system","da":"Multiagentsystem"},"domain":["ai"],"cluster":"agents","summary":{"en":"A setup where several AI agents share a job - often a lead agent splits the work and hands parts to helper agents.","da":"En opsætning, hvor flere AI-agenter deler en opgave - ofte deler en ledende agent arbejdet op og giver dele til hjælpeagenter."},"aka":{"en":["multi-agent architecture"],"da":["multiagentarkitektur"]},"depth":5,"degree":6,"requires":["ai/ai-agent"],"collides":false,"mentions":["ai/ai-agent","ai/context-window"]},{"id":"ai/multimodal-model","term":{"en":"Multimodal model","da":"Multimodal model"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"A model that can take in, and sometimes produce, more than one kind of content - such as text, photos and speech - in one conversation.","da":"En model, der kan tage imod - og nogle gange selv skabe - flere slags indhold, fx tekst, fotos og tale, i den samme samtale."},"aka":{"en":["multimodal AI"],"da":["multimodal AI"]},"depth":4,"degree":7,"requires":["ai/embedding","ai/encoder"],"collides":false,"mentions":["ai/foundation-model","ai/embedding","ai/encoder","ai/transformer"]},{"id":"ai/nearest-neighbour-search","term":{"en":"Nearest-neighbour search","da":"Nærmeste-nabo-søgning"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"Finding the few stored items that sit closest to a given one, usually trading a little exactness for a lot of speed.","da":"At finde de få gemte elementer, der ligger tættest på et givet element, som regel ved at ofre en smule grundighed for meget mere fart."},"aka":{"en":["approximate nearest neighbour search","vector search"],"da":["approksimativ nærmeste-nabo-søgning","vektorsøgning"]},"depth":2,"degree":4,"requires":["ai/embedding"],"collides":false,"mentions":["ai/embedding","ai/cosine-similarity"]},{"id":"ai/neural-network","term":{"en":"Neural network","da":"Neuralt netværk"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A model made of many small linked units that each weigh their inputs and pass a number on, loosely inspired by the brain.","da":"En model af mange små forbundne enheder, der hver vægter deres input og sender et tal videre, løst inspireret af hjernen."},"era":1958,"aka":{"en":["artificial neural network","ANN"],"da":["kunstigt neuralt netværk"]},"depth":0,"degree":12,"requires":[],"collides":false,"mentions":["ai/model-weights","ai/model-training","security/nudging","security/phishing"]},{"id":"ai/next-token-prediction","term":{"en":"Next-token prediction","da":"Forudsigelse af næste token"},"domain":["ai"],"cluster":"llm","summary":{"en":"How a language model writes - it guesses the single most fitting next piece of text, adds it, and repeats until the answer is done.","da":"Sådan skriver en sprogmodel - den gætter det bedst passende næste stykke tekst, tilføjer det og gentager, til svaret er færdigt."},"aka":{"en":["next-word prediction"],"da":["next-token prediction"]},"depth":1,"degree":13,"requires":["ai/token","ai/inference"],"collides":false,"mentions":["ai/large-language-model","ai/token","ai/inference"]},{"id":"ai/open-weight-model","term":{"en":"Open-weight model","da":"Model med åbne vægte (open-weight)"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"A model whose learned numbers are published for anyone to download and run themselves, instead of only being reachable through an API.","da":"En model, hvis lærte tal er offentliggjort, så alle kan hente og køre den selv, i stedet for kun at kunne nås gennem et API."},"era":2023,"aka":{"en":["open model"],"da":["åben model"]},"depth":3,"degree":7,"requires":["ai/model-weights"],"collides":false,"mentions":["cs/api","ai/foundation-model","ai/model-weights","ai/training-data","cs/service","cs/server","ai/recall"]},{"id":"ai/overfitting","term":{"en":"Overfitting","da":"Overtilpasning (overfitting)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"When a model learns its training examples by heart, including their noise, and then does badly on new cases it has not seen.","da":"Når en model lærer sine træningseksempler udenad, inklusive tilfældig støj, og derefter klarer sig dårligt på nye tilfælde."},"aka":{"en":[],"da":["overfitting"]},"depth":2,"degree":12,"requires":["ai/model-training","ai/training-data"],"collides":false,"mentions":["ai/model-training","ai/training-data"]},{"id":"ai/precision","term":{"en":"Precision","da":"Præcision (precision)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"Of all the cases a model flags as positive, the share that really are; in security terms, how many alerts were real.","da":"Af alle de tilfælde, en model markerer som positive, andelen der virkelig er det - i sikkerhedssprog, hvor mange alarmer der var ægte."},"aka":{"en":["positive predictive value"],"da":["positiv prædiktiv værdi"]},"depth":3,"degree":7,"requires":["ai/confusion-matrix","ai/classification","security/false-positive"],"collides":false,"mentions":["platform/alerting","security/false-positive","ai/confusion-matrix","security/phishing"]},{"id":"ai/pretraining","term":{"en":"Pretraining","da":"Fortræning (pretraining)"},"domain":["ai"],"cluster":"training","summary":{"en":"The first, huge and costly stage of teaching a model, reading vast amounts of text to pick up general patterns before any special task.","da":"Første, enorme og dyre trin i at lære en model op - den læser store mængder tekst og opfanger generelle mønstre før nogen særlig opgave."},"aka":{"en":["pre-training"],"da":["pretraining","fortræning"]},"depth":2,"degree":7,"requires":["ai/self-supervised-learning","ai/training-data"],"collides":false,"mentions":["ai/model-training","ai/self-supervised-learning","ai/token","ai/fine-tuning"]},{"id":"ai/prompt","term":{"en":"Prompt","da":"Prompt"},"domain":["ai"],"cluster":"llm","summary":{"en":"The text you give a language model - a question, an order, pasted files - that it treats as its starting point for an answer.","da":"Den tekst, du giver en sprogmodel - et spørgsmål, en ordre, indsatte filer - som den bruger som udgangspunkt for sit svar."},"depth":3,"degree":14,"requires":["ai/large-language-model"],"collides":false,"mentions":["ai/large-language-model","cs/service","ai/system-prompt"]},{"id":"ai/prompt-caching","term":{"en":"Prompt caching","da":"Prompt caching"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"A service feature that saves the work done on the start of a prompt, so later requests starting the same way are faster and cheaper.","da":"En funktion, der gemmer arbejdet med starten af en prompt, så senere forespørgsler, der starter ens, bliver hurtigere og billigere."},"era":2024,"aka":{"en":["context caching"],"da":["context caching"]},"depth":4,"degree":4,"requires":["ai/kv-cache","ai/prompt"],"collides":false,"mentions":["cs/service","ai/feature","ai/prompt","ai/kv-cache","ai/token"]},{"id":"ai/prompt-engineering","term":{"en":"Prompt engineering","da":"Prompt engineering"},"domain":["ai"],"cluster":"prompting","summary":{"en":"The craft of wording, ordering and testing the text you send a language model so that it gives useful answers more often.","da":"Håndværket at formulere, ordne og afprøve den tekst, man sender en sprogmodel, så den oftere giver brugbare svar."},"era":2022,"aka":{"en":["prompt design"],"da":["promptdesign"]},"depth":4,"degree":8,"requires":["ai/prompt"],"collides":false,"mentions":["ai/large-language-model","ai/prompt","ai/model-weights","ai/feature"]},{"id":"ai/prompt-injection","term":{"en":"Prompt injection","da":"Prompt injection"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Hiding instructions in the text an AI system reads so that it ignores its own rules and follows the attacker instead.","da":"At gemme instruktioner i den tekst, et AI-system læser, så det ignorerer sine egne regler og adlyder angriberen i stedet."},"era":2022,"aka":{"en":["prompt injection attack","indirect prompt injection"],"da":["prompt injection-angreb"]},"depth":4,"degree":22,"requires":["ai/large-language-model","ai/prompt"],"collides":false,"mentions":["security/threat-actor","ai/large-language-model"]},{"id":"ai/quantization","term":{"en":"Quantization","da":"Kvantisering"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"Storing a model's numbers with fewer digits so it takes less memory and runs faster, at the cost of a little quality.","da":"At gemme en models tal med færre cifre, så den fylder mindre og kører hurtigere, mod at kvaliteten falder en smule."},"aka":{"en":["model quantization"],"da":["modelkvantisering"]},"depth":3,"degree":7,"requires":["ai/model-weights"],"collides":false,"mentions":["ai/model-weights","ai/inference","ai/open-weight-model"]},{"id":"ai/random-forest","term":{"en":"Random forest","da":"Random forest"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"A model that builds many slightly different decision trees on random parts of the data and lets them vote on the answer.","da":"En model, der bygger mange lidt forskellige beslutningstræer på tilfældige dele af data og lader dem stemme om svaret."},"aka":{"en":["random decision forest"],"da":["tilfældig skov"]},"depth":3,"degree":3,"requires":["ai/decision-tree"],"collides":false,"mentions":["ai/decision-tree","ai/training-data","ai/feature"]},{"id":"ai/reasoning-model","term":{"en":"Reasoning model","da":"Ræsonnementsmodel (reasoning model)"},"domain":["ai"],"cluster":"llm","summary":{"en":"A language model trained to work through a problem step by step in hidden notes before it answers, trading time and cost for better answers.","da":"En LLM, der er trænet til at regne en opgave igennem trin for trin i skjulte noter, før den svarer - langsommere og dyrere, men bedre."},"era":2024,"aka":{"en":["thinking model"],"da":["reasoning model","tænkende model"]},"depth":2,"degree":5,"requires":["ai/inference","ai/next-token-prediction"],"collides":false,"mentions":["ai/large-language-model","ai/token","ai/inference","cs/port"]},{"id":"ai/recall","term":{"en":"Recall","da":"Genkaldelse (recall)"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"Of all the real positive cases, the share a model manages to find; in security terms, how many real attacks were caught.","da":"Af alle de ægte positive tilfælde, andelen en model formår at finde - i sikkerhedssprog, hvor mange reelle angreb der blev fanget."},"aka":{"en":["sensitivity","true positive rate"],"da":["sensitivitet","recall"]},"depth":3,"degree":6,"requires":["ai/confusion-matrix","ai/classification"],"collides":false,"mentions":["ai/confusion-matrix","security/anomaly-detection"]},{"id":"ai/regression","term":{"en":"Regression","da":"Regression"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Teaching a computer to guess a number on a scale, such as a price, a time or a size, from past examples where the real number was known.","da":"At lære en computer at gætte et tal på en skala, fx en pris, en tid eller en størrelse, ud fra tidligere eksempler med kendte tal."},"depth":2,"degree":6,"requires":["ai/model-training"],"collides":false,"mentions":["ai/machine-learning"]},{"id":"ai/regularization","term":{"en":"Regularization","da":"Regularisering"},"domain":["ai"],"cluster":"training","summary":{"en":"Any rule added during learning that holds a model back from fitting its examples too closely, so it does better on new cases.","da":"Enhver regel under læringen, der holder en model tilbage fra at passe for tæt til sine eksempler, så den klarer nye tilfælde bedre."},"aka":{"en":["regularisation"],"da":["regularization"]},"depth":3,"degree":4,"requires":["ai/loss-function"],"collides":false,"mentions":["ai/model-training","ai/training-data","ai/model-weights","ai/loss-function","ai/neural-network","security/risk","ai/validation-set"]},{"id":"ai/reinforcement-learning","term":{"en":"Reinforcement learning","da":"Forstærkningslæring (reinforcement learning)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Machine learning by trial and error, where a system acts, gets a reward or a penalty, and slowly learns which actions pay off.","da":"Maskinlæring ved at prøve sig frem - et system handler, får belønning eller straf og lærer langsomt, hvilke handlinger der betaler sig."},"aka":{"en":[],"da":["reinforcement learning"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["ai/machine-learning"]},{"id":"ai/reranking","term":{"en":"Reranking","da":"Genrangering (reranking)"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"A second, more careful pass that reorders a first rough list of search results so the most useful ones end up on top.","da":"En anden og mere grundig gennemgang, der sorterer en første grov liste af søgeresultater om, så de mest brugbare ender øverst."},"aka":{"en":["re-ranking"],"da":["re-ranking"]},"depth":2,"degree":5,"requires":["ai/transformer"],"collides":false,"mentions":["ai/transformer","ai/large-language-model"]},{"id":"ai/retrieval-augmented-generation","term":{"en":"Retrieval-augmented generation (RAG)","da":"Retrieval-augmented generation (RAG)"},"domain":["ai"],"cluster":"llm","summary":{"en":"Letting a language model first look up relevant passages in your own documents and then answer from them, instead of from memory alone.","da":"At lade en sprogmodel først slå relevante afsnit op i jeres egne dokumenter og derefter svare ud fra dem i stedet for kun fra hukommelsen."},"era":2020,"aka":{"en":["RAG"],"da":["RAG"]},"depth":3,"degree":15,"requires":["ai/large-language-model","ai/embedding"],"collides":false,"mentions":["ai/large-language-model","ai/embedding","ai/prompt"]},{"id":"ai/rlhf","term":{"en":"Reinforcement learning from human feedback (RLHF)","da":"Forstærkningslæring fra menneskelig feedback (RLHF)"},"domain":["ai"],"cluster":"training","summary":{"en":"Improving a model by having people rank its answers, teaching a scorer from those rankings, then training the model to earn high scores.","da":"At forbedre en model ved at lade mennesker rangere dens svar, lære en bedømmer af rangeringerne og så træne modellen til at få høje scorer."},"era":2017,"aka":{"en":["preference tuning"],"da":["præferencetræning"]},"depth":4,"degree":7,"requires":["ai/reinforcement-learning","ai/instruction-tuning"],"collides":false,"mentions":["ai/model-training","ai/reinforcement-learning","cs/service"]},{"id":"ai/sampling","term":{"en":"Sampling","da":"Sampling (udtrækning af tokens)"},"domain":["ai"],"cluster":"prompting","summary":{"en":"How a language model picks each next piece of text from its list of likely options, by a set rule or with some chance involved.","da":"Måden, en sprogmodel vælger hvert næste stykke tekst blandt sine sandsynlige muligheder - efter fast regel eller med tilfældighed."},"aka":{"en":["decoding"],"da":["afkodning"]},"depth":2,"degree":7,"requires":["ai/next-token-prediction"],"collides":false,"mentions":["ai/large-language-model","ai/inference","ai/next-token-prediction","ai/token","ai/temperature"]},{"id":"ai/self-supervised-learning","term":{"en":"Self-supervised learning","da":"Selvsuperviseret læring"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Machine learning where the right answers come from the data itself, for instance hiding a word in a sentence and guessing it back.","da":"Maskinlæring, hvor de rigtige svar kommer fra selve dataene - fx ved at skjule et ord i en sætning og gætte det igen."},"aka":{"en":[],"da":["self-supervised learning"]},"depth":1,"degree":8,"requires":["ai/training-data"],"collides":false,"mentions":["ai/machine-learning","ai/label","ai/training-data","ai/model-training"]},{"id":"ai/semantic-search","term":{"en":"Semantic search","da":"Semantisk søgning"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"Finding text by what it means rather than by the exact words it uses, so a question can match a passage phrased differently.","da":"At finde tekst ud fra dens betydning frem for dens præcise ord, så et spørgsmål kan ramme et anderledes formuleret afsnit."},"depth":3,"degree":7,"requires":["ai/embedding","ai/cosine-similarity"],"collides":false,"mentions":["ai/embedding","ai/cosine-similarity"]},{"id":"ai/sensitive-information-disclosure","term":{"en":"Sensitive information disclosure","da":"Afsløring af følsomme oplysninger"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"An AI system revealing private or secret details, such as personal data or business secrets, to someone who should not see them.","da":"Et AI-system, der afslører private eller hemmelige detaljer som personoplysninger eller forretningshemmeligheder for uvedkommende."},"aka":{"en":["LLM data leakage"],"da":["datalæk fra sprogmodeller"]},"depth":3,"degree":8,"requires":["ai/large-language-model","security/personal-data","ai/training-data"],"collides":false,"mentions":["security/personal-data","security/vulnerability","security/owasp-top-10","ai/large-language-model","cs/credential","ai/system-prompt","ai/training-data","cs/service","security/data-breach","security/gdpr"]},{"id":"ai/shadow-ai","term":{"en":"Shadow AI","da":"Skygge-AI (shadow AI)"},"domain":["ai","security"],"cluster":"ai-risk","summary":{"en":"Staff using AI tools at work without the organisation knowing about them or having approved them.","da":"Medarbejdere, der bruger AI-værktøjer i arbejdet, uden at organisationen kender til dem eller har godkendt dem."},"era":2023,"aka":{"en":["unsanctioned AI"],"da":["uautoriseret AI"]},"depth":1,"degree":6,"requires":["ai/artificial-intelligence"],"collides":false,"mentions":["cs/service","security/risk-assessment","cs/client","cs/account"]},{"id":"ai/slopsquatting","term":{"en":"Slopsquatting","da":"Slopsquatting"},"domain":["ai","security"],"cluster":"ai-coding","summary":{"en":"An attack where criminals publish harmful packages under the made-up names that AI tools keep inventing for code.","da":"Et angreb, hvor kriminelle udgiver skadelige pakker under de opdigtede navne, som AI-værktøjer bliver ved med at finde på til kode."},"era":2025,"aka":{"en":["package hallucination attack"],"da":["pakkehallucinationsangreb"]},"depth":1,"degree":6,"requires":["platform/software-supply-chain"],"collides":false,"mentions":["security/threat-actor","ai/large-language-model","ai/hallucination","ai/coding-agent"]},{"id":"ai/small-language-model","term":{"en":"Small language model (SLM)","da":"Lille sprogmodel (SLM)"},"domain":["ai"],"cluster":"model-architecture","summary":{"en":"A language model small enough to run cheaply on a laptop or phone, trading some broad skill for speed, privacy and low cost.","da":"En sprogmodel, der er lille nok til at køre billigt på en bærbar eller telefon og bytter lidt kunnen for fart, privatliv og lav pris."},"era":2024,"aka":{"en":["SLM"],"da":["SLM"]},"depth":3,"degree":8,"requires":["ai/model-parameter","ai/transformer","ai/token"],"collides":false,"mentions":["ai/large-language-model","ai/transformer","ai/model-parameter","ai/knowledge-distillation"]},{"id":"ai/spec-driven-development","term":{"en":"Spec-driven development","da":"Specifikationsdrevet udvikling"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"Writing down exactly what the software must do, agreed by people, before letting AI tools write the code from that plan.","da":"At skrive præcist ned, hvad softwaren skal gøre, godkendt af mennesker, før AI-værktøjer får lov at skrive koden ud fra den plan."},"era":2025,"aka":{"en":["spec-first development"],"da":["spec-drevet udvikling"]},"depth":7,"degree":4,"requires":["ai/coding-agent"],"collides":false,"mentions":["ai/coding-agent","cs/password"]},{"id":"ai/structured-output","term":{"en":"Structured output","da":"Struktureret output"},"domain":["ai"],"cluster":"prompting","summary":{"en":"Making a language model answer in a fixed, machine-readable shape - set fields in JSON - so other software can use the reply directly.","da":"At få en sprogmodel til at svare i en fast form, som programmer kan læse - faste felter i JSON - så anden software kan bruge svaret direkte."},"era":2024,"aka":{"en":["JSON mode"],"da":["JSON-tilstand"]},"depth":3,"degree":5,"requires":["ai/sampling"],"collides":false,"mentions":["ai/large-language-model","cs/json","ai/feature","cs/service","ai/sampling","ai/token","security/it-operations"]},{"id":"ai/supervised-learning","term":{"en":"Supervised learning","da":"Superviseret læring"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Machine learning from examples that come with the right answer attached, such as emails already marked spam or not spam.","da":"Maskinlæring ud fra eksempler, hvor det rigtige svar følger med, fx mails der allerede er markeret som spam eller ikke spam."},"aka":{"en":[],"da":["supervised learning","overvåget læring"]},"depth":1,"degree":11,"requires":["ai/training-data","ai/label"],"collides":false,"mentions":["ai/machine-learning","ai/model-training","ai/label","platform/alerting","security/false-positive"]},{"id":"ai/synthetic-data","term":{"en":"Synthetic data","da":"Syntetiske data"},"domain":["ai"],"cluster":"training","summary":{"en":"Made-up examples produced by a program or another AI model to look like real records, used where real examples are scarce or private.","da":"Opdigtede eksempler, lavet af et program eller en AI-model, så de ligner rigtige data - brugt, hvor ægte eksempler er få eller private."},"aka":{"en":["artificial data","generated data"],"da":["kunstige data","genererede data"]},"depth":3,"degree":6,"requires":["ai/generative-ai"],"collides":false,"mentions":["ai/training-data","security/personal-data"]},{"id":"ai/system-prompt","term":{"en":"System prompt","da":"Systemprompt"},"domain":["ai"],"cluster":"prompting","summary":{"en":"Standing orders the maker of an AI service places ahead of every chat, setting the assistant's role, rules and tone before the user types.","da":"Faste instruktioner fra udbyderen af en AI-tjeneste, lagt foran hver samtale, der sætter assistentens rolle, regler og tone."},"era":2023,"aka":{"en":["system message","developer message"],"da":["systembesked","udviklerbesked"]},"depth":4,"degree":9,"requires":["ai/instruction-tuning"],"collides":false,"mentions":["cs/service","ai/prompt","ai/instruction-tuning","ai/large-language-model","ai/prompt-injection","cs/password","cs/access-control"]},{"id":"ai/temperature","term":{"en":"Temperature","da":"Temperatur"},"domain":["ai"],"cluster":"prompting","summary":{"en":"A per-request dial - low keeps a language model's wording steady and repeatable, high makes it more varied and less predictable.","da":"En indstilling pr. kald - lav holder en sprogmodels ordvalg stabilt og gentageligt, høj gør det mere skiftende og uforudsigeligt."},"aka":{"en":["sampling temperature"],"da":["samplingtemperatur"]},"depth":2,"degree":3,"requires":["ai/next-token-prediction"],"collides":false,"mentions":["ai/large-language-model","ai/next-token-prediction","ai/sampling","ai/token"]},{"id":"ai/test-set","term":{"en":"Test set","da":"Testsæt"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"Examples locked away while a model is built and opened once at the end to give an honest final score.","da":"Eksempler, der låses væk, mens en model bygges, og åbnes én gang til sidst for at give et ærligt slutresultat."},"aka":{"en":["holdout test set"],"da":["test set"]},"depth":2,"degree":6,"requires":["ai/model-training"],"collides":false,"mentions":["ai/model-training","ai/training-data"]},{"id":"ai/throughput","term":{"en":"Throughput","da":"Gennemløb (throughput)"},"domain":["ai","cs"],"cluster":"ai-infrastructure","summary":{"en":"How much work a system gets through per second in total - for AI services, often counted as tokens or requests handled each second.","da":"Hvor meget arbejde et system i alt når igennem per sekund - for AI-tjenester ofte talt som tokens eller forespørgsler håndteret i sekundet."},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["cs/service","ai/token","ai/large-language-model","ai/gpu","cs/server"]},{"id":"ai/time-to-first-token","term":{"en":"Time to first token (TTFT)","da":"Tid til første token (TTFT)"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"How long a user waits after sending a prompt before the first piece of the answer appears on screen.","da":"Hvor længe en bruger venter, efter at have sendt en prompt, før den første del af svaret dukker op på skærmen."},"aka":{"en":["TTFT"],"da":["TTFT"]},"depth":4,"degree":6,"requires":["ai/token","ai/prompt"],"collides":false,"mentions":["ai/prompt","ai/latency","ai/large-language-model","cs/service","ai/token"]},{"id":"ai/token","term":{"en":"Token","da":"Token"},"domain":["ai"],"cluster":"llm","summary":{"en":"A small piece of text - a whole word, part of a word or a symbol - that a language model reads and writes in; also how use is priced.","da":"Et lille stykke tekst - et ord, en del af et ord eller et tegn - som en sprogmodel læser og skriver i; også enheden, brug prissættes efter."},"depth":0,"degree":15,"requires":[],"collides":false,"mentions":["ai/large-language-model","cs/service"]},{"id":"ai/tokenizer","term":{"en":"Tokenizer","da":"Tokenizer"},"domain":["ai"],"cluster":"llm","summary":{"en":"The part of a language model that cuts text into tokens and turns them into numbers on the way in, and back into text on the way out.","da":"Den del af en sprogmodel, der deler tekst op i tokens og laver dem om til tal på vej ind og tilbage til tekst på vej ud."},"aka":{"en":[],"da":["tokeniser"]},"depth":1,"degree":5,"requires":["ai/token"],"collides":false,"mentions":["ai/large-language-model","ai/token","ai/model-training"]},{"id":"ai/tool-calling","term":{"en":"Tool calling","da":"Værktøjskald (tool calling)"},"domain":["ai"],"cluster":"agents","summary":{"en":"How a language model asks outside code to do something for it - look something up, run a task - and then reads back the result.","da":"Måden, en sprogmodel beder et program uden for sig selv om at gøre noget - slå noget op, udføre en opgave - og så læser svaret."},"era":2023,"aka":{"en":["function calling","tool use"],"da":["function calling","værktøjsbrug"]},"depth":5,"degree":10,"requires":["ai/structured-output","cs/api"],"collides":false,"mentions":["ai/large-language-model"]},{"id":"ai/top-p-sampling","term":{"en":"Top-p sampling","da":"Top-p-sampling"},"domain":["ai"],"cluster":"prompting","summary":{"en":"A rule letting a language model pick only among its most likely next options, until their chances add up to a set share like 90%.","da":"En regel, hvor en sprogmodel kun vælger blandt sine mest sandsynlige næste muligheder, til deres chancer tilsammen når fx 90 %."},"era":2019,"aka":{"en":["nucleus sampling"],"da":["nucleus sampling"]},"depth":1,"degree":3,"requires":["ai/token"],"collides":false,"mentions":["ai/large-language-model","ai/sampling","ai/token","security/it-operations"]},{"id":"ai/tpu","term":{"en":"Tensor processing unit (TPU)","da":"Tensor processing unit (TPU)"},"domain":["ai"],"cluster":"ai-infrastructure","summary":{"en":"Google's own chip made only for the number work inside neural networks, mostly rented out through Google Cloud rather than sold.","da":"Googles egen chip, bygget kun til talarbejdet i neurale netværk og mest udlejet gennem Google Cloud frem for at blive solgt."},"era":2016,"aka":{"en":["TPU"],"da":["TPU"]},"depth":1,"degree":3,"requires":["ai/neural-network"],"collides":false,"mentions":["ai/neural-network","ai/gpu","ai/model-training","ai/inference"]},{"id":"ai/training-data","term":{"en":"Training data","da":"Træningsdata"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"The examples a model learns from; its behaviour, its blind spots and its mistakes all come from what is in them.","da":"De eksempler, en model lærer af - dens adfærd, dens blinde vinkler og dens fejl kommer alle fra det, der er i dem."},"aka":{"en":["training set"],"da":["træningssæt"]},"depth":0,"degree":29,"requires":[],"collides":false,"mentions":["ai/model-training","security/personal-data","security/asset","security/risk","security/threat-actor"]},{"id":"ai/transfer-learning","term":{"en":"Transfer learning","da":"Overførselslæring (transfer learning)"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Reusing what a model already learned on one big task as the starting point for a new, related task, instead of starting from zero.","da":"At genbruge det, en model allerede har lært på én stor opgave, som udgangspunkt for en ny, beslægtet opgave i stedet for at starte fra nul."},"aka":{"en":[],"da":["transfer learning"]},"depth":2,"degree":6,"requires":["ai/model-training","ai/deep-learning"],"collides":false,"mentions":["ai/model-training","ai/training-data"]},{"id":"ai/transformer","term":{"en":"Transformer","da":"Transformer"},"domain":["ai"],"cluster":"llm","summary":{"en":"The neural network design behind today's language models, which weighs how every word in a text relates to every other word.","da":"Det neurale netværksdesign bag nutidens sprogmodeller, som vejer, hvordan hvert ord i en tekst hænger sammen med alle de andre."},"era":2017,"aka":{"en":["transformer architecture"],"da":["transformer-arkitektur"]},"depth":1,"degree":14,"requires":["ai/token"],"collides":false,"mentions":["ai/neural-network","ai/large-language-model","ai/attention-mechanism","ai/token"]},{"id":"ai/underfitting","term":{"en":"Underfitting","da":"Undertilpasning (underfitting)"},"domain":["ai"],"cluster":"training","summary":{"en":"When a model is too simple or trained too little to catch the pattern, so it scores badly even on the examples it learned from.","da":"Når en model er for simpel eller trænet for lidt til at fange mønstret, så den scorer dårligt selv på de eksempler, den lærte af."},"aka":{"en":[],"da":["underfitting"]},"depth":3,"degree":5,"requires":["ai/model-training","ai/loss-function"],"collides":false,"mentions":["ai/model-training","ai/training-data","ai/model-parameter","ai/epoch"]},{"id":"ai/unsupervised-learning","term":{"en":"Unsupervised learning","da":"Ikke-superviseret læring"},"domain":["ai"],"cluster":"ml-fundamentals","summary":{"en":"Machine learning from examples with no answers attached, where the model finds groups, patterns or odd cases on its own.","da":"Maskinlæring ud fra eksempler uden svar, hvor modellen selv finder grupper, mønstre eller usædvanlige tilfælde."},"aka":{"en":[],"da":["unsupervised learning","uovervåget læring"]},"depth":1,"degree":10,"requires":["ai/training-data"],"collides":false,"mentions":["ai/machine-learning","ai/training-data","ai/label","platform/monitoring","cs/account","cs/log","security/threat","platform/alerting"]},{"id":"ai/validation-set","term":{"en":"Validation set","da":"Valideringssæt"},"domain":["ai"],"cluster":"evaluation","summary":{"en":"Examples held back from training and checked again and again while building a model, to choose its settings and decide when to stop.","da":"Eksempler, der holdes uden for træningen og tjekkes igen og igen for at vælge en models indstillinger og hvornår der skal stoppes."},"aka":{"en":["dev set","development set"],"da":["udviklingssæt","dev-sæt"]},"depth":3,"degree":7,"requires":["ai/hyperparameter"],"collides":false,"mentions":["ai/model-training","ai/training-data","ai/hyperparameter","ai/test-set"]},{"id":"ai/vector-database","term":{"en":"Vector database","da":"Vektordatabase"},"domain":["ai"],"cluster":"retrieval","summary":{"en":"A store built to keep huge numbers of embeddings and quickly return the ones closest in meaning to a question.","da":"Et lager bygget til at gemme enorme mængder embeddings og hurtigt finde dem, der ligger tættest i betydning på et spørgsmål."},"aka":{"en":["vector store"],"da":["vektorlager"]},"depth":2,"degree":8,"requires":["ai/embedding"],"collides":false,"mentions":["ai/embedding","cs/database","ai/nearest-neighbour-search","ai/large-language-model"]},{"id":"ai/vibe-coding","term":{"en":"Vibe coding","da":"Vibe coding"},"domain":["ai"],"cluster":"ai-coding","summary":{"en":"Building software by describing what you want to an AI and accepting the code it writes without reading it.","da":"At bygge software ved at beskrive, hvad man vil have, for en AI og tage imod den kode, den skriver, uden at læse den."},"era":2025,"depth":4,"degree":7,"requires":["ai/ai-coding-assistant"],"collides":false,"mentions":["ai/ai-coding-assistant","ai/coding-agent"]},{"id":"ai/zero-shot-prompting","term":{"en":"Zero-shot prompting","da":"Zero-shot prompting"},"domain":["ai"],"cluster":"prompting","summary":{"en":"Asking a language model to do a task from an instruction alone, with no worked examples to copy.","da":"At bede en sprogmodel løse en opgave kun ud fra en beskrivelse af den, uden løste eksempler at efterligne."},"era":2020,"depth":4,"degree":4,"requires":["ai/instruction-tuning"],"collides":false,"mentions":["ai/large-language-model","ai/prompt","ai/pretraining","ai/instruction-tuning"]},{"id":"cs/access-control","term":{"en":"Access control","da":"Adgangskontrol"},"domain":["cs","security"],"cluster":"identity","summary":{"en":"The rules and mechanisms that decide who may use which systems, data or rooms, and in what way.","da":"De regler og mekanismer, der afgør, hvem der må bruge hvilke systemer, data eller lokaler, og på hvilken måde."},"era":1971,"depth":3,"degree":13,"requires":["cs/authentication"],"collides":false,"mentions":["cs/authentication","cs/authorization","cs/server","cs/log","security/confidentiality","security/integrity","security/security-policy"]},{"id":"cs/account","term":{"en":"User account","da":"Brugerkonto"},"domain":["cs"],"cluster":"identity","summary":{"en":"A record in a system that lets a particular person or program log in, and holds the permissions it has been given.","da":"En registrering i et system, der lader en bestemt person eller et program logge ind, og som rummer de tildelte rettigheder."},"aka":{"en":["account"],"da":["konto"]},"depth":0,"degree":10,"requires":[],"collides":false,"mentions":["cs/log","cs/permission","cs/operating-system","cs/identity","cs/credential","security/audit","security/threat-actor"]},{"id":"cs/api","term":{"en":"API","da":"API"},"domain":["cs"],"cluster":"web","summary":{"en":"A fixed set of requests one program offers so other programs can use its data or features without seeing its insides.","da":"Et fast sæt forespørgsler, som et program tilbyder, så andre programmer kan bruge dets data og funktioner uden at se indmaden."},"era":1968,"aka":{"en":["application programming interface"],"da":["programmeringsgrænseflade"]},"depth":4,"degree":12,"requires":["cs/client","cs/server"],"collides":false,"mentions":["cs/server","cs/http"]},{"id":"cs/audit","term":{"en":"Audit logging","da":"Audit-logning"},"domain":["cs"],"cluster":"os","summary":{"en":"A system's record of who did what, and when, for the actions that matter to security.","da":"Et systems registrering af, hvem der gjorde hvad og hvornår, ved de handlinger, der har betydning for sikkerheden."},"aka":{"en":["audit log","audit trail","security log"],"da":["revisionsspor","auditlog","sikkerhedslog"]},"depth":1,"degree":9,"requires":["cs/account"],"collides":true,"mentions":["cs/log","cs/operating-system","cs/permission","cs/account","security/data-breach","security/iso-27001"]},{"id":"cs/authentication","term":{"en":"Authentication","da":"Autentificering"},"domain":["cs","security"],"cluster":"identity","summary":{"en":"Checking that someone who logs in really is who they claim to be, usually by asking for a credential such as a password.","da":"At kontrollere, at den, der logger ind, virkelig er den, vedkommende udgiver sig for, typisk med en loginoplysning som en adgangskode."},"aka":{"en":["authn"],"da":["godkendelse","autentifikation"]},"depth":2,"degree":23,"requires":["cs/identity","cs/credential"],"collides":false,"mentions":["cs/log","cs/credential","cs/password","cs/identity","ai/prompt","security/threat-actor"]},{"id":"cs/authorization","term":{"en":"Authorization","da":"Autorisation"},"domain":["cs","security"],"cluster":"identity","summary":{"en":"Deciding what an already identified user is allowed to do, such as which files they may open or change.","da":"At afgøre, hvad en allerede identificeret bruger har lov til, fx hvilke filer vedkommende må åbne eller ændre."},"aka":{"en":["authz","authorisation"],"da":["autorisering"]},"depth":3,"degree":10,"requires":["cs/authentication"],"collides":false,"mentions":["cs/authentication","cs/identity","cs/permission","cs/service"]},{"id":"cs/certificate-authority","term":{"en":"Certificate authority (CA)","da":"Certifikatudsteder (CA)"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"A trusted body that checks who someone is and then signs digital certificates vouching that a public key belongs to them.","da":"En betroet instans, der kontrollerer identiteten på en ansøger og signerer digitale certifikater om, hvem en offentlig nøgle tilhører."},"era":1988,"aka":{"en":["certification authority"],"da":[]},"depth":4,"degree":5,"requires":["cs/digital-certificate","cs/digital-signature","cs/identity"],"collides":false,"mentions":["cs/digital-certificate","cs/public-key-infrastructure","cs/web-browser","cs/operating-system","cs/url","security/threat-actor"]},{"id":"cs/client","term":{"en":"Client","da":"Klient"},"domain":["cs"],"cluster":"networking","summary":{"en":"The program or device that starts a network exchange by sending a request, such as a web browser asking for a page.","da":"Det program eller den enhed, der starter en udveksling over et netværk ved at sende en forespørgsel, fx en browser, der beder om en side."},"depth":2,"degree":8,"requires":["cs/network","cs/protocol"],"collides":false,"mentions":["cs/network","cs/web-browser","cs/protocol","cs/server","cs/service","security/threat-actor"]},{"id":"cs/conditional-access","term":{"en":"Conditional access","da":"Betinget adgang (conditional access)"},"domain":["cs","security"],"cluster":"identity","summary":{"en":"Rules that decide at each login whether to let someone in, ask for more proof or block them, based on who, where and what device.","da":"Regler, der ved hvert login afgør, om en person lukkes ind, skal bevise mere eller afvises - ud fra hvem, hvor og hvilken enhed."},"era":2016,"aka":{"en":["conditional access policy"],"da":["conditional access"]},"depth":4,"degree":6,"requires":["cs/access-control","cs/authentication","cs/identity-provider"],"collides":false,"mentions":["cs/identity-provider","security/risk","security/mfa","cs/session","security/it-operations","cs/password"]},{"id":"cs/cookie","term":{"en":"Cookie","da":"Cookie"},"domain":["cs"],"cluster":"web","summary":{"en":"A small piece of text a website asks the browser to keep and send back on every visit, so the site can recognise it.","da":"En lille tekstbid, som et websted beder browseren gemme og sende med tilbage ved hvert besøg, så stedet kan genkende den."},"era":1994,"aka":{"en":["HTTP cookie","browser cookie"],"da":["HTTP-cookie","browsercookie"]},"depth":6,"degree":5,"requires":["cs/http","cs/web-browser"],"collides":false,"mentions":["cs/web-browser","cs/server","cs/http","cs/log","cs/session"]},{"id":"cs/credential","term":{"en":"Credential","da":"Loginoplysning (credential)"},"domain":["cs"],"cluster":"identity","summary":{"en":"Something a user presents to prove who they are, such as a password, a key card or a fingerprint.","da":"Noget, en bruger fremviser for at bevise, hvem vedkommende er, fx en adgangskode, et nøglekort eller et fingeraftryk."},"aka":{"en":["login details"],"da":["loginoplysninger","legitimation","credential"]},"depth":1,"degree":12,"requires":["cs/identity"],"collides":false,"mentions":["cs/password","cs/identity","cs/authentication","cs/log","cs/client","security/threat-actor"]},{"id":"cs/cryptographic-key","term":{"en":"Cryptographic key","da":"Kryptografisk nøgle"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"The secret value that decides how data is scrambled and restored - whoever holds it can read the protected data.","da":"Den hemmelige værdi, der styrer, hvordan data krypteres og gøres læsbare igen - den, der har den, kan læse de beskyttede data."},"aka":{"en":["key","encryption key"],"da":["nøgle","krypteringsnøgle"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["cs/encryption","security/it-operations","security/backup","security/threat-actor"]},{"id":"cs/database","term":{"en":"Database","da":"Database"},"domain":["cs"],"cluster":"web","summary":{"en":"An organised store of data that many programs and users can search, add to and change at the same time without mixing it up.","da":"Et organiseret lager af data, som mange programmer og brugere kan søge i, tilføje til og ændre på samme tid, uden at det bliver rodet."},"era":1964,"aka":{"en":["DB"],"da":["DB"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["cs/web-application"]},{"id":"cs/digital-certificate","term":{"en":"Digital certificate","da":"Digitalt certifikat"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"A signed digital document that ties a public key to a name, such as a website address, so others can trust whose key it is.","da":"Et signeret digitalt dokument, der knytter en offentlig nøgle til et navn, fx en webadresse, så andre kan stole på, hvis nøgle det er."},"era":1988,"aka":{"en":["public key certificate","X.509 certificate","SSL certificate"],"da":["certifikat","X.509-certifikat","SSL-certifikat"]},"depth":3,"degree":9,"requires":["cs/public-key-cryptography","cs/identity","cs/digital-signature"],"collides":false,"mentions":["cs/identity","cs/certificate-authority","cs/service","cs/web-browser","cs/encryption","cs/server"]},{"id":"cs/digital-signature","term":{"en":"Digital signature","da":"Digital signatur"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"A mark made with a private key that proves who sent a message and that nobody has changed it since.","da":"Et mærke lavet med en privat nøgle, der beviser, hvem der sendte en besked, og at ingen har ændret den siden."},"era":1976,"aka":{"en":["cryptographic signature"],"da":["kryptografisk signatur"]},"depth":2,"degree":10,"requires":["cs/public-key-cryptography","cs/hashing"],"collides":false,"mentions":["cs/public-key-cryptography","security/it-operations"]},{"id":"cs/dns","term":{"en":"DNS","da":"DNS"},"domain":["cs"],"cluster":"networking","summary":{"en":"The lookup system that turns names people can read, like example.com, into IP addresses.","da":"Det opslagssystem, der oversætter navne, som mennesker kan læse, fx example.com, til IP-adresser."},"era":1983,"aka":{"en":["Domain Name System"],"da":["Domain Name System","navneopslag"]},"depth":2,"degree":4,"requires":["cs/ip-address"],"collides":false,"mentions":["cs/ip-address","cs/protocol","cs/server","security/threat-actor","cs/account","cs/log"]},{"id":"cs/encryption","term":{"en":"Encryption","da":"Kryptering"},"domain":["cs","security"],"cluster":"networking","summary":{"en":"Scrambling data with a secret key so only someone holding the matching key can read it.","da":"At kode data med en hemmelig nøgle, så kun den, der har den tilsvarende nøgle, kan læse dem."},"aka":{"en":["enciphering"],"da":["chiffrering"]},"depth":0,"degree":16,"requires":[],"collides":false,"mentions":["cs/password","security/data-breach","security/security-incident"]},{"id":"cs/end-to-end-encryption","term":{"en":"End-to-end encryption","da":"End-to-end-kryptering"},"domain":["cs","security"],"cluster":"cryptography","summary":{"en":"Scrambling a message on the sender's device so that only the receiver's device can read it, not even the service carrying it.","da":"At kryptere en besked på afsenderens enhed, så kun modtagerens enhed kan læse den - heller ikke tjenesten, der bringer den frem."},"era":1991,"aka":{"en":["E2EE"],"da":["E2EE"]},"depth":2,"degree":5,"requires":["cs/public-key-cryptography","cs/encryption"],"collides":false,"mentions":["cs/service","cs/server"]},{"id":"cs/federation","term":{"en":"Identity federation","da":"Identitetsføderation"},"domain":["cs"],"cluster":"identity","summary":{"en":"An agreement between organisations to trust each other's logins, so a person proven at home is let in elsewhere.","da":"En aftale mellem organisationer om at stole på hinandens login, så en person, der er bekræftet hjemme, lukkes ind andre steder."},"era":2002,"aka":{"en":["federated identity"],"da":["føderation","fødereret identitet"]},"depth":4,"degree":4,"requires":["cs/identity-provider"],"collides":false,"mentions":["cs/service","cs/identity-provider","cs/account","cs/password"]},{"id":"cs/file-system","term":{"en":"File system","da":"Filsystem"},"domain":["cs"],"cluster":"os","summary":{"en":"The way an operating system organises stored data into files and folders and keeps track of who may use each one.","da":"Den måde, et styresystem organiserer gemte data i filer og mapper på og holder styr på, hvem der må bruge hver enkelt."},"era":1965,"aka":{"en":["filesystem"],"da":[]},"depth":0,"degree":4,"requires":[],"collides":false,"mentions":["cs/operating-system","cs/permission","security/data-breach"]},{"id":"cs/firewall","term":{"en":"Firewall","da":"Firewall"},"domain":["cs","security"],"cluster":"networking","summary":{"en":"A gatekeeper that checks network traffic against rules and lets through only what is allowed.","da":"En portvagt, der tjekker netværkstrafik mod regler og kun lukker det igennem, der er tilladt."},"era":1988,"aka":{"en":["network firewall"],"da":["netværksfirewall"]},"depth":3,"degree":14,"requires":["cs/packet","cs/port","cs/ip-address"],"collides":false,"mentions":["cs/network","cs/packet","cs/ip-address","cs/port","cs/protocol","security/it-operations","security/threat"]},{"id":"cs/hashing","term":{"en":"Hashing","da":"Hashing"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"Turning any amount of data into a short, fixed-length value that changes completely if even one character changes.","da":"At lave en vilkårlig mængde data om til en kort værdi af fast længde, der ændrer sig helt, hvis blot ét tegn ændres."},"era":1979,"aka":{"en":["hash function","cryptographic hash"],"da":["hashfunktion","kryptografisk hash"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["cs/password","cs/database","security/threat-actor"]},{"id":"cs/http","term":{"en":"HTTP","da":"HTTP"},"domain":["cs"],"cluster":"web","summary":{"en":"The request-and-answer rules a web browser and a server follow to fetch pages, pictures and data across the internet.","da":"De regler for forespørgsel og svar, som en webbrowser og en server følger for at hente sider, billeder og data over internettet."},"era":1991,"aka":{"en":["Hypertext Transfer Protocol"],"da":["Hypertext Transfer Protocol"]},"depth":4,"degree":13,"requires":["cs/tcp-ip","cs/client","cs/server"],"collides":false,"mentions":["cs/web-browser","cs/server","cs/internet","cs/protocol","cs/client","cs/https"]},{"id":"cs/https","term":{"en":"HTTPS","da":"HTTPS"},"domain":["cs"],"cluster":"networking","summary":{"en":"The way web browsers and websites exchange pages with TLS protecting every message, so no one on the way can read or change them.","da":"Måden, browsere og websteder udveksler sider på, hvor TLS beskytter hver besked, så ingen undervejs kan læse eller ændre dem."},"era":1994,"aka":{"en":["HTTP Secure","HTTP over TLS"],"da":["HTTP Secure","HTTP over TLS"]},"depth":5,"degree":8,"requires":["cs/tls","cs/client","cs/server","cs/http"],"collides":false,"mentions":["cs/web-browser","cs/tls","cs/protocol","cs/client","cs/server","cs/port","cs/cookie","security/personal-data"]},{"id":"cs/identity","term":{"en":"Digital identity","da":"Digital identitet"},"domain":["cs"],"cluster":"identity","summary":{"en":"The set of facts that lets a computer system tell one person, device or program apart from all others.","da":"De oplysninger, der gør det muligt for et IT-system at skelne én person, enhed eller ét program fra alle andre."},"aka":{"en":["identity"],"da":["identitet"]},"depth":0,"degree":7,"requires":[],"collides":false,"mentions":["cs/audit"]},{"id":"cs/identity-provider","term":{"en":"Identity provider","da":"Identitetsudbyder"},"domain":["cs"],"cluster":"identity","summary":{"en":"A trusted service that stores users' identities, checks their logins and vouches for them to other applications.","da":"En betroet tjeneste, der gemmer brugernes identiteter, kontrollerer deres login og går i god for dem over for andre programmer."},"era":2002,"aka":{"en":["IdP"],"da":["IdP"]},"depth":3,"degree":9,"requires":["cs/identity","cs/authentication"],"collides":false,"mentions":["cs/service","cs/authentication","cs/identity","security/mfa","platform/monitoring"]},{"id":"cs/internet","term":{"en":"Internet","da":"Internettet"},"domain":["cs"],"cluster":"networking","summary":{"en":"The worldwide network of networks that lets almost any connected device reach almost any other.","da":"Det verdensomspændende netværk af netværk, der lader næsten enhver tilsluttet enhed nå næsten enhver anden."},"era":1983,"aka":{"en":["the net"],"da":["nettet"]},"depth":4,"degree":7,"requires":["cs/tcp-ip","cs/ip-address","cs/router"],"collides":false,"mentions":["cs/network","cs/router","cs/tcp-ip","cs/ip-address"]},{"id":"cs/ip-address","term":{"en":"IP address","da":"IP-adresse"},"domain":["cs"],"cluster":"networking","summary":{"en":"A number that identifies a device on a network so that data can be delivered to it.","da":"Et nummer, der identificerer en enhed på et netværk, så data kan leveres til den."},"era":1981,"aka":{"en":["Internet Protocol address","IPv4 address","IPv6 address"],"da":["IPv4-adresse","IPv6-adresse"]},"depth":1,"degree":10,"requires":["cs/network"],"collides":false,"mentions":["cs/network","cs/tcp-ip","cs/protocol","cs/packet","security/soc","cs/firewall","platform/distributed-tracing","security/threat-actor"]},{"id":"cs/json","term":{"en":"JSON","da":"JSON"},"domain":["cs"],"cluster":"web","summary":{"en":"A simple text format for writing down data as named values and lists, easy for both people and programs to read.","da":"Et enkelt tekstformat til at skrive data ned som navngivne værdier og lister, let at læse for både mennesker og programmer."},"era":2001,"aka":{"en":["JavaScript Object Notation"],"da":["JavaScript Object Notation"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["cs/server"]},{"id":"cs/kernel","term":{"en":"Kernel","da":"Kerne (kernel)"},"domain":["cs"],"cluster":"os","summary":{"en":"The core of the operating system, which has full control of the machine and decides what every program may do.","da":"Kernen i styresystemet, som har fuld kontrol over maskinen og bestemmer, hvad hvert program må."},"era":1969,"aka":{"en":[],"da":["kernel"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["cs/operating-system","security/cfcs","security/it-operations","cs/patch","cs/server","security/threat-actor"]},{"id":"cs/key-management","term":{"en":"Key management","da":"Nøglehåndtering"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"Looking after cryptographic keys over their whole life - making, storing, handing out, changing and finally destroying them.","da":"At passe på kryptografiske nøgler gennem hele deres levetid - at skabe, gemme, udlevere, skifte og til sidst destruere dem."},"aka":{"en":["cryptographic key management"],"da":["håndtering af kryptografiske nøgler"]},"depth":1,"degree":5,"requires":["cs/cryptographic-key","cs/encryption"],"collides":false,"mentions":["cs/cryptographic-key","cs/encryption"]},{"id":"cs/least-privilege","term":{"en":"Principle of least privilege","da":"Mindste privilegium"},"domain":["cs"],"cluster":"identity","summary":{"en":"Giving every user, program and service only the permissions its task needs, and nothing more.","da":"At give hver bruger, hvert program og hver tjeneste kun de rettigheder, der er nødvendige for opgaven, og intet mere."},"era":1975,"aka":{"en":["least privilege","principle of least authority"],"da":["princippet om mindste privilegium","least privilege"]},"depth":2,"degree":21,"requires":["cs/permission"],"collides":false,"mentions":["cs/service","cs/permission","cs/account"]},{"id":"cs/log","term":{"en":"Log","da":"Log"},"domain":["cs"],"cluster":"os","summary":{"en":"A time-stamped record of events that a system or program writes down as they happen.","da":"En tidsstemplet liste over hændelser, som et system eller program skriver ned, efterhånden som de sker."},"aka":{"en":["log file","event log"],"da":["logfil","hændelseslog"]},"depth":0,"degree":12,"requires":[],"collides":false,"mentions":["cs/account","cs/server","cs/password","security/security-incident","security/siem","security/incident-response"]},{"id":"cs/network","term":{"en":"Network","da":"Netværk"},"domain":["cs"],"cluster":"networking","summary":{"en":"A set of connected devices that can send data to each other over cables or radio signals.","da":"En samling forbundne enheder, der kan sende data til hinanden via kabler eller radiosignaler."},"era":1969,"aka":{"en":["computer network"],"da":["computernetværk"]},"depth":0,"degree":17,"requires":[],"collides":false,"mentions":["cs/server","cs/client","cs/internet","cs/router","security/control","security/threat-actor"]},{"id":"cs/network-segmentation","term":{"en":"Network segmentation","da":"Netværkssegmentering"},"domain":["cs","security"],"cluster":"networking","summary":{"en":"Splitting one network into separate zones, so a problem in one zone cannot easily spread to the others.","da":"At dele ét netværk op i adskilte zoner, så et problem i én zone ikke let kan sprede sig til de andre."},"aka":{"en":["segmentation"],"da":["segmentering"]},"depth":4,"degree":11,"requires":["cs/network","cs/router","cs/firewall"],"collides":false,"mentions":["cs/network","cs/router","cs/firewall","security/threat-actor"]},{"id":"cs/oauth","term":{"en":"OAuth","da":"OAuth"},"domain":["cs"],"cluster":"identity","summary":{"en":"A way to let one app act on your behalf in another service, with a limited pass instead of your password.","da":"En måde at lade én app handle på dine vegne i en anden tjeneste med et begrænset adgangsbevis i stedet for din adgangskode."},"era":2007,"aka":{"en":["OAuth 2.0"],"da":["OAuth 2.0"]},"depth":5,"degree":7,"requires":["cs/access-control","cs/api","cs/account"],"collides":false,"mentions":["cs/service","cs/password","cs/authorization","cs/account","cs/server","cs/api","cs/credential"]},{"id":"cs/openid-connect","term":{"en":"OpenID Connect (OIDC)","da":"OpenID Connect (OIDC)"},"domain":["cs"],"cluster":"identity","summary":{"en":"A login standard built on top of OAuth that tells an app who the user is, not just what it may do.","da":"En loginstandard bygget oven på OAuth, der fortæller en app, hvem brugeren er, og ikke kun hvad den må."},"era":2014,"aka":{"en":["OIDC"],"da":["OIDC"]},"depth":6,"degree":5,"requires":["cs/oauth","cs/identity-provider"],"collides":false,"mentions":["cs/oauth","cs/identity","cs/identity-provider","cs/session","cs/password","cs/single-sign-on"]},{"id":"cs/operating-system","term":{"en":"Operating system","da":"Styresystem"},"domain":["cs"],"cluster":"os","summary":{"en":"The base software that runs a computer, shares it between programs and keeps them from interfering with each other.","da":"Den grundlæggende software, der styrer en computer, deler den mellem programmer og holder dem adskilt fra hinanden."},"era":1964,"aka":{"en":["OS"],"da":["OS","operativsystem"]},"depth":0,"degree":9,"requires":[],"collides":false,"mentions":["security/control","cs/permission","cs/log","security/vulnerability"]},{"id":"cs/packet","term":{"en":"Packet","da":"Pakke"},"domain":["cs"],"cluster":"networking","summary":{"en":"A small, labelled chunk of data that travels across a network on its own and is put back together at the end.","da":"En lille, mærket bid data, der rejser selvstændigt over et netværk og samles igen ved modtageren."},"era":1965,"aka":{"en":["data packet"],"da":["datapakke"]},"depth":2,"degree":7,"requires":["cs/network","cs/protocol"],"collides":false,"mentions":["cs/network","cs/firewall","security/intrusion-detection-system"]},{"id":"cs/passkey","term":{"en":"Passkey","da":"Passkey"},"domain":["cs"],"cluster":"identity","summary":{"en":"A login without a password, where your device proves who you are with a secret key that never leaves it.","da":"Et login uden adgangskode, hvor din enhed beviser, hvem du er, med en hemmelig nøgle, der aldrig forlader den."},"era":2022,"aka":{"en":["FIDO credential","discoverable credential"],"da":["FIDO-nøgle"]},"depth":3,"degree":9,"requires":["cs/authentication","cs/public-key-cryptography"],"collides":false,"mentions":["cs/password","cs/credential","cs/public-key-cryptography","cs/server"]},{"id":"cs/password","term":{"en":"Password","da":"Adgangskode"},"domain":["cs"],"cluster":"identity","summary":{"en":"A secret string of characters, known only to the user, typed in to prove they are who they claim to be.","da":"En hemmelig række tegn, som kun brugeren kender, og som indtastes for at bevise, at vedkommende er den, de udgiver sig for."},"era":1961,"aka":{"en":["passphrase"],"da":["password","kodeord","adgangsfrase"]},"depth":0,"degree":9,"requires":[],"collides":false,"mentions":["cs/credential","cs/authentication","security/phishing","security/vulnerability","security/mfa"]},{"id":"cs/patch","term":{"en":"Patch","da":"Patch"},"domain":["cs"],"cluster":"os","summary":{"en":"A small piece of software from a vendor that fixes a flaw - often a vulnerability - in a program already installed.","da":"Et lille stykke software fra en leverandør, der retter en fejl - ofte en sårbarhed - i et program, som allerede er installeret."},"aka":{"en":["security update","software update"],"da":["sikkerhedsopdatering","opdatering","rettelse"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["security/vulnerability","cs/operating-system","security/it-operations","security/threat-actor","security/ransomware"]},{"id":"cs/permission","term":{"en":"Permission","da":"Rettighed"},"domain":["cs"],"cluster":"os","summary":{"en":"A specific right given to an account, such as to read, change or delete a file, or to run a program.","da":"En bestemt ret, som en konto får, fx til at læse, ændre eller slette en fil eller til at køre et program."},"aka":{"en":["access right","privilege"],"da":["adgangsrettighed","tilladelse"]},"depth":1,"degree":12,"requires":["cs/account"],"collides":false,"mentions":["cs/account","cs/operating-system","cs/client","security/security-incident"]},{"id":"cs/port","term":{"en":"Port","da":"Port"},"domain":["cs"],"cluster":"networking","summary":{"en":"A number that picks out which program on a device should receive incoming network data.","da":"Et nummer, der udpeger, hvilket program på en enhed der skal modtage indgående netværksdata."},"era":1981,"aka":{"en":["port number","network port"],"da":["portnummer","netværksport"]},"depth":2,"degree":6,"requires":["cs/ip-address","cs/protocol"],"collides":false,"mentions":["cs/network","cs/tcp-ip","cs/ip-address","cs/service","cs/https","security/it-operations","cs/server","cs/internet","security/threat-actor","security/attack-surface"]},{"id":"cs/privileged-access-management","term":{"en":"Privileged access management (PAM)","da":"Styring af privilegeret adgang (PAM)"},"domain":["cs","security"],"cluster":"identity","summary":{"en":"Tools and rules that lock away admin rights, hand them out only when needed and record what is done with them.","da":"Værktøjer og regler, der låser administratorrettigheder inde, kun udleverer dem ved behov og registrerer, hvad de bruges til."},"aka":{"en":["PAM","privileged account management"],"da":["PAM"]},"depth":4,"degree":6,"requires":["cs/privileged-account"],"collides":false,"mentions":["cs/privileged-account","cs/password","cs/session","cs/database","cs/server","security/one-time-password","security/threat-actor"]},{"id":"cs/privileged-account","term":{"en":"Privileged account","da":"Privilegeret konto"},"domain":["cs"],"cluster":"identity","summary":{"en":"An account with power beyond normal use, such as installing software, changing settings or managing other users.","da":"En konto med mere magt end almindelig brug, fx til at installere software, ændre indstillinger eller administrere andre brugere."},"aka":{"en":["admin account","administrator account"],"da":["administratorkonto","admin-konto"]},"depth":3,"degree":6,"requires":["cs/least-privilege"],"collides":false,"mentions":["cs/account","cs/permission","cs/server","security/mfa","security/threat-actor"]},{"id":"cs/process","term":{"en":"Process","da":"Proces"},"domain":["cs"],"cluster":"os","summary":{"en":"A program while it is running, with its own space in memory and the rights of the account that started it.","da":"Et program, mens det kører, med sin egen plads i hukommelsen og de rettigheder, som kontoen, der startede det, har."},"era":1965,"aka":{"en":["running program"],"da":["kørende program"]},"depth":1,"degree":6,"requires":["cs/operating-system"],"collides":false,"mentions":["cs/account","cs/operating-system","cs/identity","cs/permission","security/malware"]},{"id":"cs/protocol","term":{"en":"Protocol","da":"Protokol"},"domain":["cs"],"cluster":"networking","summary":{"en":"An agreed set of rules for how devices on a network format, send and answer messages.","da":"Et aftalt sæt regler for, hvordan enheder på et netværk opbygger, sender og besvarer beskeder."},"era":1967,"aka":{"en":["network protocol"],"da":["netværksprotokol"]},"depth":1,"degree":13,"requires":["cs/network"],"collides":false,"mentions":["cs/network","cs/encryption"]},{"id":"cs/public-key-cryptography","term":{"en":"Public-key cryptography","da":"Asymmetrisk kryptografi (public key)"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"Encryption that uses a pair of keys - one shared openly, one kept private - so strangers can protect data for you without a shared secret.","da":"Kryptering med et nøglepar - én delt åbent, én holdt privat - så fremmede kan beskytte data til dig uden en fælles hemmelighed."},"era":1976,"aka":{"en":["asymmetric cryptography","asymmetric encryption"],"da":["public key-kryptografi","asymmetrisk kryptering"]},"depth":1,"degree":10,"requires":["cs/cryptographic-key"],"collides":false,"mentions":["cs/encryption","cs/digital-signature"]},{"id":"cs/public-key-infrastructure","term":{"en":"Public key infrastructure (PKI)","da":"Offentlig nøgleinfrastruktur (PKI)"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"The system of trusted issuers, rules and records that hands out digital certificates and says which ones to believe.","da":"Systemet af betroede udstedere, regler og registre, der udsteder digitale certifikater og afgør, hvilke man kan stole på."},"era":1988,"depth":4,"degree":7,"requires":["cs/digital-certificate","cs/digital-signature","cs/public-key-cryptography"],"collides":false,"mentions":["cs/digital-certificate","cs/vpn","cs/internet"]},{"id":"cs/rest-api","term":{"en":"REST API","da":"REST API"},"domain":["cs"],"cluster":"web","summary":{"en":"A common style of web API where each thing has its own URL and programs use plain HTTP methods to read, add, change or delete it.","da":"En udbredt slags web-API, hvor hver ting har sin egen URL, og programmer læser, tilføjer, ændrer eller sletter den med HTTP-metoder."},"era":2000,"aka":{"en":["RESTful API"],"da":["RESTful API"]},"depth":6,"degree":4,"requires":["cs/http","cs/url"],"collides":false,"mentions":["cs/api","cs/url","cs/http","cs/server","cs/client"]},{"id":"cs/role-based-access-control","term":{"en":"Role-based access control (RBAC)","da":"Rollebaseret adgangskontrol (RBAC)"},"domain":["cs"],"cluster":"identity","summary":{"en":"Giving permissions to job roles rather than to individual people, and then giving people the roles that fit their job.","da":"At give rettigheder til jobroller i stedet for til enkeltpersoner og så give folk de roller, der passer til deres job."},"era":1992,"aka":{"en":["RBAC"],"da":["RBAC"]},"depth":2,"degree":5,"requires":["cs/permission"],"collides":false,"mentions":["cs/permission","cs/access-control","cs/account","cs/least-privilege"]},{"id":"cs/router","term":{"en":"Router","da":"Router"},"domain":["cs"],"cluster":"networking","summary":{"en":"A device that joins networks together and passes each packet on toward its destination.","da":"En enhed, der forbinder netværk og sender hver pakke videre mod dens destination."},"depth":3,"degree":5,"requires":["cs/ip-address","cs/packet"],"collides":false,"mentions":["cs/network","cs/packet","cs/ip-address","security/it-operations","cs/password","cs/internet","security/threat-actor"]},{"id":"cs/same-origin-policy","term":{"en":"Same-origin policy","da":"Same-origin policy"},"domain":["cs","security"],"cluster":"web","summary":{"en":"A browser rule that stops a page from one site reading data that belongs to another site open in the same browser.","da":"En browserregel, der forhindrer en side fra ét site i at læse data, som tilhører et andet site åbent i samme browser."},"era":1995,"aka":{"en":["SOP"],"da":["SOP"]},"depth":6,"degree":4,"requires":["cs/web-browser","cs/url"],"collides":false,"mentions":["cs/web-browser","cs/protocol","cs/https","cs/port","cs/url","security/cross-site-request-forgery","security/cross-site-scripting"]},{"id":"cs/saml","term":{"en":"SAML","da":"SAML"},"domain":["cs"],"cluster":"identity","summary":{"en":"An older, widely used standard for passing a signed “this user has logged in” message from an identity provider to an app.","da":"En ældre, udbredt standard, der sender en signeret “denne bruger er logget ind”-besked fra en identitetsudbyder til en app."},"era":2002,"aka":{"en":["Security Assertion Markup Language","SAML 2.0"],"da":["SAML 2.0"]},"depth":4,"degree":5,"requires":["cs/identity-provider","cs/digital-signature"],"collides":false,"mentions":["cs/identity-provider","cs/authentication","cs/web-browser","cs/account"]},{"id":"cs/secure-boot","term":{"en":"Secure boot","da":"Sikker opstart (secure boot)"},"domain":["cs","security"],"cluster":"os","summary":{"en":"A start-up check that lets a computer run only boot software and a kernel carrying a trusted digital signature.","da":"Et tjek ved opstart, der kun lader en computer køre opstartssoftware og en kerne med en betroet digital signatur."},"era":2012,"aka":{"en":["UEFI Secure Boot"],"da":["UEFI Secure Boot"]},"depth":3,"degree":6,"requires":["cs/digital-signature","cs/kernel","cs/operating-system"],"collides":false,"mentions":["cs/kernel","cs/digital-signature","security/malware","cs/operating-system"]},{"id":"cs/server","term":{"en":"Server","da":"Server"},"domain":["cs"],"cluster":"networking","summary":{"en":"A computer or program that waits for requests over a network and answers them, such as sending a web page or storing email.","da":"En computer eller et program, der venter på forespørgsler over et netværk og besvarer dem, fx ved at sende en webside eller gemme e-mail."},"depth":3,"degree":11,"requires":["cs/network","cs/port"],"collides":false,"mentions":["cs/network","cs/port","cs/client","cs/protocol","cs/service","security/critical-assets"]},{"id":"cs/service","term":{"en":"Service","da":"Tjeneste (service)"},"domain":["cs"],"cluster":"os","summary":{"en":"A program that runs in the background without a user, often starting with the computer and waiting to handle requests.","da":"Et program, der kører i baggrunden uden en bruger, ofte starter med computeren og venter på at håndtere forespørgsler."},"aka":{"en":["background service","daemon"],"da":["baggrundstjeneste","service"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["cs/operating-system","cs/account","cs/network","cs/server","cs/port","cs/internet","security/threat-actor"]},{"id":"cs/service-account","term":{"en":"Service account","da":"Servicekonto"},"domain":["cs"],"cluster":"identity","summary":{"en":"An account used by a program rather than a person, so that software can log in to other systems on its own.","da":"En konto, som bruges af et program i stedet for et menneske, så software selv kan logge ind på andre systemer."},"aka":{"en":["machine account","non-human account"],"da":["maskinkonto","systemkonto"]},"depth":2,"degree":7,"requires":["cs/service","cs/credential"],"collides":false,"mentions":["cs/account","cs/log","cs/service","cs/credential","cs/permission","cs/database","cs/password","security/backup","cs/server","security/threat-actor"]},{"id":"cs/session","term":{"en":"Session","da":"Session"},"domain":["cs"],"cluster":"identity","summary":{"en":"The period in which a system remembers that a user has logged in, so they need not prove who they are at every step.","da":"Den periode, hvor et system husker, at en bruger er logget ind, så vedkommende ikke skal bevise sin identitet ved hvert skridt."},"aka":{"en":["login session"],"da":["loginsession"]},"depth":3,"degree":8,"requires":["cs/authentication"],"collides":false,"mentions":["cs/authentication","cs/log","security/threat-actor","security/mfa"]},{"id":"cs/single-sign-on","term":{"en":"Single sign-on (SSO)","da":"Single sign-on (SSO)"},"domain":["cs"],"cluster":"identity","summary":{"en":"Logging in once to reach many separate applications, with a trusted identity provider vouching for the user to each.","da":"At logge ind én gang og få adgang til mange programmer, fordi en betroet identitetsudbyder går i god for brugeren."},"era":1988,"aka":{"en":["SSO"],"da":["SSO","fælles login"]},"depth":4,"degree":7,"requires":["cs/identity-provider","cs/session"],"collides":false,"mentions":["cs/identity-provider","cs/identity","cs/password","cs/account","security/mfa"]},{"id":"cs/symmetric-encryption","term":{"en":"Symmetric encryption","da":"Symmetrisk kryptering"},"domain":["cs"],"cluster":"cryptography","summary":{"en":"Encryption where the same secret key both locks and unlocks the data, so sender and receiver must share it in advance.","da":"Kryptering, hvor den samme hemmelige nøgle både låser og låser data op, så afsender og modtager skal dele den på forhånd."},"era":1977,"aka":{"en":["symmetric cryptography","secret-key encryption","shared-key encryption"],"da":["symmetrisk kryptografi"]},"depth":1,"degree":5,"requires":["cs/cryptographic-key"],"collides":false,"mentions":["cs/encryption","cs/cryptographic-key"]},{"id":"cs/tcp-ip","term":{"en":"TCP/IP","da":"TCP/IP"},"domain":["cs"],"cluster":"networking","summary":{"en":"The family of protocols that the internet and most other networks use to address, send and deliver data.","da":"Den familie af protokoller, som internettet og de fleste andre netværk bruger til at adressere, sende og levere data."},"era":1974,"aka":{"en":["Internet protocol suite"],"da":["internetprotokolfamilien"]},"depth":3,"degree":8,"requires":["cs/ip-address","cs/packet","cs/port"],"collides":false,"mentions":["cs/protocol","cs/internet","cs/network","cs/packet","cs/ip-address","cs/port","cs/server","cs/firewall","cs/log"]},{"id":"cs/tls","term":{"en":"TLS","da":"TLS"},"domain":["cs"],"cluster":"networking","summary":{"en":"The protocol that wraps data sent over TCP/IP in an encrypted channel after checking the other side's certificate.","da":"Protokollen, der lægger en krypteret kanal om data sendt over TCP/IP, efter at modpartens certifikat er kontrolleret."},"era":1999,"aka":{"en":["Transport Layer Security"],"da":["Transport Layer Security"]},"depth":4,"degree":17,"requires":["cs/tcp-ip","cs/encryption","cs/digital-certificate"],"collides":false,"mentions":["cs/protocol","cs/tcp-ip","cs/identity","cs/digital-certificate","cs/encryption","security/it-operations","cs/service","cs/web-browser","cs/password","security/personal-data"]},{"id":"cs/url","term":{"en":"URL","da":"URL"},"domain":["cs"],"cluster":"web","summary":{"en":"A written address that says where something lives on the internet and how to reach it, such as a web page or a file.","da":"En skrevet adresse, der fortæller, hvor noget ligger på internettet, og hvordan man når frem til det, fx en webside eller en fil."},"era":1994,"aka":{"en":["Uniform Resource Locator","web address"],"da":["webadresse"]},"depth":5,"degree":7,"requires":["cs/internet"],"collides":false,"mentions":["cs/internet","cs/protocol","cs/https","cs/port","cs/network","cs/api","security/threat-actor"]},{"id":"cs/vpn","term":{"en":"VPN","da":"VPN"},"domain":["cs"],"cluster":"networking","summary":{"en":"An encrypted tunnel across a public network that makes a distant device act as if it were inside a private one.","da":"En krypteret tunnel over et offentligt netværk, der får en fjern enhed til at opføre sig, som om den var på et privat netværk."},"era":1996,"aka":{"en":["virtual private network"],"da":["virtuelt privat netværk"]},"depth":2,"degree":8,"requires":["cs/network","cs/encryption","cs/ip-address"],"collides":false,"mentions":["cs/network","cs/packet","security/mfa","security/vulnerability","security/zero-trust"]},{"id":"cs/web-application","term":{"en":"Web application","da":"Webapplikation"},"domain":["cs"],"cluster":"web","summary":{"en":"A program you use through a web browser, with its logic and data kept on a server instead of installed on your own machine.","da":"Et program, man bruger gennem en webbrowser, hvor logik og data ligger på en server i stedet for at være installeret på ens egen maskine."},"aka":{"en":["web app"],"da":["webapp","webapplikation"]},"depth":5,"degree":14,"requires":["cs/http","cs/server"],"collides":false,"mentions":["cs/web-browser","cs/server","cs/http","cs/internet"]},{"id":"cs/web-browser","term":{"en":"Web browser","da":"Webbrowser"},"domain":["cs"],"cluster":"web","summary":{"en":"The program people use to visit websites - it fetches pages from servers and turns them into something you can read and click.","da":"Programmet, man bruger til at besøge websteder - det henter sider fra servere og gør dem til noget, man kan læse og klikke på."},"era":1990,"aka":{"en":["browser"],"da":["browser"]},"depth":5,"degree":8,"requires":["cs/http","cs/internet"],"collides":false,"mentions":["cs/server","cs/client","cs/http","cs/https","cs/cookie","security/risk"]},{"id":"platform/alerting","term":{"en":"Alerting","da":"Alarmering"},"domain":["platform"],"cluster":"observability","summary":{"en":"Rules that tell the right person, at once, when a system needs human attention, and stay quiet when it does not.","da":"Regler, der straks giver den rette person besked, når et system kræver menneskelig indgriben, og som tier stille, når det ikke gør."},"aka":{"en":["alerts","paging"],"da":["alarmer"]},"depth":1,"degree":9,"requires":["platform/metrics"],"collides":false,"mentions":["platform/metrics","cs/log","cs/service","security/security-incident"]},{"id":"platform/ci-cd","term":{"en":"CI/CD","da":"CI/CD"},"domain":["platform"],"cluster":"delivery","summary":{"en":"Merging, testing and releasing small software changes automatically and often, instead of in rare, large batches.","da":"At samle, teste og frigive små ændringer i software automatisk og ofte i stedet for i få, store leverancer."},"era":2010,"aka":{"en":["continuous integration and continuous delivery","continuous deployment"],"da":["kontinuerlig integration og levering"]},"depth":1,"degree":13,"requires":["platform/version-control"],"collides":false,"mentions":[]},{"id":"platform/cloud-computing","term":{"en":"Cloud computing","da":"Cloud computing"},"domain":["platform"],"cluster":"cloud","summary":{"en":"Renting computing power, storage and software over the internet from a provider, paying for what you use instead of owning it.","da":"At leje regnekraft, lager og software over internettet fra en udbyder og betale for forbruget i stedet for at eje det."},"era":2006,"aka":{"en":["the cloud"],"da":["skyen"]},"depth":5,"degree":11,"requires":["cs/internet","cs/server"],"collides":false,"mentions":["cs/internet","cs/network","cs/service","cs/server"]},{"id":"platform/cloud-iam","term":{"en":"Cloud IAM","da":"Cloud IAM"},"domain":["platform","security"],"cluster":"cloud","summary":{"en":"The cloud provider's built-in system of policies that decides which users, roles and service accounts may do what to each resource.","da":"Cloududbyderens indbyggede system af politikker, der afgør, hvilke brugere, roller og servicekonti der må gøre hvad ved hver ressource."},"era":2011,"aka":{"en":["cloud identity and access management"],"da":["cloud-identitets- og adgangsstyring"]},"depth":6,"degree":6,"requires":["platform/cloud-computing","cs/access-control","cs/authorization"],"collides":false,"mentions":["platform/cloud-computing","cs/service-account","cs/service","cs/identity","security/backup","cs/log","cs/database","cs/account"]},{"id":"platform/cloud-misconfiguration","term":{"en":"Cloud misconfiguration","da":"Fejlkonfiguration i skyen"},"domain":["platform","security"],"cluster":"cloud","summary":{"en":"A wrong or careless setting in a cloud service - like storage left open to everyone - that exposes data or systems.","da":"En forkert eller skødesløs indstilling i en cloudtjeneste - fx lager, der står åbent for alle - som blotlægger data eller systemer."},"depth":6,"degree":8,"requires":["platform/cloud-computing","cs/permission"],"collides":false,"mentions":["cs/service","security/vulnerability","cs/permission","cs/port","security/data-breach","cs/internet"]},{"id":"platform/code-signing","term":{"en":"Code signing","da":"Kodesignering"},"domain":["platform","security"],"cluster":"delivery","summary":{"en":"Adding a digital signature to software so users and systems can check who made it and that nobody changed it afterwards.","da":"At sætte en digital signatur på software, så brugere og systemer kan tjekke, hvem der har lavet den, og at ingen har ændret den bagefter."},"era":1996,"aka":{"en":["software signing"],"da":["softwaresignering"]},"depth":4,"degree":8,"requires":["cs/digital-signature","cs/digital-certificate"],"collides":false,"mentions":["cs/digital-signature","platform/container-image","cs/digital-certificate","security/it-operations","security/threat-actor","security/malware"]},{"id":"platform/container","term":{"en":"Container","da":"Container"},"domain":["platform"],"cluster":"containers","summary":{"en":"A sealed-off box for one program and everything it needs, sharing the host computer's kernel instead of carrying its own.","da":"En afskærmet kasse til ét program og alt, hvad det skal bruge, som deler værtscomputerens kerne i stedet for at have sin egen."},"era":2013,"depth":2,"degree":13,"requires":["cs/process","cs/kernel"],"collides":false,"mentions":["cs/kernel","cs/network","cs/process","security/data-processor","platform/container-image"]},{"id":"platform/container-escape","term":{"en":"Container escape","da":"Container escape"},"domain":["platform","security"],"cluster":"containers","summary":{"en":"An attack where code running inside a container breaks out of it and gains control of the host machine beneath it.","da":"Et angreb, hvor kode, der kører i en container, bryder ud af den og får kontrol over værtsmaskinen nedenunder."},"aka":{"en":["container breakout"],"da":["container breakout","udbrud fra container"]},"depth":5,"degree":7,"requires":["platform/container","platform/container-runtime"],"collides":false,"mentions":["platform/container","security/privilege-escalation","cs/kernel","platform/container-runtime","security/threat-actor"]},{"id":"platform/container-image","term":{"en":"Container image","da":"Container-image"},"domain":["platform"],"cluster":"containers","summary":{"en":"The frozen, read-only package of a program and its files from which identical containers are started.","da":"Den frosne, skrivebeskyttede pakke med et program og dets filer, som ens containere startes ud fra."},"era":2013,"depth":3,"degree":7,"requires":["platform/container","cs/file-system"],"collides":false,"mentions":["platform/container","cs/port","platform/container-registry","platform/pipeline","security/malware","cs/password"]},{"id":"platform/container-orchestration","term":{"en":"Container orchestration","da":"Container-orkestrering"},"domain":["platform"],"cluster":"containers","summary":{"en":"Letting software run many containers across a group of machines automatically, so nobody has to start and place them by hand.","da":"At lade software drive mange containere automatisk på tværs af en gruppe maskiner, så ingen skal starte og placere dem i hånden."},"era":2014,"depth":3,"degree":4,"requires":["platform/container","cs/network"],"collides":false,"mentions":["platform/container"]},{"id":"platform/container-registry","term":{"en":"Container registry","da":"Container-register (registry)"},"domain":["platform"],"cluster":"containers","summary":{"en":"A shared online store where container images are uploaded, given names and versions, and fetched by the machines that run them.","da":"Et fælles onlinelager, hvor container-images lægges op, får navne og versioner og hentes af de maskiner, der kører dem."},"era":2014,"aka":{"en":["image registry"],"da":["image-register"]},"depth":4,"degree":4,"requires":["platform/container-image"],"collides":false,"mentions":["platform/container-image","cs/server","platform/pipeline","platform/kubernetes","platform/software-supply-chain"]},{"id":"platform/container-runtime","term":{"en":"Container runtime","da":"Container-runtime"},"domain":["platform"],"cluster":"containers","summary":{"en":"The software on each host that actually starts, stops and walls off containers - containerd is a well-known example.","da":"Softwaren på hver vært, der rent faktisk starter, stopper og adskiller containere - containerd er et kendt eksempel."},"era":2015,"depth":4,"degree":6,"requires":["platform/container","platform/container-image","cs/kernel"],"collides":false,"mentions":["platform/container","platform/container-image","cs/kernel","cs/network","security/data-processor","platform/docker","platform/kubernetes","platform/pod"]},{"id":"platform/devsecops","term":{"en":"DevSecOps","da":"DevSecOps"},"domain":["platform","security"],"cluster":"delivery","summary":{"en":"Building security checks into the everyday work of the teams that write and run software, rather than adding them at the end.","da":"At bygge sikkerhedstjek ind i det daglige arbejde hos de teams, der skriver og driver software, i stedet for at tilføje dem til sidst."},"era":2012,"aka":{"en":["secure DevOps"],"da":[]},"depth":2,"degree":6,"requires":["platform/ci-cd"],"collides":false,"mentions":["security/vulnerability-scanning","platform/sbom","platform/pipeline","cs/password","security/threat-actor"]},{"id":"platform/distributed-tracing","term":{"en":"Distributed tracing","da":"Distribueret sporing (tracing)"},"domain":["platform"],"cluster":"observability","summary":{"en":"Following one user request as it passes through many services, timing each step, to see where it slowed down or failed.","da":"At følge én brugerforespørgsel gennem mange tjenester og tage tid på hvert trin for at se, hvor den blev langsom eller fejlede."},"era":2010,"aka":{"en":["tracing","traces"],"da":["tracing"]},"depth":1,"degree":5,"requires":["cs/service"],"collides":false,"mentions":["cs/service","cs/log","security/threat-actor"]},{"id":"platform/docker","term":{"en":"Docker","da":"Docker"},"domain":["platform"],"cluster":"containers","summary":{"en":"The widely used tool that made containers easy to use - it builds container images, shares them and runs them with a few commands.","da":"Det udbredte værktøj, der gjorde containere nemme at bruge - det bygger container-images, deler dem og kører dem med få kommandoer."},"era":2013,"depth":4,"degree":5,"requires":["platform/container-image"],"collides":false,"mentions":["platform/container","platform/container-image","platform/container-registry","cs/service","security/it-operations","cs/server"]},{"id":"platform/gitops","term":{"en":"GitOps","da":"GitOps"},"domain":["platform"],"cluster":"delivery","summary":{"en":"Running systems so that files under version control hold the only true description, and software keeps the live setup matching them.","da":"At drive systemer, så filer under versionsstyring er den eneste gyldige beskrivelse, og software hele tiden retter driften ind efter dem."},"era":2017,"depth":2,"degree":6,"requires":["platform/infrastructure-as-code","platform/version-control"],"collides":false,"mentions":["platform/version-control","security/it-operations","cs/service"]},{"id":"platform/health-check","term":{"en":"Health check","da":"Sundhedstjek (health check)"},"domain":["platform"],"cluster":"observability","summary":{"en":"A small automatic test, repeated every few seconds, that asks a running service whether it is alive and able to answer.","da":"En lille automatisk test, gentaget med få sekunders mellemrum, der spørger en kørende tjeneste, om den lever og kan svare."},"aka":{"en":[],"da":["health check"]},"depth":1,"degree":4,"requires":["cs/service"],"collides":false,"mentions":["cs/service","cs/url","cs/port","platform/kubernetes"]},{"id":"platform/hypervisor","term":{"en":"Hypervisor","da":"Hypervisor"},"domain":["platform"],"cluster":"cloud","summary":{"en":"The layer of software that splits one physical computer into several virtual machines and keeps them apart.","da":"Det lag software, der deler én fysisk computer op i flere virtuelle maskiner og holder dem adskilt."},"era":1967,"aka":{"en":["virtual machine monitor","VMM"],"da":["VMM"]},"depth":0,"degree":3,"requires":[],"collides":false,"mentions":["platform/virtual-machine","security/data-processor","cs/operating-system","cs/server","security/it-operations","cs/patch","security/threat-actor"]},{"id":"platform/iaas","term":{"en":"Infrastructure as a service (IaaS)","da":"Infrastructure as a service (IaaS)"},"domain":["platform"],"cluster":"cloud","summary":{"en":"The cloud model where you rent bare building blocks - machines, storage and network - and run everything on top yourself.","da":"Cloudmodellen, hvor du lejer de rå byggeklodser - maskiner, lager og netværk - og selv driver alt ovenpå."},"era":2006,"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["platform/cloud-computing","cs/network","cs/service","cs/operating-system","security/it-operations","platform/virtual-machine","cs/firewall","cs/account","cs/patch"]},{"id":"platform/infrastructure-as-code","term":{"en":"Infrastructure as code (IaC)","da":"Infrastructure as code (IaC)"},"domain":["platform"],"cluster":"delivery","summary":{"en":"Describing servers, networks and cloud settings in text files that a tool reads to build them, instead of setting them up by hand.","da":"At beskrive servere, netværk og cloud-indstillinger i tekstfiler, som et værktøj bygger ud fra, i stedet for at sætte dem op i hånden."},"aka":{"en":["IaC"],"da":["IaC"]},"depth":1,"degree":6,"requires":["platform/version-control"],"collides":false,"mentions":["cs/server","cs/network","cs/service","platform/version-control","platform/cloud-computing","cs/internet"]},{"id":"platform/kubernetes","term":{"en":"Kubernetes","da":"Kubernetes"},"domain":["platform"],"cluster":"containers","summary":{"en":"The most widely used open-source system for container orchestration, first built at Google and released in 2014.","da":"Det mest udbredte open source-system til container-orkestrering, oprindeligt bygget hos Google og udgivet i 2014."},"era":2014,"aka":{"en":["K8s"],"da":["K8s"]},"depth":3,"degree":10,"requires":["platform/container"],"collides":false,"mentions":["platform/container-orchestration","platform/container","platform/pod","cs/service","cs/network","platform/cloud-misconfiguration"]},{"id":"platform/metrics","term":{"en":"Metrics","da":"Metrikker"},"domain":["platform"],"cluster":"observability","summary":{"en":"Numbers a system records at regular times, such as requests per second or memory used, so trends can be charted and compared.","da":"Tal, som et system måler med faste mellemrum, fx forespørgsler pr. sekund eller brugt hukommelse, så udviklingen kan følges."},"aka":{"en":["metric","time series"],"da":["metrik","måletal"]},"depth":0,"degree":7,"requires":[],"collides":false,"mentions":["cs/server","cs/password","cs/service","cs/log","platform/distributed-tracing"]},{"id":"platform/microservices","term":{"en":"Microservices","da":"Microservices"},"domain":["platform","cs"],"cluster":"containers","summary":{"en":"A way of building an application as many small, separate services that each do one job and talk to each other over an API.","da":"En måde at bygge et system på som mange små, selvstændige tjenester, der hver løser én opgave og taler sammen via et API."},"era":2014,"aka":{"en":["microservice architecture"],"da":["microservice-arkitektur"]},"depth":5,"degree":5,"requires":["cs/api","cs/network"],"collides":false,"mentions":["cs/service","cs/api","cs/network","security/attack-surface"]},{"id":"platform/monitoring","term":{"en":"Monitoring","da":"Overvågning (monitoring)"},"domain":["platform"],"cluster":"observability","summary":{"en":"Watching a set of chosen measurements on systems over time and warning people when one moves outside its normal range.","da":"At holde øje med en række udvalgte målinger på systemer over tid og advare folk, når en af dem bevæger sig uden for det normale."},"aka":{"en":[],"da":["monitorering"]},"depth":1,"degree":9,"requires":["platform/metrics"],"collides":false,"mentions":["cs/server","cs/service"]},{"id":"platform/observability","term":{"en":"Observability","da":"Observerbarhed"},"domain":["platform"],"cluster":"observability","summary":{"en":"How well you can work out what is going on inside a running system just from the signals it sends out.","da":"Hvor godt man kan regne ud, hvad der foregår inde i et kørende system, alene ud fra de signaler, det sender ud."},"aka":{"en":["o11y"],"da":[]},"depth":1,"degree":10,"requires":["cs/log"],"collides":false,"mentions":["cs/log","platform/metrics","platform/distributed-tracing","cs/service","security/security-incident"]},{"id":"platform/paas","term":{"en":"Platform as a service (PaaS)","da":"Platform as a service (PaaS)"},"domain":["platform"],"cluster":"cloud","summary":{"en":"The cloud model where the provider runs the machines and operating system, and you only bring your own program and its data.","da":"Cloudmodellen, hvor udbyderen driver maskiner og styresystem, og du kun leverer dit eget program og dets data."},"era":2008,"depth":0,"degree":3,"requires":[],"collides":false,"mentions":["platform/cloud-computing","cs/operating-system","cs/service","cs/server","cs/log"]},{"id":"platform/pipeline","term":{"en":"Pipeline","da":"Pipeline"},"domain":["platform"],"cluster":"delivery","summary":{"en":"A fixed, automatic chain of steps that takes a code change from saved file to running software, stopping if any step fails.","da":"En fast, automatisk kæde af trin, der fører en kodeændring fra gemt fil til kørende software og stopper, hvis et trin fejler."},"aka":{"en":["build pipeline","CI/CD pipeline","deployment pipeline"],"da":["byggepipeline","udrulningspipeline"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["platform/ci-cd","security/threat-actor"]},{"id":"platform/pod","term":{"en":"Pod","da":"Pod"},"domain":["platform"],"cluster":"containers","summary":{"en":"The smallest unit Kubernetes runs - one or a few tightly linked containers that share a network address and storage.","da":"Den mindste enhed, Kubernetes kører - én eller få tæt forbundne containere, der deler netværksadresse og lager."},"era":2014,"depth":3,"degree":3,"requires":["platform/container","cs/ip-address"],"collides":false,"mentions":["platform/kubernetes","platform/container","cs/network","cs/ip-address","cs/log"]},{"id":"platform/runbook","term":{"en":"Runbook","da":"Runbook"},"domain":["platform"],"cluster":"observability","summary":{"en":"Written step-by-step instructions for handling one known situation, such as a certain alarm, so anyone on call can act fast.","da":"Skrevne trin-for-trin-instruktioner til at håndtere én kendt situation, fx en bestemt alarm, så enhver på vagt kan handle hurtigt."},"aka":{"en":[],"da":["driftsvejledning"]},"depth":2,"degree":4,"requires":["platform/alerting"],"collides":false,"mentions":[]},{"id":"platform/saas","term":{"en":"Software as a service (SaaS)","da":"Software as a service (SaaS)"},"domain":["platform"],"cluster":"cloud","summary":{"en":"The cloud model where you simply use a finished program over the internet, and the provider runs everything behind it.","da":"Cloudmodellen, hvor du blot bruger et færdigt program over internettet, og udbyderen driver alt bag det."},"era":2001,"depth":1,"degree":6,"requires":["cs/account"],"collides":false,"mentions":["platform/cloud-computing","cs/internet","cs/service","cs/web-browser","cs/server","cs/operating-system","cs/account","security/mfa"]},{"id":"platform/sbom","term":{"en":"Software bill of materials (SBOM)","da":"Softwarestykliste (SBOM)"},"domain":["platform","security"],"cluster":"delivery","summary":{"en":"A list of every component and outside library a piece of software contains, so its owners know exactly what is inside it.","da":"En liste over alle komponenter og eksterne biblioteker, et stykke software indeholder, så man ved præcis, hvad det består af."},"era":2018,"aka":{"en":["SBOM"],"da":["SBOM"]},"depth":1,"degree":11,"requires":["platform/software-supply-chain"],"collides":false,"mentions":["security/cyber-resilience-act"]},{"id":"platform/secrets-management","term":{"en":"Secrets management","da":"Håndtering af hemmeligheder (secrets management)"},"domain":["platform","security"],"cluster":"cloud","summary":{"en":"Keeping passwords, keys and tokens that programs use in one guarded store, instead of scattered in code and files.","da":"At holde de adgangskoder, nøgler og tokens, som programmer bruger, i ét bevogtet lager i stedet for spredt i kode og filer."},"era":2015,"aka":{"en":[],"da":["secrets management"]},"depth":3,"degree":13,"requires":["cs/credential","cs/cryptographic-key","cs/service-account"],"collides":false,"mentions":["cs/password","cs/credential","cs/cryptographic-key","cs/access-control","cs/log","cs/database","security/threat-actor"]},{"id":"platform/service-level-agreement","term":{"en":"Service level agreement (SLA)","da":"Serviceniveauaftale (SLA)"},"domain":["platform"],"cluster":"observability","summary":{"en":"A written promise in a contract about how well a service will work, with a price to pay, such as money back, if it is broken.","da":"Et skriftligt løfte i en kontrakt om, hvor godt en tjeneste skal fungere, med en pris at betale, fx penge tilbage, hvis det brydes."},"aka":{"en":["SLA"],"da":["SLA"]},"depth":1,"degree":4,"requires":["security/availability"],"collides":false,"mentions":["cs/service","security/availability"]},{"id":"platform/service-level-objective","term":{"en":"Service level objective (SLO)","da":"Serviceniveaumål (SLO)"},"domain":["platform"],"cluster":"observability","summary":{"en":"An internal target for how well a service should work, such as 99.9% of requests answered within a second over 30 days.","da":"Et internt mål for, hvor godt en tjeneste skal fungere, fx at 99,9 % af forespørgslerne besvares inden for et sekund over 30 dage."},"era":2016,"aka":{"en":["SLO"],"da":["SLO"]},"depth":1,"degree":10,"requires":["platform/metrics","security/availability"],"collides":false,"mentions":["cs/service","security/availability","platform/service-level-agreement"]},{"id":"platform/shared-responsibility-model","term":{"en":"Shared responsibility model","da":"Model for delt ansvar"},"domain":["platform","security"],"cluster":"cloud","summary":{"en":"The split of security duties between a cloud provider and its customer, which shifts with the kind of service bought.","da":"Fordelingen af sikkerhedsopgaver mellem en cloududbyder og kunden, som flytter sig alt efter, hvilken slags tjeneste man køber."},"aka":{"en":[],"da":["delt ansvar"]},"depth":6,"degree":3,"requires":["platform/cloud-computing"],"collides":false,"mentions":["cs/service","platform/cloud-computing","platform/iaas","platform/paas","platform/saas","security/compliance","security/iso-27001","security/security-incident"]},{"id":"platform/software-composition-analysis","term":{"en":"Software composition analysis (SCA)","da":"Software composition analysis (SCA)"},"domain":["platform","security"],"cluster":"delivery","summary":{"en":"Automatic checking of the outside libraries a program is built from, looking for known flaws and licence problems.","da":"Automatisk tjek af de eksterne biblioteker, et program er bygget af, for kendte fejl og licensproblemer."},"aka":{"en":["SCA"],"da":["SCA"]},"depth":3,"degree":9,"requires":["platform/software-supply-chain","security/cve"],"collides":false,"mentions":["security/cve","cs/client","platform/pipeline","security/threat-actor"]},{"id":"platform/software-supply-chain","term":{"en":"Software supply chain","da":"Softwareforsyningskæde"},"domain":["platform","security"],"cluster":"delivery","summary":{"en":"Everything and everyone that goes into making software you run, from outside code parts to the tools that build and ship it.","da":"Alt og alle, der indgår i at lave den software, man kører, fra eksterne kodedele til de værktøjer, der bygger og leverer den."},"depth":0,"degree":12,"requires":[],"collides":false,"mentions":["platform/pipeline","security/threat-actor","security/malware","security/cyber-resilience-act","security/risk"]},{"id":"platform/telemetry","term":{"en":"Telemetry","da":"Telemetri"},"domain":["platform"],"cluster":"observability","summary":{"en":"The data a running system sends out about itself, mainly logs, metrics and traces, so people can see how it is doing.","da":"De data, et kørende system sender ud om sig selv, især logs, metrikker og sporinger, så man kan se, hvordan det har det."},"depth":2,"degree":5,"requires":["cs/log","platform/metrics","platform/distributed-tracing"],"collides":false,"mentions":["cs/log","platform/metrics","platform/distributed-tracing","cs/service"]},{"id":"platform/version-control","term":{"en":"Version control","da":"Versionsstyring"},"domain":["platform"],"cluster":"delivery","summary":{"en":"A system that keeps every saved version of a set of files, with who changed what and when, so work can be compared or rolled back.","da":"Et system, der gemmer hver version af en samling filer, og hvem der ændrede hvad hvornår, så man kan sammenligne eller rulle tilbage."},"era":1972,"aka":{"en":["source control","revision control"],"da":["versionskontrol"]},"depth":0,"degree":11,"requires":[],"collides":false,"mentions":["cs/firewall","security/audit"]},{"id":"platform/virtual-machine","term":{"en":"Virtual machine","da":"Virtuel maskine"},"domain":["platform"],"cluster":"cloud","summary":{"en":"A whole computer made in software, with its own operating system, running side by side with others on one physical machine.","da":"En hel computer lavet i software med sit eget styresystem, der kører side om side med andre på én fysisk maskine."},"era":1967,"aka":{"en":["VM"],"da":["VM"]},"depth":1,"degree":4,"requires":["platform/hypervisor","cs/operating-system"],"collides":false,"mentions":["cs/operating-system","security/data-processor","cs/network","platform/hypervisor","security/it-operations","cs/server","cs/service"]},{"id":"security/access-management","term":{"en":"Access management","da":"Adgangsstyring"},"domain":["security"],"cluster":"controls","summary":{"en":"The rules and routines that decide who may use which data and systems, and that keep those rights correct over time.","da":"De regler og rutiner, der afgør, hvem der må bruge hvilke data og systemer, og som holder rettighederne korrekte over tid."},"aka":{"en":["identity and access management","IAM"],"da":["IAM","adgangsstyring og identitetsstyring"]},"depth":4,"degree":11,"requires":["cs/authentication","cs/authorization"],"collides":false,"mentions":["cs/account","cs/access-control","cs/service"]},{"id":"security/alert-triage","term":{"en":"Alert triage","da":"Triage af alarmer"},"domain":["security"],"cluster":"security-operations","summary":{"en":"Sorting incoming alarms quickly into real threats, harmless noise and cases that need a closer look, so the worst get handled first.","da":"Hurtig sortering af indkomne alarmer i reelle trusler, harmløs støj og sager, der kræver et nærmere kig, så de værste håndteres først."},"aka":{"en":["alarm triage"],"da":["alarmtriage"]},"depth":2,"degree":9,"requires":["platform/alerting"],"collides":false,"mentions":["security/threat","security/security-incident","security/soc","security/backup"]},{"id":"security/annex-a","term":{"en":"ISO 27001 Annex A","da":"ISO 27001 Annex A (bilag A)"},"domain":["security"],"cluster":"compliance","summary":{"en":"The list of 93 reference controls at the back of ISO 27001 that every organisation using the standard must hold its own controls up against.","da":"De 93 referencekontroller bagerst i ISO 27001, som enhver organisation, der følger standarden, skal holde sine kontroller op imod."},"era":2005,"aka":{"en":["Annex A","Annex A controls"],"da":["bilag A","Annex A"]},"depth":5,"degree":4,"requires":["security/control"],"collides":false,"mentions":["security/iso-27001","security/risk-treatment","security/statement-of-applicability","cs/server","security/iso-27002"]},{"id":"security/anomaly-detection","term":{"en":"Anomaly detection","da":"Anomalidetektion"},"domain":["security","ai"],"cluster":"security-operations","summary":{"en":"Learning what normal activity looks like and raising an alarm when something departs from it, even if no rule describes the attack.","da":"At lære, hvordan normal aktivitet ser ud, og slå alarm, når noget afviger fra den, også selv om ingen regel beskriver angrebet."},"era":1987,"aka":{"en":["behaviour-based detection","outlier detection"],"da":["adfærdsbaseret detektion"]},"depth":0,"degree":7,"requires":[],"collides":false,"mentions":["security/threat","cs/network","ai/machine-learning","cs/account","security/soc","security/malware","security/false-positive"]},{"id":"security/api-security","term":{"en":"API security","da":"API-sikkerhed"},"domain":["security"],"cluster":"application-security","summary":{"en":"Protecting the APIs that programs use to talk to each other, so each caller can reach and change only what it is allowed to.","da":"Beskyttelse af de API'er, som programmer taler sammen igennem, så hver kalder kun kan se og ændre det, den har lov til."},"era":2019,"depth":5,"degree":5,"requires":["cs/api","cs/authentication","cs/authorization"],"collides":false,"mentions":["cs/api","cs/authentication","cs/authorization","security/input-validation","cs/account","ai/ai-agent"]},{"id":"security/asset","term":{"en":"Asset","da":"Aktiv"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Anything of value to the organisation that needs protecting - data, systems, devices, people or know-how.","da":"Alt af værdi for organisationen, som skal beskyttes - data, systemer, enheder, medarbejdere eller viden."},"aka":{"en":["information asset"],"da":["informationsaktiv"]},"depth":1,"degree":12,"requires":["security/cia-triad"],"collides":false,"mentions":["security/risk","security/risk-monitoring","cs/client","cs/server","security/backup"]},{"id":"security/asset-inventory","term":{"en":"Asset inventory","da":"Aktivfortegnelse (asset inventory)"},"domain":["security"],"cluster":"controls","summary":{"en":"One complete, up-to-date list of the organisation's computers, devices, systems and software.","da":"En samlet, opdateret liste over virksomhedens computere, enheder, systemer og software."},"aka":{"en":["IT asset inventory","asset register"],"da":["asset inventory","aktivliste"]},"depth":0,"degree":10,"requires":[],"collides":false,"mentions":["cs/network","security/threat-actor"]},{"id":"security/attack-surface","term":{"en":"Attack surface","da":"Angrebsflade"},"domain":["security"],"cluster":"application-security","summary":{"en":"The sum of all the places where an outsider could try to get into a system, send data into it or pull data out.","da":"Summen af alle de steder, hvor en udefrakommende kan forsøge at komme ind i et system, sende data ind eller hente data ud."},"depth":2,"degree":6,"requires":["security/asset","security/vulnerability"],"collides":false,"mentions":["cs/port","cs/api","cs/account","security/it-operations","cs/internet","cs/server","cs/privileged-account","cs/patch","security/threat-actor","security/vulnerability"]},{"id":"security/audit","term":{"en":"Audit","da":"Audit"},"domain":["security"],"cluster":"compliance","summary":{"en":"An independent check of whether an organisation actually follows its own policies and the requirements it has signed up to.","da":"En uafhængig gennemgang af, om en organisation faktisk følger sine egne politikker og de krav, den har forpligtet sig til."},"aka":{"en":["compliance audit","security audit","internal audit"],"da":["revision","intern audit"]},"depth":1,"degree":10,"requires":["security/security-policy","security/compliance"],"collides":true,"mentions":["cs/account","security/security-incident"]},{"id":"security/authentication-factor","term":{"en":"Authentication factor","da":"Autentificeringsfaktor"},"domain":["security","cs"],"cluster":"controls","summary":{"en":"One kind of proof used to log in - something you know, something you have, or something you are.","da":"Én slags bevis, der bruges ved login - noget man ved, noget man har, eller noget man er."},"aka":{"en":["login factor"],"da":["godkendelsesfaktor","sikkerhedsfaktor"]},"depth":3,"degree":6,"requires":["cs/authentication"],"collides":false,"mentions":["cs/log","cs/authentication","cs/password","security/mfa"]},{"id":"security/availability","term":{"en":"Availability","da":"Tilgængelighed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Making sure information and systems can be used by the right people when they are needed.","da":"At sikre, at information og systemer kan bruges af de rette personer, når der er brug for dem."},"depth":0,"degree":8,"requires":[],"collides":false,"mentions":["security/ransomware"]},{"id":"security/awareness-maturity","term":{"en":"Awareness maturity","da":"Awareness-modenhed"},"domain":["security"],"cluster":"awareness","summary":{"en":"A measure of how far an organisation has come in making security part of how its people think and act.","da":"Et mål for, hvor langt en organisation er nået med at gøre sikkerhed til en del af, hvordan dens folk tænker og handler."},"aka":{"en":["security awareness maturity"],"da":["awareness maturity"]},"depth":3,"degree":6,"requires":["security/security-awareness","security/security-culture"],"collides":false,"mentions":["security/security-culture","security/awareness-officer","security/phishing","ai/model-training"]},{"id":"security/awareness-officer","term":{"en":"Awareness officer","da":"Awareness- og træningsansvarlig"},"domain":["security"],"cluster":"awareness","summary":{"en":"The person responsible for teaching staff to spot and avoid attacks, and for measuring whether their habits actually change.","da":"Den person, der har ansvaret for at lære medarbejderne at opdage og undgå angreb og for at måle, om deres vaner faktisk ændrer sig."},"aka":{"en":["awareness lead","security training lead"],"da":["awarenessansvarlig","træningsansvarlig"]},"depth":3,"degree":3,"requires":["security/awareness-programme"],"collides":false,"mentions":["ai/model-training","security/phishing-simulation","cs/session"]},{"id":"security/awareness-programme","term":{"en":"Awareness programme","da":"Awareness-program"},"domain":["security"],"cluster":"awareness","summary":{"en":"A planned, ongoing effort to change how staff behave around security - with target groups, messages, methods and measurable goals.","da":"En planlagt og løbende indsats for at ændre medarbejdernes adfærd omkring sikkerhed - med målgrupper, budskaber, metoder og målbare mål."},"aka":{"en":["awareness program","awareness campaign","awareness plan"],"da":["awareness-kampagne","awarenessplan"]},"depth":2,"degree":6,"requires":["security/security-awareness"],"collides":false,"mentions":["security/security-awareness","security/phishing-simulation","security/nudging","cs/session","ai/model-training"]},{"id":"security/backup","term":{"en":"Backup","da":"Backup"},"domain":["security","cs"],"cluster":"controls","summary":{"en":"A separate copy of data kept so it can be restored after a breakdown, a mistake or an attack.","da":"En separat kopi af data, som gemmes, så de kan gendannes efter nedbrud, fejl eller angreb."},"aka":{"en":["backup copy","data backup"],"da":["sikkerhedskopi","sikkerhedskopiering"]},"depth":0,"degree":9,"requires":[],"collides":false,"mentions":["security/ransomware","cs/server","security/it-operations","security/availability"]},{"id":"security/business-continuity-plan","term":{"en":"Business continuity plan (BCP)","da":"Business continuity plan (BCP)"},"domain":["security"],"cluster":"incident-response","summary":{"en":"A plan for keeping the most important work going during and after a crisis, even while the systems are down.","da":"En plan for at holde det vigtigste arbejde i gang under og efter en krise, også mens systemerne er nede."},"aka":{"en":["BCP","continuity plan"],"da":["BCP","kontinuitetsplan"]},"depth":4,"degree":9,"requires":["security/business-impact-analysis"],"collides":false,"mentions":["security/business-impact-analysis"]},{"id":"security/business-email-compromise","term":{"en":"Business email compromise (CEO fraud)","da":"Direktørsvindel (CEO fraud)"},"domain":["security"],"cluster":"awareness","summary":{"en":"A scam where criminals pose as a boss or supplier by email to trick staff into paying money or sending data.","da":"Svindel, hvor kriminelle udgiver sig for at være chefen eller en leverandør og narrer ansatte til at betale eller sende data."},"era":2013,"aka":{"en":["BEC","CEO fraud","invoice fraud"],"da":["CEO fraud","BEC","fakturasvindel"]},"depth":1,"degree":5,"requires":["cs/account"],"collides":false,"mentions":["security/threat-actor","cs/account"]},{"id":"security/business-impact-analysis","term":{"en":"Business impact analysis (BIA)","da":"Konsekvensanalyse (BIA)"},"domain":["security"],"cluster":"risk-management","summary":{"en":"A study of what an outage or incident would do to the business, and how long each activity can be down.","da":"En analyse af, hvad et nedbrud eller en hændelse vil betyde for forretningen, og hvor længe hver aktivitet kan ligge stille."},"aka":{"en":["BIA"],"da":["BIA"]},"depth":3,"degree":7,"requires":["security/critical-assets","security/impact"],"collides":false,"mentions":["security/security-incident","security/risk","security/business-continuity-plan"]},{"id":"security/cer-directive","term":{"en":"CER Directive","da":"CER-direktivet"},"domain":["security"],"cluster":"compliance","summary":{"en":"The EU law that makes the operators of vital services like power and water able to withstand floods, sabotage and other physical threats.","da":"EU-direktivet, der skal gøre dem, der driver vitale tjenester som strøm og vand, modstandsdygtige over for sabotage, storm og oversvømmelse."},"era":2022,"aka":{"en":["Critical Entities Resilience Directive","Directive (EU) 2022/2557"],"da":["direktivet om kritiske enheders modstandsdygtighed","direktiv (EU) 2022/2557"]},"depth":2,"degree":6,"requires":["security/critical-assets"],"collides":false,"mentions":["cs/service","security/threat","security/risk","security/backup","security/threat-actor"]},{"id":"security/certification","term":{"en":"Certification","da":"Certificering"},"domain":["security"],"cluster":"compliance","summary":{"en":"Formal proof from an approved outside body that an organisation's security meets a published standard such as ISO 27001.","da":"Formelt bevis fra et godkendt eksternt organ på, at en organisations sikkerhed lever op til en offentlig standard som ISO 27001."},"aka":{"en":["ISO 27001 certification"],"da":["ISO 27001-certificering"]},"depth":6,"degree":4,"requires":["security/isms","security/audit"],"collides":false,"mentions":["security/iso-27001","security/audit","security/isms","security/iso-27002"]},{"id":"security/cfcs","term":{"en":"Centre for Cyber Security (CFCS)","da":"Center for Cybersikkerhed (CFCS)"},"domain":["security"],"cluster":"compliance","summary":{"en":"Denmark's national cyber security body from 2012, which in January 2025 became part of the Danish Resilience Agency (SAMSIK).","da":"Danmarks nationale myndighed for cybersikkerhed fra 2012, som i januar 2025 blev en del af Styrelsen for Samfundssikkerhed."},"era":2012,"aka":{"en":["Danish Centre for Cyber Security"],"da":[]},"depth":1,"degree":4,"requires":["security/cyber-and-information-security"],"collides":false,"mentions":["cs/service","security/threat","security/security-incident","cs/internet"]},{"id":"security/change-management","term":{"en":"Change management","da":"Change management"},"domain":["security"],"cluster":"controls","summary":{"en":"A controlled process to plan, approve, record and check every change made to IT systems.","da":"En styret proces for at planlægge, godkende, registrere og efterprøve alle ændringer i IT-systemer."},"aka":{"en":["change control"],"da":["ændringsstyring","ændringshåndtering"]},"depth":1,"degree":8,"requires":["security/asset-inventory"],"collides":false,"mentions":["security/risk","cs/network","cs/firewall"]},{"id":"security/cia-triad","term":{"en":"CIA triad","da":"CIA-triaden"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"The three pillars of information security - confidentiality, integrity and availability.","da":"Informationssikkerhedens tre søjler - fortrolighed, integritet og tilgængelighed."},"aka":{"en":["CIA model"],"da":["CIA-modellen"]},"depth":0,"degree":8,"requires":[],"collides":false,"mentions":["security/cyber-and-information-security","security/confidentiality","security/integrity","security/availability","security/non-repudiation","security/information-security-coordinator"]},{"id":"security/cis-controls","term":{"en":"CIS Controls","da":"CIS-kontroller"},"domain":["security"],"cluster":"controls","summary":{"en":"A ranked, public list of security measures from the Center for Internet Security that tells an organisation what to do first.","da":"En prioriteret, offentlig liste over sikkerhedstiltag fra Center for Internet Security, der viser, hvad man bør gøre først."},"era":2008,"aka":{"en":["CIS Critical Security Controls","CIS 18"],"da":["CIS Controls","CIS 18"]},"depth":5,"degree":16,"requires":["security/control"],"collides":false,"mentions":["cs/internet","security/control","security/backup"]},{"id":"security/communication-plan","term":{"en":"Communication plan","da":"Kommunikationsplan"},"domain":["security"],"cluster":"incident-response","summary":{"en":"A plan for who tells what to whom during a crisis - staff, customers, authorities and the press.","da":"En plan for, hvem der siger hvad til hvem under en krise - medarbejdere, kunder, myndigheder og presse."},"aka":{"en":["crisis communication plan"],"da":["krisekommunikationsplan"]},"depth":0,"degree":4,"requires":[],"collides":false,"mentions":["security/contingency-plan","security/security-incident","security/data-breach"]},{"id":"security/compliance","term":{"en":"Compliance","da":"Compliance"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Living up to the laws, rules and standards that apply - for example NIS2, GDPR or ISO 27001.","da":"At leve op til gældende regler, lovgivning og standarder - fx NIS2, GDPR og ISO 27001."},"aka":{"en":["regulatory compliance"],"da":["overholdelse af regler","regelefterlevelse"]},"depth":0,"degree":15,"requires":[],"collides":false,"mentions":["security/gdpr","security/iso-27001","security/audit","security/backup","ai/model-training"]},{"id":"security/compliance-and-risk-coordinator","term":{"en":"Compliance and risk coordinator","da":"Compliance- og risikokoordinator"},"domain":["security"],"cluster":"compliance","summary":{"en":"A role, often a first job in the field, that tracks which rules apply, where the organisation falls short, and how its risks are handled.","da":"En rolle, ofte på begynderniveau, der følger med i, hvilke regler der gælder, hvor organisationen halter, og hvordan risici håndteres."},"aka":{"en":["compliance coordinator","risk coordinator"],"da":["compliancekoordinator","risikokoordinator"]},"depth":5,"degree":6,"requires":["security/compliance","security/risk-management"],"collides":false,"mentions":["security/risk","security/risk-assessment","security/iso-27001","security/audit","security/gdpr"]},{"id":"security/compliance-roadmap","term":{"en":"Compliance roadmap","da":"Compliance-køreplan (roadmap)"},"domain":["security"],"cluster":"compliance","summary":{"en":"A time plan that turns a list of gaps into ordered steps, owners and dates for meeting a set of requirements.","da":"En tidsplan, der gør en liste over mangler til ordnede trin med ejere og datoer for at opfylde et sæt krav."},"aka":{"en":["security roadmap"],"da":["sikkerhedsroadmap","compliance-roadmap"]},"depth":2,"degree":3,"requires":["security/gap-analysis"],"collides":false,"mentions":["security/gap-analysis","security/risk-assessment","security/compliance","security/mfa","security/backup"]},{"id":"security/confidentiality","term":{"en":"Confidentiality","da":"Fortrolighed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Making sure only the right people can see a piece of information.","da":"At sikre, at kun de rette personer kan se en given information."},"depth":0,"degree":12,"requires":[],"collides":false,"mentions":["security/personal-data"]},{"id":"security/contingency-plan","term":{"en":"Contingency plan","da":"Beredskabsplan"},"domain":["security"],"cluster":"incident-response","summary":{"en":"A written, approved plan for how the organisation reacts when something goes wrong - who does what, and in which order.","da":"En nedskrevet og godkendt plan for, hvordan organisationen reagerer, når noget går galt - hvem gør hvad og i hvilken rækkefølge."},"depth":5,"degree":9,"requires":["security/incident-response","security/business-impact-analysis","security/recovery-objectives"],"collides":false,"mentions":["security/security-incident","security/business-continuity-plan","security/disaster-recovery-plan","security/communication-plan"]},{"id":"security/control","term":{"en":"Security control","da":"Kontrol (foranstaltning)"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"A measure that lowers risk - technical, like a lock on a system, or organisational, like a rule or training.","da":"Et tiltag, der mindsker risikoen - teknisk som en lås på et system, eller organisatorisk som en regel eller træning."},"aka":{"en":["control","safeguard","countermeasure"],"da":["kontrol","sikkerhedsforanstaltning","foranstaltning"]},"depth":4,"degree":37,"requires":["security/risk"],"collides":false,"mentions":["security/risk","ai/model-training","security/likelihood","security/impact","security/mfa","cs/password"]},{"id":"security/credential-stuffing","term":{"en":"Credential stuffing","da":"Credential stuffing"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Trying stolen user names and passwords from one leak on many other sites, hoping people used the same password there.","da":"At prøve stjålne brugernavne og adgangskoder fra ét læk på mange andre sider i håb om, at folk har genbrugt adgangskoden."},"era":2014,"depth":2,"degree":7,"requires":["cs/credential"],"collides":false,"mentions":["cs/password","cs/credential","security/data-breach","cs/service","cs/account","security/threat-actor","security/mfa"]},{"id":"security/crisis-management","term":{"en":"Crisis management","da":"Krisestyring"},"domain":["security"],"cluster":"incident-response","summary":{"en":"How top management leads the whole organisation through a serious event - decisions, priorities, staff, customers and press.","da":"Hvordan topledelsen leder hele organisationen gennem en alvorlig begivenhed - beslutninger, prioriteter, medarbejdere, kunder og presse."},"aka":{"en":["crisis response"],"da":["krisehåndtering","kriseledelse"]},"depth":5,"degree":5,"requires":["security/business-continuity-plan"],"collides":false,"mentions":["security/business-continuity-plan","security/security-incident","security/ransomware"]},{"id":"security/critical-assets","term":{"en":"Critical assets","da":"Kritiske aktiver"},"domain":["security"],"cluster":"risk-management","summary":{"en":"The systems, processes or data the business cannot run without, and so must protect first.","da":"De systemer, processer eller data, som forretningen ikke kan køre uden, og som derfor skal beskyttes først."},"aka":{"en":["crown jewels"],"da":[]},"depth":1,"degree":6,"requires":["security/asset-inventory","security/availability"],"collides":false,"mentions":["security/asset"]},{"id":"security/cross-site-request-forgery","term":{"en":"Cross-site request forgery (CSRF)","da":"Cross-site request forgery (CSRF)"},"domain":["security"],"cluster":"application-security","summary":{"en":"An attack where a harmful page makes a user's browser send a request to a site they are logged in to, which acts as if they asked.","da":"Et angreb, hvor en ondsindet side får brugerens browser til at sende en forespørgsel til et site, som tror, brugeren selv bad om den."},"era":2001,"aka":{"en":["CSRF","XSRF","session riding"],"da":["CSRF","XSRF"]},"depth":7,"degree":6,"requires":["cs/web-application","cs/cookie"],"collides":false,"mentions":["cs/web-browser","cs/web-application","cs/cookie","cs/account","security/threat-actor","cs/password"]},{"id":"security/cross-site-scripting","term":{"en":"Cross-site scripting (XSS)","da":"Cross-site scripting (XSS)"},"domain":["security"],"cluster":"application-security","summary":{"en":"An attack that smuggles a harmful script into a web page, so it runs in the browser of everyone who visits the page.","da":"Et angreb, der smugler et skadeligt script ind på en webside, så det kører i browseren hos alle, der besøger siden."},"era":2000,"aka":{"en":["XSS"],"da":["XSS"]},"depth":6,"degree":8,"requires":["cs/web-browser","cs/web-application"],"collides":false,"mentions":["cs/web-browser","cs/web-application","security/threat-actor","cs/session"]},{"id":"security/csrf-token","term":{"en":"CSRF token","da":"CSRF-token"},"domain":["security"],"cluster":"application-security","summary":{"en":"A secret, hard-to-guess value a site puts in its own forms and checks on every change, so requests started by other sites fail.","da":"En hemmelig værdi, som et site lægger i sine egne formularer og tjekker ved hver ændring, så forespørgsler fra andre sites afvises."},"aka":{"en":["anti-CSRF token","synchronizer token"],"da":["anti-CSRF-token"]},"depth":6,"degree":4,"requires":["cs/session","cs/web-application"],"collides":false,"mentions":["cs/server","cs/session","cs/account","cs/cookie","cs/web-browser"]},{"id":"security/cve","term":{"en":"CVE and CVSS","da":"CVE og CVSS"},"domain":["security"],"cluster":"risk-management","summary":{"en":"A public ID number for each known weakness in software (CVE), plus a 0-10 score for how serious it is (CVSS).","da":"Et offentligt ID-nummer for hver kendt svaghed i software (CVE) og en score fra 0 til 10 for, hvor alvorlig den er (CVSS)."},"era":1999,"aka":{"en":["CVE","CVSS","Common Vulnerabilities and Exposures","Common Vulnerability Scoring System","CVE ID"],"da":["CVE","CVSS","CVE-nummer"]},"depth":2,"degree":8,"requires":["security/vulnerability"],"collides":false,"mentions":["security/vulnerability","security/vulnerability-scanning","cs/server","security/it-operations","cs/patch"]},{"id":"security/cyber-and-information-security","term":{"en":"Cyber and information security","da":"Cyber- og informationssikkerhed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Protecting an organisation's data, systems and ways of working against loss, misuse and interruption.","da":"Beskyttelse af en organisations data, systemer og processer mod tab, misbrug og afbrydelser."},"aka":{"en":["information security","cybersecurity","infosec"],"da":["informationssikkerhed","cybersikkerhed","IT-sikkerhed"]},"depth":0,"degree":8,"requires":[],"collides":false,"mentions":["cs/encryption","cs/client"]},{"id":"security/cyber-resilience-act","term":{"en":"Cyber Resilience Act (CRA)","da":"Cyberrobusthedsforordningen (CRA)"},"domain":["security"],"cluster":"compliance","summary":{"en":"The EU law that makes makers of connected products and software build them secure and keep fixing their flaws.","da":"EU-forordningen, der kræver, at producenter af tilsluttede produkter og software gør dem sikre og bliver ved med at rette fejl."},"era":2024,"aka":{"en":["Regulation (EU) 2024/2847"],"da":["forordning (EU) 2024/2847"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["security/security-incident","cs/password","cs/patch","cs/router"]},{"id":"security/d-maerket","term":{"en":"D-mærket","da":"D-mærket"},"domain":["security"],"cluster":"compliance","summary":{"en":"A Danish label showing that a company takes care of IT security and data, starting with a free self-check.","da":"Et dansk mærke, der viser, at en virksomhed håndterer IT-sikkerhed og data ansvarligt, med en gratis selvevaluering som første skridt."},"era":2019,"aka":{"en":["D-seal","D-label"],"da":["D-mærke"]},"depth":1,"degree":8,"requires":["security/compliance"],"collides":false,"mentions":["security/data-ethics","security/backup"]},{"id":"security/data-breach","term":{"en":"Data breach","da":"Databrud"},"domain":["security"],"cluster":"incident-response","summary":{"en":"An event where private information is seen, taken, changed or lost by people who should not have it.","da":"En hændelse, hvor fortrolige oplysninger bliver set, taget, ændret eller mistet af nogen, der ikke burde have dem."},"aka":{"en":["data leak","personal data breach"],"da":["datalæk","brud på persondatasikkerheden"]},"depth":1,"degree":38,"requires":["security/confidentiality"],"collides":false,"mentions":["security/security-incident","security/confidentiality","security/integrity","security/availability"]},{"id":"security/data-classification","term":{"en":"Data classification","da":"Dataklassifikation"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Sorting data by how sensitive it is - for example public, internal or confidential.","da":"At sortere data efter, hvor følsomme de er - fx offentlige, interne eller fortrolige."},"aka":{"en":["information classification"],"da":["klassifikation af data","informationsklassifikation"]},"depth":1,"degree":7,"requires":["security/confidentiality"],"collides":false,"mentions":["ai/classification"]},{"id":"security/data-controller","term":{"en":"Data controller","da":"Dataansvarlig"},"domain":["security"],"cluster":"compliance","summary":{"en":"The organisation that decides why and how personal data is used, and so carries the main legal duty under GDPR.","da":"Den organisation, der bestemmer, hvorfor og hvordan personoplysninger bruges, og derfor bærer hovedansvaret efter GDPR."},"era":1995,"aka":{"en":["controller"],"da":["dataansvarlig virksomhed"]},"depth":2,"degree":4,"requires":["security/gdpr"],"collides":false,"mentions":["security/personal-data","security/gdpr"]},{"id":"security/data-ethics","term":{"en":"Data ethics","da":"Dataetik"},"domain":["security"],"cluster":"compliance","summary":{"en":"Asking not only whether a use of data is legal, but whether it is fair, open and in line with what people would expect.","da":"At spørge ikke kun, om en brug af data er lovlig, men om den er fair, åben og i tråd med, hvad folk kan forvente."},"aka":{"en":["responsible use of data"],"da":["ansvarlig dataanvendelse"]},"depth":1,"degree":4,"requires":["security/personal-data"],"collides":false,"mentions":[]},{"id":"security/data-processing-agreement","term":{"en":"Data processing agreement (DPA)","da":"Databehandleraftale"},"domain":["security"],"cluster":"compliance","summary":{"en":"A written contract that sets how a supplier may handle personal data on your behalf.","da":"En skriftlig aftale, der fastlægger, hvordan en leverandør må håndtere personoplysninger på ens vegne."},"era":2016,"aka":{"en":["DPA","data processing addendum"],"da":["DPA"]},"depth":2,"degree":9,"requires":["security/gdpr","security/personal-data"],"collides":false,"mentions":["security/personal-data","security/gdpr","security/data-controller","security/data-processor","cs/client","security/audit"]},{"id":"security/data-processor","term":{"en":"Data processor","da":"Databehandler"},"domain":["security"],"cluster":"compliance","summary":{"en":"An outside party that handles personal data on behalf of another organisation and only as that organisation instructs.","da":"En ekstern part, der håndterer personoplysninger på vegne af en anden organisation og kun efter dennes anvisninger."},"era":1995,"aka":{"en":["processor"],"da":[]},"depth":2,"degree":4,"requires":["security/gdpr"],"collides":false,"mentions":["security/personal-data","security/gdpr","security/data-controller"]},{"id":"security/defence-in-depth","term":{"en":"Defence in depth","da":"Lagdelt sikkerhed (defence in depth)"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Stacking several independent layers of protection so that when one fails, the next one still stops the attacker.","da":"Flere uafhængige lag af beskyttelse oven på hinanden, så det næste lag stadig stopper angriberen, når ét svigter."},"era":2000,"aka":{"en":["defense in depth","layered security"],"da":["defence in depth","lagdelt forsvar"]},"depth":5,"degree":6,"requires":["security/control"],"collides":false,"mentions":["security/threat-actor","security/asset","security/phishing","security/mfa","cs/password","security/edr"]},{"id":"security/denial-of-service","term":{"en":"Denial of service (DoS/DDoS)","da":"Overbelastningsangreb (DoS/DDoS)"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"An attack that floods a website or service with so much traffic that real users can no longer reach it.","da":"Et angreb, der oversvømmer en hjemmeside eller tjeneste med så meget trafik, at rigtige brugere ikke længere kan komme til."},"era":1996,"aka":{"en":["DoS","DDoS","distributed denial of service"],"da":["DoS-angreb","DDoS-angreb"]},"depth":1,"degree":4,"requires":["cs/network"],"collides":false,"mentions":["cs/service"]},{"id":"security/detection-rule","term":{"en":"Detection rule","da":"Detektionsregel"},"domain":["security"],"cluster":"security-operations","summary":{"en":"A written condition that a monitoring tool checks against incoming logs, raising an alarm whenever the events match it.","da":"En nedskrevet betingelse, som et overvågningsværktøj holder indkomne logs op imod, og som udløser en alarm, hver gang hændelserne matcher."},"aka":{"en":["trigger rule","SIEM rule"],"da":["triggerregel","SIEM-regel"]},"depth":1,"degree":7,"requires":["cs/log"],"collides":false,"mentions":["platform/monitoring","cs/log","cs/account","security/siem","security/cfcs","security/phishing","security/soc","cs/web-browser","cs/url"]},{"id":"security/disaster-recovery-plan","term":{"en":"Disaster recovery plan (DRP)","da":"Disaster recovery plan (DRP)"},"domain":["security"],"cluster":"incident-response","summary":{"en":"A technical plan for bringing data and systems back after a breakdown or attack, in a set order and time.","da":"En teknisk plan for at få data og systemer tilbage efter et nedbrud eller angreb i en fastlagt rækkefølge og tid."},"aka":{"en":["DRP","DR plan"],"da":["DRP","genopretningsplan"]},"depth":5,"degree":6,"requires":["security/backup","security/recovery-objectives"],"collides":false,"mentions":["security/backup","security/recovery-objectives","security/business-impact-analysis","security/ransomware","cs/server","security/it-operations"]},{"id":"security/dora","term":{"en":"DORA","da":"DORA-forordningen"},"domain":["security"],"cluster":"compliance","summary":{"en":"The EU law that makes banks, insurers and other financial firms able to keep running through IT failures and cyber attacks.","da":"EU-forordningen, der skal sikre, at banker, forsikringsselskaber og andre finansielle virksomheder kan klare IT-nedbrud og cyberangreb."},"era":2022,"aka":{"en":["Digital Operational Resilience Act","Regulation (EU) 2022/2554"],"da":["DORA","forordning (EU) 2022/2554","forordningen om digital operationel modstandsdygtighed"]},"depth":0,"degree":7,"requires":[],"collides":false,"mentions":["security/eu-regulation","security/risk-management","security/incident-reporting","cs/service","security/risk","security/backup"]},{"id":"security/dpia","term":{"en":"Data protection impact assessment (DPIA)","da":"Konsekvensanalyse vedrørende databeskyttelse (DPIA)"},"domain":["security"],"cluster":"compliance","summary":{"en":"A written check, done before starting, of how a planned use of personal data could harm people and how to reduce that harm.","da":"En skriftlig vurdering, før man går i gang, af hvordan en planlagt brug af personoplysninger kan skade folk, og hvordan det undgås."},"era":2016,"aka":{"en":["DPIA"],"da":["konsekvensanalyse","DPIA"]},"depth":2,"degree":6,"requires":["security/personal-data","security/gdpr"],"collides":false,"mentions":["security/personal-data","security/risk-assessment","security/gdpr","security/risk","cs/log"]},{"id":"security/edr","term":{"en":"Endpoint detection and response (EDR)","da":"Endpoint detection and response (EDR)"},"domain":["security"],"cluster":"controls","summary":{"en":"Software on each computer and phone that watches for signs of an attack and can stop it on the spot.","da":"Software på hver computer og telefon, der holder øje med tegn på angreb og kan stoppe dem på stedet."},"era":2013,"aka":{"en":["EDR"],"da":["EDR"]},"depth":2,"degree":6,"requires":["security/endpoint"],"collides":false,"mentions":["security/endpoint","cs/network","security/it-operations","security/threat-actor"]},{"id":"security/endpoint","term":{"en":"Endpoint","da":"Endpoint"},"domain":["security","cs"],"cluster":"controls","summary":{"en":"Any device that connects to the network at its edge and is used directly - a PC, phone, printer or similar.","da":"Enhver enhed, der kobles på netværket i dets yderkant og bruges direkte - fx en pc, mobil eller printer."},"aka":{"en":["end-user device","endpoint device"],"da":["slutbrugerenhed"]},"depth":1,"degree":6,"requires":["cs/operating-system"],"collides":false,"mentions":["cs/network","cs/log"]},{"id":"security/escalation-procedure","term":{"en":"Escalation procedure","da":"Eskaleringsprocedure"},"domain":["security"],"cluster":"incident-response","summary":{"en":"Agreed rules for when a problem must be passed up to someone more senior or more expert, and to whom.","da":"Aftalte regler for, hvornår et problem skal sendes videre op til en mere erfaren eller mere ansvarlig person, og til hvem."},"aka":{"en":["escalation path"],"da":["eskaleringsvej"]},"depth":2,"degree":5,"requires":["security/incident-response"],"collides":false,"mentions":["security/security-incident","cs/account","security/it-operations"]},{"id":"security/eu-directive","term":{"en":"EU directive","da":"EU-direktiv"},"domain":["security"],"cluster":"compliance","summary":{"en":"A type of EU law that sets goals every member state must reach, but lets each country write its own national law to do it.","da":"En type EU-lov, der fastsætter mål, som alle medlemslande skal nå, men lader hvert land skrive sin egen nationale lov for at nå dem."},"aka":{"en":["directive"],"da":["direktiv"]},"depth":1,"degree":5,"requires":["security/compliance"],"collides":false,"mentions":["security/nis2-loven","security/it-operations"]},{"id":"security/eu-regulation","term":{"en":"EU regulation","da":"EU-forordning"},"domain":["security"],"cluster":"compliance","summary":{"en":"A type of EU law that applies directly and identically in every member state, with no national law needed to bring it in.","da":"En type EU-lov, der gælder direkte og ens i alle medlemslande, uden at der skal en national lov til for at indføre den."},"aka":{"en":[],"da":["forordning"]},"depth":1,"degree":7,"requires":["security/compliance"],"collides":false,"mentions":["security/gdpr","security/dora","security/cyber-resilience-act","security/eu-directive"]},{"id":"security/exploit","term":{"en":"Exploit","da":"Exploit"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"A piece of code or a set of steps that turns a known weakness in a system into actual access or control for an attacker.","da":"Et stykke kode eller en række trin, der gør en kendt svaghed i et system til reel adgang eller kontrol for en angriber."},"aka":{"en":["exploit code"],"da":["exploit-kode","udnyttelseskode"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["security/vulnerability","security/threat-actor","cs/vpn","cs/patch"]},{"id":"security/false-positive","term":{"en":"False positive","da":"Falsk positiv"},"domain":["security"],"cluster":"security-operations","summary":{"en":"An alarm about an attack or problem that turns out not to exist, because harmless activity was taken for harmful.","da":"En alarm om et angreb eller et problem, der viser sig ikke at findes, fordi harmløs aktivitet blev taget for skadelig."},"aka":{"en":["false alarm"],"da":["falsk alarm"]},"depth":2,"degree":10,"requires":["platform/alerting"],"collides":false,"mentions":["platform/monitoring"]},{"id":"security/gap-analysis","term":{"en":"Gap analysis","da":"Gap-analyse"},"domain":["security"],"cluster":"compliance","summary":{"en":"A comparison of what an organisation does today with the requirements it wants to meet.","da":"En sammenligning af, hvad en organisation gør i dag, og de krav, den ønsker at leve op til."},"aka":{"en":["gap assessment"],"da":["gap-vurdering"]},"depth":1,"degree":12,"requires":["security/compliance"],"collides":false,"mentions":["security/risk","security/nis2-minimum-requirements","cs/log"]},{"id":"security/gdpr","term":{"en":"GDPR","da":"GDPR"},"domain":["security"],"cluster":"compliance","summary":{"en":"The EU law that protects personal data and gives people rights over how it is used.","da":"EU's databeskyttelseslov, der beskytter personoplysninger og giver folk rettigheder over, hvordan de bruges."},"era":2016,"aka":{"en":["General Data Protection Regulation","Regulation (EU) 2016/679"],"da":["Databeskyttelsesforordningen","persondataforordningen"]},"depth":1,"degree":20,"requires":["security/confidentiality","security/personal-data"],"collides":false,"mentions":["security/personal-data"]},{"id":"security/governance","term":{"en":"Governance","da":"Governance"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"How leadership steers security - setting direction, handing out responsibility and checking that it works.","da":"Hvordan ledelsen styrer sikkerheden - sætter retningen, fordeler ansvaret og tjekker, at det virker."},"aka":{"en":["security governance","information security governance"],"da":["sikkerhedsstyring","styring"]},"depth":0,"degree":14,"requires":[],"collides":false,"mentions":["security/risk","security/security-policy","security/dora","ai/model-training"]},{"id":"security/grc","term":{"en":"Governance, risk and compliance (GRC)","da":"Governance, risk og compliance (GRC)"},"domain":["security"],"cluster":"compliance","summary":{"en":"The joined-up work of steering security from the top, deciding which dangers to handle, and proving that rules are met.","da":"Det samlede arbejde med at styre sikkerheden fra toppen, beslutte hvilke farer der skal håndteres, og vise at reglerne overholdes."},"aka":{"en":["GRC"],"da":["GRC"]},"depth":5,"degree":5,"requires":["security/governance","security/risk-management","security/compliance"],"collides":false,"mentions":["security/governance","security/risk-management","security/compliance","security/risk","security/iso-27001"]},{"id":"security/grey-roles","term":{"en":"Grey roles","da":"Grå roller"},"domain":["security"],"cluster":"compliance","summary":{"en":"Security jobs that sit between technology, management and people - coordinating and translating rather than hands-on engineering.","da":"Sikkerhedsjob, der ligger mellem teknik, ledelse og mennesker - hvor man koordinerer og oversætter frem for at bygge systemerne selv."},"aka":{"en":["gray roles"],"da":["grå funktioner"]},"depth":6,"degree":5,"requires":["security/grc"],"collides":false,"mentions":["security/cyber-and-information-security","security/compliance","security/risk","cs/password","security/it-operations"]},{"id":"security/hardening","term":{"en":"Hardening","da":"Hærdning (hardening)"},"domain":["security"],"cluster":"controls","summary":{"en":"Making a system harder to attack by turning off what is not needed and changing unsafe default settings.","da":"At gøre et system sværere at angribe ved at slå det unødvendige fra og ændre usikre standardindstillinger."},"aka":{"en":["system hardening","secure configuration"],"da":["sikker konfiguration"]},"depth":0,"degree":9,"requires":[],"collides":false,"mentions":["cs/service","cs/port","cs/password","cs/server","security/it-operations","security/threat-actor"]},{"id":"security/heat-map","term":{"en":"Risk heat map","da":"Heat-map"},"domain":["security"],"cluster":"risk-management","summary":{"en":"A colour-coded grid that places each risk by how likely and how harmful it is, so the worst stand out in red.","da":"Et farvekodet skema, der placerer hver risiko efter, hvor sandsynlig og skadelig den er, så de værste lyser rødt."},"aka":{"en":["heat map","risk matrix"],"da":["risikomatrix"]},"depth":4,"degree":6,"requires":["security/risk"],"collides":false,"mentions":["security/risk","security/phishing","cs/server"]},{"id":"security/human-error","term":{"en":"Human error","da":"Menneskelig fejl"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"An honest mistake by a person - a wrong click, a lost laptop, a file sent to the wrong address - that harms security.","da":"En ærlig fejl begået af et menneske - et forkert klik, en tabt bærbar, en fil sendt til den forkerte - der skader sikkerheden."},"aka":{"en":["accidental insider","user error"],"da":["insiderfejl","brugerfejl"]},"depth":1,"degree":6,"requires":["security/human-factor"],"collides":false,"mentions":["security/threat","security/data-breach","security/risk","security/security-incident","security/threat-actor","ai/model-training"]},{"id":"security/human-factor","term":{"en":"Human factor","da":"Den menneskelige faktor"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"How people's habits, stress, trust and attention shape security - a common way in for attackers, but also a line of defence.","da":"Hvordan menneskers vaner, stress, tillid og opmærksomhed påvirker sikkerheden - en almindelig vej ind for angribere, men også et forsvar."},"aka":{"en":["human factors"],"da":["menneskelige faktorer"]},"depth":0,"degree":7,"requires":[],"collides":false,"mentions":["security/threat-actor","cs/password","cs/single-sign-on"]},{"id":"security/human-firewall","term":{"en":"Human firewall","da":"Human firewall"},"domain":["security"],"cluster":"awareness","summary":{"en":"A workforce that acts as the first line of defence by spotting and stopping attacks aimed at people.","da":"En medarbejderstab, der fungerer som første forsvarslinje ved at opdage og stoppe angreb rettet mod mennesker."},"aka":{"en":["human layer of defence"],"da":["menneskelig firewall"]},"depth":2,"degree":6,"requires":["security/security-awareness"],"collides":false,"mentions":["security/security-culture","cs/firewall","cs/network","security/vulnerability"]},{"id":"security/impact","term":{"en":"Impact","da":"Konsekvens"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"How much harm an event would do to the business if it actually happened - in money, time, trust or safety.","da":"Hvor stor skade en hændelse vil gøre for forretningen, hvis den faktisk sker - i penge, tid, tillid eller sikkerhed."},"aka":{"en":["consequence"],"da":["påvirkning"]},"depth":2,"degree":10,"requires":["security/asset"],"collides":false,"mentions":["security/asset","security/threat","security/risk"]},{"id":"security/incident-reporting","term":{"en":"Incident reporting","da":"Hændelsesrapportering"},"domain":["security"],"cluster":"incident-response","summary":{"en":"Telling the right people and authorities about a serious security event, quickly and within set deadlines.","da":"At give de rette personer og myndigheder besked om en alvorlig sikkerhedshændelse - hurtigt og inden for faste frister."},"aka":{"en":["incident notification","breach notification"],"da":["indberetning af hændelser","underretning"]},"depth":2,"degree":13,"requires":["security/security-incident"],"collides":false,"mentions":["security/security-incident"]},{"id":"security/incident-response","term":{"en":"Incident response","da":"Hændelseshåndtering"},"domain":["security"],"cluster":"incident-response","summary":{"en":"The organised way a company spots, stops and cleans up after a security attack or accident, then gets back to normal.","da":"Den organiserede måde, en virksomhed opdager, stopper og rydder op efter et sikkerhedsangreb eller uheld og vender tilbage til normal drift."},"era":1988,"aka":{"en":["incident handling","incident management"],"da":["incident response"]},"depth":1,"degree":22,"requires":["security/threat"],"collides":false,"mentions":["security/security-incident","security/siem","cs/account","cs/network"]},{"id":"security/indicator-of-compromise","term":{"en":"Indicator of compromise (IoC)","da":"Kompromitteringsindikator (IoC)"},"domain":["security"],"cluster":"security-operations","summary":{"en":"A trace left behind by an attack, such as a known bad web address or file, that shows a system has probably been broken into.","da":"Et spor efter et angreb, fx en kendt ondsindet webadresse eller fil, der viser, at et system sandsynligvis er kompromitteret."},"era":2011,"aka":{"en":["IoC","IOC"],"da":["IoC","IOC"]},"depth":2,"degree":7,"requires":["security/security-incident"],"collides":false,"mentions":["cs/url","cs/network","cs/ip-address","cs/account","security/cfcs","security/ransomware","security/soc","cs/log","platform/distributed-tracing","security/threat-actor"]},{"id":"security/information-security-coordinator","term":{"en":"Information security coordinator","da":"Informationssikkerhedskoordinator"},"domain":["security"],"cluster":"compliance","summary":{"en":"The person who keeps an organisation's day-to-day security work organised, tracked and reported to management.","da":"Den person, der holder organisationens daglige sikkerhedsarbejde organiseret, fulgt op og rapporteret til ledelsen."},"aka":{"en":["security coordinator"],"da":["sikkerhedskoordinator"]},"depth":6,"degree":5,"requires":["security/isms"],"collides":false,"mentions":["security/risk","security/security-incident","security/isms","security/it-operations"]},{"id":"security/input-validation","term":{"en":"Input validation","da":"Inputvalidering"},"domain":["security"],"cluster":"application-security","summary":{"en":"Checking every piece of data a program receives against strict rules before using it, and turning away anything that does not fit.","da":"At tjekke alle data, et program modtager, mod faste regler, før de bruges, og afvise alt, der ikke passer."},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["cs/api","cs/server","cs/database"]},{"id":"security/insider-threat","term":{"en":"Insider threat","da":"Insidertrussel"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Harm that comes from someone already trusted inside the organisation, whether they mean to do damage or simply make a mistake.","da":"Skade, der kommer fra en person, som allerede er betroet inde i organisationen - enten med vilje eller ved en fejl."},"aka":{"en":["insider risk"],"da":["insiderrisiko"]},"depth":2,"degree":8,"requires":["security/threat-actor"],"collides":false,"mentions":["security/risk","cs/firewall"]},{"id":"security/integrity","term":{"en":"Integrity","da":"Integritet"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Making sure information stays correct and complete, and is not changed by accident or without permission.","da":"At sikre, at information forbliver korrekt og fuldstændig og ikke ændres ved et uheld eller uden tilladelse."},"aka":{"en":["data integrity"],"da":["dataintegritet"]},"depth":0,"degree":8,"requires":[],"collides":false,"mentions":["cs/permission","cs/hashing","cs/digital-signature","security/threat-actor","cs/account"]},{"id":"security/intrusion-detection-system","term":{"en":"Intrusion detection system (IDS)","da":"Indtrængningsdetektion (IDS)"},"domain":["security"],"cluster":"controls","summary":{"en":"A watcher that inspects network traffic or a machine's activity and warns when it spots signs of an attack - without stopping it.","da":"En vagt, der holder øje med netværkstrafik eller en maskines aktivitet og advarer ved tegn på angreb - uden selv at stoppe det."},"era":1987,"aka":{"en":["IDS"],"da":["IDS","system til indtrængningsdetektion"]},"depth":3,"degree":6,"requires":["cs/network","cs/packet"],"collides":false,"mentions":["cs/network","cs/packet","platform/alerting","security/siem","security/risk"]},{"id":"security/intrusion-prevention-system","term":{"en":"Intrusion prevention system (IPS)","da":"Indtrængningsforebyggelse (IPS)"},"domain":["security"],"cluster":"controls","summary":{"en":"A guard placed in the path of network traffic that recognises signs of an attack and blocks them as they happen.","da":"En vagt placeret i netværkstrafikkens vej, som genkender tegn på angreb og blokerer dem, mens de sker."},"era":2003,"aka":{"en":["IPS"],"da":["IPS","system til indtrængningsforebyggelse"]},"depth":4,"degree":6,"requires":["cs/packet","cs/firewall"],"collides":false,"mentions":["cs/network","cs/packet","cs/server","cs/service","cs/log","security/availability"]},{"id":"security/isms","term":{"en":"Information security management system (ISMS)","da":"Ledelsessystem for informationssikkerhed (ISMS)"},"domain":["security"],"cluster":"compliance","summary":{"en":"The set of policies, roles, processes and records an organisation uses to run its information security in a planned, repeatable way.","da":"De politikker, roller, processer og dokumenter, en organisation bruger til at styre sin informationssikkerhed planlagt og ensartet."},"era":2005,"aka":{"en":["ISMS"],"da":["ISMS"]},"depth":5,"degree":9,"requires":["security/risk-management","security/security-policy"],"collides":false,"mentions":["security/cyber-and-information-security","security/iso-27001","security/risk-assessment","security/audit","security/threat"]},{"id":"security/iso-27000-series","term":{"en":"ISO 27000 series","da":"ISO 27000-serien"},"domain":["security"],"cluster":"compliance","summary":{"en":"The family of international standards for information security, with ISO 27001 at its centre and guides built around it.","da":"Familien af internationale standarder for informationssikkerhed med ISO 27001 i centrum og vejledninger bygget omkring den."},"era":2005,"aka":{"en":["ISO/IEC 27000 family","ISO 27k"],"da":["ISO 27000-familien","ISO/IEC 27000-serien"]},"depth":1,"degree":5,"requires":["security/cyber-and-information-security"],"collides":false,"mentions":["security/cyber-and-information-security","security/iso-27001","security/isms","security/iso-27002","security/risk-management","cs/service","security/risk"]},{"id":"security/iso-27001","term":{"en":"ISO 27001","da":"ISO 27001"},"domain":["security"],"cluster":"compliance","summary":{"en":"The international standard for running an information security management system that can be certified.","da":"Den internationale standard for at drive et ledelsessystem for informationssikkerhed, som man kan opnå certificering efter."},"era":2005,"aka":{"en":["ISO/IEC 27001","ISMS standard"],"da":["ISO/IEC 27001"]},"depth":0,"degree":18,"requires":[],"collides":false,"mentions":["security/isms","security/annex-a","security/risk-assessment"]},{"id":"security/iso-27002","term":{"en":"ISO 27002","da":"ISO 27002"},"domain":["security"],"cluster":"compliance","summary":{"en":"A guidance standard describing each security control in detail - what it is for and how to put it in place.","da":"En vejledende standard, der beskriver hver sikkerhedskontrol i detaljer - hvad den skal og hvordan den indføres."},"era":2007,"aka":{"en":["ISO/IEC 27002"],"da":["ISO/IEC 27002"]},"depth":5,"degree":9,"requires":["security/control"],"collides":false,"mentions":["security/control","security/iso-27001","cs/access-control"]},{"id":"security/it-operations","term":{"en":"IT operations","da":"IT-drift"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"The team and daily work that keep an organisation's computers, systems and networks running.","da":"Det team og det daglige arbejde, der holder en organisations computere, systemer og netværk kørende."},"aka":{"en":["IT ops","IT department"],"da":["it-drift","IT-afdeling"]},"depth":2,"degree":6,"requires":["security/asset"],"collides":false,"mentions":["cs/network","security/control","cs/patch","security/backup","cs/account"]},{"id":"security/lateral-movement","term":{"en":"Lateral movement","da":"Lateral bevægelse"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"What an attacker does after getting a first foothold - spreading from machine to machine inside the network.","da":"Det, en angriber gør efter at have fået fodfæste - at sprede sig fra maskine til maskine inde i netværket."},"aka":{"en":[],"da":["lateral movement"]},"depth":2,"degree":9,"requires":["cs/network","cs/credential"],"collides":false,"mentions":["security/threat-actor","cs/network","cs/account","cs/server"]},{"id":"security/legacy-system","term":{"en":"Legacy system","da":"Legacy-system"},"domain":["security","cs"],"cluster":"fundamentals","summary":{"en":"An old system the business still depends on but that can no longer be updated, replaced or protected in the normal way.","da":"Et gammelt system, som forretningen stadig er afhængig af, men som ikke længere kan opdateres, udskiftes eller beskyttes på normal vis."},"aka":{"en":["legacy software","end-of-life system"],"da":["forældet system","ældre system"]},"depth":0,"degree":2,"requires":[],"collides":false,"mentions":["cs/patch","security/vulnerability","security/it-operations","cs/network","cs/internet"]},{"id":"security/lessons-learned","term":{"en":"Lessons learned","da":"Lessons learned"},"domain":["security"],"cluster":"incident-response","summary":{"en":"Looking back after an incident or exercise to see what worked, what failed and what to change next time.","da":"At se tilbage efter en hændelse eller øvelse for at finde ud af, hvad der virkede, hvad der fejlede, og hvad der skal ændres."},"aka":{"en":["post-incident review","post-mortem"],"da":["erfaringsopsamling","evaluering"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["security/security-incident","security/incident-response","security/ransomware","security/backup","cs/server"]},{"id":"security/likelihood","term":{"en":"Likelihood","da":"Sandsynlighed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"How probable it is that a given threat will actually use a weakness and cause harm within a certain period.","da":"Hvor sandsynligt det er, at en given trussel faktisk udnytter en svaghed og gør skade inden for en bestemt periode."},"aka":{"en":["probability"],"da":[]},"depth":2,"degree":8,"requires":["security/threat","security/vulnerability"],"collides":false,"mentions":["security/threat","security/vulnerability","security/exploit","security/impact","security/risk","security/phishing","cs/server"]},{"id":"security/log-management","term":{"en":"Log management","da":"Loghåndtering"},"domain":["security","cs"],"cluster":"security-operations","summary":{"en":"Collecting logs from every system into one place, in one format, kept safe from change and for as long as they are needed.","da":"At samle logs fra alle systemer ét sted, i ét format, beskyttet mod ændringer og så længe, der er brug for dem."},"aka":{"en":["log analysis","log collection"],"da":["loganalyse","logindsamling"]},"depth":1,"degree":7,"requires":["cs/log"],"collides":false,"mentions":["cs/log","cs/firewall","cs/server","security/security-incident"]},{"id":"security/log-retention","term":{"en":"Log retention","da":"Logopbevaring"},"domain":["security"],"cluster":"security-operations","summary":{"en":"Deciding how long each kind of log is kept before it is deleted - long enough to look into incidents, but no longer than needed.","da":"At fastsætte, hvor længe hver slags log gemmes, før den slettes - længe nok til at efterforske hændelser, men ikke længere end nødvendigt."},"depth":2,"degree":6,"requires":["cs/audit"],"collides":false,"mentions":["cs/log","security/security-incident","security/risk-assessment","security/threat-actor","security/dora","security/gdpr","security/personal-data"]},{"id":"security/malware","term":{"en":"Malware","da":"Malware"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Harmful software that sneaks onto a computer or phone to steal, spy, damage or take control.","da":"Skadelig software, der sniger sig ind på en computer eller telefon for at stjæle, spionere, ødelægge eller tage kontrollen."},"era":1990,"aka":{"en":["malicious software"],"da":["skadelig software"]},"depth":2,"degree":9,"requires":["security/endpoint"],"collides":false,"mentions":["security/ransomware","cs/password","cs/web-browser","security/threat-actor"]},{"id":"security/man-in-the-middle","term":{"en":"Man-in-the-middle attack","da":"Man-in-the-middle-angreb"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"An attacker secretly placed between two parties who reads or changes their messages while each believes they talk directly.","da":"En angriber, der i det skjulte sidder mellem to parter og læser eller ændrer deres beskeder, mens begge tror, de taler direkte sammen."},"aka":{"en":["MITM","on-path attack","adversary-in-the-middle"],"da":["MITM","mellemmandsangreb"]},"depth":2,"degree":6,"requires":["cs/network","cs/protocol"],"collides":false,"mentions":["security/threat-actor","cs/network","cs/https"]},{"id":"security/management-responsibility","term":{"en":"Management responsibility","da":"Ledelsesansvar"},"domain":["security"],"cluster":"compliance","summary":{"en":"The duty of top leaders to own, approve and be able to show the organisation's security work.","da":"Den øverste ledelses pligt til at eje, godkende og kunne dokumentere virksomhedens sikkerhedsarbejde."},"aka":{"en":["management accountability","leadership accountability"],"da":["ledelsens ansvar"]},"depth":5,"degree":9,"requires":["security/risk-management"],"collides":false,"mentions":["ai/model-training","security/iso-27001","security/risk-assessment","security/risk","cs/server"]},{"id":"security/mfa","term":{"en":"Multi-factor authentication","da":"Multifaktorgodkendelse"},"domain":["security"],"cluster":"controls","summary":{"en":"A way to log in that asks for two or more separate kinds of proof, such as a password plus a code or an approval in a phone app.","da":"Et login, der kræver to eller flere forskellige slags bevis, fx en adgangskode plus en kode eller en godkendelse i en app."},"era":2011,"aka":{"en":["MFA"],"da":["MFA","multifaktorautentificering"]},"depth":4,"degree":17,"requires":["cs/credential","security/authentication-factor"],"collides":false,"mentions":["cs/log","cs/password","cs/authentication","security/threat-actor"]},{"id":"security/mitre-attack","term":{"en":"MITRE ATT&CK","da":"MITRE ATT&CK"},"domain":["security"],"cluster":"security-operations","summary":{"en":"A free, public catalogue of the goals and methods real attackers use, giving defenders a shared language for how attacks unfold.","da":"Et gratis, offentligt katalog over rigtige angriberes mål og metoder, der giver forsvarere et fælles sprog for, hvordan angreb forløber."},"era":2015,"aka":{"en":["ATT&CK"],"da":["ATT&CK"]},"depth":2,"degree":7,"requires":["security/threat-actor"],"collides":false,"mentions":["security/threat-actor","security/lateral-movement","security/soc","security/detection-rule","cs/cookie"]},{"id":"security/nis1","term":{"en":"NIS1 Directive","da":"NIS1-direktivet"},"domain":["security"],"cluster":"compliance","summary":{"en":"The first EU-wide cybersecurity law, from 2016, which set security and reporting duties for key service providers until NIS2 replaced it.","da":"EU's første fælles cybersikkerhedslov fra 2016, der stillede krav om sikkerhed og indberetning til vitale tjenester, til NIS2 afløste den."},"era":2016,"aka":{"en":["NIS1","NIS Directive","Directive (EU) 2016/1148"],"da":["NIS1","NIS-direktivet"]},"depth":1,"degree":5,"requires":["security/cyber-and-information-security"],"collides":false,"mentions":["security/cyber-and-information-security","cs/service","security/security-incident","security/risk"]},{"id":"security/nis2","term":{"en":"NIS2 Directive","da":"NIS2-direktivet"},"domain":["security"],"cluster":"compliance","summary":{"en":"The EU cybersecurity law that sets shared security duties for organisations in important and critical sectors.","da":"EU's cybersikkerhedslov, der stiller fælles sikkerhedskrav til organisationer i vigtige og kritiske sektorer."},"era":2022,"aka":{"en":["NIS2","Directive (EU) 2022/2555"],"da":["NIS2"]},"depth":1,"degree":23,"requires":["security/cyber-and-information-security"],"collides":false,"mentions":["security/cyber-and-information-security","security/nis2-entities","security/risk","security/security-incident","security/risk-assessment"]},{"id":"security/nis2-entities","term":{"en":"Essential and important entities (NIS2)","da":"Væsentlige og vigtige enheder (NIS2)"},"domain":["security"],"cluster":"compliance","summary":{"en":"The two groups of organisations NIS2 covers, sorted by sector and size, with stricter oversight for the essential group.","da":"De to grupper af organisationer, NIS2 gælder for, opdelt efter sektor og størrelse, med strengere tilsyn for de væsentlige."},"era":2022,"aka":{"en":["essential entities","important entities"],"da":["væsentlige enheder","vigtige enheder"]},"depth":0,"degree":3,"requires":[],"collides":false,"mentions":["security/security-incident"]},{"id":"security/nis2-loven","term":{"en":"Danish NIS2 Act (NIS2-loven)","da":"NIS2-loven"},"domain":["security"],"cluster":"compliance","summary":{"en":"The Danish law that writes the EU's NIS2 rules into national law and names who checks that firms follow them.","da":"Den danske lov, der skriver EU's NIS2-regler ind i dansk ret og fastlægger, hvem der fører tilsyn med dem."},"era":2025,"aka":{"en":["Danish NIS 2 Act","Act No. 434 of 6 May 2025"],"da":["NIS 2-loven","lov om foranstaltninger til sikring af et højt cybersikkerhedsniveau"]},"depth":0,"degree":4,"requires":[],"collides":false,"mentions":["security/nis2","security/eu-directive"]},{"id":"security/nis2-minimum-requirements","term":{"en":"NIS2 minimum requirements","da":"Minimumskrav (NIS2)"},"domain":["security"],"cluster":"compliance","summary":{"en":"The baseline list of security measures every organisation under NIS2 must have in place.","da":"Den grundliste af sikkerhedstiltag, som alle organisationer under NIS2 skal have på plads."},"era":2022,"aka":{"en":["NIS2 Article 21 measures","cybersecurity risk-management measures"],"da":["NIS2-minimumskrav","artikel 21-krav"]},"depth":0,"degree":13,"requires":[],"collides":false,"mentions":["security/risk-assessment","security/incident-response","security/supplier-management","ai/model-training","cs/encryption","security/mfa","security/risk","security/it-operations","security/backup"]},{"id":"security/nist-csf","term":{"en":"NIST Cybersecurity Framework (CSF)","da":"NIST Cybersecurity Framework (CSF)"},"domain":["security"],"cluster":"compliance","summary":{"en":"A free US framework that sorts security work into six broad goals, from steering it to recovering after an attack.","da":"Et gratis amerikansk rammeværk, der inddeler sikkerhedsarbejdet i seks overordnede funktioner, fra styring til genopretning efter et angreb."},"era":2014,"aka":{"en":["NIST CSF"],"da":["NIST CSF"]},"depth":5,"degree":6,"requires":["security/risk-management"],"collides":false,"mentions":["security/iso-27001","security/cis-controls"]},{"id":"security/non-repudiation","term":{"en":"Non-repudiation","da":"Uafviselighed (non-repudiation)"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Proof of who did something that is strong enough that they cannot later deny having done it.","da":"Så stærkt bevis for, hvem der gjorde noget, at vedkommende ikke senere kan nægte at have gjort det."},"era":1989,"aka":{"en":[],"da":["ikke-benægtelse"]},"depth":3,"degree":8,"requires":["cs/authentication","security/integrity","cs/public-key-cryptography"],"collides":false,"mentions":["cs/digital-signature","security/audit"]},{"id":"security/nudging","term":{"en":"Nudging","da":"Nudging"},"domain":["security"],"cluster":"awareness","summary":{"en":"Small, gentle prompts that make the safe choice the easy one, without forbidding anything.","da":"Små, venlige skub, der gør det sikre valg til det lette valg, uden at forbyde noget."},"era":2008,"aka":{"en":["nudge","security nudge"],"da":["nudge","adfærdsdesign"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["ai/prompt","ai/model-training"]},{"id":"security/one-time-password","term":{"en":"One-time password (OTP)","da":"Engangskode (OTP)"},"domain":["security","cs"],"cluster":"controls","summary":{"en":"A short code that works for a single login and then expires, sent by text message or shown in an app.","da":"En kort kode, der virker til ét enkelt login og derefter udløber, sendt som sms eller vist i en app."},"era":1986,"aka":{"en":["OTP","one-time code","SMS code"],"da":["OTP","sms-kode","engangskodeord"]},"depth":3,"degree":7,"requires":["cs/authentication"],"collides":false,"mentions":["security/mfa","cs/log","cs/password","security/phishing"]},{"id":"security/organisational-control","term":{"en":"Organisational control","da":"Organisatorisk kontrol"},"domain":["security"],"cluster":"controls","summary":{"en":"A safeguard made of rules, roles and routines - who decides, who does what, and how work must be done.","da":"En beskyttelse, der består af regler, roller og rutiner - hvem der beslutter, hvem der gør hvad, og hvordan arbejdet skal udføres."},"aka":{"en":["organizational control","administrative control"],"da":["organisatorisk foranstaltning","administrativ kontrol"]},"depth":1,"degree":6,"requires":["security/governance"],"collides":false,"mentions":["security/control","security/supplier-management","security/security-incident","security/iso-27002","cs/account","security/it-operations"]},{"id":"security/owasp-top-10","term":{"en":"OWASP Top 10","da":"OWASP Top 10"},"domain":["security"],"cluster":"application-security","summary":{"en":"A widely used, regularly updated list of the ten most serious kinds of security flaw found in web applications.","da":"En udbredt, jævnligt opdateret liste over de ti mest alvorlige slags sikkerhedsfejl i webapplikationer."},"era":2003,"depth":6,"degree":6,"requires":["security/vulnerability","cs/web-application"],"collides":false,"mentions":["security/vulnerability","cs/web-application","security/risk","cs/access-control"]},{"id":"security/patch-management","term":{"en":"Patch management","da":"Patch management"},"domain":["security"],"cluster":"controls","summary":{"en":"The routine of keeping all software up to date so that known weaknesses are closed before attackers use them.","da":"Rutinen med at holde al software opdateret, så kendte svagheder lukkes, før angribere udnytter dem."},"aka":{"en":["update management"],"da":["opdateringsstyring","patchstyring"]},"depth":3,"degree":14,"requires":["cs/patch","security/cve"],"collides":false,"mentions":["security/vulnerability","security/threat-actor","cs/patch","security/risk","cs/vpn","security/it-operations","security/ransomware"]},{"id":"security/pdca","term":{"en":"Continuous improvement (PDCA)","da":"Kontinuerlig forbedring (PDCA)"},"domain":["security"],"cluster":"compliance","summary":{"en":"A repeating four-step loop - Plan, Do, Check, Act - for getting a little better each round.","da":"En gentagen firetrins-cyklus - Plan, Do, Check, Act - for at blive lidt bedre for hver runde."},"era":1950,"aka":{"en":["PDCA","Plan-Do-Check-Act","Deming cycle","continual improvement"],"da":["PDCA","Plan-Do-Check-Act","Deming-cirklen","løbende forbedring"]},"depth":0,"degree":9,"requires":[],"collides":false,"mentions":["security/risk","security/phishing","security/threat"]},{"id":"security/penetration-test","term":{"en":"Penetration test","da":"Penetrationstest"},"domain":["security"],"cluster":"controls","summary":{"en":"An agreed, simulated attack in which skilled testers try to break in, to show how well systems really hold up.","da":"Et aftalt, simuleret hackerangreb, hvor dygtige testere forsøger at bryde ind for at vise, hvor godt systemerne reelt holder."},"era":1972,"aka":{"en":["pentest","pen test","ethical hacking"],"da":["pentest","etisk hacking"]},"depth":2,"degree":7,"requires":["security/vulnerability"],"collides":false,"mentions":["security/threat-actor","security/vulnerability","cs/permission","cs/password","cs/network"]},{"id":"security/people-control","term":{"en":"People control","da":"Menneskelig foranstaltning (kontrol)"},"domain":["security"],"cluster":"controls","summary":{"en":"A safeguard aimed at staff themselves - screening, training, clear duties and what happens when someone joins or leaves.","da":"En beskyttelse rettet mod medarbejderne selv - baggrundstjek, træning, klare pligter og det, der sker, når nogen starter eller stopper."},"aka":{"en":["human control","people measure"],"da":["menneskelig kontrol","personrelateret kontrol"]},"depth":1,"degree":8,"requires":["security/human-factor"],"collides":false,"mentions":["security/control","ai/model-training","security/confidentiality","security/iso-27002"]},{"id":"security/perimeter-security","term":{"en":"Perimeter security","da":"Perimetersikkerhed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Guarding the edge between an organisation's own network and the outside world, and trusting what is already inside.","da":"Beskyttelse af grænsen mellem organisationens eget netværk og omverdenen, hvor det, der allerede er indenfor, bliver betroet."},"aka":{"en":["perimeter defence","castle-and-moat security"],"da":["perimeterforsvar","borg-og-voldgrav-modellen"]},"depth":4,"degree":5,"requires":["cs/network","cs/firewall"],"collides":false,"mentions":["cs/network","cs/firewall","cs/vpn","cs/server","cs/service","security/threat-actor"]},{"id":"security/personal-data","term":{"en":"Personal data","da":"Personoplysninger"},"domain":["security"],"cluster":"compliance","summary":{"en":"Any information about a living person who can be named or traced, directly or by putting pieces together.","da":"Enhver oplysning om en levende person, der kan identificeres, enten direkte eller ved at sætte flere oplysninger sammen."},"era":1995,"aka":{"en":["personal information"],"da":["persondata","personhenførbare oplysninger"]},"depth":0,"degree":11,"requires":[],"collides":false,"mentions":["security/gdpr","cs/ip-address","cs/log","security/intrusion-detection-system"]},{"id":"security/phishing","term":{"en":"Phishing","da":"Phishing"},"domain":["security"],"cluster":"awareness","summary":{"en":"Fake emails or messages sent in bulk to trick people into handing over information or clicking something harmful.","da":"Falske mails eller beskeder sendt i stor mængde for at narre folk til at udlevere oplysninger eller klikke på noget skadeligt."},"era":1995,"aka":{"en":["phishing attack"],"da":["phishing-angreb"]},"depth":2,"degree":16,"requires":["cs/credential"],"collides":false,"mentions":["security/social-engineering","cs/password","cs/credential"]},{"id":"security/phishing-simulation","term":{"en":"Phishing simulation","da":"Phishing-simulering"},"domain":["security"],"cluster":"awareness","summary":{"en":"Sending staff harmless fake phishing mails to see who clicks and to teach them to spot the real thing.","da":"At sende medarbejderne harmløse falske phishingmails for at se, hvem der klikker, og lære dem at genkende de ægte."},"era":2008,"aka":{"en":["phishing test","simulated phishing campaign"],"da":["phishing-test","phishing-kampagne"]},"depth":3,"degree":7,"requires":["security/phishing"],"collides":false,"mentions":["security/phishing","ai/model-training","security/audit","security/threat-actor"]},{"id":"security/physical-security","term":{"en":"Physical security","da":"Fysisk sikkerhed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Protecting buildings, rooms and equipment so that nobody can simply walk in, take, break or plug into them.","da":"At beskytte bygninger, rum og udstyr, så ingen bare kan gå ind og tage, ødelægge eller koble sig på dem."},"aka":{"en":["physical controls"],"da":["fysiske kontroller","fysisk sikring"]},"depth":2,"degree":8,"requires":["security/asset"],"collides":false,"mentions":["cs/server","security/iso-27002","cs/network","security/availability"]},{"id":"security/pretexting","term":{"en":"Pretexting","da":"Pretexting"},"domain":["security"],"cluster":"awareness","summary":{"en":"Inventing a believable cover story and role, such as a new colleague or an auditor, to get someone to share information.","da":"At finde på en troværdig historie og rolle, fx en ny kollega eller en revisor, for at få nogen til at dele oplysninger."},"era":2006,"aka":{"en":["pretext"],"da":["falsk påskud"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["security/social-engineering","cs/identity","security/audit","cs/permission"]},{"id":"security/privacy-by-design","term":{"en":"Privacy by design","da":"Privacy by design"},"domain":["security"],"cluster":"compliance","summary":{"en":"The GDPR principle that protection of personal data must be built into systems from the start.","da":"GDPR-princippet om, at beskyttelse af personoplysninger skal bygges ind i systemer fra starten."},"era":2009,"aka":{"en":["data protection by design and by default"],"da":["databeskyttelse gennem design og standardindstillinger"]},"depth":1,"degree":6,"requires":["security/confidentiality"],"collides":false,"mentions":["security/gdpr","security/personal-data"]},{"id":"security/privilege-escalation","term":{"en":"Privilege escalation","da":"Rettighedseskalering (privilege escalation)"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"An attacker who has a small foothold gaining more rights than they were given, up to full control of the system.","da":"En angriber med et lille fodfæste, der skaffer sig flere rettigheder end tildelt - helt op til fuld kontrol over systemet."},"aka":{"en":["elevation of privilege"],"da":["privilege escalation","rettighedsforøgelse"]},"depth":4,"degree":9,"requires":["cs/permission","cs/privileged-account"],"collides":false,"mentions":["security/threat-actor","cs/credential","cs/privileged-account","cs/operating-system","security/phishing","cs/account"]},{"id":"security/qualitative-risk-analysis","term":{"en":"Qualitative risk analysis","da":"Kvalitativ risikoanalyse"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Rating risks with words or simple scales, such as low, medium and high, based on judgement rather than exact figures.","da":"At vurdere risici med ord eller enkle skalaer, fx lav, middel og høj, ud fra skøn frem for præcise tal."},"aka":{"en":["qualitative risk assessment"],"da":["kvalitativ risikovurdering"]},"depth":4,"degree":6,"requires":["security/risk","security/likelihood","security/impact"],"collides":false,"mentions":["security/risk","security/risk-assessment","security/likelihood","security/impact","security/heat-map","cs/client"]},{"id":"security/quantitative-risk-analysis","term":{"en":"Quantitative risk analysis","da":"Kvantitativ risikoanalyse"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Putting numbers on risks - how often a loss may happen and how much it would cost - to compare them in money.","da":"At sætte tal på risici - hvor ofte et tab kan ske, og hvad det vil koste - så de kan sammenlignes i kroner."},"aka":{"en":["quantitative risk assessment"],"da":["kvantitativ risikovurdering"]},"depth":4,"degree":6,"requires":["security/risk","security/likelihood","security/impact"],"collides":false,"mentions":["security/risk","security/risk-assessment","security/likelihood","security/impact","security/backup","cs/service"]},{"id":"security/ransomware","term":{"en":"Ransomware","da":"Ransomware"},"domain":["security"],"cluster":"awareness","summary":{"en":"Harmful software that locks an organisation's data and demands payment to unlock it.","da":"Skadelig software, der låser en organisations data og kræver løsepenge for at låse dem op igen."},"era":1989,"aka":{"en":[],"da":["løsepengeangreb","løsepengevirus"]},"depth":1,"degree":15,"requires":["cs/encryption","security/availability"],"collides":false,"mentions":["cs/encryption","security/backup","security/threat-actor"]},{"id":"security/recovery-objectives","term":{"en":"Recovery objectives (RTO/RPO)","da":"Genopretningsmål (RTO/RPO)"},"domain":["security"],"cluster":"incident-response","summary":{"en":"Two agreed limits for a failure - how long a system may be down (RTO) and how much recent data may be lost (RPO).","da":"To aftalte grænser ved nedbrud - hvor længe et system må være nede (RTO), og hvor meget af de seneste data der må gå tabt (RPO)."},"aka":{"en":["RTO","RPO","recovery time objective","recovery point objective"],"da":["RTO","RPO","genoprettelsestid","tolereret datatab"]},"depth":4,"degree":7,"requires":["security/business-impact-analysis","security/availability"],"collides":false,"mentions":["security/backup"]},{"id":"security/residual-risk","term":{"en":"Residual risk","da":"Residual risiko"},"domain":["security"],"cluster":"risk-management","summary":{"en":"The risk still left after controls are in place, because no protection removes danger completely.","da":"Den risiko, der stadig er tilbage, når kontrollerne er på plads, fordi ingen beskyttelse fjerner faren helt."},"aka":{"en":[],"da":["restrisiko"]},"depth":5,"degree":5,"requires":["security/control"],"collides":false,"mentions":["security/risk","security/mfa","ai/model-training","security/phishing","security/heat-map"]},{"id":"security/risk","term":{"en":"Risk","da":"Risiko"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"How likely it is that a threat uses a vulnerability, combined with how bad the damage would be.","da":"Sandsynligheden for, at en trussel udnytter en sårbarhed, sammenholdt med hvor slem konsekvensen vil være."},"aka":{"en":["security risk"],"da":["sikkerhedsrisiko"]},"depth":3,"degree":24,"requires":["security/threat","security/vulnerability","security/likelihood","security/impact"],"collides":false,"mentions":["security/threat","security/vulnerability","security/likelihood","security/impact","security/ransomware","cs/server","security/heat-map"]},{"id":"security/risk-acceptance","term":{"en":"Risk acceptance","da":"Risikoaccept"},"domain":["security"],"cluster":"risk-management","summary":{"en":"A deliberate, recorded decision to live with a risk instead of spending more to reduce it.","da":"En bevidst og dokumenteret beslutning om at leve med en risiko i stedet for at bruge flere ressourcer på at mindske den."},"aka":{"en":["risk retention"],"da":["accept af risiko"]},"depth":6,"degree":4,"requires":["security/risk-appetite","security/residual-risk"],"collides":false,"mentions":["security/risk","security/risk-treatment","security/risk-appetite","cs/server","security/backup"]},{"id":"security/risk-appetite","term":{"en":"Risk appetite","da":"Risikoappetit"},"domain":["security"],"cluster":"risk-management","summary":{"en":"How much risk leadership is willing to live with to reach the company's goals.","da":"Hvor meget risiko ledelsen er villig til at leve med for at nå virksomhedens mål."},"aka":{"en":[],"da":["risikovillighed"]},"depth":4,"degree":7,"requires":["security/risk","security/governance"],"collides":false,"mentions":["security/risk","cs/account"]},{"id":"security/risk-assessment","term":{"en":"Risk assessment","da":"Risikovurdering"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Working out what could go wrong, how likely it is and how much harm it would do, so the biggest risks get handled first.","da":"At finde ud af, hvad der kan gå galt, hvor sandsynligt det er, og hvor meget skade det vil gøre, så de største risici håndteres først."},"aka":{"en":["risk analysis"],"da":["risikoanalyse"]},"depth":4,"degree":20,"requires":["security/risk","security/likelihood","security/impact","security/asset"],"collides":false,"mentions":["security/risk","security/risk-management","security/asset","security/threat","security/vulnerability","security/likelihood","security/impact","security/heat-map"]},{"id":"security/risk-avoidance","term":{"en":"Risk avoidance","da":"Risikoundgåelse"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Removing a risk entirely by not doing, or no longer doing, the activity that creates it.","da":"At fjerne en risiko helt ved ikke at udføre, eller holde op med at udføre, den aktivitet, der skaber den."},"aka":{"en":["risk elimination","risk termination"],"da":["risikoeliminering","afvisning af risiko"]},"depth":5,"degree":5,"requires":["security/risk-assessment"],"collides":false,"mentions":["security/risk","security/risk-treatment","cs/database"]},{"id":"security/risk-identification","term":{"en":"Risk identification","da":"Risikoidentifikation"},"domain":["security"],"cluster":"risk-management","summary":{"en":"The first step of a risk assessment - finding and writing down what could go wrong, to what, and why.","da":"Første trin i en risikovurdering - at finde og skrive ned, hvad der kan gå galt, med hvad, og hvorfor."},"depth":4,"degree":6,"requires":["security/risk","security/asset","security/threat","security/vulnerability"],"collides":false,"mentions":["security/risk-assessment","security/risk","security/asset","security/threat","security/ransomware","cs/server"]},{"id":"security/risk-management","term":{"en":"Risk management","da":"Risikostyring"},"domain":["security"],"cluster":"risk-management","summary":{"en":"The ongoing work of finding, weighing and handling risks so that time and money go where they protect the most.","da":"Det løbende arbejde med at finde, vurdere og håndtere risici, så tid og penge bruges der, hvor de beskytter mest."},"depth":4,"degree":29,"requires":["security/risk","security/threat","security/vulnerability"],"collides":false,"mentions":["security/risk"]},{"id":"security/risk-mitigation","term":{"en":"Risk mitigation","da":"Risikoreduktion"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Lowering a risk by adding controls that make it less likely to happen or less harmful if it does.","da":"At sænke en risiko ved at indføre kontroller, der gør den mindre sandsynlig eller mindre skadelig, hvis den sker."},"aka":{"en":["risk reduction","risk modification"],"da":["reduktion af risiko","risikominimering"]},"depth":5,"degree":5,"requires":["security/control"],"collides":false,"mentions":["security/risk","security/risk-treatment","security/likelihood","security/impact","security/risk-appetite","cs/account"]},{"id":"security/risk-monitoring","term":{"en":"Risk monitoring","da":"Risikoovervågning"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Keeping an eye on known risks over time, so changes are caught and decisions are revisited before they go stale.","da":"At holde øje med kendte risici over tid, så ændringer opdages, og beslutninger tages op igen, før de bliver forældede."},"aka":{"en":["risk review","continuous risk monitoring"],"da":["løbende risikoovervågning","risikoopfølgning"]},"depth":5,"degree":4,"requires":["security/risk-assessment"],"collides":false,"mentions":["security/risk","security/risk-management","security/threat","security/iso-27001"]},{"id":"security/risk-profile","term":{"en":"Risk profile","da":"Risikoprofil"},"domain":["security"],"cluster":"risk-management","summary":{"en":"The overall picture of which dangers an organisation faces and how serious they are, given its size, sector, data and systems.","da":"Det samlede billede af de farer, en organisation står over for, og hvor alvorlige de er ud fra størrelse, branche, data og systemer."},"depth":5,"degree":4,"requires":["security/risk-assessment"],"collides":false,"mentions":["security/risk","security/critical-assets","cs/service","security/threat-landscape","cs/server","security/cis-controls"]},{"id":"security/risk-transfer","term":{"en":"Risk transfer","da":"Risikooverførsel"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Moving the financial cost of a risk to another party, usually through insurance or a contract with a supplier.","da":"At flytte regningen for en risiko over på en anden part, typisk via en forsikring eller en kontrakt med en leverandør."},"aka":{"en":["risk sharing"],"da":["risikodeling","overførsel af risiko"]},"depth":4,"degree":6,"requires":["security/risk","security/impact"],"collides":false,"mentions":["security/risk","security/risk-treatment","security/impact"]},{"id":"security/risk-treatment","term":{"en":"Risk treatment","da":"Risikohåndtering"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Choosing what to do about each risk - accept it, reduce it, share it with someone else, or avoid it altogether.","da":"Valget af, hvad man gør ved hver risiko - accepterer den, mindsker den, deler den med andre eller undgår den helt."},"aka":{"en":["risk response"],"da":[]},"depth":5,"degree":12,"requires":["security/risk","security/control","security/risk-assessment"],"collides":false,"mentions":["security/risk","security/risk-management","cs/patch","security/ransomware","security/mfa","cs/password"]},{"id":"security/secure-development-lifecycle","term":{"en":"Secure development lifecycle (SDL)","da":"Sikker udviklingslivscyklus (SDL)"},"domain":["security"],"cluster":"application-security","summary":{"en":"A fixed set of security steps built into every stage of making software, from planning and design through testing to release.","da":"Et fast sæt sikkerhedstrin bygget ind i alle faser af softwareudvikling, fra planlægning og design over test til frigivelse."},"era":2004,"aka":{"en":["secure software development lifecycle","SSDLC","security development lifecycle"],"da":["sikker softwareudvikling"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["security/threat-modelling","security/threat"]},{"id":"security/security-awareness","term":{"en":"Security awareness","da":"Awareness"},"domain":["security"],"cluster":"awareness","summary":{"en":"What staff know about security and how they act on it in daily work.","da":"Medarbejdernes viden om sikkerhed, og hvordan de handler på den i det daglige arbejde."},"aka":{"en":["cyber awareness","security awareness training"],"da":["sikkerhedsbevidsthed","cyber awareness"]},"depth":1,"degree":20,"requires":["security/threat"],"collides":false,"mentions":["security/threat","ai/model-training"]},{"id":"security/security-by-design","term":{"en":"Security by design","da":"Security by design"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Thinking security into systems and processes from the very start, instead of adding it at the end.","da":"At tænke sikkerhed ind fra starten i systemer og processer i stedet for at tilføje den til sidst."},"aka":{"en":["secure by design"],"da":["indbygget sikkerhed"]},"depth":1,"degree":7,"requires":["security/cia-triad"],"collides":false,"mentions":["cs/service","security/mfa","security/personal-data","security/vulnerability"]},{"id":"security/security-culture","term":{"en":"Security culture","da":"Sikkerhedskultur"},"domain":["security"],"cluster":"awareness","summary":{"en":"The shared habits and attitudes toward security that shape how people act when nobody is checking.","da":"De fælles vaner og holdninger til sikkerhed, der styrer, hvordan folk handler, når ingen holder øje."},"aka":{"en":["cybersecurity culture"],"da":["cybersikkerhedskultur"]},"depth":2,"degree":9,"requires":["security/security-awareness","security/security-policy"],"collides":false,"mentions":["security/security-policy","ai/model-training"]},{"id":"security/security-framework","term":{"en":"Security framework","da":"Rammeværk"},"domain":["security"],"cluster":"compliance","summary":{"en":"A ready-made, shared structure of goals and controls that an organisation follows to build and check its security work.","da":"En færdig, fælles struktur af mål og kontroller, som en organisation følger for at opbygge og tjekke sit sikkerhedsarbejde."},"aka":{"en":["cybersecurity framework","control framework"],"da":["sikkerhedsrammeværk","framework","kontrolrammeværk"]},"depth":5,"degree":8,"requires":["security/control"],"collides":false,"mentions":["security/iso-27001","security/nist-csf","security/cis-controls"]},{"id":"security/security-incident","term":{"en":"Security incident","da":"Sikkerhedshændelse"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"An event that has harmed, or may soon harm, the confidentiality, integrity or availability of information or systems.","da":"En hændelse, der har skadet eller snart kan skade fortroligheden, integriteten eller tilgængeligheden af information eller systemer."},"aka":{"en":["incident","information security incident"],"da":["hændelse","informationssikkerhedshændelse"]},"depth":1,"degree":12,"requires":["security/cia-triad"],"collides":false,"mentions":["security/confidentiality","security/integrity","security/availability","security/cia-triad","security/security-policy","security/threat","security/incident-response","security/gdpr","security/data-breach"]},{"id":"security/security-maturity","term":{"en":"Security maturity","da":"Sikkerhedsmodenhed"},"domain":["security"],"cluster":"compliance","summary":{"en":"How far an organisation's security has grown - from random and tied to single people to planned, measured and steadily improving.","da":"Hvor langt en organisations sikkerhed er nået - fra tilfældig og personafhængig til planlagt, målt og løbende forbedret."},"aka":{"en":["maturity level","maturity model","cybersecurity maturity"],"da":["modenhed","modenhedsniveau","modenhedsmodel"]},"depth":1,"degree":5,"requires":["security/governance"],"collides":false,"mentions":["security/backup"]},{"id":"security/security-metrics","term":{"en":"Security metrics (KPIs)","da":"Sikkerhedsmåling (KPI'er)"},"domain":["security"],"cluster":"compliance","summary":{"en":"Numbers chosen in advance to show whether security work is having the effect it should.","da":"Tal, der er valgt på forhånd for at vise, om sikkerhedsarbejdet har den effekt, det skal have."},"aka":{"en":["security KPIs","key performance indicators"],"da":["sikkerheds-KPI'er","nøgletal for sikkerhed"]},"depth":1,"degree":7,"requires":["security/governance"],"collides":false,"mentions":["security/phishing-simulation","cs/patch","security/risk","security/phishing","security/iso-27001"]},{"id":"security/security-monitoring","term":{"en":"Security monitoring","da":"Sikkerhedsovervågning"},"domain":["security"],"cluster":"controls","summary":{"en":"Keeping a steady watch on systems and networks so that signs of attack or misuse are spotted while there is still time to act.","da":"Løbende at holde øje med systemer og netværk, så tegn på angreb eller misbrug opdages, mens der stadig er tid til at handle."},"aka":{"en":["continuous monitoring"],"da":["løbende overvågning"]},"depth":1,"degree":8,"requires":["cs/log"],"collides":false,"mentions":["cs/network","cs/log","cs/firewall","security/threat-actor"]},{"id":"security/security-policy","term":{"en":"Security policy","da":"Sikkerhedspolitik"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"A document that sets out an organisation's goals, responsibilities and principles for information security.","da":"Et dokument, der fastlægger organisationens mål, ansvar og principper for informationssikkerhed."},"aka":{"en":["information security policy"],"da":["informationssikkerhedspolitik"]},"depth":0,"degree":17,"requires":[],"collides":false,"mentions":["security/cyber-and-information-security","cs/account","security/audit"]},{"id":"security/self-assessment","term":{"en":"Self-assessment","da":"Selvevaluering"},"domain":["security"],"cluster":"compliance","summary":{"en":"An organisation checking its own security against a set list of questions or criteria, without an outside inspector.","da":"At en organisation selv tjekker sin sikkerhed mod en fast liste af spørgsmål eller kriterier uden en ekstern kontrollant."},"aka":{"en":["self-evaluation"],"da":["selvvurdering"]},"depth":1,"degree":6,"requires":["security/compliance"],"collides":false,"mentions":["security/d-maerket"]},{"id":"security/session-hijacking","term":{"en":"Session hijacking","da":"Sessionskapring"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Taking over someone's session after they have logged in, so the attacker is treated as that user without knowing the password.","da":"Overtagelse af en brugers session efter login, så angriberen behandles som brugeren uden at kende adgangskoden."},"era":1995,"aka":{"en":["session takeover","cookie theft"],"da":["session hijacking","sessionsovertagelse"]},"depth":3,"degree":8,"requires":["cs/authentication"],"collides":false,"mentions":["cs/session","security/threat-actor","cs/password","cs/cookie","cs/web-browser","platform/cloud-computing","cs/service","security/mfa","ai/prompt"]},{"id":"security/shadow-it","term":{"en":"Shadow IT","da":"Skygge-IT (shadow IT)"},"domain":["security"],"cluster":"awareness","summary":{"en":"Apps and tools staff use for work without the IT department knowing about or approving them.","da":"Apps og værktøjer, som medarbejdere bruger i arbejdet, uden at IT-afdelingen kender til eller har godkendt dem."},"era":2012,"aka":{"en":["unsanctioned IT"],"da":["shadow IT","skygge-it"]},"depth":1,"degree":7,"requires":["security/security-policy"],"collides":false,"mentions":["security/it-operations","cs/service","security/asset-inventory","security/access-management","security/security-policy","security/risk","security/data-breach"]},{"id":"security/siem","term":{"en":"SIEM","da":"SIEM"},"domain":["security"],"cluster":"controls","summary":{"en":"A system that gathers logs from across the organisation in one place and raises an alarm when something looks wrong.","da":"Et system, der samler logs fra hele organisationen ét sted og slår alarm, når noget ser forkert ud."},"era":2005,"aka":{"en":["Security Information and Event Management"],"da":["Security Information and Event Management"]},"depth":2,"degree":17,"requires":["cs/log","cs/audit"],"collides":false,"mentions":["cs/log","cs/account"]},{"id":"security/smishing","term":{"en":"Smishing","da":"Smishing (sms-svindel)"},"domain":["security"],"cluster":"awareness","summary":{"en":"Phishing sent as a text message, usually a short, urgent note with a link or a number to call.","da":"Phishing sendt som sms, typisk en kort, hastende besked med et link eller et nummer, man skal ringe til."},"era":2006,"aka":{"en":["SMS phishing","text message phishing"],"da":["sms-svindel","sms-phishing"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["security/phishing","security/it-operations","cs/account"]},{"id":"security/soar","term":{"en":"SOAR","da":"SOAR"},"domain":["security"],"cluster":"security-operations","summary":{"en":"A platform that ties a security team's tools together and runs the routine steps of handling an alarm by itself.","da":"En platform, der binder sikkerhedsteamets værktøjer sammen og selv udfører de faste trin i håndteringen af en alarm."},"era":2017,"aka":{"en":["security orchestration","automation and response"],"da":["security orchestration","automation and response"]},"depth":3,"degree":5,"requires":["security/siem","security/alert-triage"],"collides":false,"mentions":["security/siem","security/threat-intelligence","cs/account","security/phishing"]},{"id":"security/soc","term":{"en":"Security operations centre (SOC)","da":"Security operations center (SOC)"},"domain":["security"],"cluster":"controls","summary":{"en":"A team that watches an organisation's systems around the clock and acts when an alarm points to a real attack.","da":"Et team, der overvåger organisationens systemer døgnet rundt og griber ind, når en alarm peger på et reelt angreb."},"aka":{"en":["SOC","security operations center"],"da":["SOC","sikkerhedscenter"]},"depth":2,"degree":12,"requires":["security/incident-response"],"collides":false,"mentions":["cs/service","security/siem","security/edr","security/threat","security/incident-response","cs/account"]},{"id":"security/social-engineering","term":{"en":"Social engineering","da":"Social engineering"},"domain":["security"],"cluster":"awareness","summary":{"en":"Manipulating people into giving away information or access, instead of breaking into systems directly.","da":"Manipulation af mennesker, så de udleverer oplysninger eller adgang, i stedet for at bryde direkte ind i systemer."},"aka":{"en":["social engineering attack","human hacking"],"da":["social manipulation"]},"depth":0,"degree":11,"requires":[],"collides":false,"mentions":["security/technical-control"]},{"id":"security/spear-phishing","term":{"en":"Spear phishing","da":"Spear phishing"},"domain":["security"],"cluster":"awareness","summary":{"en":"A phishing message tailored to one person or team, made to look like it comes from someone they know.","da":"En phishing-besked skræddersyet til én person eller ét team, så den ligner noget fra en, de kender."},"era":2005,"aka":{"en":["targeted phishing"],"da":["målrettet phishing"]},"depth":0,"degree":4,"requires":[],"collides":false,"mentions":["security/phishing","security/threat-actor"]},{"id":"security/sql-injection","term":{"en":"SQL injection","da":"SQL injection"},"domain":["security"],"cluster":"application-security","summary":{"en":"An attack where text typed into a form is read by the database as a command, letting an outsider read or change its data.","da":"Et angreb, hvor tekst skrevet i en formular læses af databasen som en kommando, så en udefrakommende kan læse eller ændre dens data."},"era":1998,"aka":{"en":["SQLi"],"da":["SQL-injektion"]},"depth":6,"degree":9,"requires":["cs/database","cs/web-application"],"collides":false,"mentions":["cs/database","cs/web-application","security/threat-actor","cs/password"]},{"id":"security/statement-of-applicability","term":{"en":"Statement of Applicability (SoA)","da":"Statement of Applicability (SoA)"},"domain":["security"],"cluster":"compliance","summary":{"en":"A document listing every control in the ISO 27001 annex, saying whether each is used, and giving the reason.","da":"Et dokument, der gennemgår hver kontrol i ISO 27001's anneks og angiver, om den anvendes, og hvorfor."},"era":2005,"aka":{"en":["SoA"],"da":["SoA","anvendelseserklæring"]},"depth":6,"degree":7,"requires":["security/risk-treatment","security/annex-a"],"collides":false,"mentions":["security/iso-27001","security/risk","security/annex-a","cs/server","security/certification"]},{"id":"security/stride","term":{"en":"STRIDE","da":"STRIDE"},"domain":["security"],"cluster":"application-security","summary":{"en":"A memory aid that sorts threats into six kinds, so a team checks every part of a design for each kind in turn.","da":"En huskeregel, der deler trusler op i seks slags, så et team tjekker hver del af et design for hver slags efter tur."},"era":1999,"aka":{"en":["STRIDE model"],"da":["STRIDE-modellen"]},"depth":1,"degree":3,"requires":["security/threat","security/cia-triad"],"collides":false,"mentions":["security/threat","cs/identity","security/denial-of-service","security/privilege-escalation","cs/authentication","security/integrity","security/availability","cs/log"]},{"id":"security/supervisory-authority","term":{"en":"Supervisory authority","da":"Tilsynsmyndighed"},"domain":["security"],"cluster":"compliance","summary":{"en":"The public body in each EU country that oversees GDPR, handles complaints and can seek fines; in Denmark, Datatilsynet.","da":"Den offentlige myndighed i hvert EU-land, der fører tilsyn med GDPR, behandler klager og kan kræve bøder; i Danmark Datatilsynet."},"era":1995,"aka":{"en":["data protection authority"],"da":["Datatilsynet"]},"depth":3,"degree":7,"requires":["security/gdpr","security/data-controller"],"collides":false,"mentions":["security/gdpr"]},{"id":"security/supplier-management","term":{"en":"Supplier management","da":"Leverandørstyring"},"domain":["security"],"cluster":"compliance","summary":{"en":"Making sure outside partners who handle your data or systems meet your security demands.","da":"At sikre, at eksterne partnere, der håndterer ens data eller systemer, lever op til ens sikkerhedskrav."},"aka":{"en":["supply-chain security","third-party risk management","vendor management"],"da":["sikkerhed i forsyningskæden","tredjepartsstyring"]},"depth":4,"degree":18,"requires":["security/risk"],"collides":false,"mentions":["platform/monitoring","security/iso-27002","security/risk","cs/log","security/threat-actor"]},{"id":"security/supply-chain-attack","term":{"en":"Supply chain attack","da":"Forsyningskædeangreb"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Breaking into many targets at once by first taking over a supplier, product or update they all trust.","da":"At ramme mange mål på én gang ved først at overtage en leverandør, et produkt eller en opdatering, som de alle stoler på."},"aka":{"en":["supply chain compromise"],"da":["supply chain-angreb","leverandørangreb"]},"depth":3,"degree":10,"requires":["security/malware"],"collides":false,"mentions":["cs/service","security/threat-actor","cs/network","platform/monitoring"]},{"id":"security/table-top-exercise","term":{"en":"Table-top exercise","da":"Table-top-øvelse"},"domain":["security"],"cluster":"incident-response","summary":{"en":"A practice session around a table where a team talks through a made-up crisis step by step to test its plans.","da":"En øvelse rundt om et bord, hvor et team taler sig igennem en tænkt krise trin for trin for at afprøve sine planer."},"aka":{"en":["tabletop exercise","TTX"],"da":["skrivebordsøvelse"]},"depth":6,"degree":3,"requires":["security/contingency-plan","security/incident-response"],"collides":false,"mentions":["cs/session","security/security-incident"]},{"id":"security/technical-control","term":{"en":"Technical control","da":"Teknisk kontrol"},"domain":["security"],"cluster":"controls","summary":{"en":"A safeguard built into hardware or software, which works automatically once it is set up.","da":"En beskyttelse, der er bygget ind i hardware eller software og virker automatisk, når den først er sat op."},"aka":{"en":["technological control","logical control"],"da":["teknisk foranstaltning","teknologisk kontrol"]},"depth":0,"degree":5,"requires":[],"collides":false,"mentions":["security/control","cs/encryption","security/mfa","cs/firewall","security/backup","security/iso-27002","security/it-operations"]},{"id":"security/threat","term":{"en":"Threat","da":"Trussel"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"Anything that could harm the organisation - an attacker, a careless mistake, a fire or a power cut.","da":"Alt, der kan skade organisationen - en angriber, en skødesløs fejl, en brand eller et strømsvigt."},"depth":0,"degree":26,"requires":[],"collides":false,"mentions":["security/threat-actor","security/confidentiality","security/integrity","security/availability","security/vulnerability","security/phishing","cs/server"]},{"id":"security/threat-actor","term":{"en":"Threat actor","da":"Trusselsaktør"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"The person or group behind an attack, such as a criminal gang, a foreign state, an activist or a careless insider.","da":"Den person eller gruppe, der står bag et angreb - fx en kriminel bande, en fremmed stat, en aktivist eller en uforsigtig medarbejder."},"aka":{"en":["attacker","adversary","hacker"],"da":["angriber","aktør","hacker"]},"depth":1,"degree":5,"requires":["security/threat"],"collides":false,"mentions":["security/cfcs","security/threat"]},{"id":"security/threat-hunting","term":{"en":"Threat hunting","da":"Trusselsjagt (threat hunting)"},"domain":["security"],"cluster":"security-operations","summary":{"en":"Searching on purpose for attackers who may already be inside the network, without waiting for an alarm to go off.","da":"Målrettet søgning efter angribere, der måske allerede er inde i netværket, uden at vente på, at en alarm går i gang."},"aka":{"en":["cyber threat hunting"],"da":["threat hunting"]},"depth":3,"degree":7,"requires":["security/detection-rule","security/indicator-of-compromise"],"collides":false,"mentions":["security/threat-actor","cs/network","cs/log","security/endpoint","security/mitre-attack","security/detection-rule","security/security-incident","security/cfcs","cs/password","cs/server","security/incident-response"]},{"id":"security/threat-intelligence","term":{"en":"Threat intelligence","da":"Threat intelligence"},"domain":["security"],"cluster":"risk-management","summary":{"en":"Up-to-date knowledge about current attackers and their methods, gathered so attacks can be stopped before they land.","da":"Opdateret viden om aktuelle angribere og deres metoder, indsamlet så angreb kan stoppes, før de rammer."},"aka":{"en":["cyber threat intelligence","CTI"],"da":["trusselsefterretninger"]},"depth":1,"degree":11,"requires":["security/threat"],"collides":false,"mentions":["security/threat-actor","security/threat","security/cfcs","cs/url","security/phishing","security/siem"]},{"id":"security/threat-landscape","term":{"en":"Threat landscape","da":"Trusselsbillede"},"domain":["security"],"cluster":"risk-management","summary":{"en":"A picture of the kinds of threats a company could face right now, and who or what is behind them.","da":"Et overblik over de typer trusler, en virksomhed kan blive udsat for lige nu, og hvem eller hvad der står bag."},"aka":{"en":[],"da":["trusselslandskab"]},"depth":1,"degree":10,"requires":["security/threat"],"collides":false,"mentions":["security/threat","security/threat-actor","security/risk-monitoring","security/risk"]},{"id":"security/threat-modelling","term":{"en":"Threat modelling","da":"Trusselsmodellering"},"domain":["security"],"cluster":"application-security","summary":{"en":"Sitting down with a drawing of a system to work out what could go wrong, who might cause it and what to do about it.","da":"At sætte sig ned med en tegning af et system og finde ud af, hvad der kan gå galt, hvem der kan stå bag, og hvad man vil gøre ved det."},"aka":{"en":["threat modeling"],"da":[]},"depth":2,"degree":9,"requires":["security/threat","security/asset"],"collides":false,"mentions":["security/threat","cs/service","cs/server"]},{"id":"security/two-factor-authentication","term":{"en":"Two-factor authentication","da":"To-faktorautentificering"},"domain":["security"],"cluster":"controls","summary":{"en":"The most common form of MFA, where logging in needs exactly two separate proofs, usually a password and a one-time code.","da":"Den mest udbredte form for MFA, hvor et login kræver præcis to uafhængige beviser, typisk en adgangskode og en engangskode."},"era":2011,"aka":{"en":["2FA","two-step verification"],"da":["2FA","tofaktorgodkendelse","totrinsbekræftelse"]},"depth":4,"degree":6,"requires":["cs/password","security/authentication-factor"],"collides":false,"mentions":["security/mfa","cs/password","security/one-time-password","cs/log","cs/session","cs/service"]},{"id":"security/vishing","term":{"en":"Vishing","da":"Vishing (telefonsvindel)"},"domain":["security"],"cluster":"awareness","summary":{"en":"Tricking people over the phone or a voice call into giving away information, codes or money.","da":"Svindel via telefon eller taleopkald, hvor folk narres til at udlevere oplysninger, koder eller penge."},"era":2006,"aka":{"en":["voice phishing","phone scam"],"da":["telefonsvindel","voice phishing"]},"depth":0,"degree":6,"requires":[],"collides":false,"mentions":["security/social-engineering","security/threat-actor","cs/account","security/mfa"]},{"id":"security/vulnerability","term":{"en":"Vulnerability","da":"Sårbarhed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"A weakness that a threat can use to cause harm.","da":"En svaghed, som en trussel kan udnytte til at gøre skade."},"aka":{"en":["weakness","security flaw"],"da":["svaghed","sikkerhedshul"]},"depth":1,"degree":40,"requires":["security/threat"],"collides":false,"mentions":["security/threat","security/confidentiality","security/integrity","security/availability"]},{"id":"security/vulnerability-assessment","term":{"en":"Vulnerability assessment","da":"Sårbarhedsvurdering"},"domain":["security"],"cluster":"controls","summary":{"en":"A review of systems to find their weaknesses and rank which ones matter most to fix first.","da":"En gennemgang af systemer for at finde deres svagheder og prioritere, hvilke der er vigtigst at rette først."},"aka":{"en":[],"da":["vulnerability assessment"]},"depth":4,"degree":9,"requires":["security/vulnerability","security/risk","security/asset-inventory","security/cve"],"collides":false,"mentions":["security/vulnerability","security/asset","cs/internet","security/risk"]},{"id":"security/vulnerability-scanning","term":{"en":"Vulnerability scanning","da":"Sårbarhedsscanning"},"domain":["security"],"cluster":"controls","summary":{"en":"An automatic, repeated check of systems against a list of known weaknesses, producing a report of what was found.","da":"Et automatisk, gentaget tjek af systemer mod en liste over kendte svagheder, som giver en rapport over fundene."},"era":1995,"aka":{"en":["vulnerability scan"],"da":["vulnerability scanning","sårbarhedsscan"]},"depth":2,"degree":14,"requires":["security/vulnerability"],"collides":false,"mentions":["security/vulnerability","cs/network","cs/server","security/it-operations","security/threat-actor"]},{"id":"security/web-application-firewall","term":{"en":"Web application firewall (WAF)","da":"Web application firewall (WAF)"},"domain":["security","cs"],"cluster":"application-security","summary":{"en":"A filter in front of a website that reads each web request and blocks those that look like known attacks.","da":"Et filter foran et website, der læser hver webforespørgsel og blokerer dem, der ligner kendte angreb."},"era":1999,"aka":{"en":["WAF"],"da":["WAF"]},"depth":6,"degree":7,"requires":["cs/http","cs/web-application"],"collides":false,"mentions":["cs/firewall","cs/http","cs/packet","cs/web-application","cs/cookie","security/it-operations","security/threat-actor"]},{"id":"security/zero-day","term":{"en":"Zero-day vulnerability","da":"Zero-day-sårbarhed"},"domain":["security"],"cluster":"fundamentals","summary":{"en":"A flaw that attackers know about before the maker does, so on the day it is used there is no fix to install.","da":"En fejl, som angribere kender, før producenten gør, så der ikke findes nogen rettelse at installere, den dag den bliver udnyttet."},"aka":{"en":["zero-day","0-day"],"da":["zero-day","0-day","nuldagssårbarhed"]},"depth":1,"degree":4,"requires":["cs/patch","security/exploit"],"collides":false,"mentions":["security/threat-actor","security/vulnerability","cs/patch","security/it-operations","cs/service"]},{"id":"security/zero-trust","term":{"en":"Zero Trust","da":"Zero Trust"},"domain":["security"],"cluster":"controls","summary":{"en":"A security principle of never trusting anyone automatically - every request is checked, even from inside the network.","da":"Et sikkerhedsprincip om aldrig automatisk at stole på nogen - hver anmodning tjekkes, også fra netværket indefra."},"era":2010,"aka":{"en":["zero trust architecture","ZTA"],"da":["Zero Trust-arkitektur","ZTA"]},"depth":5,"degree":18,"requires":["cs/authentication","cs/authorization","cs/least-privilege","cs/network-segmentation"],"collides":false,"mentions":["cs/network","cs/identity","security/threat-actor"]}],"links":[{"source":"ai/accuracy","target":"ai/confusion-matrix","type":"requires","family":"dependency","weight":5.42},{"source":"ai/accuracy","target":"ai/classification","type":"requires","family":"dependency","weight":5.42},{"source":"ai/accuracy","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":2.89},{"source":"ai/accuracy","target":"ai/f1-score","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"ai/activation-function","target":"ai/neural-network","type":"part-of","family":"structure","weight":2.5},{"source":"ai/activation-function","target":"ai/backpropagation","type":"used-with","family":"association","weight":2.5,"primary":true},{"source":"ai/adversarial-example","target":"ai/machine-learning","type":"requires","family":"dependency","weight":5.42},{"source":"ai/adversarial-example","target":"ai/inference","type":"requires","family":"dependency","weight":5.42},{"source":"ai/adversarial-example","target":"ai/data-poisoning","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"ai/adversarial-example","target":"ai/neural-network","type":"exploits","family":"security","weight":5.78,"primary":true},{"source":"ai/agent-instructions-file","target":"ai/coding-agent","type":"requires","family":"dependency","weight":5.91},{"source":"ai/agent-instructions-file","target":"ai/context-engineering","type":"part-of","family":"structure","weight":5.04,"primary":true},{"source":"ai/agent-instructions-file","target":"ai/system-prompt","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"ai/agent-instructions-file","target":"ai/coding-agent","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"ai/agent-instructions-file","target":"ai/prompt-injection","type":"used-with","family":"association","weight":2.52,"primary":true},{"source":"ai/agent-instructions-file","target":"platform/version-control","type":"used-with","family":"association","weight":1.97},{"source":"ai/agent-memory","target":"ai/ai-agent","type":"part-of","family":"structure","weight":3.15},{"source":"ai/agent-memory","target":"ai/context-window","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/agent-memory","target":"ai/prompt-injection","type":"used-with","family":"association","weight":2.52,"primary":true},{"source":"ai/agent-memory","target":"ai/vector-database","type":"used-with","family":"association","weight":1.97},{"source":"ai/agent-memory","target":"security/personal-data","type":"used-with","family":"association","weight":1.97},{"source":"ai/agent-memory","target":"ai/context-engineering","type":"used-with","family":"association","weight":1.58},{"source":"ai/agent-sandbox","target":"ai/ai-agent","type":"requires","family":"dependency","weight":6.1},{"source":"ai/agent-sandbox","target":"ai/excessive-agency","type":"mitigates","family":"security","weight":6.51,"primary":true},{"source":"ai/agent-sandbox","target":"ai/prompt-injection","type":"mitigates","family":"security","weight":4.07},{"source":"ai/agent-sandbox","target":"platform/container","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/agent-sandbox","target":"cs/least-privilege","type":"used-with","family":"association","weight":2.03},{"source":"ai/agent-sandbox","target":"ai/computer-use","type":"used-with","family":"association","weight":2.03},{"source":"ai/agent-sandbox","target":"ai/coding-agent","type":"used-with","family":"association","weight":1.63},{"source":"ai/agent-to-agent-protocol","target":"ai/ai-agent","type":"requires","family":"dependency","weight":5.42},{"source":"ai/agent-to-agent-protocol","target":"cs/protocol","type":"kind-of","family":"structure","weight":2.89},{"source":"ai/agent-to-agent-protocol","target":"ai/model-context-protocol","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"ai/agent-to-agent-protocol","target":"ai/multi-agent-system","type":"used-with","family":"association","weight":1.81},{"source":"ai/agentic-workflow","target":"ai/large-language-model","type":"requires","family":"dependency","weight":5.91},{"source":"ai/agentic-workflow","target":"ai/prompt","type":"requires","family":"dependency","weight":5.91},{"source":"ai/agentic-workflow","target":"ai/ai-agent","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/agentic-workflow","target":"ai/structured-output","type":"used-with","family":"association","weight":1.97},{"source":"ai/agentic-workflow","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":1.58},{"source":"ai/agentic-workflow","target":"ai/multi-agent-system","type":"used-with","family":"association","weight":1.97},{"source":"ai/ai-agent","target":"ai/large-language-model","type":"requires","family":"dependency","weight":7.35},{"source":"ai/ai-agent","target":"ai/prompt","type":"requires","family":"dependency","weight":7.35},{"source":"ai/ai-agent","target":"cs/least-privilege","type":"used-with","family":"association","weight":3.92,"primary":true},{"source":"ai/ai-agent","target":"cs/service-account","type":"used-with","family":"association","weight":1.96},{"source":"ai/ai-agent","target":"cs/log","type":"used-with","family":"association","weight":2.45},{"source":"ai/ai-agent","target":"ai/prompt-injection","type":"used-with","family":"association","weight":2.45},{"source":"ai/ai-agent","target":"ai/reinforcement-learning","type":"used-with","family":"association","weight":1.96},{"source":"ai/ai-agent","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":1.96},{"source":"ai/ai-bias","target":"ai/training-data","type":"requires","family":"dependency","weight":7.1},{"source":"ai/ai-bias","target":"ai/machine-learning","type":"requires","family":"dependency","weight":7.1},{"source":"ai/ai-bias","target":"ai/hallucination","type":"contrasts-with","family":"contrast","weight":3.31},{"source":"ai/ai-bias","target":"security/risk","type":"causes","family":"security","weight":2.27},{"source":"ai/ai-code-review","target":"ai/large-language-model","type":"requires","family":"dependency","weight":6.1},{"source":"ai/ai-code-review","target":"security/vulnerability","type":"mitigates","family":"security","weight":3.25},{"source":"ai/ai-code-review","target":"security/false-positive","type":"causes","family":"security","weight":1.95},{"source":"ai/ai-code-review","target":"platform/ci-cd","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/ai-code-review","target":"platform/version-control","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/ai-code-review","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":2.03},{"source":"ai/ai-code-review","target":"ai/ai-coding-assistant","type":"used-with","family":"association","weight":2.03},{"source":"ai/ai-coding-assistant","target":"ai/large-language-model","type":"requires","family":"dependency","weight":6.42},{"source":"ai/ai-coding-assistant","target":"ai/context-window","type":"requires","family":"dependency","weight":6.42},{"source":"ai/ai-coding-assistant","target":"ai/coding-agent","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"ai/ai-coding-assistant","target":"platform/secrets-management","type":"used-with","family":"association","weight":1.71},{"source":"ai/ai-coding-assistant","target":"platform/software-composition-analysis","type":"used-with","family":"association","weight":2.14},{"source":"ai/ai-governance","target":"ai/artificial-intelligence","type":"requires","family":"dependency","weight":6.42},{"source":"ai/ai-governance","target":"security/risk-management","type":"requires","family":"dependency","weight":6.42},{"source":"ai/ai-governance","target":"security/governance","type":"part-of","family":"structure","weight":3.43},{"source":"ai/ai-governance","target":"ai/shadow-ai","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"ai/ai-governance","target":"ai/ai-bias","type":"mitigates","family":"security","weight":3.43},{"source":"ai/ai-pair-programming","target":"ai/ai-coding-assistant","type":"requires","family":"dependency","weight":5.42},{"source":"ai/ai-pair-programming","target":"ai/vibe-coding","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"ai/ai-pair-programming","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":1.81},{"source":"ai/ai-pair-programming","target":"platform/version-control","type":"used-with","family":"association","weight":1.81},{"source":"ai/ai-red-teaming","target":"ai/artificial-intelligence","type":"requires","family":"dependency","weight":6.1},{"source":"ai/ai-red-teaming","target":"ai/ai-governance","type":"part-of","family":"structure","weight":3.25},{"source":"ai/ai-red-teaming","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":2.6},{"source":"ai/ai-red-teaming","target":"security/penetration-test","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"ai/ai-red-teaming","target":"ai/prompt-injection","type":"mitigates","family":"security","weight":4.07},{"source":"ai/ai-red-teaming","target":"ai/jailbreak","type":"used-with","family":"association","weight":1.63},{"source":"ai/ai-supply-chain-attack","target":"platform/software-supply-chain","type":"requires","family":"dependency","weight":6.27},{"source":"ai/ai-supply-chain-attack","target":"ai/model-weights","type":"requires","family":"dependency","weight":6.27},{"source":"ai/ai-supply-chain-attack","target":"security/supply-chain-attack","type":"kind-of","family":"structure","weight":5.35,"primary":true},{"source":"ai/ai-supply-chain-attack","target":"ai/slopsquatting","type":"contrasts-with","family":"contrast","weight":2.34},{"source":"ai/ai-supply-chain-attack","target":"ai/open-weight-model","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"ai/ai-supply-chain-attack","target":"ai/data-poisoning","type":"used-with","family":"association","weight":2.09},{"source":"ai/alignment","target":"ai/artificial-intelligence","type":"requires","family":"dependency","weight":5.91},{"source":"ai/alignment","target":"ai/model-training","type":"requires","family":"dependency","weight":5.91},{"source":"ai/alignment","target":"ai/guardrails","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"ai/alignment","target":"ai/rlhf","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"ai/alignment","target":"ai/instruction-tuning","type":"used-with","family":"association","weight":1.97},{"source":"ai/artificial-intelligence","target":"ai/machine-learning","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"ai/artificial-intelligence","target":"ai/large-language-model","type":"contrasts-with","family":"contrast","weight":3},{"source":"ai/attention-mechanism","target":"ai/embedding","type":"requires","family":"dependency","weight":6.1},{"source":"ai/attention-mechanism","target":"ai/transformer","type":"part-of","family":"structure","weight":5.21,"primary":true},{"source":"ai/attention-mechanism","target":"ai/context-window","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/attention-mechanism","target":"ai/kv-cache","type":"used-with","family":"association","weight":2.03},{"source":"ai/backpropagation","target":"ai/neural-network","type":"requires","family":"dependency","weight":5.91},{"source":"ai/backpropagation","target":"ai/gradient-descent","type":"requires","family":"dependency","weight":5.91},{"source":"ai/backpropagation","target":"ai/model-training","type":"part-of","family":"structure","weight":3.15},{"source":"ai/backpropagation","target":"ai/model-weights","type":"used-with","family":"association","weight":1.97},{"source":"ai/batch-size","target":"ai/model-training","type":"requires","family":"dependency","weight":5.68},{"source":"ai/batch-size","target":"ai/hyperparameter","type":"kind-of","family":"structure","weight":3.03},{"source":"ai/batch-size","target":"ai/model-training","type":"part-of","family":"structure","weight":3.03},{"source":"ai/batch-size","target":"ai/learning-rate","type":"used-with","family":"association","weight":1.89},{"source":"ai/batch-size","target":"ai/gradient-descent","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"ai/benchmark","target":"ai/test-set","type":"requires","family":"dependency","weight":8.68,"primary":true},{"source":"ai/benchmark","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":2.89},{"source":"ai/benchmark","target":"ai/llm-as-a-judge","type":"contrasts-with","family":"contrast","weight":2.53},{"source":"ai/benchmark","target":"ai/model-card","type":"used-with","family":"association","weight":1.81},{"source":"ai/bias-variance-tradeoff","target":"ai/overfitting","type":"requires","family":"dependency","weight":5.1},{"source":"ai/bias-variance-tradeoff","target":"ai/underfitting","type":"requires","family":"dependency","weight":5.1},{"source":"ai/bias-variance-tradeoff","target":"ai/regularization","type":"used-with","family":"association","weight":2.72,"primary":true},{"source":"ai/chain-of-thought","target":"ai/next-token-prediction","type":"requires","family":"dependency","weight":5.68},{"source":"ai/chain-of-thought","target":"ai/prompt-engineering","type":"kind-of","family":"structure","weight":3.03},{"source":"ai/chain-of-thought","target":"ai/reasoning-model","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"ai/chain-of-thought","target":"ai/few-shot-prompting","type":"used-with","family":"association","weight":1.89},{"source":"ai/chain-of-thought","target":"ai/zero-shot-prompting","type":"used-with","family":"association","weight":1.89},{"source":"ai/chunking","target":"ai/token","type":"requires","family":"dependency","weight":5.42},{"source":"ai/chunking","target":"ai/context-window","type":"requires","family":"dependency","weight":8.68,"primary":true},{"source":"ai/chunking","target":"ai/retrieval-augmented-generation","type":"part-of","family":"structure","weight":2.89},{"source":"ai/chunking","target":"ai/embedding-model","type":"used-with","family":"association","weight":1.81},{"source":"ai/classification","target":"ai/supervised-learning","type":"kind-of","family":"structure","weight":3.68},{"source":"ai/classification","target":"ai/regression","type":"contrasts-with","family":"contrast","weight":5.16,"primary":true},{"source":"ai/classification","target":"ai/clustering","type":"contrasts-with","family":"contrast","weight":5.16,"primary":true},{"source":"ai/classification","target":"ai/generative-ai","type":"contrasts-with","family":"contrast","weight":3.22},{"source":"ai/classification","target":"security/data-classification","type":"contrasts-with","family":"contrast","weight":3.22},{"source":"ai/classification","target":"security/false-positive","type":"used-with","family":"association","weight":2.3},{"source":"ai/classification","target":"ai/convolutional-neural-network","type":"used-with","family":"association","weight":1.84},{"source":"ai/clustering","target":"ai/training-data","type":"requires","family":"dependency","weight":6.1},{"source":"ai/clustering","target":"ai/unsupervised-learning","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/clustering","target":"ai/embedding","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/clustering","target":"ai/cosine-similarity","type":"used-with","family":"association","weight":2.03},{"source":"ai/code-completion","target":"ai/fill-in-the-middle","type":"requires","family":"dependency","weight":5.68},{"source":"ai/code-completion","target":"ai/next-token-prediction","type":"requires","family":"dependency","weight":5.68},{"source":"ai/code-completion","target":"ai/ai-coding-assistant","type":"part-of","family":"structure","weight":4.85,"primary":true},{"source":"ai/code-completion","target":"ai/coding-agent","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"ai/code-completion","target":"security/vulnerability","type":"causes","family":"security","weight":1.82},{"source":"ai/coding-agent","target":"ai/tool-calling","type":"requires","family":"dependency","weight":11.21,"primary":true},{"source":"ai/coding-agent","target":"ai/ai-agent","type":"kind-of","family":"structure","weight":3.74},{"source":"ai/coding-agent","target":"cs/least-privilege","type":"used-with","family":"association","weight":3.74,"primary":true},{"source":"ai/coding-agent","target":"platform/version-control","type":"used-with","family":"association","weight":3.74,"primary":true},{"source":"ai/coding-agent","target":"platform/secrets-management","type":"used-with","family":"association","weight":1.87},{"source":"ai/coding-agent","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":2.34},{"source":"ai/coding-agent","target":"ai/vibe-coding","type":"used-with","family":"association","weight":2.34},{"source":"ai/computer-use","target":"ai/ai-agent","type":"requires","family":"dependency","weight":5.91},{"source":"ai/computer-use","target":"ai/multimodal-model","type":"requires","family":"dependency","weight":9.45,"primary":true},{"source":"ai/computer-use","target":"ai/tool-calling","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/computer-use","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":1.97},{"source":"ai/computer-use","target":"ai/prompt-injection","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"ai/confusion-matrix","target":"ai/classification","type":"requires","family":"dependency","weight":6.27},{"source":"ai/confusion-matrix","target":"ai/supervised-learning","type":"requires","family":"dependency","weight":6.27},{"source":"ai/confusion-matrix","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":3.34},{"source":"ai/confusion-matrix","target":"security/false-positive","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"ai/confusion-matrix","target":"ai/test-set","type":"used-with","family":"association","weight":2.09},{"source":"ai/context-engineering","target":"ai/context-window","type":"requires","family":"dependency","weight":5.91},{"source":"ai/context-engineering","target":"ai/prompt-engineering","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/context-engineering","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":1.97},{"source":"ai/context-engineering","target":"ai/tool-calling","type":"used-with","family":"association","weight":1.97},{"source":"ai/context-window","target":"ai/token","type":"requires","family":"dependency","weight":6.8},{"source":"ai/context-window","target":"ai/large-language-model","type":"part-of","family":"structure","weight":3.63},{"source":"ai/context-window","target":"ai/training-data","type":"contrasts-with","family":"contrast","weight":5.08,"primary":true},{"source":"ai/context-window","target":"ai/knowledge-cutoff","type":"contrasts-with","family":"contrast","weight":2.54},{"source":"ai/context-window","target":"ai/kv-cache","type":"used-with","family":"association","weight":1.81},{"source":"ai/convolutional-neural-network","target":"ai/backpropagation","type":"requires","family":"dependency","weight":5.91},{"source":"ai/convolutional-neural-network","target":"ai/neural-network","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/convolutional-neural-network","target":"ai/transformer","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/convolutional-neural-network","target":"ai/gpu","type":"used-with","family":"association","weight":1.97},{"source":"ai/convolutional-neural-network","target":"ai/supervised-learning","type":"used-with","family":"association","weight":1.97},{"source":"ai/cosine-similarity","target":"ai/embedding","type":"requires","family":"dependency","weight":9.1,"primary":true},{"source":"ai/cosine-similarity","target":"ai/embedding-model","type":"used-with","family":"association","weight":1.89},{"source":"ai/cosine-similarity","target":"ai/nearest-neighbour-search","type":"used-with","family":"association","weight":1.89},{"source":"ai/cross-validation","target":"ai/training-data","type":"requires","family":"dependency","weight":5.1},{"source":"ai/cross-validation","target":"ai/validation-set","type":"alternative-to","family":"contrast","weight":2.38},{"source":"ai/cross-validation","target":"ai/hyperparameter","type":"used-with","family":"association","weight":2.72,"primary":true},{"source":"ai/data-drift","target":"ai/training-data","type":"requires","family":"dependency","weight":5.42},{"source":"ai/data-drift","target":"ai/inference","type":"requires","family":"dependency","weight":5.42},{"source":"ai/data-drift","target":"ai/overfitting","type":"contrasts-with","family":"contrast","weight":2.53},{"source":"ai/data-drift","target":"ai/model-evaluation","type":"used-with","family":"association","weight":1.45},{"source":"ai/data-labeling","target":"ai/training-data","type":"requires","family":"dependency","weight":5.1},{"source":"ai/data-labeling","target":"ai/supervised-learning","type":"part-of","family":"structure","weight":4.35,"primary":true},{"source":"ai/data-labeling","target":"ai/ai-bias","type":"causes","family":"security","weight":3.4},{"source":"ai/data-poisoning","target":"ai/model-training","type":"requires","family":"dependency","weight":5.91},{"source":"ai/data-poisoning","target":"ai/prompt-injection","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"ai/data-poisoning","target":"ai/training-data","type":"exploits","family":"security","weight":6.3,"primary":true},{"source":"ai/data-poisoning","target":"ai/ai-bias","type":"causes","family":"security","weight":1.89},{"source":"ai/decision-tree","target":"ai/feature","type":"requires","family":"dependency","weight":6.1},{"source":"ai/decision-tree","target":"ai/classification","type":"implements","family":"structure","weight":5.21,"primary":true},{"source":"ai/decision-tree","target":"ai/regression","type":"implements","family":"structure","weight":3.25},{"source":"ai/decision-tree","target":"ai/overfitting","type":"causes","family":"security","weight":2.44},{"source":"ai/decision-tree","target":"ai/explainability","type":"used-with","family":"association","weight":2.03},{"source":"ai/decoder","target":"ai/token","type":"requires","family":"dependency","weight":6.1},{"source":"ai/decoder","target":"ai/attention-mechanism","type":"requires","family":"dependency","weight":6.1},{"source":"ai/decoder","target":"ai/transformer","type":"part-of","family":"structure","weight":3.25},{"source":"ai/decoder","target":"ai/encoder","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"ai/decoder","target":"ai/large-language-model","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/decoder","target":"ai/next-token-prediction","type":"used-with","family":"association","weight":2.03},{"source":"ai/decoder","target":"ai/sampling","type":"used-with","family":"association","weight":2.03},{"source":"ai/deep-learning","target":"ai/neural-network","type":"requires","family":"dependency","weight":6.56},{"source":"ai/deep-learning","target":"ai/machine-learning","type":"kind-of","family":"structure","weight":3.5},{"source":"ai/deep-learning","target":"ai/feature-engineering","type":"contrasts-with","family":"contrast","weight":4.9,"primary":true},{"source":"ai/deep-learning","target":"ai/gpu","type":"used-with","family":"association","weight":1.75},{"source":"ai/deepfake","target":"ai/deep-learning","type":"requires","family":"dependency","weight":6.27},{"source":"ai/deepfake","target":"ai/generative-ai","type":"requires","family":"dependency","weight":5.02},{"source":"ai/deepfake","target":"security/vishing","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"ai/deepfake","target":"security/phishing","type":"used-with","family":"association","weight":1.67},{"source":"ai/deepfake","target":"security/social-engineering","type":"used-with","family":"association","weight":2.09},{"source":"ai/deepfake","target":"ai/diffusion-model","type":"used-with","family":"association","weight":1.67},{"source":"ai/diffusion-model","target":"ai/deep-learning","type":"requires","family":"dependency","weight":6.1},{"source":"ai/diffusion-model","target":"ai/generative-ai","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/diffusion-model","target":"ai/large-language-model","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"ai/diffusion-model","target":"ai/synthetic-data","type":"used-with","family":"association","weight":1.63},{"source":"ai/diffusion-model","target":"ai/prompt","type":"used-with","family":"association","weight":2.03},{"source":"ai/diffusion-model","target":"ai/gpu","type":"used-with","family":"association","weight":2.03},{"source":"ai/dimensionality-reduction","target":"ai/feature","type":"requires","family":"dependency","weight":5.68},{"source":"ai/dimensionality-reduction","target":"ai/unsupervised-learning","type":"part-of","family":"structure","weight":2.43},{"source":"ai/dimensionality-reduction","target":"ai/embedding","type":"used-with","family":"association","weight":1.89},{"source":"ai/dimensionality-reduction","target":"ai/feature-engineering","type":"used-with","family":"association","weight":1.89},{"source":"ai/dimensionality-reduction","target":"ai/k-means","type":"used-with","family":"association","weight":0.91},{"source":"ai/embedding","target":"ai/neural-network","type":"requires","family":"dependency","weight":7.19},{"source":"ai/embedding","target":"ai/token","type":"requires","family":"dependency","weight":7.19},{"source":"ai/embedding","target":"ai/transformer","type":"used-with","family":"association","weight":2.4},{"source":"ai/embedding","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":3.83,"primary":true},{"source":"ai/embedding","target":"ai/tokenizer","type":"used-with","family":"association","weight":1.92},{"source":"ai/embedding-model","target":"ai/embedding","type":"requires","family":"dependency","weight":6.1},{"source":"ai/embedding-model","target":"ai/transformer","type":"requires","family":"dependency","weight":6.1},{"source":"ai/embedding-model","target":"ai/large-language-model","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"ai/embedding-model","target":"ai/vector-database","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/embedding-model","target":"ai/encoder","type":"used-with","family":"association","weight":1.63},{"source":"ai/encoder","target":"ai/token","type":"requires","family":"dependency","weight":6.1},{"source":"ai/encoder","target":"ai/embedding","type":"requires","family":"dependency","weight":6.1},{"source":"ai/encoder","target":"ai/attention-mechanism","type":"requires","family":"dependency","weight":6.1},{"source":"ai/encoder","target":"ai/transformer","type":"part-of","family":"structure","weight":5.21,"primary":true},{"source":"ai/epoch","target":"ai/training-data","type":"requires","family":"dependency","weight":5.42},{"source":"ai/epoch","target":"ai/model-training","type":"part-of","family":"structure","weight":2.89},{"source":"ai/epoch","target":"ai/overfitting","type":"causes","family":"security","weight":3.61},{"source":"ai/epoch","target":"ai/hyperparameter","type":"used-with","family":"association","weight":1.81},{"source":"ai/eu-ai-act","target":"security/risk","type":"requires","family":"dependency","weight":6.91},{"source":"ai/eu-ai-act","target":"ai/artificial-intelligence","type":"requires","family":"dependency","weight":6.91},{"source":"ai/eu-ai-act","target":"security/eu-regulation","type":"kind-of","family":"structure","weight":3.68},{"source":"ai/eu-ai-act","target":"security/gdpr","type":"contrasts-with","family":"contrast","weight":3.22},{"source":"ai/eu-ai-act","target":"ai/ai-red-teaming","type":"mandates","family":"regulation","weight":9.21,"primary":true},{"source":"ai/eu-ai-act","target":"security/risk-management","type":"mandates","family":"regulation","weight":9.21,"primary":true},{"source":"ai/eu-ai-act","target":"ai/ai-governance","type":"mandates","family":"regulation","weight":9.21,"primary":true},{"source":"ai/eu-ai-act","target":"ai/explainability","type":"mandates","family":"regulation","weight":4.6},{"source":"ai/eu-ai-act","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":5.76},{"source":"ai/eu-ai-act","target":"ai/model-card","type":"mandates","family":"regulation","weight":4.6},{"source":"ai/eu-ai-act","target":"ai/model-evaluation","type":"mandates","family":"regulation","weight":4.6},{"source":"ai/eu-ai-act","target":"ai/human-in-the-loop","type":"mandates","family":"regulation","weight":4.6},{"source":"ai/excessive-agency","target":"ai/ai-agent","type":"requires","family":"dependency","weight":6.27},{"source":"ai/excessive-agency","target":"ai/tool-calling","type":"requires","family":"dependency","weight":6.27},{"source":"ai/excessive-agency","target":"security/privilege-escalation","type":"contrasts-with","family":"contrast","weight":2.34},{"source":"ai/excessive-agency","target":"security/data-breach","type":"causes","family":"security","weight":3.34},{"source":"ai/excessive-agency","target":"ai/prompt-injection","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"ai/explainability","target":"ai/machine-learning","type":"requires","family":"dependency","weight":6.1},{"source":"ai/explainability","target":"ai/ai-governance","type":"part-of","family":"structure","weight":2.6},{"source":"ai/explainability","target":"ai/ai-bias","type":"mitigates","family":"security","weight":3.25},{"source":"ai/explainability","target":"ai/model-card","type":"used-with","family":"association","weight":1.63},{"source":"ai/f1-score","target":"ai/precision","type":"requires","family":"dependency","weight":8.68,"primary":true},{"source":"ai/f1-score","target":"ai/recall","type":"requires","family":"dependency","weight":5.42},{"source":"ai/f1-score","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":2.89},{"source":"ai/feature","target":"ai/training-data","type":"requires","family":"dependency","weight":6.42},{"source":"ai/feature","target":"ai/model-parameter","type":"contrasts-with","family":"contrast","weight":3},{"source":"ai/feature","target":"ai/label","type":"used-with","family":"association","weight":3.43,"primary":true},{"source":"ai/feature-engineering","target":"ai/feature","type":"requires","family":"dependency","weight":5.42},{"source":"ai/feature-engineering","target":"ai/gradient-boosting","type":"used-with","family":"association","weight":1.45},{"source":"ai/few-shot-prompting","target":"ai/prompt","type":"requires","family":"dependency","weight":5.68},{"source":"ai/few-shot-prompting","target":"ai/prompt-engineering","type":"kind-of","family":"structure","weight":3.03},{"source":"ai/few-shot-prompting","target":"ai/zero-shot-prompting","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"ai/few-shot-prompting","target":"ai/fine-tuning","type":"alternative-to","family":"contrast","weight":4.24,"primary":true},{"source":"ai/fill-in-the-middle","target":"ai/next-token-prediction","type":"requires","family":"dependency","weight":9.1,"primary":true},{"source":"ai/fill-in-the-middle","target":"ai/token","type":"requires","family":"dependency","weight":5.68},{"source":"ai/fill-in-the-middle","target":"ai/pretraining","type":"part-of","family":"structure","weight":3.03},{"source":"ai/fill-in-the-middle","target":"ai/tokenizer","type":"used-with","family":"association","weight":1.89},{"source":"ai/fine-tuning","target":"ai/model-training","type":"kind-of","family":"structure","weight":3.57},{"source":"ai/fine-tuning","target":"ai/transfer-learning","type":"implements","family":"structure","weight":2.85},{"source":"ai/fine-tuning","target":"ai/retrieval-augmented-generation","type":"alternative-to","family":"contrast","weight":4.99,"primary":true},{"source":"ai/fine-tuning","target":"ai/prompt-engineering","type":"alternative-to","family":"contrast","weight":2.5},{"source":"ai/fine-tuning","target":"ai/large-language-model","type":"used-with","family":"association","weight":2.23},{"source":"ai/fine-tuning","target":"ai/training-data","type":"used-with","family":"association","weight":2.23},{"source":"ai/fine-tuning","target":"ai/foundation-model","type":"used-with","family":"association","weight":1.78},{"source":"ai/foundation-model","target":"ai/pretraining","type":"requires","family":"dependency","weight":6.42},{"source":"ai/foundation-model","target":"ai/self-supervised-learning","type":"requires","family":"dependency","weight":6.42},{"source":"ai/foundation-model","target":"ai/deep-learning","type":"kind-of","family":"structure","weight":3.43},{"source":"ai/foundation-model","target":"ai/general-purpose-ai-model","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"ai/foundation-model","target":"ai/transfer-learning","type":"used-with","family":"association","weight":2.14},{"source":"ai/general-purpose-ai-model","target":"ai/eu-ai-act","type":"requires","family":"dependency","weight":5.42},{"source":"ai/general-purpose-ai-model","target":"ai/model-card","type":"used-with","family":"association","weight":1.45},{"source":"ai/general-purpose-ai-model","target":"ai/open-weight-model","type":"used-with","family":"association","weight":1.81},{"source":"ai/generative-ai","target":"ai/deep-learning","type":"requires","family":"dependency","weight":6.42},{"source":"ai/generative-ai","target":"ai/artificial-intelligence","type":"kind-of","family":"structure","weight":3.43},{"source":"ai/generative-ai","target":"ai/hallucination","type":"causes","family":"security","weight":6.85,"primary":true},{"source":"ai/generative-ai","target":"ai/prompt","type":"used-with","family":"association","weight":2.14},{"source":"ai/gpu","target":"ai/tpu","type":"alternative-to","family":"contrast","weight":4.68,"primary":true},{"source":"ai/gpu","target":"ai/model-training","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"ai/gpu","target":"ai/inference","type":"used-with","family":"association","weight":2.09},{"source":"ai/gpu","target":"ai/model-serving","type":"used-with","family":"association","weight":2.09},{"source":"ai/gradient-boosting","target":"ai/decision-tree","type":"requires","family":"dependency","weight":5.42},{"source":"ai/gradient-boosting","target":"ai/loss-function","type":"requires","family":"dependency","weight":5.42},{"source":"ai/gradient-boosting","target":"ai/random-forest","type":"alternative-to","family":"contrast","weight":4.05,"primary":true},{"source":"ai/gradient-descent","target":"ai/loss-function","type":"requires","family":"dependency","weight":5.91},{"source":"ai/gradient-descent","target":"ai/model-parameter","type":"requires","family":"dependency","weight":5.91},{"source":"ai/gradient-descent","target":"ai/model-training","type":"part-of","family":"structure","weight":5.04,"primary":true},{"source":"ai/grounding","target":"ai/large-language-model","type":"requires","family":"dependency","weight":5.42},{"source":"ai/grounding","target":"ai/context-window","type":"requires","family":"dependency","weight":5.42},{"source":"ai/grounding","target":"ai/hallucination","type":"mitigates","family":"security","weight":4.63,"primary":true},{"source":"ai/grounding","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"ai/guardrails","target":"ai/large-language-model","type":"requires","family":"dependency","weight":6.1},{"source":"ai/guardrails","target":"ai/prompt-injection","type":"mitigates","family":"security","weight":4.07},{"source":"ai/guardrails","target":"ai/jailbreak","type":"mitigates","family":"security","weight":6.51,"primary":true},{"source":"ai/guardrails","target":"ai/sensitive-information-disclosure","type":"mitigates","family":"security","weight":6.51,"primary":true},{"source":"ai/guardrails","target":"security/input-validation","type":"used-with","family":"association","weight":2.03},{"source":"ai/guardrails","target":"ai/human-in-the-loop","type":"used-with","family":"association","weight":0.98},{"source":"ai/hallucination","target":"ai/inference","type":"requires","family":"dependency","weight":6.8},{"source":"ai/human-in-the-loop","target":"ai/excessive-agency","type":"mitigates","family":"security","weight":7.13,"primary":true},{"source":"ai/human-in-the-loop","target":"ai/prompt-injection","type":"mitigates","family":"security","weight":3.57},{"source":"ai/human-in-the-loop","target":"ai/multi-agent-system","type":"used-with","family":"association","weight":2.23},{"source":"ai/hybrid-search","target":"ai/keyword-search","type":"requires","family":"dependency","weight":5.42},{"source":"ai/hybrid-search","target":"ai/semantic-search","type":"requires","family":"dependency","weight":5.42},{"source":"ai/hybrid-search","target":"ai/reranking","type":"used-with","family":"association","weight":1.81},{"source":"ai/hybrid-search","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":1.81},{"source":"ai/hyperparameter","target":"ai/model-training","type":"requires","family":"dependency","weight":6.27},{"source":"ai/hyperparameter","target":"ai/model-parameter","type":"contrasts-with","family":"contrast","weight":4.68,"primary":true},{"source":"ai/hyperparameter","target":"ai/regularization","type":"used-with","family":"association","weight":2.09},{"source":"ai/inference","target":"ai/machine-learning","type":"part-of","family":"structure","weight":3.68},{"source":"ai/inference","target":"ai/model-training","type":"contrasts-with","family":"contrast","weight":5.16,"primary":true},{"source":"ai/inference","target":"ai/mixture-of-experts","type":"used-with","family":"association","weight":1.84},{"source":"ai/instruction-tuning","target":"ai/pretraining","type":"requires","family":"dependency","weight":6.42},{"source":"ai/instruction-tuning","target":"ai/large-language-model","type":"requires","family":"dependency","weight":6.42},{"source":"ai/instruction-tuning","target":"ai/fine-tuning","type":"kind-of","family":"structure","weight":3.43},{"source":"ai/instruction-tuning","target":"ai/pretraining","type":"contrasts-with","family":"contrast","weight":3},{"source":"ai/instruction-tuning","target":"ai/rlhf","type":"used-with","family":"association","weight":3.43,"primary":true},{"source":"ai/jailbreak","target":"ai/system-prompt","type":"requires","family":"dependency","weight":6.1},{"source":"ai/jailbreak","target":"ai/large-language-model","type":"requires","family":"dependency","weight":6.1},{"source":"ai/jailbreak","target":"ai/alignment","type":"requires","family":"dependency","weight":6.1},{"source":"ai/jailbreak","target":"ai/prompt-injection","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"ai/jailbreak","target":"ai/sensitive-information-disclosure","type":"causes","family":"security","weight":1.95},{"source":"ai/k-means","target":"ai/feature","type":"requires","family":"dependency","weight":5.42},{"source":"ai/k-means","target":"ai/unsupervised-learning","type":"requires","family":"dependency","weight":5.42},{"source":"ai/k-means","target":"ai/clustering","type":"implements","family":"structure","weight":4.63,"primary":true},{"source":"ai/keyword-search","target":"ai/semantic-search","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"ai/keyword-search","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":1.81},{"source":"ai/keyword-search","target":"ai/reranking","type":"used-with","family":"association","weight":1.81},{"source":"ai/knowledge-cutoff","target":"ai/training-data","type":"requires","family":"dependency","weight":5.91},{"source":"ai/knowledge-cutoff","target":"ai/model-training","type":"requires","family":"dependency","weight":5.91},{"source":"ai/knowledge-cutoff","target":"ai/large-language-model","type":"part-of","family":"structure","weight":3.15},{"source":"ai/knowledge-cutoff","target":"ai/hallucination","type":"causes","family":"security","weight":3.15},{"source":"ai/knowledge-distillation","target":"ai/model-training","type":"requires","family":"dependency","weight":5.68},{"source":"ai/knowledge-distillation","target":"ai/transfer-learning","type":"contrasts-with","family":"contrast","weight":2.12},{"source":"ai/knowledge-distillation","target":"ai/quantization","type":"alternative-to","family":"contrast","weight":4.24,"primary":true},{"source":"ai/knowledge-distillation","target":"ai/small-language-model","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"ai/knowledge-distillation","target":"ai/synthetic-data","type":"used-with","family":"association","weight":1.89},{"source":"ai/kv-cache","target":"ai/attention-mechanism","type":"requires","family":"dependency","weight":6.42},{"source":"ai/kv-cache","target":"ai/token","type":"requires","family":"dependency","weight":6.42},{"source":"ai/kv-cache","target":"ai/inference","type":"part-of","family":"structure","weight":5.48,"primary":true},{"source":"ai/kv-cache","target":"ai/model-serving","type":"used-with","family":"association","weight":2.14},{"source":"ai/kv-cache","target":"ai/quantization","type":"used-with","family":"association","weight":2.14},{"source":"ai/kv-cache","target":"ai/throughput","type":"used-with","family":"association","weight":2.14},{"source":"ai/label","target":"ai/training-data","type":"part-of","family":"structure","weight":4.35,"primary":true},{"source":"ai/large-language-model","target":"ai/transformer","type":"requires","family":"dependency","weight":8.1},{"source":"ai/large-language-model","target":"ai/token","type":"requires","family":"dependency","weight":8.1},{"source":"ai/large-language-model","target":"ai/deep-learning","type":"kind-of","family":"structure","weight":4.32},{"source":"ai/large-language-model","target":"ai/generative-ai","type":"kind-of","family":"structure","weight":3.46},{"source":"ai/large-language-model","target":"ai/foundation-model","type":"kind-of","family":"structure","weight":3.46},{"source":"ai/large-language-model","target":"ai/small-language-model","type":"contrasts-with","family":"contrast","weight":3.02},{"source":"ai/large-language-model","target":"ai/hallucination","type":"causes","family":"security","weight":8.64,"primary":true},{"source":"ai/large-language-model","target":"ai/self-supervised-learning","type":"used-with","family":"association","weight":2.16},{"source":"ai/latency","target":"ai/throughput","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/latency","target":"platform/service-level-objective","type":"used-with","family":"association","weight":1.97},{"source":"ai/latency","target":"platform/monitoring","type":"used-with","family":"association","weight":1.97},{"source":"ai/latency","target":"ai/model-serving","type":"used-with","family":"association","weight":1.97},{"source":"ai/learning-rate","target":"ai/gradient-descent","type":"requires","family":"dependency","weight":5.1},{"source":"ai/learning-rate","target":"ai/hyperparameter","type":"kind-of","family":"structure","weight":2.72},{"source":"ai/linear-regression","target":"ai/feature","type":"requires","family":"dependency","weight":5.68},{"source":"ai/linear-regression","target":"ai/loss-function","type":"requires","family":"dependency","weight":5.68},{"source":"ai/linear-regression","target":"ai/regression","type":"implements","family":"structure","weight":4.85,"primary":true},{"source":"ai/linear-regression","target":"ai/logistic-regression","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"ai/llm-as-a-judge","target":"ai/large-language-model","type":"requires","family":"dependency","weight":5.42},{"source":"ai/llm-as-a-judge","target":"ai/model-evaluation","type":"kind-of","family":"structure","weight":2.89},{"source":"ai/llm-as-a-judge","target":"ai/ai-bias","type":"causes","family":"security","weight":2.89},{"source":"ai/logistic-regression","target":"ai/feature","type":"requires","family":"dependency","weight":5.42},{"source":"ai/logistic-regression","target":"ai/linear-regression","type":"requires","family":"dependency","weight":5.42},{"source":"ai/logistic-regression","target":"ai/classification","type":"implements","family":"structure","weight":4.63,"primary":true},{"source":"ai/lora","target":"ai/model-weights","type":"requires","family":"dependency","weight":8.16,"primary":true},{"source":"ai/lora","target":"ai/fine-tuning","type":"kind-of","family":"structure","weight":2.72},{"source":"ai/lora","target":"ai/quantization","type":"used-with","family":"association","weight":1.7},{"source":"ai/loss-function","target":"ai/machine-learning","type":"requires","family":"dependency","weight":6.27},{"source":"ai/loss-function","target":"ai/model-training","type":"part-of","family":"structure","weight":5.35,"primary":true},{"source":"ai/loss-function","target":"ai/ai-bias","type":"causes","family":"security","weight":2.01},{"source":"ai/machine-learning","target":"ai/training-data","type":"requires","family":"dependency","weight":7.35},{"source":"ai/machine-learning","target":"ai/artificial-intelligence","type":"kind-of","family":"structure","weight":3.92},{"source":"ai/mcp-server","target":"ai/tool-calling","type":"requires","family":"dependency","weight":6.1},{"source":"ai/mcp-server","target":"cs/server","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/mcp-server","target":"ai/model-context-protocol","type":"part-of","family":"structure","weight":5.21,"primary":true},{"source":"ai/mcp-server","target":"cs/oauth","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/mcp-server","target":"ai/prompt-injection","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/mcp-server","target":"platform/secrets-management","type":"used-with","family":"association","weight":2.03},{"source":"ai/mixture-of-experts","target":"ai/model-parameter","type":"requires","family":"dependency","weight":9.1,"primary":true},{"source":"ai/mixture-of-experts","target":"ai/neural-network","type":"kind-of","family":"structure","weight":3.03},{"source":"ai/mixture-of-experts","target":"ai/transformer","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"ai/mixture-of-experts","target":"ai/model-serving","type":"used-with","family":"association","weight":1.89},{"source":"ai/model-card","target":"ai/model-evaluation","type":"requires","family":"dependency","weight":6.42},{"source":"ai/model-card","target":"ai/training-data","type":"requires","family":"dependency","weight":6.42},{"source":"ai/model-card","target":"ai/ai-governance","type":"part-of","family":"structure","weight":3.43},{"source":"ai/model-card","target":"ai/ai-bias","type":"mitigates","family":"security","weight":2.06},{"source":"ai/model-card","target":"ai/open-weight-model","type":"used-with","family":"association","weight":2.14},{"source":"ai/model-context-protocol","target":"cs/api","type":"requires","family":"dependency","weight":6.27},{"source":"ai/model-context-protocol","target":"cs/client","type":"requires","family":"dependency","weight":6.27},{"source":"ai/model-context-protocol","target":"cs/protocol","type":"kind-of","family":"structure","weight":3.34},{"source":"ai/model-context-protocol","target":"ai/tool-calling","type":"implements","family":"structure","weight":5.35,"primary":true},{"source":"ai/model-context-protocol","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":1.67},{"source":"ai/model-evaluation","target":"ai/machine-learning","type":"requires","family":"dependency","weight":7.27},{"source":"ai/model-evaluation","target":"ai/model-training","type":"contrasts-with","family":"contrast","weight":5.43,"primary":true},{"source":"ai/model-evaluation","target":"ai/ai-bias","type":"mitigates","family":"security","weight":3.88},{"source":"ai/model-evaluation","target":"ai/hallucination","type":"mitigates","family":"security","weight":4.85},{"source":"ai/model-evaluation","target":"ai/prompt-engineering","type":"used-with","family":"association","weight":1.94},{"source":"ai/model-parameter","target":"ai/machine-learning","type":"requires","family":"dependency","weight":6.42},{"source":"ai/model-parameter","target":"ai/neural-network","type":"part-of","family":"structure","weight":5.48,"primary":true},{"source":"ai/model-parameter","target":"ai/model-training","type":"used-with","family":"association","weight":2.14},{"source":"ai/model-serving","target":"ai/inference","type":"requires","family":"dependency","weight":10.7,"primary":true},{"source":"ai/model-serving","target":"cs/api","type":"requires","family":"dependency","weight":6.68},{"source":"ai/model-serving","target":"ai/throughput","type":"used-with","family":"association","weight":3.57,"primary":true},{"source":"ai/model-serving","target":"platform/monitoring","type":"used-with","family":"association","weight":2.23},{"source":"ai/model-serving","target":"ai/quantization","type":"used-with","family":"association","weight":2.23},{"source":"ai/model-training","target":"ai/training-data","type":"requires","family":"dependency","weight":7.91},{"source":"ai/model-training","target":"ai/machine-learning","type":"part-of","family":"structure","weight":4.22},{"source":"ai/model-training","target":"ai/tpu","type":"used-with","family":"association","weight":2.11},{"source":"ai/model-weights","target":"ai/model-training","type":"requires","family":"dependency","weight":6.27},{"source":"ai/model-weights","target":"ai/model-parameter","type":"kind-of","family":"structure","weight":5.35,"primary":true},{"source":"ai/model-weights","target":"ai/neural-network","type":"part-of","family":"structure","weight":3.34},{"source":"ai/multi-agent-system","target":"ai/ai-agent","type":"requires","family":"dependency","weight":9.45,"primary":true},{"source":"ai/multi-agent-system","target":"platform/observability","type":"used-with","family":"association","weight":1.58},{"source":"ai/multi-agent-system","target":"ai/prompt-injection","type":"used-with","family":"association","weight":1.58},{"source":"ai/multimodal-model","target":"ai/embedding","type":"requires","family":"dependency","weight":6.1},{"source":"ai/multimodal-model","target":"ai/encoder","type":"requires","family":"dependency","weight":6.1},{"source":"ai/multimodal-model","target":"ai/foundation-model","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/multimodal-model","target":"ai/prompt-injection","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"ai/multimodal-model","target":"ai/prompt","type":"used-with","family":"association","weight":2.03},{"source":"ai/multimodal-model","target":"ai/transformer","type":"used-with","family":"association","weight":2.03},{"source":"ai/nearest-neighbour-search","target":"ai/embedding","type":"requires","family":"dependency","weight":5.42},{"source":"ai/nearest-neighbour-search","target":"ai/vector-database","type":"part-of","family":"structure","weight":4.63,"primary":true},{"source":"ai/nearest-neighbour-search","target":"ai/semantic-search","type":"used-with","family":"association","weight":1.81},{"source":"ai/neural-network","target":"ai/machine-learning","type":"part-of","family":"structure","weight":3.63},{"source":"ai/next-token-prediction","target":"ai/token","type":"requires","family":"dependency","weight":6.91},{"source":"ai/next-token-prediction","target":"ai/inference","type":"requires","family":"dependency","weight":6.91},{"source":"ai/next-token-prediction","target":"ai/large-language-model","type":"part-of","family":"structure","weight":3.68},{"source":"ai/next-token-prediction","target":"ai/hallucination","type":"causes","family":"security","weight":7.37,"primary":true},{"source":"ai/next-token-prediction","target":"ai/self-supervised-learning","type":"used-with","family":"association","weight":3.68,"primary":true},{"source":"ai/next-token-prediction","target":"ai/sampling","type":"used-with","family":"association","weight":2.3},{"source":"ai/open-weight-model","target":"ai/model-weights","type":"requires","family":"dependency","weight":9.76,"primary":true},{"source":"ai/open-weight-model","target":"ai/foundation-model","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/open-weight-model","target":"ai/quantization","type":"used-with","family":"association","weight":2.03},{"source":"ai/open-weight-model","target":"ai/small-language-model","type":"used-with","family":"association","weight":1.63},{"source":"ai/overfitting","target":"ai/model-training","type":"requires","family":"dependency","weight":6.8},{"source":"ai/overfitting","target":"ai/training-data","type":"requires","family":"dependency","weight":6.8},{"source":"ai/overfitting","target":"ai/underfitting","type":"contrasts-with","family":"contrast","weight":2.54},{"source":"ai/overfitting","target":"security/data-breach","type":"causes","family":"security","weight":2.18},{"source":"ai/precision","target":"ai/confusion-matrix","type":"requires","family":"dependency","weight":6.1},{"source":"ai/precision","target":"ai/classification","type":"requires","family":"dependency","weight":6.1},{"source":"ai/precision","target":"security/false-positive","type":"requires","family":"dependency","weight":6.1},{"source":"ai/precision","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":3.25},{"source":"ai/precision","target":"ai/recall","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"ai/pretraining","target":"ai/self-supervised-learning","type":"requires","family":"dependency","weight":6.1},{"source":"ai/pretraining","target":"ai/training-data","type":"requires","family":"dependency","weight":6.1},{"source":"ai/pretraining","target":"ai/model-training","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/prompt","target":"ai/large-language-model","type":"requires","family":"dependency","weight":7.01},{"source":"ai/prompt","target":"ai/context-window","type":"part-of","family":"structure","weight":3.74},{"source":"ai/prompt-caching","target":"ai/kv-cache","type":"requires","family":"dependency","weight":8.68,"primary":true},{"source":"ai/prompt-caching","target":"ai/prompt","type":"requires","family":"dependency","weight":5.42},{"source":"ai/prompt-caching","target":"ai/time-to-first-token","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"ai/prompt-caching","target":"ai/system-prompt","type":"used-with","family":"association","weight":1.81},{"source":"ai/prompt-engineering","target":"ai/prompt","type":"requires","family":"dependency","weight":6.27},{"source":"ai/prompt-engineering","target":"ai/system-prompt","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"ai/prompt-injection","target":"ai/large-language-model","type":"requires","family":"dependency","weight":7.62},{"source":"ai/prompt-injection","target":"ai/prompt","type":"requires","family":"dependency","weight":7.62},{"source":"ai/prompt-injection","target":"security/social-engineering","type":"contrasts-with","family":"contrast","weight":3.56},{"source":"ai/prompt-injection","target":"security/sql-injection","type":"contrasts-with","family":"contrast","weight":3.56},{"source":"ai/prompt-injection","target":"ai/system-prompt","type":"contrasts-with","family":"contrast","weight":2.85},{"source":"ai/prompt-injection","target":"security/data-breach","type":"causes","family":"security","weight":4.07},{"source":"ai/prompt-injection","target":"ai/sensitive-information-disclosure","type":"causes","family":"security","weight":4.07},{"source":"ai/prompt-injection","target":"ai/retrieval-augmented-generation","type":"used-with","family":"association","weight":2.54},{"source":"ai/quantization","target":"ai/model-weights","type":"requires","family":"dependency","weight":9.76,"primary":true},{"source":"ai/quantization","target":"ai/small-language-model","type":"used-with","family":"association","weight":2.03},{"source":"ai/random-forest","target":"ai/decision-tree","type":"requires","family":"dependency","weight":5.1},{"source":"ai/random-forest","target":"ai/overfitting","type":"mitigates","family":"security","weight":5.44,"primary":true},{"source":"ai/reasoning-model","target":"ai/inference","type":"requires","family":"dependency","weight":9.1,"primary":true},{"source":"ai/reasoning-model","target":"ai/next-token-prediction","type":"requires","family":"dependency","weight":5.68},{"source":"ai/reasoning-model","target":"ai/large-language-model","type":"kind-of","family":"structure","weight":3.03},{"source":"ai/reasoning-model","target":"ai/latency","type":"causes","family":"security","weight":3.79},{"source":"ai/recall","target":"ai/confusion-matrix","type":"requires","family":"dependency","weight":5.91},{"source":"ai/recall","target":"ai/classification","type":"requires","family":"dependency","weight":5.91},{"source":"ai/recall","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":3.15},{"source":"ai/regression","target":"ai/model-training","type":"requires","family":"dependency","weight":5.91},{"source":"ai/regression","target":"ai/supervised-learning","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/regression","target":"ai/validation-set","type":"used-with","family":"association","weight":1.97},{"source":"ai/regularization","target":"ai/loss-function","type":"requires","family":"dependency","weight":5.42},{"source":"ai/regularization","target":"ai/overfitting","type":"mitigates","family":"security","weight":5.78,"primary":true},{"source":"ai/reinforcement-learning","target":"ai/machine-learning","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/reinforcement-learning","target":"ai/supervised-learning","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/reinforcement-learning","target":"ai/unsupervised-learning","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"ai/reinforcement-learning","target":"ai/rlhf","type":"used-with","family":"association","weight":1.97},{"source":"ai/reranking","target":"ai/transformer","type":"requires","family":"dependency","weight":5.68},{"source":"ai/reranking","target":"ai/retrieval-augmented-generation","type":"part-of","family":"structure","weight":3.03},{"source":"ai/reranking","target":"ai/semantic-search","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"ai/retrieval-augmented-generation","target":"ai/large-language-model","type":"requires","family":"dependency","weight":7.1},{"source":"ai/retrieval-augmented-generation","target":"ai/embedding","type":"requires","family":"dependency","weight":7.1},{"source":"ai/retrieval-augmented-generation","target":"ai/hallucination","type":"mitigates","family":"security","weight":6.06,"primary":true},{"source":"ai/retrieval-augmented-generation","target":"ai/knowledge-cutoff","type":"mitigates","family":"security","weight":3.79},{"source":"ai/rlhf","target":"ai/reinforcement-learning","type":"requires","family":"dependency","weight":6.1},{"source":"ai/rlhf","target":"ai/instruction-tuning","type":"requires","family":"dependency","weight":6.1},{"source":"ai/rlhf","target":"ai/fine-tuning","type":"kind-of","family":"structure","weight":3.25},{"source":"ai/rlhf","target":"ai/hallucination","type":"causes","family":"security","weight":1.95},{"source":"ai/sampling","target":"ai/next-token-prediction","type":"requires","family":"dependency","weight":6.1},{"source":"ai/sampling","target":"ai/inference","type":"part-of","family":"structure","weight":5.21,"primary":true},{"source":"ai/self-supervised-learning","target":"ai/training-data","type":"requires","family":"dependency","weight":6.27},{"source":"ai/self-supervised-learning","target":"ai/machine-learning","type":"kind-of","family":"structure","weight":3.34},{"source":"ai/self-supervised-learning","target":"ai/supervised-learning","type":"contrasts-with","family":"contrast","weight":4.68,"primary":true},{"source":"ai/self-supervised-learning","target":"ai/unsupervised-learning","type":"contrasts-with","family":"contrast","weight":2.34},{"source":"ai/semantic-search","target":"ai/embedding","type":"requires","family":"dependency","weight":6.1},{"source":"ai/semantic-search","target":"ai/cosine-similarity","type":"requires","family":"dependency","weight":9.76,"primary":true},{"source":"ai/semantic-search","target":"ai/vector-database","type":"used-with","family":"association","weight":2.03},{"source":"ai/sensitive-information-disclosure","target":"ai/large-language-model","type":"requires","family":"dependency","weight":6.27},{"source":"ai/sensitive-information-disclosure","target":"security/personal-data","type":"requires","family":"dependency","weight":6.27},{"source":"ai/sensitive-information-disclosure","target":"ai/training-data","type":"requires","family":"dependency","weight":6.27},{"source":"ai/sensitive-information-disclosure","target":"security/data-breach","type":"causes","family":"security","weight":6.69,"primary":true},{"source":"ai/shadow-ai","target":"ai/artificial-intelligence","type":"requires","family":"dependency","weight":5.91},{"source":"ai/shadow-ai","target":"security/shadow-it","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/shadow-ai","target":"security/data-breach","type":"causes","family":"security","weight":3.15},{"source":"ai/slopsquatting","target":"platform/software-supply-chain","type":"requires","family":"dependency","weight":5.91},{"source":"ai/slopsquatting","target":"security/supply-chain-attack","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/slopsquatting","target":"ai/hallucination","type":"exploits","family":"security","weight":6.3,"primary":true},{"source":"ai/slopsquatting","target":"ai/vibe-coding","type":"used-with","family":"association","weight":1.58},{"source":"ai/small-language-model","target":"ai/model-parameter","type":"requires","family":"dependency","weight":10.03,"primary":true},{"source":"ai/small-language-model","target":"ai/transformer","type":"requires","family":"dependency","weight":6.27},{"source":"ai/small-language-model","target":"ai/token","type":"requires","family":"dependency","weight":6.27},{"source":"ai/small-language-model","target":"ai/time-to-first-token","type":"used-with","family":"association","weight":1.67},{"source":"ai/spec-driven-development","target":"ai/coding-agent","type":"requires","family":"dependency","weight":5.42},{"source":"ai/spec-driven-development","target":"ai/vibe-coding","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"ai/spec-driven-development","target":"security/threat-modelling","type":"used-with","family":"association","weight":1.45},{"source":"ai/spec-driven-development","target":"platform/version-control","type":"used-with","family":"association","weight":1.81},{"source":"ai/structured-output","target":"ai/sampling","type":"requires","family":"dependency","weight":5.68},{"source":"ai/supervised-learning","target":"ai/training-data","type":"requires","family":"dependency","weight":6.68},{"source":"ai/supervised-learning","target":"ai/label","type":"requires","family":"dependency","weight":6.68},{"source":"ai/supervised-learning","target":"ai/machine-learning","type":"kind-of","family":"structure","weight":3.57},{"source":"ai/supervised-learning","target":"ai/unsupervised-learning","type":"contrasts-with","family":"contrast","weight":4.99,"primary":true},{"source":"ai/synthetic-data","target":"ai/generative-ai","type":"requires","family":"dependency","weight":5.91},{"source":"ai/synthetic-data","target":"ai/training-data","type":"kind-of","family":"structure","weight":3.15},{"source":"ai/synthetic-data","target":"security/data-breach","type":"mitigates","family":"security","weight":1.89},{"source":"ai/synthetic-data","target":"ai/ai-bias","type":"causes","family":"security","weight":1.89},{"source":"ai/system-prompt","target":"ai/instruction-tuning","type":"requires","family":"dependency","weight":6.42},{"source":"ai/system-prompt","target":"ai/prompt","type":"part-of","family":"structure","weight":5.48,"primary":true},{"source":"ai/system-prompt","target":"ai/tool-calling","type":"used-with","family":"association","weight":2.14},{"source":"ai/temperature","target":"ai/next-token-prediction","type":"requires","family":"dependency","weight":5.1},{"source":"ai/temperature","target":"ai/sampling","type":"part-of","family":"structure","weight":4.35,"primary":true},{"source":"ai/temperature","target":"ai/top-p-sampling","type":"used-with","family":"association","weight":1.7},{"source":"ai/test-set","target":"ai/model-training","type":"requires","family":"dependency","weight":5.91},{"source":"ai/test-set","target":"ai/model-evaluation","type":"part-of","family":"structure","weight":3.15},{"source":"ai/test-set","target":"ai/training-data","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/test-set","target":"ai/validation-set","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"ai/throughput","target":"ai/time-to-first-token","type":"used-with","family":"association","weight":1.89},{"source":"ai/time-to-first-token","target":"ai/token","type":"requires","family":"dependency","weight":5.91},{"source":"ai/time-to-first-token","target":"ai/prompt","type":"requires","family":"dependency","weight":5.91},{"source":"ai/time-to-first-token","target":"ai/latency","type":"kind-of","family":"structure","weight":5.04,"primary":true},{"source":"ai/token","target":"ai/prompt","type":"part-of","family":"structure","weight":3.79},{"source":"ai/tokenizer","target":"ai/token","type":"requires","family":"dependency","weight":5.68},{"source":"ai/tokenizer","target":"ai/large-language-model","type":"part-of","family":"structure","weight":4.85,"primary":true},{"source":"ai/tokenizer","target":"ai/transformer","type":"used-with","family":"association","weight":1.89},{"source":"ai/tool-calling","target":"ai/structured-output","type":"requires","family":"dependency","weight":10.5,"primary":true},{"source":"ai/tool-calling","target":"cs/api","type":"requires","family":"dependency","weight":6.56},{"source":"ai/tool-calling","target":"ai/ai-agent","type":"part-of","family":"structure","weight":5.6,"primary":true},{"source":"ai/top-p-sampling","target":"ai/token","type":"requires","family":"dependency","weight":5.1},{"source":"ai/top-p-sampling","target":"ai/sampling","type":"kind-of","family":"structure","weight":4.35,"primary":true},{"source":"ai/tpu","target":"ai/neural-network","type":"requires","family":"dependency","weight":8.16,"primary":true},{"source":"ai/training-data","target":"security/asset","type":"kind-of","family":"structure","weight":4.27},{"source":"ai/training-data","target":"ai/validation-set","type":"contrasts-with","family":"contrast","weight":2.99},{"source":"ai/training-data","target":"ai/ai-bias","type":"causes","family":"security","weight":8.54,"primary":true},{"source":"ai/transfer-learning","target":"ai/model-training","type":"requires","family":"dependency","weight":5.91},{"source":"ai/transfer-learning","target":"ai/deep-learning","type":"requires","family":"dependency","weight":5.91},{"source":"ai/transfer-learning","target":"ai/overfitting","type":"mitigates","family":"security","weight":3.15},{"source":"ai/transformer","target":"ai/token","type":"requires","family":"dependency","weight":7.01},{"source":"ai/transformer","target":"ai/neural-network","type":"kind-of","family":"structure","weight":3.74},{"source":"ai/underfitting","target":"ai/model-training","type":"requires","family":"dependency","weight":5.68},{"source":"ai/underfitting","target":"ai/loss-function","type":"requires","family":"dependency","weight":5.68},{"source":"ai/underfitting","target":"ai/hallucination","type":"causes","family":"security","weight":1.36},{"source":"ai/unsupervised-learning","target":"ai/training-data","type":"requires","family":"dependency","weight":6.56},{"source":"ai/unsupervised-learning","target":"ai/machine-learning","type":"kind-of","family":"structure","weight":3.5},{"source":"ai/validation-set","target":"ai/hyperparameter","type":"requires","family":"dependency","weight":6.1},{"source":"ai/validation-set","target":"ai/model-training","type":"part-of","family":"structure","weight":5.21,"primary":true},{"source":"ai/validation-set","target":"ai/overfitting","type":"mitigates","family":"security","weight":3.25},{"source":"ai/vector-database","target":"ai/embedding","type":"requires","family":"dependency","weight":6.27},{"source":"ai/vector-database","target":"cs/database","type":"kind-of","family":"structure","weight":5.35,"primary":true},{"source":"ai/vector-database","target":"ai/retrieval-augmented-generation","type":"part-of","family":"structure","weight":3.34},{"source":"ai/vibe-coding","target":"ai/ai-coding-assistant","type":"requires","family":"dependency","weight":6.1},{"source":"ai/vibe-coding","target":"security/vulnerability","type":"causes","family":"security","weight":6.51,"primary":true},{"source":"ai/vibe-coding","target":"security/data-breach","type":"causes","family":"security","weight":1.95},{"source":"ai/zero-shot-prompting","target":"ai/instruction-tuning","type":"requires","family":"dependency","weight":5.42},{"source":"ai/zero-shot-prompting","target":"ai/prompt-engineering","type":"kind-of","family":"structure","weight":2.31},{"source":"cs/access-control","target":"cs/authentication","type":"requires","family":"dependency","weight":6.91},{"source":"cs/access-control","target":"security/control","type":"kind-of","family":"structure","weight":3.68},{"source":"cs/access-control","target":"security/access-management","type":"contrasts-with","family":"contrast","weight":5.16,"primary":true},{"source":"cs/access-control","target":"cs/least-privilege","type":"used-with","family":"association","weight":2.3},{"source":"cs/access-control","target":"ai/ai-agent","type":"used-with","family":"association","weight":2.3},{"source":"cs/access-control","target":"ai/vector-database","type":"used-with","family":"association","weight":1.84},{"source":"cs/account","target":"cs/identity","type":"contrasts-with","family":"contrast","weight":4.9,"primary":true},{"source":"cs/account","target":"cs/credential","type":"used-with","family":"association","weight":2.19},{"source":"cs/account","target":"cs/process","type":"used-with","family":"association","weight":2.19},{"source":"cs/api","target":"cs/client","type":"requires","family":"dependency","weight":6.8},{"source":"cs/api","target":"cs/server","type":"requires","family":"dependency","weight":6.8},{"source":"cs/api","target":"cs/http","type":"used-with","family":"association","weight":3.63,"primary":true},{"source":"cs/api","target":"cs/web-application","type":"used-with","family":"association","weight":2.27},{"source":"cs/api","target":"cs/json","type":"used-with","family":"association","weight":2.27},{"source":"cs/audit","target":"cs/account","type":"requires","family":"dependency","weight":6.42},{"source":"cs/audit","target":"cs/log","type":"kind-of","family":"structure","weight":3.43},{"source":"cs/audit","target":"security/audit","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"cs/audit","target":"security/siem","type":"used-with","family":"association","weight":2.14},{"source":"cs/audit","target":"security/non-repudiation","type":"used-with","family":"association","weight":2.14},{"source":"cs/audit","target":"platform/version-control","type":"used-with","family":"association","weight":2.14},{"source":"cs/audit","target":"security/log-management","type":"used-with","family":"association","weight":2.14},{"source":"cs/authentication","target":"cs/identity","type":"requires","family":"dependency","weight":7.68},{"source":"cs/authentication","target":"cs/credential","type":"requires","family":"dependency","weight":7.68},{"source":"cs/authentication","target":"cs/authorization","type":"contrasts-with","family":"contrast","weight":5.74,"primary":true},{"source":"cs/authentication","target":"cs/session","type":"used-with","family":"association","weight":2.56},{"source":"cs/authentication","target":"security/zero-trust","type":"used-with","family":"association","weight":2.56},{"source":"cs/authorization","target":"cs/authentication","type":"requires","family":"dependency","weight":6.56},{"source":"cs/authorization","target":"cs/access-control","type":"part-of","family":"structure","weight":3.5},{"source":"cs/authorization","target":"cs/permission","type":"used-with","family":"association","weight":2.19},{"source":"cs/authorization","target":"security/zero-trust","type":"used-with","family":"association","weight":2.19},{"source":"cs/certificate-authority","target":"cs/digital-certificate","type":"requires","family":"dependency","weight":5.68},{"source":"cs/certificate-authority","target":"cs/digital-signature","type":"requires","family":"dependency","weight":5.68},{"source":"cs/certificate-authority","target":"cs/identity","type":"requires","family":"dependency","weight":5.68},{"source":"cs/certificate-authority","target":"cs/public-key-infrastructure","type":"part-of","family":"structure","weight":3.03},{"source":"cs/certificate-authority","target":"cs/tls","type":"used-with","family":"association","weight":1.89},{"source":"cs/client","target":"cs/network","type":"requires","family":"dependency","weight":6.27},{"source":"cs/client","target":"cs/protocol","type":"requires","family":"dependency","weight":6.27},{"source":"cs/client","target":"cs/server","type":"contrasts-with","family":"contrast","weight":4.68,"primary":true},{"source":"cs/conditional-access","target":"cs/access-control","type":"requires","family":"dependency","weight":5.91},{"source":"cs/conditional-access","target":"cs/authentication","type":"requires","family":"dependency","weight":5.91},{"source":"cs/conditional-access","target":"cs/identity-provider","type":"requires","family":"dependency","weight":5.91},{"source":"cs/conditional-access","target":"security/zero-trust","type":"implements","family":"structure","weight":3.15},{"source":"cs/conditional-access","target":"security/mfa","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"cs/conditional-access","target":"platform/saas","type":"used-with","family":"association","weight":1.97},{"source":"cs/cookie","target":"cs/http","type":"requires","family":"dependency","weight":5.68},{"source":"cs/cookie","target":"cs/web-browser","type":"requires","family":"dependency","weight":5.68},{"source":"cs/cookie","target":"cs/session","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"cs/cookie","target":"cs/web-application","type":"used-with","family":"association","weight":1.89},{"source":"cs/credential","target":"cs/identity","type":"requires","family":"dependency","weight":6.8},{"source":"cs/credential","target":"cs/identity-provider","type":"used-with","family":"association","weight":2.27},{"source":"cs/cryptographic-key","target":"cs/encryption","type":"part-of","family":"structure","weight":3.15},{"source":"cs/cryptographic-key","target":"cs/password","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"cs/database","target":"cs/file-system","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"cs/database","target":"cs/server","type":"used-with","family":"association","weight":1.97},{"source":"cs/database","target":"cs/web-application","type":"used-with","family":"association","weight":1.97},{"source":"cs/digital-certificate","target":"cs/public-key-cryptography","type":"requires","family":"dependency","weight":6.42},{"source":"cs/digital-certificate","target":"cs/identity","type":"requires","family":"dependency","weight":6.42},{"source":"cs/digital-certificate","target":"cs/digital-signature","type":"requires","family":"dependency","weight":6.42},{"source":"cs/digital-certificate","target":"cs/authentication","type":"implements","family":"structure","weight":3.43},{"source":"cs/digital-certificate","target":"security/non-repudiation","type":"implements","family":"structure","weight":3.43},{"source":"cs/digital-signature","target":"cs/public-key-cryptography","type":"requires","family":"dependency","weight":6.56},{"source":"cs/digital-signature","target":"cs/hashing","type":"requires","family":"dependency","weight":6.56},{"source":"cs/digital-signature","target":"security/non-repudiation","type":"implements","family":"structure","weight":5.6,"primary":true},{"source":"cs/digital-signature","target":"security/integrity","type":"implements","family":"structure","weight":5.6,"primary":true},{"source":"cs/dns","target":"cs/ip-address","type":"requires","family":"dependency","weight":5.42},{"source":"cs/dns","target":"cs/protocol","type":"kind-of","family":"structure","weight":2.89},{"source":"cs/dns","target":"cs/tcp-ip","type":"part-of","family":"structure","weight":2.89},{"source":"cs/dns","target":"cs/url","type":"used-with","family":"association","weight":1.81},{"source":"cs/encryption","target":"security/control","type":"kind-of","family":"structure","weight":3.83},{"source":"cs/encryption","target":"security/confidentiality","type":"implements","family":"structure","weight":6.13,"primary":true},{"source":"cs/encryption","target":"cs/hashing","type":"contrasts-with","family":"contrast","weight":5.37,"primary":true},{"source":"cs/encryption","target":"security/data-breach","type":"mitigates","family":"security","weight":7.67,"primary":true},{"source":"cs/encryption","target":"cs/tls","type":"used-with","family":"association","weight":2.4},{"source":"cs/encryption","target":"cs/vpn","type":"used-with","family":"association","weight":2.4},{"source":"cs/end-to-end-encryption","target":"cs/public-key-cryptography","type":"requires","family":"dependency","weight":5.68},{"source":"cs/end-to-end-encryption","target":"cs/encryption","type":"requires","family":"dependency","weight":5.68},{"source":"cs/end-to-end-encryption","target":"security/confidentiality","type":"implements","family":"structure","weight":3.03},{"source":"cs/end-to-end-encryption","target":"cs/tls","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"cs/end-to-end-encryption","target":"security/data-breach","type":"mitigates","family":"security","weight":3.03},{"source":"cs/federation","target":"cs/identity-provider","type":"requires","family":"dependency","weight":5.42},{"source":"cs/federation","target":"cs/single-sign-on","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"cs/file-system","target":"cs/operating-system","type":"part-of","family":"structure","weight":2.89},{"source":"cs/file-system","target":"cs/permission","type":"used-with","family":"association","weight":1.81},{"source":"cs/firewall","target":"cs/packet","type":"requires","family":"dependency","weight":7.01},{"source":"cs/firewall","target":"cs/port","type":"requires","family":"dependency","weight":7.01},{"source":"cs/firewall","target":"cs/ip-address","type":"requires","family":"dependency","weight":7.01},{"source":"cs/firewall","target":"security/control","type":"kind-of","family":"structure","weight":3.74},{"source":"cs/firewall","target":"security/intrusion-prevention-system","type":"contrasts-with","family":"contrast","weight":5.23,"primary":true},{"source":"cs/firewall","target":"security/human-firewall","type":"contrasts-with","family":"contrast","weight":3.27},{"source":"cs/firewall","target":"security/data-breach","type":"mitigates","family":"security","weight":3.74},{"source":"cs/firewall","target":"cs/network-segmentation","type":"used-with","family":"association","weight":2.34},{"source":"cs/firewall","target":"cs/router","type":"used-with","family":"association","weight":2.34},{"source":"cs/firewall","target":"security/perimeter-security","type":"used-with","family":"association","weight":2.34},{"source":"cs/hashing","target":"security/integrity","type":"implements","family":"structure","weight":4.85,"primary":true},{"source":"cs/hashing","target":"cs/password","type":"used-with","family":"association","weight":1.89},{"source":"cs/hashing","target":"cs/tls","type":"used-with","family":"association","weight":1.89},{"source":"cs/http","target":"cs/tcp-ip","type":"requires","family":"dependency","weight":6.91},{"source":"cs/http","target":"cs/client","type":"requires","family":"dependency","weight":6.91},{"source":"cs/http","target":"cs/server","type":"requires","family":"dependency","weight":6.91},{"source":"cs/http","target":"cs/protocol","type":"kind-of","family":"structure","weight":3.68},{"source":"cs/http","target":"cs/url","type":"used-with","family":"association","weight":3.68,"primary":true},{"source":"cs/http","target":"cs/json","type":"used-with","family":"association","weight":2.3},{"source":"cs/https","target":"cs/tls","type":"requires","family":"dependency","weight":6.27},{"source":"cs/https","target":"cs/client","type":"requires","family":"dependency","weight":6.27},{"source":"cs/https","target":"cs/server","type":"requires","family":"dependency","weight":6.27},{"source":"cs/https","target":"cs/http","type":"requires","family":"dependency","weight":6.27},{"source":"cs/https","target":"cs/protocol","type":"kind-of","family":"structure","weight":3.34},{"source":"cs/https","target":"security/confidentiality","type":"implements","family":"structure","weight":3.34},{"source":"cs/https","target":"security/session-hijacking","type":"mitigates","family":"security","weight":4.18},{"source":"cs/https","target":"security/man-in-the-middle","type":"mitigates","family":"security","weight":4.18},{"source":"cs/identity","target":"security/zero-trust","type":"used-with","family":"association","weight":2.03},{"source":"cs/identity-provider","target":"cs/identity","type":"requires","family":"dependency","weight":6.42},{"source":"cs/identity-provider","target":"cs/authentication","type":"requires","family":"dependency","weight":6.42},{"source":"cs/identity-provider","target":"security/mfa","type":"used-with","family":"association","weight":2.14},{"source":"cs/internet","target":"cs/tcp-ip","type":"requires","family":"dependency","weight":6.1},{"source":"cs/internet","target":"cs/ip-address","type":"requires","family":"dependency","weight":6.1},{"source":"cs/internet","target":"cs/router","type":"requires","family":"dependency","weight":6.1},{"source":"cs/internet","target":"cs/network","type":"kind-of","family":"structure","weight":3.25},{"source":"cs/ip-address","target":"cs/network","type":"requires","family":"dependency","weight":6.56},{"source":"cs/ip-address","target":"cs/port","type":"used-with","family":"association","weight":2.19},{"source":"cs/json","target":"cs/rest-api","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"cs/json","target":"cs/web-application","type":"used-with","family":"association","weight":1.97},{"source":"cs/json","target":"ai/structured-output","type":"used-with","family":"association","weight":1.58},{"source":"cs/json","target":"ai/model-context-protocol","type":"used-with","family":"association","weight":1.58},{"source":"cs/kernel","target":"cs/operating-system","type":"part-of","family":"structure","weight":3.15},{"source":"cs/kernel","target":"cs/permission","type":"used-with","family":"association","weight":1.97},{"source":"cs/kernel","target":"cs/process","type":"used-with","family":"association","weight":1.97},{"source":"cs/key-management","target":"cs/cryptographic-key","type":"requires","family":"dependency","weight":5.68},{"source":"cs/key-management","target":"cs/encryption","type":"requires","family":"dependency","weight":5.68},{"source":"cs/key-management","target":"security/data-breach","type":"mitigates","family":"security","weight":3.03},{"source":"cs/key-management","target":"platform/secrets-management","type":"used-with","family":"association","weight":1.89},{"source":"cs/key-management","target":"cs/public-key-infrastructure","type":"used-with","family":"association","weight":1.89},{"source":"cs/least-privilege","target":"cs/permission","type":"requires","family":"dependency","weight":7.56},{"source":"cs/least-privilege","target":"security/zero-trust","type":"part-of","family":"structure","weight":4.03},{"source":"cs/least-privilege","target":"security/ransomware","type":"mitigates","family":"security","weight":5.04},{"source":"cs/least-privilege","target":"security/privilege-escalation","type":"mitigates","family":"security","weight":5.04},{"source":"cs/least-privilege","target":"platform/container-escape","type":"mitigates","family":"security","weight":5.04},{"source":"cs/least-privilege","target":"ai/excessive-agency","type":"mitigates","family":"security","weight":4.03},{"source":"cs/least-privilege","target":"cs/role-based-access-control","type":"used-with","family":"association","weight":2.52},{"source":"cs/least-privilege","target":"cs/service","type":"used-with","family":"association","weight":2.52},{"source":"cs/least-privilege","target":"cs/service-account","type":"used-with","family":"association","weight":2.52},{"source":"cs/least-privilege","target":"ai/mcp-server","type":"used-with","family":"association","weight":2.02},{"source":"cs/log","target":"platform/observability","type":"part-of","family":"structure","weight":3.63},{"source":"cs/log","target":"security/siem","type":"used-with","family":"association","weight":3.63,"primary":true},{"source":"cs/log","target":"security/non-repudiation","type":"used-with","family":"association","weight":2.27},{"source":"cs/network","target":"cs/protocol","type":"used-with","family":"association","weight":2.42},{"source":"cs/network-segmentation","target":"cs/network","type":"requires","family":"dependency","weight":6.68},{"source":"cs/network-segmentation","target":"cs/router","type":"requires","family":"dependency","weight":6.68},{"source":"cs/network-segmentation","target":"cs/firewall","type":"requires","family":"dependency","weight":6.68},{"source":"cs/network-segmentation","target":"cs/least-privilege","type":"implements","family":"structure","weight":3.57},{"source":"cs/network-segmentation","target":"security/ransomware","type":"mitigates","family":"security","weight":7.13,"primary":true},{"source":"cs/network-segmentation","target":"security/data-breach","type":"mitigates","family":"security","weight":4.46},{"source":"cs/network-segmentation","target":"security/zero-trust","type":"used-with","family":"association","weight":2.23},{"source":"cs/oauth","target":"cs/access-control","type":"requires","family":"dependency","weight":6.1},{"source":"cs/oauth","target":"cs/api","type":"requires","family":"dependency","weight":6.1},{"source":"cs/oauth","target":"cs/account","type":"requires","family":"dependency","weight":6.1},{"source":"cs/oauth","target":"cs/authorization","type":"implements","family":"structure","weight":3.25},{"source":"cs/oauth","target":"platform/saas","type":"used-with","family":"association","weight":2.03},{"source":"cs/openid-connect","target":"cs/oauth","type":"requires","family":"dependency","weight":5.68},{"source":"cs/openid-connect","target":"cs/identity-provider","type":"requires","family":"dependency","weight":5.68},{"source":"cs/openid-connect","target":"cs/authentication","type":"implements","family":"structure","weight":3.03},{"source":"cs/openid-connect","target":"cs/federation","type":"implements","family":"structure","weight":3.03},{"source":"cs/openid-connect","target":"cs/saml","type":"alternative-to","family":"contrast","weight":4.24,"primary":true},{"source":"cs/operating-system","target":"cs/patch","type":"used-with","family":"association","weight":2.14},{"source":"cs/operating-system","target":"cs/permission","type":"used-with","family":"association","weight":2.14},{"source":"cs/packet","target":"cs/network","type":"requires","family":"dependency","weight":6.1},{"source":"cs/packet","target":"cs/protocol","type":"requires","family":"dependency","weight":6.1},{"source":"cs/passkey","target":"cs/authentication","type":"requires","family":"dependency","weight":6.42},{"source":"cs/passkey","target":"cs/public-key-cryptography","type":"requires","family":"dependency","weight":6.42},{"source":"cs/passkey","target":"cs/credential","type":"kind-of","family":"structure","weight":3.43},{"source":"cs/passkey","target":"cs/password","type":"alternative-to","family":"contrast","weight":4.8,"primary":true},{"source":"cs/passkey","target":"security/phishing","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"cs/passkey","target":"security/credential-stuffing","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"cs/password","target":"cs/credential","type":"kind-of","family":"structure","weight":3.43},{"source":"cs/password","target":"security/two-factor-authentication","type":"used-with","family":"association","weight":2.14},{"source":"cs/patch","target":"security/vulnerability","type":"mitigates","family":"security","weight":6.06,"primary":true},{"source":"cs/patch","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":1.89},{"source":"cs/permission","target":"cs/account","type":"requires","family":"dependency","weight":6.8},{"source":"cs/permission","target":"cs/access-control","type":"part-of","family":"structure","weight":3.63},{"source":"cs/permission","target":"cs/process","type":"used-with","family":"association","weight":2.27},{"source":"cs/port","target":"cs/ip-address","type":"requires","family":"dependency","weight":5.91},{"source":"cs/port","target":"cs/protocol","type":"requires","family":"dependency","weight":5.91},{"source":"cs/privileged-access-management","target":"cs/privileged-account","type":"requires","family":"dependency","weight":5.91},{"source":"cs/privileged-access-management","target":"security/access-management","type":"part-of","family":"structure","weight":3.15},{"source":"cs/privileged-access-management","target":"cs/least-privilege","type":"implements","family":"structure","weight":3.15},{"source":"cs/privileged-access-management","target":"security/privilege-escalation","type":"mitigates","family":"security","weight":3.15},{"source":"cs/privileged-access-management","target":"security/insider-threat","type":"mitigates","family":"security","weight":3.94},{"source":"cs/privileged-account","target":"cs/least-privilege","type":"requires","family":"dependency","weight":9.45,"primary":true},{"source":"cs/privileged-account","target":"cs/account","type":"kind-of","family":"structure","weight":3.15},{"source":"cs/privileged-account","target":"security/zero-trust","type":"used-with","family":"association","weight":1.97},{"source":"cs/process","target":"cs/operating-system","type":"requires","family":"dependency","weight":5.91},{"source":"cs/protocol","target":"cs/network","type":"requires","family":"dependency","weight":6.91},{"source":"cs/public-key-cryptography","target":"cs/cryptographic-key","type":"requires","family":"dependency","weight":6.56},{"source":"cs/public-key-cryptography","target":"cs/encryption","type":"kind-of","family":"structure","weight":3.5},{"source":"cs/public-key-cryptography","target":"cs/symmetric-encryption","type":"contrasts-with","family":"contrast","weight":4.9,"primary":true},{"source":"cs/public-key-cryptography","target":"cs/tls","type":"used-with","family":"association","weight":2.19},{"source":"cs/public-key-infrastructure","target":"cs/digital-certificate","type":"requires","family":"dependency","weight":6.1},{"source":"cs/public-key-infrastructure","target":"cs/digital-signature","type":"requires","family":"dependency","weight":6.1},{"source":"cs/public-key-infrastructure","target":"cs/public-key-cryptography","type":"requires","family":"dependency","weight":6.1},{"source":"cs/public-key-infrastructure","target":"cs/authentication","type":"implements","family":"structure","weight":3.25},{"source":"cs/public-key-infrastructure","target":"cs/tls","type":"used-with","family":"association","weight":2.03},{"source":"cs/rest-api","target":"cs/http","type":"requires","family":"dependency","weight":5.42},{"source":"cs/rest-api","target":"cs/url","type":"requires","family":"dependency","weight":5.42},{"source":"cs/rest-api","target":"cs/api","type":"kind-of","family":"structure","weight":2.89},{"source":"cs/role-based-access-control","target":"cs/permission","type":"requires","family":"dependency","weight":5.68},{"source":"cs/role-based-access-control","target":"cs/access-control","type":"kind-of","family":"structure","weight":3.03},{"source":"cs/router","target":"cs/ip-address","type":"requires","family":"dependency","weight":5.68},{"source":"cs/router","target":"cs/packet","type":"requires","family":"dependency","weight":5.68},{"source":"cs/same-origin-policy","target":"cs/web-browser","type":"requires","family":"dependency","weight":5.42},{"source":"cs/same-origin-policy","target":"cs/url","type":"requires","family":"dependency","weight":5.42},{"source":"cs/saml","target":"cs/identity-provider","type":"requires","family":"dependency","weight":5.68},{"source":"cs/saml","target":"cs/digital-signature","type":"requires","family":"dependency","weight":5.68},{"source":"cs/saml","target":"cs/federation","type":"implements","family":"structure","weight":3.03},{"source":"cs/saml","target":"cs/single-sign-on","type":"implements","family":"structure","weight":3.03},{"source":"cs/secure-boot","target":"cs/digital-signature","type":"requires","family":"dependency","weight":5.91},{"source":"cs/secure-boot","target":"cs/kernel","type":"requires","family":"dependency","weight":5.91},{"source":"cs/secure-boot","target":"cs/operating-system","type":"requires","family":"dependency","weight":5.91},{"source":"cs/secure-boot","target":"security/integrity","type":"implements","family":"structure","weight":3.15},{"source":"cs/secure-boot","target":"security/malware","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"cs/server","target":"cs/network","type":"requires","family":"dependency","weight":6.68},{"source":"cs/server","target":"cs/port","type":"requires","family":"dependency","weight":6.68},{"source":"cs/server","target":"cs/service","type":"used-with","family":"association","weight":2.23},{"source":"cs/service","target":"cs/process","type":"kind-of","family":"structure","weight":3.15},{"source":"cs/service-account","target":"cs/service","type":"requires","family":"dependency","weight":6.1},{"source":"cs/service-account","target":"cs/credential","type":"requires","family":"dependency","weight":6.1},{"source":"cs/service-account","target":"cs/account","type":"kind-of","family":"structure","weight":3.25},{"source":"cs/session","target":"cs/authentication","type":"requires","family":"dependency","weight":6.27},{"source":"cs/session","target":"cs/single-sign-on","type":"used-with","family":"association","weight":2.09},{"source":"cs/single-sign-on","target":"cs/identity-provider","type":"requires","family":"dependency","weight":6.1},{"source":"cs/single-sign-on","target":"cs/session","type":"requires","family":"dependency","weight":6.1},{"source":"cs/single-sign-on","target":"cs/authentication","type":"implements","family":"structure","weight":3.25},{"source":"cs/symmetric-encryption","target":"cs/cryptographic-key","type":"requires","family":"dependency","weight":5.68},{"source":"cs/symmetric-encryption","target":"cs/encryption","type":"kind-of","family":"structure","weight":3.03},{"source":"cs/symmetric-encryption","target":"cs/tls","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"cs/symmetric-encryption","target":"cs/vpn","type":"used-with","family":"association","weight":1.89},{"source":"cs/tcp-ip","target":"cs/ip-address","type":"requires","family":"dependency","weight":6.27},{"source":"cs/tcp-ip","target":"cs/packet","type":"requires","family":"dependency","weight":6.27},{"source":"cs/tcp-ip","target":"cs/port","type":"requires","family":"dependency","weight":6.27},{"source":"cs/tcp-ip","target":"cs/protocol","type":"kind-of","family":"structure","weight":3.34},{"source":"cs/tls","target":"cs/tcp-ip","type":"requires","family":"dependency","weight":7.27},{"source":"cs/tls","target":"cs/encryption","type":"requires","family":"dependency","weight":7.27},{"source":"cs/tls","target":"cs/digital-certificate","type":"requires","family":"dependency","weight":7.27},{"source":"cs/tls","target":"cs/protocol","type":"kind-of","family":"structure","weight":3.88},{"source":"cs/tls","target":"security/confidentiality","type":"implements","family":"structure","weight":3.88},{"source":"cs/tls","target":"security/integrity","type":"implements","family":"structure","weight":3.88},{"source":"cs/tls","target":"cs/vpn","type":"contrasts-with","family":"contrast","weight":3.39},{"source":"cs/tls","target":"security/session-hijacking","type":"mitigates","family":"security","weight":4.85},{"source":"cs/tls","target":"security/man-in-the-middle","type":"mitigates","family":"security","weight":7.75,"primary":true},{"source":"cs/url","target":"cs/internet","type":"requires","family":"dependency","weight":6.1},{"source":"cs/url","target":"cs/web-browser","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"cs/url","target":"cs/web-application","type":"used-with","family":"association","weight":2.03},{"source":"cs/vpn","target":"cs/network","type":"requires","family":"dependency","weight":6.27},{"source":"cs/vpn","target":"cs/encryption","type":"requires","family":"dependency","weight":6.27},{"source":"cs/vpn","target":"cs/ip-address","type":"requires","family":"dependency","weight":6.27},{"source":"cs/vpn","target":"security/confidentiality","type":"implements","family":"structure","weight":3.34},{"source":"cs/vpn","target":"security/zero-trust","type":"contrasts-with","family":"contrast","weight":4.68,"primary":true},{"source":"cs/web-application","target":"cs/http","type":"requires","family":"dependency","weight":7.01},{"source":"cs/web-application","target":"cs/server","type":"requires","family":"dependency","weight":7.01},{"source":"cs/web-application","target":"cs/web-browser","type":"used-with","family":"association","weight":3.74,"primary":true},{"source":"cs/web-browser","target":"cs/http","type":"requires","family":"dependency","weight":6.27},{"source":"cs/web-browser","target":"cs/internet","type":"requires","family":"dependency","weight":6.27},{"source":"cs/web-browser","target":"cs/client","type":"kind-of","family":"structure","weight":3.34},{"source":"platform/alerting","target":"platform/metrics","type":"requires","family":"dependency","weight":6.42},{"source":"platform/alerting","target":"platform/health-check","type":"used-with","family":"association","weight":2.14},{"source":"platform/alerting","target":"platform/monitoring","type":"used-with","family":"association","weight":2.14},{"source":"platform/alerting","target":"security/siem","type":"used-with","family":"association","weight":2.14},{"source":"platform/alerting","target":"security/incident-response","type":"used-with","family":"association","weight":2.14},{"source":"platform/alerting","target":"platform/service-level-objective","type":"used-with","family":"association","weight":2.14},{"source":"platform/ci-cd","target":"platform/version-control","type":"requires","family":"dependency","weight":6.91},{"source":"platform/ci-cd","target":"platform/software-supply-chain","type":"part-of","family":"structure","weight":3.68},{"source":"platform/ci-cd","target":"platform/software-composition-analysis","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"platform/pipeline","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"platform/infrastructure-as-code","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"platform/gitops","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"platform/secrets-management","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"platform/container-registry","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"platform/code-signing","type":"used-with","family":"association","weight":2.3},{"source":"platform/ci-cd","target":"ai/coding-agent","type":"used-with","family":"association","weight":1.84},{"source":"platform/cloud-computing","target":"cs/internet","type":"requires","family":"dependency","weight":6.68},{"source":"platform/cloud-computing","target":"cs/server","type":"requires","family":"dependency","weight":6.68},{"source":"platform/cloud-computing","target":"security/data-processing-agreement","type":"used-with","family":"association","weight":2.23},{"source":"platform/cloud-computing","target":"ai/inference","type":"used-with","family":"association","weight":2.23},{"source":"platform/cloud-computing","target":"ai/gpu","type":"used-with","family":"association","weight":1.78},{"source":"platform/cloud-iam","target":"platform/cloud-computing","type":"requires","family":"dependency","weight":5.91},{"source":"platform/cloud-iam","target":"cs/access-control","type":"requires","family":"dependency","weight":5.91},{"source":"platform/cloud-iam","target":"cs/authorization","type":"requires","family":"dependency","weight":5.91},{"source":"platform/cloud-iam","target":"security/access-management","type":"implements","family":"structure","weight":3.15},{"source":"platform/cloud-iam","target":"cs/least-privilege","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"platform/cloud-iam","target":"cs/service-account","type":"used-with","family":"association","weight":1.97},{"source":"platform/cloud-misconfiguration","target":"platform/cloud-computing","type":"requires","family":"dependency","weight":6.27},{"source":"platform/cloud-misconfiguration","target":"cs/permission","type":"requires","family":"dependency","weight":6.27},{"source":"platform/cloud-misconfiguration","target":"security/vulnerability","type":"kind-of","family":"structure","weight":3.34},{"source":"platform/cloud-misconfiguration","target":"security/data-breach","type":"causes","family":"security","weight":6.69,"primary":true},{"source":"platform/code-signing","target":"cs/digital-signature","type":"requires","family":"dependency","weight":6.27},{"source":"platform/code-signing","target":"cs/digital-certificate","type":"requires","family":"dependency","weight":6.27},{"source":"platform/code-signing","target":"platform/software-supply-chain","type":"part-of","family":"structure","weight":3.34},{"source":"platform/code-signing","target":"security/supply-chain-attack","type":"mitigates","family":"security","weight":6.69,"primary":true},{"source":"platform/code-signing","target":"ai/ai-supply-chain-attack","type":"mitigates","family":"security","weight":3.34},{"source":"platform/code-signing","target":"platform/pipeline","type":"used-with","family":"association","weight":2.09},{"source":"platform/code-signing","target":"platform/sbom","type":"used-with","family":"association","weight":2.09},{"source":"platform/container","target":"cs/process","type":"requires","family":"dependency","weight":6.91},{"source":"platform/container","target":"cs/kernel","type":"requires","family":"dependency","weight":6.91},{"source":"platform/container","target":"platform/virtual-machine","type":"contrasts-with","family":"contrast","weight":5.16,"primary":true},{"source":"platform/container","target":"platform/microservices","type":"used-with","family":"association","weight":2.3},{"source":"platform/container","target":"ai/model-serving","type":"used-with","family":"association","weight":1.84},{"source":"platform/container-escape","target":"platform/container","type":"requires","family":"dependency","weight":6.1},{"source":"platform/container-escape","target":"platform/container-runtime","type":"requires","family":"dependency","weight":6.1},{"source":"platform/container-escape","target":"security/privilege-escalation","type":"kind-of","family":"structure","weight":3.25},{"source":"platform/container-escape","target":"security/vulnerability","type":"exploits","family":"security","weight":6.51,"primary":true},{"source":"platform/container-escape","target":"security/lateral-movement","type":"causes","family":"security","weight":3.25},{"source":"platform/container-image","target":"platform/container","type":"requires","family":"dependency","weight":6.1},{"source":"platform/container-image","target":"cs/file-system","type":"requires","family":"dependency","weight":6.1},{"source":"platform/container-image","target":"platform/software-supply-chain","type":"part-of","family":"structure","weight":3.25},{"source":"platform/container-image","target":"platform/sbom","type":"used-with","family":"association","weight":2.03},{"source":"platform/container-orchestration","target":"platform/container","type":"requires","family":"dependency","weight":5.42},{"source":"platform/container-orchestration","target":"cs/network","type":"requires","family":"dependency","weight":5.42},{"source":"platform/container-orchestration","target":"platform/gitops","type":"used-with","family":"association","weight":1.81},{"source":"platform/container-registry","target":"platform/container-image","type":"requires","family":"dependency","weight":5.42},{"source":"platform/container-registry","target":"platform/software-supply-chain","type":"part-of","family":"structure","weight":2.89},{"source":"platform/container-registry","target":"platform/docker","type":"used-with","family":"association","weight":1.81},{"source":"platform/container-runtime","target":"platform/container","type":"requires","family":"dependency","weight":5.91},{"source":"platform/container-runtime","target":"platform/container-image","type":"requires","family":"dependency","weight":5.91},{"source":"platform/container-runtime","target":"cs/kernel","type":"requires","family":"dependency","weight":5.91},{"source":"platform/container-runtime","target":"platform/docker","type":"used-with","family":"association","weight":1.97},{"source":"platform/container-runtime","target":"platform/kubernetes","type":"used-with","family":"association","weight":1.97},{"source":"platform/devsecops","target":"platform/ci-cd","type":"requires","family":"dependency","weight":5.91},{"source":"platform/devsecops","target":"security/security-by-design","type":"implements","family":"structure","weight":3.15},{"source":"platform/devsecops","target":"platform/sbom","type":"used-with","family":"association","weight":1.97},{"source":"platform/devsecops","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":1.97},{"source":"platform/devsecops","target":"security/secure-development-lifecycle","type":"used-with","family":"association","weight":1.97},{"source":"platform/distributed-tracing","target":"cs/service","type":"requires","family":"dependency","weight":5.68},{"source":"platform/distributed-tracing","target":"platform/observability","type":"part-of","family":"structure","weight":3.03},{"source":"platform/distributed-tracing","target":"cs/log","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"platform/distributed-tracing","target":"platform/metrics","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"platform/docker","target":"platform/container-image","type":"requires","family":"dependency","weight":5.68},{"source":"platform/docker","target":"platform/container","type":"implements","family":"structure","weight":3.03},{"source":"platform/docker","target":"platform/kubernetes","type":"used-with","family":"association","weight":1.89},{"source":"platform/gitops","target":"platform/infrastructure-as-code","type":"requires","family":"dependency","weight":5.91},{"source":"platform/gitops","target":"platform/version-control","type":"requires","family":"dependency","weight":5.91},{"source":"platform/gitops","target":"platform/kubernetes","type":"used-with","family":"association","weight":1.97},{"source":"platform/health-check","target":"cs/service","type":"requires","family":"dependency","weight":5.42},{"source":"platform/health-check","target":"platform/kubernetes","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"platform/health-check","target":"platform/monitoring","type":"used-with","family":"association","weight":1.81},{"source":"platform/hypervisor","target":"platform/iaas","type":"used-with","family":"association","weight":1.7},{"source":"platform/hypervisor","target":"cs/operating-system","type":"used-with","family":"association","weight":1.7},{"source":"platform/iaas","target":"platform/cloud-computing","type":"kind-of","family":"structure","weight":3.03},{"source":"platform/iaas","target":"platform/paas","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"platform/iaas","target":"platform/saas","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"platform/iaas","target":"platform/virtual-machine","type":"used-with","family":"association","weight":1.89},{"source":"platform/infrastructure-as-code","target":"platform/version-control","type":"requires","family":"dependency","weight":5.91},{"source":"platform/infrastructure-as-code","target":"platform/cloud-misconfiguration","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"platform/infrastructure-as-code","target":"platform/secrets-management","type":"used-with","family":"association","weight":1.97},{"source":"platform/kubernetes","target":"platform/container","type":"requires","family":"dependency","weight":6.56},{"source":"platform/kubernetes","target":"platform/container-orchestration","type":"implements","family":"structure","weight":3.5},{"source":"platform/kubernetes","target":"cs/role-based-access-control","type":"used-with","family":"association","weight":2.19},{"source":"platform/kubernetes","target":"platform/microservices","type":"used-with","family":"association","weight":2.19},{"source":"platform/kubernetes","target":"ai/model-serving","type":"used-with","family":"association","weight":1.75},{"source":"platform/metrics","target":"platform/observability","type":"part-of","family":"structure","weight":3.25},{"source":"platform/metrics","target":"platform/service-level-objective","type":"used-with","family":"association","weight":2.03},{"source":"platform/microservices","target":"cs/api","type":"requires","family":"dependency","weight":5.68},{"source":"platform/microservices","target":"cs/network","type":"requires","family":"dependency","weight":5.68},{"source":"platform/microservices","target":"security/attack-surface","type":"causes","family":"security","weight":3.03},{"source":"platform/monitoring","target":"platform/metrics","type":"requires","family":"dependency","weight":6.42},{"source":"platform/monitoring","target":"platform/observability","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"platform/observability","target":"cs/log","type":"requires","family":"dependency","weight":6.56},{"source":"platform/observability","target":"platform/service-level-objective","type":"used-with","family":"association","weight":2.19},{"source":"platform/paas","target":"platform/cloud-computing","type":"kind-of","family":"structure","weight":2.72},{"source":"platform/paas","target":"platform/saas","type":"contrasts-with","family":"contrast","weight":2.38},{"source":"platform/pipeline","target":"platform/ci-cd","type":"part-of","family":"structure","weight":3.15},{"source":"platform/pipeline","target":"platform/secrets-management","type":"used-with","family":"association","weight":1.97},{"source":"platform/pipeline","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":1.97},{"source":"platform/pipeline","target":"platform/software-composition-analysis","type":"used-with","family":"association","weight":1.97},{"source":"platform/pod","target":"platform/container","type":"requires","family":"dependency","weight":5.1},{"source":"platform/pod","target":"cs/ip-address","type":"requires","family":"dependency","weight":5.1},{"source":"platform/pod","target":"platform/kubernetes","type":"part-of","family":"structure","weight":2.72},{"source":"platform/runbook","target":"platform/alerting","type":"requires","family":"dependency","weight":5.42},{"source":"platform/runbook","target":"security/soar","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"platform/runbook","target":"security/soc","type":"used-with","family":"association","weight":1.81},{"source":"platform/saas","target":"cs/account","type":"requires","family":"dependency","weight":5.91},{"source":"platform/saas","target":"platform/cloud-computing","type":"kind-of","family":"structure","weight":3.15},{"source":"platform/sbom","target":"platform/software-supply-chain","type":"requires","family":"dependency","weight":6.68},{"source":"platform/sbom","target":"security/supply-chain-attack","type":"mitigates","family":"security","weight":3.57},{"source":"platform/sbom","target":"ai/ai-supply-chain-attack","type":"mitigates","family":"security","weight":3.57},{"source":"platform/sbom","target":"platform/software-composition-analysis","type":"used-with","family":"association","weight":2.23},{"source":"platform/sbom","target":"security/supplier-management","type":"used-with","family":"association","weight":2.23},{"source":"platform/sbom","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":2.23},{"source":"platform/secrets-management","target":"cs/credential","type":"requires","family":"dependency","weight":6.91},{"source":"platform/secrets-management","target":"cs/cryptographic-key","type":"requires","family":"dependency","weight":6.91},{"source":"platform/secrets-management","target":"cs/service-account","type":"requires","family":"dependency","weight":6.91},{"source":"platform/secrets-management","target":"cs/least-privilege","type":"implements","family":"structure","weight":3.68},{"source":"platform/secrets-management","target":"security/data-breach","type":"mitigates","family":"security","weight":3.68},{"source":"platform/secrets-management","target":"ai/system-prompt","type":"used-with","family":"association","weight":1.84},{"source":"platform/service-level-agreement","target":"security/availability","type":"requires","family":"dependency","weight":5.42},{"source":"platform/service-level-agreement","target":"platform/service-level-objective","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"platform/service-level-agreement","target":"security/supplier-management","type":"used-with","family":"association","weight":1.81},{"source":"platform/service-level-objective","target":"platform/metrics","type":"requires","family":"dependency","weight":6.56},{"source":"platform/service-level-objective","target":"security/availability","type":"requires","family":"dependency","weight":6.56},{"source":"platform/service-level-objective","target":"security/supplier-management","type":"used-with","family":"association","weight":1.75},{"source":"platform/service-level-objective","target":"ai/throughput","type":"used-with","family":"association","weight":1.75},{"source":"platform/shared-responsibility-model","target":"platform/cloud-computing","type":"requires","family":"dependency","weight":5.1},{"source":"platform/shared-responsibility-model","target":"platform/cloud-misconfiguration","type":"mitigates","family":"security","weight":3.4},{"source":"platform/shared-responsibility-model","target":"security/supplier-management","type":"used-with","family":"association","weight":2.72,"primary":true},{"source":"platform/software-composition-analysis","target":"platform/software-supply-chain","type":"requires","family":"dependency","weight":6.42},{"source":"platform/software-composition-analysis","target":"security/cve","type":"requires","family":"dependency","weight":6.42},{"source":"platform/software-composition-analysis","target":"security/vulnerability-scanning","type":"kind-of","family":"structure","weight":3.43},{"source":"platform/software-composition-analysis","target":"security/supply-chain-attack","type":"mitigates","family":"security","weight":3.43},{"source":"platform/software-composition-analysis","target":"ai/slopsquatting","type":"mitigates","family":"security","weight":3.43},{"source":"platform/software-supply-chain","target":"security/supplier-management","type":"used-with","family":"association","weight":2.27},{"source":"platform/telemetry","target":"cs/log","type":"requires","family":"dependency","weight":5.68},{"source":"platform/telemetry","target":"platform/metrics","type":"requires","family":"dependency","weight":5.68},{"source":"platform/telemetry","target":"platform/distributed-tracing","type":"requires","family":"dependency","weight":5.68},{"source":"platform/telemetry","target":"platform/observability","type":"part-of","family":"structure","weight":3.03},{"source":"platform/telemetry","target":"security/threat-hunting","type":"used-with","family":"association","weight":1.89},{"source":"platform/version-control","target":"platform/software-supply-chain","type":"part-of","family":"structure","weight":3.57},{"source":"platform/virtual-machine","target":"platform/hypervisor","type":"requires","family":"dependency","weight":5.42},{"source":"platform/virtual-machine","target":"cs/operating-system","type":"requires","family":"dependency","weight":5.42},{"source":"security/access-management","target":"cs/authentication","type":"requires","family":"dependency","weight":6.68},{"source":"security/access-management","target":"cs/authorization","type":"requires","family":"dependency","weight":6.68},{"source":"security/access-management","target":"security/control","type":"kind-of","family":"structure","weight":3.57},{"source":"security/access-management","target":"cs/access-control","type":"implements","family":"structure","weight":3.57},{"source":"security/access-management","target":"cs/least-privilege","type":"used-with","family":"association","weight":2.23},{"source":"security/access-management","target":"cs/role-based-access-control","type":"used-with","family":"association","weight":2.23},{"source":"security/access-management","target":"security/mfa","type":"used-with","family":"association","weight":2.23},{"source":"security/alert-triage","target":"platform/alerting","type":"requires","family":"dependency","weight":6.42},{"source":"security/alert-triage","target":"security/incident-response","type":"part-of","family":"structure","weight":3.43},{"source":"security/alert-triage","target":"security/threat-hunting","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"security/alert-triage","target":"security/false-positive","type":"used-with","family":"association","weight":3.43,"primary":true},{"source":"security/alert-triage","target":"security/soc","type":"used-with","family":"association","weight":2.14},{"source":"security/alert-triage","target":"security/incident-reporting","type":"used-with","family":"association","weight":2.14},{"source":"security/alert-triage","target":"security/escalation-procedure","type":"used-with","family":"association","weight":2.14},{"source":"security/alert-triage","target":"ai/precision","type":"used-with","family":"association","weight":1.71},{"source":"security/annex-a","target":"security/control","type":"requires","family":"dependency","weight":5.42},{"source":"security/annex-a","target":"security/iso-27001","type":"part-of","family":"structure","weight":2.89},{"source":"security/annex-a","target":"security/iso-27002","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"security/anomaly-detection","target":"security/detection-rule","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"security/anomaly-detection","target":"security/false-positive","type":"causes","family":"security","weight":4.07},{"source":"security/anomaly-detection","target":"ai/unsupervised-learning","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"security/anomaly-detection","target":"ai/machine-learning","type":"used-with","family":"association","weight":2.03},{"source":"security/anomaly-detection","target":"security/siem","type":"used-with","family":"association","weight":2.03},{"source":"security/anomaly-detection","target":"ai/clustering","type":"used-with","family":"association","weight":1.63},{"source":"security/anomaly-detection","target":"ai/recall","type":"used-with","family":"association","weight":1.63},{"source":"security/api-security","target":"cs/api","type":"requires","family":"dependency","weight":5.68},{"source":"security/api-security","target":"cs/authentication","type":"requires","family":"dependency","weight":5.68},{"source":"security/api-security","target":"cs/authorization","type":"requires","family":"dependency","weight":5.68},{"source":"security/api-security","target":"security/data-breach","type":"mitigates","family":"security","weight":3.79},{"source":"security/api-security","target":"security/web-application-firewall","type":"used-with","family":"association","weight":1.52},{"source":"security/asset","target":"security/cia-triad","type":"requires","family":"dependency","weight":6.8},{"source":"security/asset","target":"security/risk","type":"part-of","family":"structure","weight":3.63},{"source":"security/asset","target":"security/asset-inventory","type":"used-with","family":"association","weight":2.27},{"source":"security/asset-inventory","target":"security/control","type":"kind-of","family":"structure","weight":3.5},{"source":"security/asset-inventory","target":"security/shadow-it","type":"mitigates","family":"security","weight":7,"primary":true},{"source":"security/asset-inventory","target":"security/endpoint","type":"used-with","family":"association","weight":2.19},{"source":"security/asset-inventory","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":2.19},{"source":"security/attack-surface","target":"security/asset","type":"requires","family":"dependency","weight":5.91},{"source":"security/attack-surface","target":"security/vulnerability","type":"requires","family":"dependency","weight":5.91},{"source":"security/attack-surface","target":"security/threat-landscape","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"security/attack-surface","target":"security/hardening","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"security/attack-surface","target":"security/threat-modelling","type":"used-with","family":"association","weight":1.97},{"source":"security/audit","target":"security/security-policy","type":"requires","family":"dependency","weight":6.56},{"source":"security/audit","target":"security/compliance","type":"requires","family":"dependency","weight":6.56},{"source":"security/audit","target":"security/gap-analysis","type":"contrasts-with","family":"contrast","weight":4.9,"primary":true},{"source":"security/audit","target":"security/self-assessment","type":"contrasts-with","family":"contrast","weight":3.06},{"source":"security/audit","target":"security/pdca","type":"used-with","family":"association","weight":2.19},{"source":"security/audit","target":"security/supplier-management","type":"used-with","family":"association","weight":2.19},{"source":"security/audit","target":"ai/explainability","type":"used-with","family":"association","weight":2.19},{"source":"security/authentication-factor","target":"cs/authentication","type":"requires","family":"dependency","weight":5.91},{"source":"security/authentication-factor","target":"cs/passkey","type":"used-with","family":"association","weight":1.97},{"source":"security/authentication-factor","target":"cs/password","type":"used-with","family":"association","weight":1.97},{"source":"security/availability","target":"security/cia-triad","type":"part-of","family":"structure","weight":3.34},{"source":"security/availability","target":"security/confidentiality","type":"contrasts-with","family":"contrast","weight":2.93},{"source":"security/availability","target":"platform/monitoring","type":"used-with","family":"association","weight":2.09},{"source":"security/awareness-maturity","target":"security/security-awareness","type":"requires","family":"dependency","weight":5.91},{"source":"security/awareness-maturity","target":"security/security-culture","type":"requires","family":"dependency","weight":5.91},{"source":"security/awareness-maturity","target":"security/security-maturity","type":"kind-of","family":"structure","weight":3.15},{"source":"security/awareness-maturity","target":"security/gap-analysis","type":"used-with","family":"association","weight":1.58},{"source":"security/awareness-maturity","target":"security/pdca","type":"used-with","family":"association","weight":1.58},{"source":"security/awareness-maturity","target":"security/security-metrics","type":"used-with","family":"association","weight":1.97},{"source":"security/awareness-officer","target":"security/awareness-programme","type":"requires","family":"dependency","weight":5.1},{"source":"security/awareness-officer","target":"security/grey-roles","type":"kind-of","family":"structure","weight":2.72},{"source":"security/awareness-officer","target":"security/phishing-simulation","type":"used-with","family":"association","weight":1.7},{"source":"security/awareness-programme","target":"security/security-awareness","type":"requires","family":"dependency","weight":5.91},{"source":"security/awareness-programme","target":"security/human-error","type":"mitigates","family":"security","weight":3.94},{"source":"security/awareness-programme","target":"security/nudging","type":"used-with","family":"association","weight":1.97},{"source":"security/awareness-programme","target":"security/security-metrics","type":"used-with","family":"association","weight":1.97},{"source":"security/backup","target":"security/control","type":"kind-of","family":"structure","weight":3.43},{"source":"security/backup","target":"security/ransomware","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"security/backup","target":"security/disaster-recovery-plan","type":"used-with","family":"association","weight":2.14},{"source":"security/backup","target":"security/business-continuity-plan","type":"used-with","family":"association","weight":2.14},{"source":"security/backup","target":"security/recovery-objectives","type":"used-with","family":"association","weight":2.14},{"source":"security/backup","target":"cs/database","type":"used-with","family":"association","weight":2.14},{"source":"security/business-continuity-plan","target":"security/business-impact-analysis","type":"requires","family":"dependency","weight":6.42},{"source":"security/business-continuity-plan","target":"security/contingency-plan","type":"part-of","family":"structure","weight":3.43},{"source":"security/business-continuity-plan","target":"security/disaster-recovery-plan","type":"contrasts-with","family":"contrast","weight":4.8,"primary":true},{"source":"security/business-continuity-plan","target":"security/crisis-management","type":"used-with","family":"association","weight":2.14},{"source":"security/business-email-compromise","target":"cs/account","type":"requires","family":"dependency","weight":5.68},{"source":"security/business-email-compromise","target":"security/spear-phishing","type":"kind-of","family":"structure","weight":3.03},{"source":"security/business-email-compromise","target":"security/vulnerability","type":"exploits","family":"security","weight":6.06,"primary":true},{"source":"security/business-email-compromise","target":"security/pretexting","type":"used-with","family":"association","weight":1.89},{"source":"security/business-email-compromise","target":"ai/deepfake","type":"used-with","family":"association","weight":1.89},{"source":"security/business-impact-analysis","target":"security/critical-assets","type":"requires","family":"dependency","weight":6.1},{"source":"security/business-impact-analysis","target":"security/impact","type":"requires","family":"dependency","weight":6.1},{"source":"security/business-impact-analysis","target":"security/risk-management","type":"part-of","family":"structure","weight":3.25},{"source":"security/business-impact-analysis","target":"security/risk-assessment","type":"used-with","family":"association","weight":2.03},{"source":"security/cer-directive","target":"security/critical-assets","type":"requires","family":"dependency","weight":5.91},{"source":"security/cer-directive","target":"security/eu-directive","type":"kind-of","family":"structure","weight":3.15},{"source":"security/cer-directive","target":"security/nis2","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"security/cer-directive","target":"security/risk-assessment","type":"mandates","family":"regulation","weight":7.88,"primary":true},{"source":"security/cer-directive","target":"security/physical-security","type":"mandates","family":"regulation","weight":7.88,"primary":true},{"source":"security/cer-directive","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":4.92},{"source":"security/certification","target":"security/isms","type":"requires","family":"dependency","weight":5.42},{"source":"security/certification","target":"security/audit","type":"requires","family":"dependency","weight":5.42},{"source":"security/certification","target":"security/compliance","type":"contrasts-with","family":"contrast","weight":2.53},{"source":"security/certification","target":"security/iso-27001","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"security/cfcs","target":"security/cyber-and-information-security","type":"requires","family":"dependency","weight":5.42},{"source":"security/cfcs","target":"security/supervisory-authority","type":"contrasts-with","family":"contrast","weight":2.53},{"source":"security/cfcs","target":"security/threat-landscape","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"security/cfcs","target":"security/incident-reporting","type":"used-with","family":"association","weight":1.45},{"source":"security/change-management","target":"security/asset-inventory","type":"requires","family":"dependency","weight":6.27},{"source":"security/change-management","target":"security/control","type":"kind-of","family":"structure","weight":3.34},{"source":"security/change-management","target":"platform/cloud-misconfiguration","type":"mitigates","family":"security","weight":4.18},{"source":"security/change-management","target":"security/patch-management","type":"used-with","family":"association","weight":2.09},{"source":"security/change-management","target":"platform/devsecops","type":"used-with","family":"association","weight":2.09},{"source":"security/change-management","target":"platform/gitops","type":"used-with","family":"association","weight":2.09},{"source":"security/change-management","target":"platform/version-control","type":"used-with","family":"association","weight":2.09},{"source":"security/change-management","target":"security/it-operations","type":"used-with","family":"association","weight":2.09},{"source":"security/cia-triad","target":"security/cyber-and-information-security","type":"part-of","family":"structure","weight":3.34},{"source":"security/cis-controls","target":"security/control","type":"requires","family":"dependency","weight":7.19},{"source":"security/cis-controls","target":"security/security-framework","type":"kind-of","family":"structure","weight":3.83},{"source":"security/cis-controls","target":"security/iso-27002","type":"alternative-to","family":"contrast","weight":2.68},{"source":"security/cis-controls","target":"security/d-maerket","type":"used-with","family":"association","weight":2.4},{"source":"security/cis-controls","target":"security/nis2","type":"used-with","family":"association","weight":2.4},{"source":"security/cis-controls","target":"security/risk-profile","type":"used-with","family":"association","weight":2.4},{"source":"security/cis-controls","target":"security/asset-inventory","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/access-management","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/patch-management","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/backup","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/vulnerability-scanning","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/hardening","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/security-awareness","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/incident-response","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/penetration-test","type":"mandates","family":"regulation","weight":5.99},{"source":"security/cis-controls","target":"security/log-management","type":"mandates","family":"regulation","weight":5.99},{"source":"security/communication-plan","target":"security/contingency-plan","type":"part-of","family":"structure","weight":2.89},{"source":"security/communication-plan","target":"security/data-breach","type":"used-with","family":"association","weight":1.81},{"source":"security/communication-plan","target":"security/incident-response","type":"used-with","family":"association","weight":1.81},{"source":"security/communication-plan","target":"security/crisis-management","type":"used-with","family":"association","weight":1.81},{"source":"security/compliance","target":"security/cyber-and-information-security","type":"contrasts-with","family":"contrast","weight":5.3,"primary":true},{"source":"security/compliance","target":"security/governance","type":"used-with","family":"association","weight":2.37},{"source":"security/compliance","target":"security/gap-analysis","type":"used-with","family":"association","weight":2.37},{"source":"security/compliance","target":"security/nis2","type":"used-with","family":"association","weight":2.37},{"source":"security/compliance","target":"security/gdpr","type":"used-with","family":"association","weight":2.37},{"source":"security/compliance","target":"security/iso-27001","type":"used-with","family":"association","weight":2.37},{"source":"security/compliance-and-risk-coordinator","target":"security/compliance","type":"requires","family":"dependency","weight":5.91},{"source":"security/compliance-and-risk-coordinator","target":"security/risk-management","type":"requires","family":"dependency","weight":5.91},{"source":"security/compliance-and-risk-coordinator","target":"security/grey-roles","type":"kind-of","family":"structure","weight":3.15},{"source":"security/compliance-and-risk-coordinator","target":"security/information-security-coordinator","type":"contrasts-with","family":"contrast","weight":2.21},{"source":"security/compliance-and-risk-coordinator","target":"security/gap-analysis","type":"used-with","family":"association","weight":1.97},{"source":"security/compliance-and-risk-coordinator","target":"security/risk-assessment","type":"used-with","family":"association","weight":1.97},{"source":"security/compliance-roadmap","target":"security/gap-analysis","type":"requires","family":"dependency","weight":5.1},{"source":"security/compliance-roadmap","target":"security/nis2","type":"used-with","family":"association","weight":1.7},{"source":"security/compliance-roadmap","target":"security/pdca","type":"used-with","family":"association","weight":1.7},{"source":"security/confidentiality","target":"security/cia-triad","type":"part-of","family":"structure","weight":3.63},{"source":"security/confidentiality","target":"security/integrity","type":"contrasts-with","family":"contrast","weight":5.08,"primary":true},{"source":"security/contingency-plan","target":"security/incident-response","type":"requires","family":"dependency","weight":6.42},{"source":"security/contingency-plan","target":"security/business-impact-analysis","type":"requires","family":"dependency","weight":6.42},{"source":"security/contingency-plan","target":"security/recovery-objectives","type":"requires","family":"dependency","weight":6.42},{"source":"security/contingency-plan","target":"security/management-responsibility","type":"used-with","family":"association","weight":2.14},{"source":"security/control","target":"security/risk","type":"requires","family":"dependency","weight":8.35},{"source":"security/control","target":"security/security-policy","type":"contrasts-with","family":"contrast","weight":3.9},{"source":"security/control","target":"security/vulnerability","type":"mitigates","family":"security","weight":8.9,"primary":true},{"source":"security/control","target":"security/risk","type":"mitigates","family":"security","weight":5.57},{"source":"security/credential-stuffing","target":"cs/credential","type":"requires","family":"dependency","weight":6.1},{"source":"security/credential-stuffing","target":"security/threat","type":"kind-of","family":"structure","weight":3.25},{"source":"security/credential-stuffing","target":"security/session-hijacking","type":"contrasts-with","family":"contrast","weight":2.28},{"source":"security/credential-stuffing","target":"cs/password","type":"exploits","family":"security","weight":6.51,"primary":true},{"source":"security/crisis-management","target":"security/business-continuity-plan","type":"requires","family":"dependency","weight":5.68},{"source":"security/crisis-management","target":"security/incident-response","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"security/crisis-management","target":"security/management-responsibility","type":"used-with","family":"association","weight":1.89},{"source":"security/critical-assets","target":"security/asset-inventory","type":"requires","family":"dependency","weight":5.91},{"source":"security/critical-assets","target":"security/availability","type":"requires","family":"dependency","weight":5.91},{"source":"security/critical-assets","target":"security/data-classification","type":"used-with","family":"association","weight":1.97},{"source":"security/critical-assets","target":"security/risk-management","type":"used-with","family":"association","weight":1.97},{"source":"security/cross-site-request-forgery","target":"cs/web-application","type":"requires","family":"dependency","weight":5.91},{"source":"security/cross-site-request-forgery","target":"cs/cookie","type":"requires","family":"dependency","weight":5.91},{"source":"security/cross-site-request-forgery","target":"security/cross-site-scripting","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"security/cross-site-request-forgery","target":"cs/session","type":"exploits","family":"security","weight":6.3,"primary":true},{"source":"security/cross-site-request-forgery","target":"cs/same-origin-policy","type":"used-with","family":"association","weight":1.18},{"source":"security/cross-site-scripting","target":"cs/web-browser","type":"requires","family":"dependency","weight":6.27},{"source":"security/cross-site-scripting","target":"cs/web-application","type":"requires","family":"dependency","weight":6.27},{"source":"security/cross-site-scripting","target":"security/sql-injection","type":"contrasts-with","family":"contrast","weight":4.68,"primary":true},{"source":"security/cross-site-scripting","target":"security/session-hijacking","type":"causes","family":"security","weight":6.69,"primary":true},{"source":"security/cross-site-scripting","target":"security/owasp-top-10","type":"used-with","family":"association","weight":2.09},{"source":"security/csrf-token","target":"cs/session","type":"requires","family":"dependency","weight":5.42},{"source":"security/csrf-token","target":"cs/web-application","type":"requires","family":"dependency","weight":5.42},{"source":"security/csrf-token","target":"security/cross-site-request-forgery","type":"mitigates","family":"security","weight":5.78,"primary":true},{"source":"security/csrf-token","target":"cs/same-origin-policy","type":"used-with","family":"association","weight":1.81},{"source":"security/cve","target":"security/vulnerability","type":"requires","family":"dependency","weight":6.27},{"source":"security/cve","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"security/cve","target":"security/patch-management","type":"used-with","family":"association","weight":2.09},{"source":"security/cve","target":"security/threat-intelligence","type":"used-with","family":"association","weight":2.09},{"source":"security/cve","target":"platform/sbom","type":"used-with","family":"association","weight":2.09},{"source":"security/cyber-and-information-security","target":"security/governance","type":"used-with","family":"association","weight":2.09},{"source":"security/cyber-and-information-security","target":"security/risk-management","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"security/cyber-resilience-act","target":"security/eu-regulation","type":"kind-of","family":"structure","weight":3.15},{"source":"security/cyber-resilience-act","target":"security/nis2","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"security/cyber-resilience-act","target":"security/security-by-design","type":"mandates","family":"regulation","weight":7.88,"primary":true},{"source":"security/cyber-resilience-act","target":"platform/sbom","type":"mandates","family":"regulation","weight":4.92},{"source":"security/cyber-resilience-act","target":"security/patch-management","type":"mandates","family":"regulation","weight":7.88,"primary":true},{"source":"security/cyber-resilience-act","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":4.92},{"source":"security/d-maerket","target":"security/compliance","type":"requires","family":"dependency","weight":6.27},{"source":"security/d-maerket","target":"security/iso-27001","type":"contrasts-with","family":"contrast","weight":2.93},{"source":"security/d-maerket","target":"security/gap-analysis","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"security/d-maerket","target":"security/nis2","type":"used-with","family":"association","weight":1.67},{"source":"security/d-maerket","target":"security/data-ethics","type":"used-with","family":"association","weight":2.09},{"source":"security/d-maerket","target":"security/self-assessment","type":"used-with","family":"association","weight":2.09},{"source":"security/d-maerket","target":"security/security-maturity","type":"used-with","family":"association","weight":2.09},{"source":"security/data-breach","target":"security/confidentiality","type":"requires","family":"dependency","weight":8.39},{"source":"security/data-breach","target":"security/security-incident","type":"kind-of","family":"structure","weight":4.47},{"source":"security/data-breach","target":"security/gdpr","type":"used-with","family":"association","weight":2.8},{"source":"security/data-breach","target":"security/supervisory-authority","type":"used-with","family":"association","weight":2.8},{"source":"security/data-classification","target":"security/confidentiality","type":"requires","family":"dependency","weight":6.1},{"source":"security/data-classification","target":"cs/encryption","type":"used-with","family":"association","weight":2.03},{"source":"security/data-classification","target":"ai/training-data","type":"used-with","family":"association","weight":2.03},{"source":"security/data-classification","target":"security/personal-data","type":"used-with","family":"association","weight":2.03},{"source":"security/data-controller","target":"security/gdpr","type":"requires","family":"dependency","weight":5.42},{"source":"security/data-controller","target":"security/data-processor","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"security/data-controller","target":"security/data-processing-agreement","type":"used-with","family":"association","weight":2.89,"primary":true},{"source":"security/data-ethics","target":"security/personal-data","type":"requires","family":"dependency","weight":5.42},{"source":"security/data-ethics","target":"security/gdpr","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"security/data-ethics","target":"ai/ai-bias","type":"mitigates","family":"security","weight":2.89},{"source":"security/data-processing-agreement","target":"security/gdpr","type":"requires","family":"dependency","weight":6.42},{"source":"security/data-processing-agreement","target":"security/personal-data","type":"requires","family":"dependency","weight":6.42},{"source":"security/data-processing-agreement","target":"security/data-breach","type":"mitigates","family":"security","weight":2.06},{"source":"security/data-processing-agreement","target":"platform/service-level-agreement","type":"used-with","family":"association","weight":2.14},{"source":"security/data-processing-agreement","target":"security/supplier-management","type":"used-with","family":"association","weight":3.43,"primary":true},{"source":"security/data-processing-agreement","target":"security/data-processor","type":"used-with","family":"association","weight":2.14},{"source":"security/data-processor","target":"security/gdpr","type":"requires","family":"dependency","weight":5.42},{"source":"security/data-processor","target":"security/supplier-management","type":"used-with","family":"association","weight":1.81},{"source":"security/defence-in-depth","target":"security/control","type":"requires","family":"dependency","weight":5.91},{"source":"security/defence-in-depth","target":"security/perimeter-security","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"security/defence-in-depth","target":"security/threat","type":"mitigates","family":"security","weight":3.94},{"source":"security/defence-in-depth","target":"security/zero-trust","type":"used-with","family":"association","weight":1.58},{"source":"security/defence-in-depth","target":"cs/network-segmentation","type":"used-with","family":"association","weight":1.97},{"source":"security/denial-of-service","target":"cs/network","type":"requires","family":"dependency","weight":5.42},{"source":"security/denial-of-service","target":"security/threat","type":"kind-of","family":"structure","weight":2.89},{"source":"security/denial-of-service","target":"security/ransomware","type":"contrasts-with","family":"contrast","weight":1.21},{"source":"security/denial-of-service","target":"security/vulnerability","type":"exploits","family":"security","weight":4.63,"primary":true},{"source":"security/detection-rule","target":"cs/log","type":"requires","family":"dependency","weight":6.1},{"source":"security/detection-rule","target":"security/siem","type":"part-of","family":"structure","weight":3.25},{"source":"security/detection-rule","target":"security/false-positive","type":"causes","family":"security","weight":4.07},{"source":"security/detection-rule","target":"security/mitre-attack","type":"used-with","family":"association","weight":2.03},{"source":"security/detection-rule","target":"security/indicator-of-compromise","type":"used-with","family":"association","weight":2.03},{"source":"security/disaster-recovery-plan","target":"security/backup","type":"requires","family":"dependency","weight":5.91},{"source":"security/disaster-recovery-plan","target":"security/recovery-objectives","type":"requires","family":"dependency","weight":5.91},{"source":"security/disaster-recovery-plan","target":"security/contingency-plan","type":"part-of","family":"structure","weight":3.15},{"source":"security/disaster-recovery-plan","target":"security/ransomware","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"security/dora","target":"security/eu-regulation","type":"kind-of","family":"structure","weight":3.25},{"source":"security/dora","target":"security/nis2","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"security/dora","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":8.13,"primary":true},{"source":"security/dora","target":"security/supplier-management","type":"mandates","family":"regulation","weight":8.13,"primary":true},{"source":"security/dora","target":"security/penetration-test","type":"mandates","family":"regulation","weight":5.08},{"source":"security/dora","target":"security/business-continuity-plan","type":"mandates","family":"regulation","weight":5.08},{"source":"security/dora","target":"security/log-retention","type":"mandates","family":"regulation","weight":5.08},{"source":"security/dpia","target":"security/personal-data","type":"requires","family":"dependency","weight":5.91},{"source":"security/dpia","target":"security/gdpr","type":"requires","family":"dependency","weight":5.91},{"source":"security/dpia","target":"security/risk-assessment","type":"kind-of","family":"structure","weight":3.15},{"source":"security/dpia","target":"security/privacy-by-design","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"security/dpia","target":"security/supervisory-authority","type":"used-with","family":"association","weight":1.97},{"source":"security/edr","target":"security/endpoint","type":"requires","family":"dependency","weight":5.91},{"source":"security/edr","target":"security/control","type":"kind-of","family":"structure","weight":3.15},{"source":"security/edr","target":"security/malware","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"security/edr","target":"security/ransomware","type":"mitigates","family":"security","weight":3.94},{"source":"security/edr","target":"security/siem","type":"used-with","family":"association","weight":1.97},{"source":"security/edr","target":"security/soc","type":"used-with","family":"association","weight":1.97},{"source":"security/endpoint","target":"cs/operating-system","type":"requires","family":"dependency","weight":5.91},{"source":"security/endpoint","target":"cs/network","type":"part-of","family":"structure","weight":3.15},{"source":"security/endpoint","target":"security/patch-management","type":"used-with","family":"association","weight":1.97},{"source":"security/escalation-procedure","target":"security/incident-response","type":"requires","family":"dependency","weight":5.68},{"source":"security/escalation-procedure","target":"security/contingency-plan","type":"part-of","family":"structure","weight":3.03},{"source":"security/escalation-procedure","target":"security/management-responsibility","type":"used-with","family":"association","weight":1.89},{"source":"security/escalation-procedure","target":"security/soc","type":"used-with","family":"association","weight":1.89},{"source":"security/eu-directive","target":"security/compliance","type":"requires","family":"dependency","weight":5.68},{"source":"security/eu-directive","target":"security/eu-regulation","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"security/eu-regulation","target":"security/compliance","type":"requires","family":"dependency","weight":6.1},{"source":"security/eu-regulation","target":"security/supervisory-authority","type":"used-with","family":"association","weight":1.63},{"source":"security/exploit","target":"security/vulnerability","type":"exploits","family":"security","weight":6.06,"primary":true},{"source":"security/exploit","target":"security/security-incident","type":"causes","family":"security","weight":3.79},{"source":"security/exploit","target":"security/malware","type":"used-with","family":"association","weight":1.89},{"source":"security/false-positive","target":"platform/alerting","type":"requires","family":"dependency","weight":6.56},{"source":"security/false-positive","target":"security/security-incident","type":"contrasts-with","family":"contrast","weight":4.9,"primary":true},{"source":"security/false-positive","target":"security/soc","type":"used-with","family":"association","weight":2.19},{"source":"security/gap-analysis","target":"security/compliance","type":"requires","family":"dependency","weight":6.8},{"source":"security/gap-analysis","target":"security/nis2-minimum-requirements","type":"used-with","family":"association","weight":2.27},{"source":"security/gap-analysis","target":"security/pdca","type":"used-with","family":"association","weight":1.81},{"source":"security/gap-analysis","target":"security/nist-csf","type":"used-with","family":"association","weight":2.27},{"source":"security/gap-analysis","target":"security/iso-27001","type":"used-with","family":"association","weight":2.27},{"source":"security/gap-analysis","target":"security/self-assessment","type":"used-with","family":"association","weight":2.27},{"source":"security/gdpr","target":"security/confidentiality","type":"requires","family":"dependency","weight":7.49},{"source":"security/gdpr","target":"security/personal-data","type":"requires","family":"dependency","weight":7.49},{"source":"security/gdpr","target":"security/eu-regulation","type":"kind-of","family":"structure","weight":4},{"source":"security/gdpr","target":"security/nis2","type":"contrasts-with","family":"contrast","weight":5.59,"primary":true},{"source":"security/gdpr","target":"ai/training-data","type":"used-with","family":"association","weight":2.5},{"source":"security/gdpr","target":"ai/sensitive-information-disclosure","type":"used-with","family":"association","weight":2},{"source":"security/gdpr","target":"security/privacy-by-design","type":"mandates","family":"regulation","weight":9.99,"primary":true},{"source":"security/gdpr","target":"security/data-processing-agreement","type":"mandates","family":"regulation","weight":9.99,"primary":true},{"source":"security/gdpr","target":"security/incident-response","type":"mandates","family":"regulation","weight":6.24},{"source":"security/gdpr","target":"security/supervisory-authority","type":"mandates","family":"regulation","weight":6.24},{"source":"security/gdpr","target":"security/dpia","type":"mandates","family":"regulation","weight":9.99,"primary":true},{"source":"security/governance","target":"security/risk-management","type":"used-with","family":"association","weight":3.74,"primary":true},{"source":"security/grc","target":"security/governance","type":"requires","family":"dependency","weight":5.68},{"source":"security/grc","target":"security/risk-management","type":"requires","family":"dependency","weight":5.68},{"source":"security/grc","target":"security/compliance","type":"requires","family":"dependency","weight":5.68},{"source":"security/grc","target":"security/isms","type":"used-with","family":"association","weight":1.89},{"source":"security/grey-roles","target":"security/grc","type":"requires","family":"dependency","weight":5.68},{"source":"security/grey-roles","target":"security/it-operations","type":"used-with","family":"association","weight":1.89},{"source":"security/hardening","target":"security/control","type":"kind-of","family":"structure","weight":3.43},{"source":"security/hardening","target":"security/vulnerability","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"security/hardening","target":"platform/cloud-misconfiguration","type":"mitigates","family":"security","weight":4.28},{"source":"security/hardening","target":"platform/container-escape","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"security/hardening","target":"cs/secure-boot","type":"used-with","family":"association","weight":2.14},{"source":"security/hardening","target":"security/patch-management","type":"used-with","family":"association","weight":2.14},{"source":"security/hardening","target":"platform/infrastructure-as-code","type":"used-with","family":"association","weight":2.14},{"source":"security/heat-map","target":"security/risk","type":"requires","family":"dependency","weight":5.91},{"source":"security/heat-map","target":"security/risk-management","type":"part-of","family":"structure","weight":3.15},{"source":"security/heat-map","target":"security/risk-appetite","type":"used-with","family":"association","weight":1.97},{"source":"security/heat-map","target":"security/risk-treatment","type":"used-with","family":"association","weight":1.97},{"source":"security/heat-map","target":"security/risk-assessment","type":"used-with","family":"association","weight":1.97},{"source":"security/heat-map","target":"security/qualitative-risk-analysis","type":"used-with","family":"association","weight":1.97},{"source":"security/human-error","target":"security/human-factor","type":"requires","family":"dependency","weight":5.91},{"source":"security/human-error","target":"security/insider-threat","type":"kind-of","family":"structure","weight":3.15},{"source":"security/human-error","target":"security/security-incident","type":"causes","family":"security","weight":3.94},{"source":"security/human-error","target":"security/data-breach","type":"causes","family":"security","weight":3.94},{"source":"security/human-factor","target":"security/human-firewall","type":"used-with","family":"association","weight":2.03},{"source":"security/human-factor","target":"security/nudging","type":"used-with","family":"association","weight":2.03},{"source":"security/human-factor","target":"security/security-culture","type":"used-with","family":"association","weight":2.03},{"source":"security/human-factor","target":"security/vulnerability","type":"used-with","family":"association","weight":2.03},{"source":"security/human-firewall","target":"security/security-awareness","type":"requires","family":"dependency","weight":5.91},{"source":"security/human-firewall","target":"security/security-culture","type":"kind-of","family":"structure","weight":3.15},{"source":"security/human-firewall","target":"security/social-engineering","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"security/human-firewall","target":"security/phishing","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"security/impact","target":"security/asset","type":"requires","family":"dependency","weight":6.56},{"source":"security/impact","target":"security/risk","type":"part-of","family":"structure","weight":5.6,"primary":true},{"source":"security/impact","target":"security/likelihood","type":"used-with","family":"association","weight":2.19},{"source":"security/incident-reporting","target":"security/security-incident","type":"requires","family":"dependency","weight":6.91},{"source":"security/incident-reporting","target":"security/incident-response","type":"part-of","family":"structure","weight":5.89,"primary":true},{"source":"security/incident-reporting","target":"security/lessons-learned","type":"contrasts-with","family":"contrast","weight":1.55},{"source":"security/incident-reporting","target":"security/nis2-entities","type":"used-with","family":"association","weight":2.3},{"source":"security/incident-response","target":"security/threat","type":"requires","family":"dependency","weight":7.62},{"source":"security/incident-response","target":"security/data-breach","type":"mitigates","family":"security","weight":6.51,"primary":true},{"source":"security/incident-response","target":"security/ransomware","type":"mitigates","family":"security","weight":4.07},{"source":"security/incident-response","target":"security/security-incident","type":"mitigates","family":"security","weight":5.08},{"source":"security/incident-response","target":"platform/runbook","type":"used-with","family":"association","weight":2.54},{"source":"security/incident-response","target":"security/siem","type":"used-with","family":"association","weight":2.54},{"source":"security/incident-response","target":"platform/observability","type":"used-with","family":"association","weight":2.54},{"source":"security/incident-response","target":"security/indicator-of-compromise","type":"used-with","family":"association","weight":2.54},{"source":"security/indicator-of-compromise","target":"security/security-incident","type":"requires","family":"dependency","weight":6.1},{"source":"security/indicator-of-compromise","target":"security/threat-intelligence","type":"part-of","family":"structure","weight":3.25},{"source":"security/indicator-of-compromise","target":"security/mitre-attack","type":"contrasts-with","family":"contrast","weight":2.85},{"source":"security/indicator-of-compromise","target":"security/siem","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"security/information-security-coordinator","target":"security/isms","type":"requires","family":"dependency","weight":5.68},{"source":"security/information-security-coordinator","target":"security/grey-roles","type":"kind-of","family":"structure","weight":3.03},{"source":"security/information-security-coordinator","target":"security/risk-management","type":"used-with","family":"association","weight":1.89},{"source":"security/information-security-coordinator","target":"security/security-policy","type":"used-with","family":"association","weight":1.89},{"source":"security/input-validation","target":"security/control","type":"kind-of","family":"structure","weight":3.15},{"source":"security/input-validation","target":"security/sql-injection","type":"mitigates","family":"security","weight":3.94},{"source":"security/input-validation","target":"security/cross-site-scripting","type":"mitigates","family":"security","weight":2.36},{"source":"security/input-validation","target":"security/web-application-firewall","type":"used-with","family":"association","weight":1.97},{"source":"security/input-validation","target":"ai/structured-output","type":"used-with","family":"association","weight":1.58},{"source":"security/insider-threat","target":"security/threat-actor","type":"requires","family":"dependency","weight":6.27},{"source":"security/insider-threat","target":"security/threat","type":"kind-of","family":"structure","weight":3.34},{"source":"security/insider-threat","target":"cs/permission","type":"exploits","family":"security","weight":6.69,"primary":true},{"source":"security/insider-threat","target":"security/data-breach","type":"causes","family":"security","weight":4.18},{"source":"security/integrity","target":"security/cia-triad","type":"part-of","family":"structure","weight":3.34},{"source":"security/integrity","target":"security/non-repudiation","type":"contrasts-with","family":"contrast","weight":2.93},{"source":"security/intrusion-detection-system","target":"cs/network","type":"requires","family":"dependency","weight":5.91},{"source":"security/intrusion-detection-system","target":"cs/packet","type":"requires","family":"dependency","weight":5.91},{"source":"security/intrusion-detection-system","target":"security/control","type":"kind-of","family":"structure","weight":3.15},{"source":"security/intrusion-detection-system","target":"security/intrusion-prevention-system","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"security/intrusion-detection-system","target":"security/siem","type":"used-with","family":"association","weight":1.97},{"source":"security/intrusion-detection-system","target":"security/security-monitoring","type":"used-with","family":"association","weight":1.97},{"source":"security/intrusion-prevention-system","target":"cs/packet","type":"requires","family":"dependency","weight":5.91},{"source":"security/intrusion-prevention-system","target":"cs/firewall","type":"requires","family":"dependency","weight":5.91},{"source":"security/intrusion-prevention-system","target":"security/control","type":"kind-of","family":"structure","weight":3.15},{"source":"security/intrusion-prevention-system","target":"security/vulnerability","type":"mitigates","family":"security","weight":1.89},{"source":"security/isms","target":"security/risk-management","type":"requires","family":"dependency","weight":6.42},{"source":"security/isms","target":"security/security-policy","type":"requires","family":"dependency","weight":6.42},{"source":"security/isms","target":"security/pdca","type":"used-with","family":"association","weight":3.43,"primary":true},{"source":"security/isms","target":"security/statement-of-applicability","type":"used-with","family":"association","weight":2.14},{"source":"security/iso-27000-series","target":"security/cyber-and-information-security","type":"requires","family":"dependency","weight":5.68},{"source":"security/iso-27000-series","target":"security/security-framework","type":"kind-of","family":"structure","weight":3.03},{"source":"security/iso-27000-series","target":"security/nist-csf","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"security/iso-27001","target":"security/security-framework","type":"kind-of","family":"structure","weight":3.92},{"source":"security/iso-27001","target":"security/iso-27000-series","type":"part-of","family":"structure","weight":3.92},{"source":"security/iso-27001","target":"security/nis2","type":"contrasts-with","family":"contrast","weight":3.43},{"source":"security/iso-27001","target":"security/nist-csf","type":"contrasts-with","family":"contrast","weight":3.43},{"source":"security/iso-27001","target":"security/iso-27002","type":"used-with","family":"association","weight":3.92,"primary":true},{"source":"security/iso-27001","target":"security/risk-management","type":"mandates","family":"regulation","weight":9.8,"primary":true},{"source":"security/iso-27001","target":"security/pdca","type":"mandates","family":"regulation","weight":9.8,"primary":true},{"source":"security/iso-27001","target":"security/audit","type":"mandates","family":"regulation","weight":6.12},{"source":"security/iso-27001","target":"security/management-responsibility","type":"mandates","family":"regulation","weight":6.12},{"source":"security/iso-27001","target":"security/security-policy","type":"mandates","family":"regulation","weight":6.12},{"source":"security/iso-27001","target":"security/isms","type":"mandates","family":"regulation","weight":6.12},{"source":"security/iso-27001","target":"security/statement-of-applicability","type":"mandates","family":"regulation","weight":6.12},{"source":"security/iso-27002","target":"security/control","type":"requires","family":"dependency","weight":6.42},{"source":"security/iso-27002","target":"security/security-framework","type":"kind-of","family":"structure","weight":3.43},{"source":"security/iso-27002","target":"security/iso-27000-series","type":"part-of","family":"structure","weight":3.43},{"source":"security/iso-27002","target":"security/risk-treatment","type":"used-with","family":"association","weight":2.14},{"source":"security/iso-27002","target":"security/security-policy","type":"used-with","family":"association","weight":1.03},{"source":"security/iso-27002","target":"security/statement-of-applicability","type":"used-with","family":"association","weight":2.14},{"source":"security/it-operations","target":"security/asset","type":"requires","family":"dependency","weight":5.91},{"source":"security/it-operations","target":"security/soc","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"security/it-operations","target":"platform/monitoring","type":"used-with","family":"association","weight":1.97},{"source":"security/it-operations","target":"security/patch-management","type":"used-with","family":"association","weight":1.97},{"source":"security/lateral-movement","target":"cs/network","type":"requires","family":"dependency","weight":6.42},{"source":"security/lateral-movement","target":"cs/credential","type":"requires","family":"dependency","weight":6.42},{"source":"security/lateral-movement","target":"security/vulnerability","type":"exploits","family":"security","weight":5.48,"primary":true},{"source":"security/lateral-movement","target":"security/data-breach","type":"causes","family":"security","weight":3.43},{"source":"security/lateral-movement","target":"security/mitre-attack","type":"used-with","family":"association","weight":1.71},{"source":"security/legacy-system","target":"security/vulnerability","type":"causes","family":"security","weight":5,"primary":true},{"source":"security/legacy-system","target":"cs/network-segmentation","type":"used-with","family":"association","weight":1.56},{"source":"security/lessons-learned","target":"security/incident-response","type":"part-of","family":"structure","weight":3.03},{"source":"security/lessons-learned","target":"security/pdca","type":"implements","family":"structure","weight":3.03},{"source":"security/lessons-learned","target":"security/security-culture","type":"used-with","family":"association","weight":1.89},{"source":"security/likelihood","target":"security/threat","type":"requires","family":"dependency","weight":6.27},{"source":"security/likelihood","target":"security/vulnerability","type":"requires","family":"dependency","weight":6.27},{"source":"security/likelihood","target":"security/risk","type":"part-of","family":"structure","weight":5.35,"primary":true},{"source":"security/log-management","target":"cs/log","type":"requires","family":"dependency","weight":6.1},{"source":"security/log-management","target":"security/siem","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"security/log-management","target":"platform/observability","type":"used-with","family":"association","weight":2.03},{"source":"security/log-management","target":"security/security-monitoring","type":"used-with","family":"association","weight":2.03},{"source":"security/log-retention","target":"cs/audit","type":"requires","family":"dependency","weight":5.91},{"source":"security/log-retention","target":"security/log-management","type":"part-of","family":"structure","weight":3.15},{"source":"security/log-retention","target":"security/personal-data","type":"used-with","family":"association","weight":3.15,"primary":true},{"source":"security/log-retention","target":"security/security-incident","type":"used-with","family":"association","weight":1.97},{"source":"security/malware","target":"security/endpoint","type":"requires","family":"dependency","weight":6.42},{"source":"security/malware","target":"security/threat","type":"kind-of","family":"structure","weight":3.43},{"source":"security/malware","target":"security/vulnerability","type":"exploits","family":"security","weight":6.85,"primary":true},{"source":"security/malware","target":"security/data-breach","type":"causes","family":"security","weight":4.28},{"source":"security/man-in-the-middle","target":"cs/network","type":"requires","family":"dependency","weight":5.91},{"source":"security/man-in-the-middle","target":"cs/protocol","type":"requires","family":"dependency","weight":5.91},{"source":"security/man-in-the-middle","target":"security/threat","type":"kind-of","family":"structure","weight":3.15},{"source":"security/man-in-the-middle","target":"security/session-hijacking","type":"causes","family":"security","weight":3.94},{"source":"security/management-responsibility","target":"security/risk-management","type":"requires","family":"dependency","weight":6.42},{"source":"security/management-responsibility","target":"security/governance","type":"part-of","family":"structure","weight":3.43},{"source":"security/management-responsibility","target":"security/security-policy","type":"used-with","family":"association","weight":2.14},{"source":"security/mfa","target":"cs/credential","type":"requires","family":"dependency","weight":7.27},{"source":"security/mfa","target":"security/authentication-factor","type":"requires","family":"dependency","weight":7.27},{"source":"security/mfa","target":"security/control","type":"kind-of","family":"structure","weight":3.88},{"source":"security/mfa","target":"cs/authentication","type":"implements","family":"structure","weight":3.88},{"source":"security/mfa","target":"security/phishing","type":"mitigates","family":"security","weight":7.75,"primary":true},{"source":"security/mfa","target":"security/credential-stuffing","type":"mitigates","family":"security","weight":4.85},{"source":"security/mfa","target":"cs/single-sign-on","type":"used-with","family":"association","weight":2.42},{"source":"security/mfa","target":"security/zero-trust","type":"used-with","family":"association","weight":2.42},{"source":"security/mfa","target":"cs/privileged-account","type":"used-with","family":"association","weight":2.42},{"source":"security/mfa","target":"cs/passkey","type":"used-with","family":"association","weight":2.42},{"source":"security/mfa","target":"cs/privileged-access-management","type":"used-with","family":"association","weight":2.42},{"source":"security/mfa","target":"security/one-time-password","type":"used-with","family":"association","weight":2.42},{"source":"security/mitre-attack","target":"security/threat-actor","type":"requires","family":"dependency","weight":6.1},{"source":"security/mitre-attack","target":"security/threat-hunting","type":"used-with","family":"association","weight":2.03},{"source":"security/mitre-attack","target":"security/threat-intelligence","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"security/mitre-attack","target":"security/threat-modelling","type":"used-with","family":"association","weight":2.03},{"source":"security/nis1","target":"security/cyber-and-information-security","type":"requires","family":"dependency","weight":5.68},{"source":"security/nis1","target":"security/eu-directive","type":"kind-of","family":"structure","weight":3.03},{"source":"security/nis1","target":"security/risk-management","type":"mandates","family":"regulation","weight":7.58,"primary":true},{"source":"security/nis1","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":7.58,"primary":true},{"source":"security/nis2","target":"security/cyber-and-information-security","type":"requires","family":"dependency","weight":7.68},{"source":"security/nis2","target":"security/eu-directive","type":"kind-of","family":"structure","weight":4.1},{"source":"security/nis2","target":"security/nis1","type":"supersedes","family":"lineage","weight":4.92,"primary":true},{"source":"security/nis2","target":"security/risk-management","type":"mandates","family":"regulation","weight":10.25,"primary":true},{"source":"security/nis2","target":"security/incident-response","type":"mandates","family":"regulation","weight":10.25,"primary":true},{"source":"security/nis2","target":"security/management-responsibility","type":"mandates","family":"regulation","weight":10.25,"primary":true},{"source":"security/nis2","target":"security/supplier-management","type":"mandates","family":"regulation","weight":6.4},{"source":"security/nis2","target":"security/security-awareness","type":"mandates","family":"regulation","weight":6.4},{"source":"security/nis2","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":10.25,"primary":true},{"source":"security/nis2","target":"platform/software-supply-chain","type":"mandates","family":"regulation","weight":6.4},{"source":"security/nis2","target":"security/log-retention","type":"mandates","family":"regulation","weight":5.12},{"source":"security/nis2-entities","target":"security/nis2","type":"part-of","family":"structure","weight":2.72},{"source":"security/nis2-entities","target":"security/nis2-minimum-requirements","type":"used-with","family":"association","weight":2.72,"primary":true},{"source":"security/nis2-loven","target":"security/nis2","type":"implements","family":"structure","weight":4.63,"primary":true},{"source":"security/nis2-loven","target":"security/nis2-minimum-requirements","type":"mandates","family":"regulation","weight":7.23,"primary":true},{"source":"security/nis2-loven","target":"security/management-responsibility","type":"mandates","family":"regulation","weight":7.23,"primary":true},{"source":"security/nis2-loven","target":"security/incident-reporting","type":"mandates","family":"regulation","weight":7.23,"primary":true},{"source":"security/nis2-minimum-requirements","target":"security/nis2","type":"part-of","family":"structure","weight":3.68},{"source":"security/nis2-minimum-requirements","target":"security/business-continuity-plan","type":"mandates","family":"regulation","weight":9.21,"primary":true},{"source":"security/nis2-minimum-requirements","target":"security/backup","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nis2-minimum-requirements","target":"security/mfa","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nis2-minimum-requirements","target":"cs/encryption","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nis2-minimum-requirements","target":"security/asset-inventory","type":"mandates","family":"regulation","weight":2.76},{"source":"security/nis2-minimum-requirements","target":"security/risk-management","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nis2-minimum-requirements","target":"security/incident-response","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nis2-minimum-requirements","target":"security/security-awareness","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nis2-minimum-requirements","target":"security/supplier-management","type":"mandates","family":"regulation","weight":5.76},{"source":"security/nist-csf","target":"security/risk-management","type":"requires","family":"dependency","weight":5.91},{"source":"security/nist-csf","target":"security/security-framework","type":"kind-of","family":"structure","weight":3.15},{"source":"security/nist-csf","target":"security/supplier-management","type":"used-with","family":"association","weight":1.97},{"source":"security/non-repudiation","target":"cs/authentication","type":"requires","family":"dependency","weight":6.27},{"source":"security/non-repudiation","target":"security/integrity","type":"requires","family":"dependency","weight":6.27},{"source":"security/non-repudiation","target":"cs/public-key-cryptography","type":"requires","family":"dependency","weight":6.27},{"source":"security/nudging","target":"security/control","type":"implements","family":"structure","weight":3.03},{"source":"security/nudging","target":"security/security-policy","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"security/nudging","target":"security/security-awareness","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"security/one-time-password","target":"cs/authentication","type":"requires","family":"dependency","weight":6.1},{"source":"security/one-time-password","target":"security/authentication-factor","type":"kind-of","family":"structure","weight":3.25},{"source":"security/one-time-password","target":"cs/passkey","type":"contrasts-with","family":"contrast","weight":2.85},{"source":"security/one-time-password","target":"security/credential-stuffing","type":"mitigates","family":"security","weight":4.07},{"source":"security/one-time-password","target":"cs/password","type":"used-with","family":"association","weight":2.03},{"source":"security/one-time-password","target":"security/two-factor-authentication","type":"used-with","family":"association","weight":2.03},{"source":"security/organisational-control","target":"security/governance","type":"requires","family":"dependency","weight":5.91},{"source":"security/organisational-control","target":"security/control","type":"kind-of","family":"structure","weight":3.15},{"source":"security/organisational-control","target":"security/people-control","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"security/organisational-control","target":"security/physical-security","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"security/organisational-control","target":"security/technical-control","type":"contrasts-with","family":"contrast","weight":2.76},{"source":"security/organisational-control","target":"security/security-policy","type":"used-with","family":"association","weight":1.97},{"source":"security/owasp-top-10","target":"security/vulnerability","type":"requires","family":"dependency","weight":5.91},{"source":"security/owasp-top-10","target":"cs/web-application","type":"requires","family":"dependency","weight":5.91},{"source":"security/owasp-top-10","target":"security/sql-injection","type":"used-with","family":"association","weight":1.97},{"source":"security/owasp-top-10","target":"security/penetration-test","type":"used-with","family":"association","weight":1.97},{"source":"security/owasp-top-10","target":"security/secure-development-lifecycle","type":"used-with","family":"association","weight":1.58},{"source":"security/patch-management","target":"cs/patch","type":"requires","family":"dependency","weight":7.01},{"source":"security/patch-management","target":"security/cve","type":"requires","family":"dependency","weight":7.01},{"source":"security/patch-management","target":"security/control","type":"kind-of","family":"structure","weight":3.74},{"source":"security/patch-management","target":"security/vulnerability","type":"mitigates","family":"security","weight":7.47,"primary":true},{"source":"security/patch-management","target":"security/ransomware","type":"mitigates","family":"security","weight":3.74},{"source":"security/patch-management","target":"security/exploit","type":"mitigates","family":"security","weight":4.67},{"source":"security/patch-management","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":2.34},{"source":"security/pdca","target":"security/risk-management","type":"used-with","family":"association","weight":2.14},{"source":"security/pdca","target":"security/security-policy","type":"used-with","family":"association","weight":1.03},{"source":"security/penetration-test","target":"security/vulnerability","type":"requires","family":"dependency","weight":6.1},{"source":"security/penetration-test","target":"security/vulnerability-scanning","type":"contrasts-with","family":"contrast","weight":4.55,"primary":true},{"source":"security/penetration-test","target":"security/vulnerability-assessment","type":"contrasts-with","family":"contrast","weight":2.85},{"source":"security/people-control","target":"security/human-factor","type":"requires","family":"dependency","weight":6.27},{"source":"security/people-control","target":"security/control","type":"kind-of","family":"structure","weight":3.34},{"source":"security/people-control","target":"security/physical-security","type":"contrasts-with","family":"contrast","weight":2.93},{"source":"security/people-control","target":"security/technical-control","type":"contrasts-with","family":"contrast","weight":2.93},{"source":"security/people-control","target":"security/human-error","type":"mitigates","family":"security","weight":4.18},{"source":"security/people-control","target":"security/insider-threat","type":"mitigates","family":"security","weight":4.18},{"source":"security/perimeter-security","target":"cs/network","type":"requires","family":"dependency","weight":5.68},{"source":"security/perimeter-security","target":"cs/firewall","type":"requires","family":"dependency","weight":5.68},{"source":"security/perimeter-security","target":"security/zero-trust","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"security/personal-data","target":"security/asset","type":"kind-of","family":"structure","weight":1.71},{"source":"security/personal-data","target":"security/privacy-by-design","type":"used-with","family":"association","weight":3.57,"primary":true},{"source":"security/personal-data","target":"ai/training-data","type":"used-with","family":"association","weight":2.23},{"source":"security/phishing","target":"cs/credential","type":"requires","family":"dependency","weight":7.19},{"source":"security/phishing","target":"security/social-engineering","type":"kind-of","family":"structure","weight":3.83},{"source":"security/phishing","target":"security/pretexting","type":"contrasts-with","family":"contrast","weight":3.35},{"source":"security/phishing","target":"security/ransomware","type":"causes","family":"security","weight":3.83},{"source":"security/phishing","target":"security/data-breach","type":"causes","family":"security","weight":4.79},{"source":"security/phishing-simulation","target":"security/phishing","type":"requires","family":"dependency","weight":6.1},{"source":"security/phishing-simulation","target":"security/control","type":"kind-of","family":"structure","weight":3.25},{"source":"security/phishing-simulation","target":"security/awareness-programme","type":"part-of","family":"structure","weight":3.25},{"source":"security/phishing-simulation","target":"security/phishing","type":"mitigates","family":"security","weight":5.21,"primary":true},{"source":"security/phishing-simulation","target":"security/smishing","type":"mitigates","family":"security","weight":4.07},{"source":"security/phishing-simulation","target":"security/security-awareness","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"security/physical-security","target":"security/asset","type":"requires","family":"dependency","weight":6.27},{"source":"security/physical-security","target":"security/control","type":"kind-of","family":"structure","weight":3.34},{"source":"security/physical-security","target":"security/defence-in-depth","type":"part-of","family":"structure","weight":3.34},{"source":"security/physical-security","target":"security/data-breach","type":"mitigates","family":"security","weight":4.18},{"source":"security/physical-security","target":"security/insider-threat","type":"mitigates","family":"security","weight":2.01},{"source":"security/pretexting","target":"security/social-engineering","type":"kind-of","family":"structure","weight":3.15},{"source":"security/pretexting","target":"security/spear-phishing","type":"contrasts-with","family":"contrast","weight":2.21},{"source":"security/pretexting","target":"security/vishing","type":"used-with","family":"association","weight":1.97},{"source":"security/privacy-by-design","target":"security/confidentiality","type":"requires","family":"dependency","weight":5.91},{"source":"security/privacy-by-design","target":"security/security-by-design","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"security/privacy-by-design","target":"security/data-breach","type":"mitigates","family":"security","weight":3.15},{"source":"security/privilege-escalation","target":"cs/permission","type":"requires","family":"dependency","weight":6.42},{"source":"security/privilege-escalation","target":"cs/privileged-account","type":"requires","family":"dependency","weight":6.42},{"source":"security/privilege-escalation","target":"security/threat","type":"kind-of","family":"structure","weight":3.43},{"source":"security/privilege-escalation","target":"security/vulnerability","type":"exploits","family":"security","weight":6.85,"primary":true},{"source":"security/privilege-escalation","target":"security/lateral-movement","type":"causes","family":"security","weight":3.43},{"source":"security/qualitative-risk-analysis","target":"security/risk","type":"requires","family":"dependency","weight":5.91},{"source":"security/qualitative-risk-analysis","target":"security/likelihood","type":"requires","family":"dependency","weight":5.91},{"source":"security/qualitative-risk-analysis","target":"security/impact","type":"requires","family":"dependency","weight":5.91},{"source":"security/qualitative-risk-analysis","target":"security/risk-assessment","type":"kind-of","family":"structure","weight":3.15},{"source":"security/qualitative-risk-analysis","target":"security/quantitative-risk-analysis","type":"contrasts-with","family":"contrast","weight":4.41,"primary":true},{"source":"security/quantitative-risk-analysis","target":"security/risk","type":"requires","family":"dependency","weight":5.91},{"source":"security/quantitative-risk-analysis","target":"security/likelihood","type":"requires","family":"dependency","weight":5.91},{"source":"security/quantitative-risk-analysis","target":"security/impact","type":"requires","family":"dependency","weight":5.91},{"source":"security/quantitative-risk-analysis","target":"security/risk-assessment","type":"kind-of","family":"structure","weight":3.15},{"source":"security/quantitative-risk-analysis","target":"security/risk-transfer","type":"used-with","family":"association","weight":1.97},{"source":"security/ransomware","target":"cs/encryption","type":"requires","family":"dependency","weight":7.1},{"source":"security/ransomware","target":"security/availability","type":"requires","family":"dependency","weight":7.1},{"source":"security/ransomware","target":"security/threat","type":"kind-of","family":"structure","weight":3.79},{"source":"security/ransomware","target":"security/malware","type":"kind-of","family":"structure","weight":3.79},{"source":"security/ransomware","target":"security/vulnerability","type":"exploits","family":"security","weight":4.73},{"source":"security/ransomware","target":"security/data-breach","type":"causes","family":"security","weight":3.79},{"source":"security/recovery-objectives","target":"security/business-impact-analysis","type":"requires","family":"dependency","weight":6.1},{"source":"security/recovery-objectives","target":"security/availability","type":"requires","family":"dependency","weight":6.1},{"source":"security/recovery-objectives","target":"security/business-continuity-plan","type":"part-of","family":"structure","weight":3.25},{"source":"security/recovery-objectives","target":"platform/service-level-objective","type":"contrasts-with","family":"contrast","weight":2.85},{"source":"security/residual-risk","target":"security/control","type":"requires","family":"dependency","weight":5.68},{"source":"security/residual-risk","target":"security/risk","type":"kind-of","family":"structure","weight":3.03},{"source":"security/residual-risk","target":"security/risk-appetite","type":"contrasts-with","family":"contrast","weight":4.24,"primary":true},{"source":"security/risk","target":"security/threat","type":"requires","family":"dependency","weight":7.74},{"source":"security/risk","target":"security/vulnerability","type":"requires","family":"dependency","weight":7.74},{"source":"security/risk","target":"security/likelihood","type":"requires","family":"dependency","weight":7.74},{"source":"security/risk","target":"security/impact","type":"requires","family":"dependency","weight":7.74},{"source":"security/risk","target":"security/threat","type":"contrasts-with","family":"contrast","weight":5.78,"primary":true},{"source":"security/risk-acceptance","target":"security/risk-appetite","type":"requires","family":"dependency","weight":5.42},{"source":"security/risk-acceptance","target":"security/residual-risk","type":"requires","family":"dependency","weight":5.42},{"source":"security/risk-acceptance","target":"security/risk-treatment","type":"kind-of","family":"structure","weight":2.89},{"source":"security/risk-acceptance","target":"security/risk-avoidance","type":"contrasts-with","family":"contrast","weight":4.05,"primary":true},{"source":"security/risk-appetite","target":"security/risk","type":"requires","family":"dependency","weight":6.1},{"source":"security/risk-appetite","target":"security/governance","type":"requires","family":"dependency","weight":6.1},{"source":"security/risk-appetite","target":"security/risk-management","type":"part-of","family":"structure","weight":3.25},{"source":"security/risk-appetite","target":"security/risk-profile","type":"contrasts-with","family":"contrast","weight":2.85},{"source":"security/risk-assessment","target":"security/risk","type":"requires","family":"dependency","weight":7.49},{"source":"security/risk-assessment","target":"security/likelihood","type":"requires","family":"dependency","weight":7.49},{"source":"security/risk-assessment","target":"security/impact","type":"requires","family":"dependency","weight":7.49},{"source":"security/risk-assessment","target":"security/asset","type":"requires","family":"dependency","weight":7.49},{"source":"security/risk-assessment","target":"security/risk-management","type":"part-of","family":"structure","weight":4},{"source":"security/risk-assessment","target":"security/vulnerability-assessment","type":"used-with","family":"association","weight":2.5},{"source":"security/risk-assessment","target":"security/threat-landscape","type":"used-with","family":"association","weight":2.5},{"source":"security/risk-assessment","target":"security/threat-modelling","type":"used-with","family":"association","weight":2.5},{"source":"security/risk-avoidance","target":"security/risk-assessment","type":"requires","family":"dependency","weight":5.68},{"source":"security/risk-avoidance","target":"security/risk-treatment","type":"kind-of","family":"structure","weight":3.03},{"source":"security/risk-avoidance","target":"security/risk-mitigation","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"security/risk-avoidance","target":"security/shadow-it","type":"mitigates","family":"security","weight":3.03},{"source":"security/risk-identification","target":"security/risk","type":"requires","family":"dependency","weight":5.91},{"source":"security/risk-identification","target":"security/asset","type":"requires","family":"dependency","weight":5.91},{"source":"security/risk-identification","target":"security/threat","type":"requires","family":"dependency","weight":5.91},{"source":"security/risk-identification","target":"security/vulnerability","type":"requires","family":"dependency","weight":5.91},{"source":"security/risk-identification","target":"security/risk-assessment","type":"part-of","family":"structure","weight":3.15},{"source":"security/risk-identification","target":"security/threat-landscape","type":"used-with","family":"association","weight":1.97},{"source":"security/risk-management","target":"security/risk","type":"requires","family":"dependency","weight":8.01},{"source":"security/risk-management","target":"security/threat","type":"requires","family":"dependency","weight":8.01},{"source":"security/risk-management","target":"security/vulnerability","type":"requires","family":"dependency","weight":8.01},{"source":"security/risk-management","target":"security/governance","type":"part-of","family":"structure","weight":4.27},{"source":"security/risk-management","target":"security/threat-intelligence","type":"used-with","family":"association","weight":2.67},{"source":"security/risk-mitigation","target":"security/control","type":"requires","family":"dependency","weight":5.68},{"source":"security/risk-mitigation","target":"security/risk-treatment","type":"kind-of","family":"structure","weight":3.03},{"source":"security/risk-mitigation","target":"security/risk-transfer","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"security/risk-mitigation","target":"security/statement-of-applicability","type":"used-with","family":"association","weight":1.89},{"source":"security/risk-monitoring","target":"security/risk-assessment","type":"requires","family":"dependency","weight":5.42},{"source":"security/risk-monitoring","target":"security/risk-management","type":"part-of","family":"structure","weight":2.89},{"source":"security/risk-monitoring","target":"security/security-monitoring","type":"used-with","family":"association","weight":1.81},{"source":"security/risk-monitoring","target":"security/threat-intelligence","type":"used-with","family":"association","weight":1.81},{"source":"security/risk-profile","target":"security/risk-assessment","type":"requires","family":"dependency","weight":5.42},{"source":"security/risk-profile","target":"security/threat-landscape","type":"used-with","family":"association","weight":1.81},{"source":"security/risk-transfer","target":"security/risk","type":"requires","family":"dependency","weight":5.91},{"source":"security/risk-transfer","target":"security/impact","type":"requires","family":"dependency","weight":5.91},{"source":"security/risk-transfer","target":"security/risk-treatment","type":"kind-of","family":"structure","weight":3.15},{"source":"security/risk-transfer","target":"security/supplier-management","type":"used-with","family":"association","weight":1.97},{"source":"security/risk-treatment","target":"security/risk","type":"requires","family":"dependency","weight":6.8},{"source":"security/risk-treatment","target":"security/control","type":"requires","family":"dependency","weight":6.8},{"source":"security/risk-treatment","target":"security/risk-assessment","type":"requires","family":"dependency","weight":6.8},{"source":"security/risk-treatment","target":"security/risk-management","type":"part-of","family":"structure","weight":3.63},{"source":"security/risk-treatment","target":"security/residual-risk","type":"causes","family":"security","weight":4.53},{"source":"security/secure-development-lifecycle","target":"security/security-by-design","type":"implements","family":"structure","weight":3.15},{"source":"security/secure-development-lifecycle","target":"security/vulnerability","type":"mitigates","family":"security","weight":6.3,"primary":true},{"source":"security/secure-development-lifecycle","target":"security/vulnerability-scanning","type":"used-with","family":"association","weight":1.58},{"source":"security/security-awareness","target":"security/threat","type":"requires","family":"dependency","weight":7.49},{"source":"security/security-awareness","target":"security/control","type":"implements","family":"structure","weight":4},{"source":"security/security-awareness","target":"security/people-control","type":"implements","family":"structure","weight":4},{"source":"security/security-awareness","target":"security/security-culture","type":"contrasts-with","family":"contrast","weight":3.5},{"source":"security/security-awareness","target":"security/social-engineering","type":"mitigates","family":"security","weight":7.99,"primary":true},{"source":"security/security-awareness","target":"security/phishing","type":"mitigates","family":"security","weight":7.99,"primary":true},{"source":"security/security-awareness","target":"security/pretexting","type":"mitigates","family":"security","weight":4.99},{"source":"security/security-awareness","target":"security/vishing","type":"mitigates","family":"security","weight":4.99},{"source":"security/security-awareness","target":"security/smishing","type":"mitigates","family":"security","weight":4.99},{"source":"security/security-awareness","target":"ai/deepfake","type":"mitigates","family":"security","weight":4.99},{"source":"security/security-awareness","target":"security/security-policy","type":"used-with","family":"association","weight":2.5},{"source":"security/security-by-design","target":"security/cia-triad","type":"requires","family":"dependency","weight":6.1},{"source":"security/security-by-design","target":"security/vulnerability","type":"mitigates","family":"security","weight":6.51,"primary":true},{"source":"security/security-by-design","target":"security/zero-trust","type":"used-with","family":"association","weight":2.03},{"source":"security/security-culture","target":"security/security-awareness","type":"requires","family":"dependency","weight":6.42},{"source":"security/security-culture","target":"security/security-policy","type":"requires","family":"dependency","weight":6.42},{"source":"security/security-culture","target":"security/governance","type":"part-of","family":"structure","weight":3.43},{"source":"security/security-culture","target":"security/shadow-it","type":"mitigates","family":"security","weight":3.43},{"source":"security/security-framework","target":"security/control","type":"requires","family":"dependency","weight":6.27},{"source":"security/security-framework","target":"security/governance","type":"part-of","family":"structure","weight":2.68},{"source":"security/security-framework","target":"security/security-policy","type":"contrasts-with","family":"contrast","weight":2.93},{"source":"security/security-incident","target":"security/cia-triad","type":"requires","family":"dependency","weight":6.8},{"source":"security/security-incident","target":"security/threat","type":"contrasts-with","family":"contrast","weight":5.08,"primary":true},{"source":"security/security-incident","target":"security/impact","type":"causes","family":"security","weight":3.63},{"source":"security/security-maturity","target":"security/governance","type":"requires","family":"dependency","weight":5.68},{"source":"security/security-maturity","target":"security/security-metrics","type":"used-with","family":"association","weight":1.89},{"source":"security/security-maturity","target":"security/self-assessment","type":"used-with","family":"association","weight":1.89},{"source":"security/security-metrics","target":"security/governance","type":"requires","family":"dependency","weight":6.1},{"source":"security/security-metrics","target":"security/isms","type":"part-of","family":"structure","weight":3.25},{"source":"security/security-metrics","target":"security/soc","type":"used-with","family":"association","weight":2.03},{"source":"security/security-metrics","target":"security/self-assessment","type":"used-with","family":"association","weight":1.63},{"source":"security/security-monitoring","target":"cs/log","type":"requires","family":"dependency","weight":6.27},{"source":"security/security-monitoring","target":"platform/monitoring","type":"kind-of","family":"structure","weight":3.34},{"source":"security/security-monitoring","target":"security/siem","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"security/security-monitoring","target":"security/soc","type":"used-with","family":"association","weight":3.34,"primary":true},{"source":"security/security-monitoring","target":"ai/unsupervised-learning","type":"used-with","family":"association","weight":2.09},{"source":"security/security-policy","target":"security/governance","type":"part-of","family":"structure","weight":3.88},{"source":"security/security-policy","target":"ai/shadow-ai","type":"mitigates","family":"security","weight":4.85},{"source":"security/security-policy","target":"security/data-classification","type":"mandates","family":"regulation","weight":4.85},{"source":"security/self-assessment","target":"security/compliance","type":"requires","family":"dependency","weight":5.91},{"source":"security/session-hijacking","target":"cs/authentication","type":"requires","family":"dependency","weight":6.27},{"source":"security/session-hijacking","target":"security/threat","type":"kind-of","family":"structure","weight":3.34},{"source":"security/session-hijacking","target":"cs/session","type":"exploits","family":"security","weight":6.69,"primary":true},{"source":"security/shadow-it","target":"security/security-policy","type":"requires","family":"dependency","weight":6.1},{"source":"security/shadow-it","target":"security/vulnerability","type":"causes","family":"security","weight":6.51,"primary":true},{"source":"security/shadow-it","target":"security/data-breach","type":"causes","family":"security","weight":3.25},{"source":"security/siem","target":"cs/log","type":"requires","family":"dependency","weight":7.27},{"source":"security/siem","target":"cs/audit","type":"requires","family":"dependency","weight":7.27},{"source":"security/siem","target":"security/control","type":"kind-of","family":"structure","weight":3.88},{"source":"security/siem","target":"security/threat-intelligence","type":"used-with","family":"association","weight":2.42},{"source":"security/siem","target":"security/soc","type":"used-with","family":"association","weight":2.42},{"source":"security/smishing","target":"security/phishing","type":"kind-of","family":"structure","weight":3.03},{"source":"security/smishing","target":"security/vishing","type":"contrasts-with","family":"contrast","weight":2.65},{"source":"security/smishing","target":"security/data-breach","type":"causes","family":"security","weight":3.03},{"source":"security/soar","target":"security/siem","type":"requires","family":"dependency","weight":5.68},{"source":"security/soar","target":"security/alert-triage","type":"requires","family":"dependency","weight":5.68},{"source":"security/soar","target":"security/control","type":"kind-of","family":"structure","weight":3.03},{"source":"security/soar","target":"security/soc","type":"used-with","family":"association","weight":3.03,"primary":true},{"source":"security/soc","target":"security/incident-response","type":"requires","family":"dependency","weight":6.8},{"source":"security/soc","target":"security/threat-intelligence","type":"used-with","family":"association","weight":2.27},{"source":"security/social-engineering","target":"security/threat","type":"kind-of","family":"structure","weight":3.57},{"source":"security/social-engineering","target":"security/vulnerability","type":"exploits","family":"security","weight":5.7,"primary":true},{"source":"security/social-engineering","target":"security/human-factor","type":"exploits","family":"security","weight":4.46},{"source":"security/social-engineering","target":"security/data-breach","type":"causes","family":"security","weight":3.57},{"source":"security/spear-phishing","target":"security/phishing","type":"kind-of","family":"structure","weight":2.89},{"source":"security/spear-phishing","target":"security/data-breach","type":"causes","family":"security","weight":2.89},{"source":"security/sql-injection","target":"cs/database","type":"requires","family":"dependency","weight":6.42},{"source":"security/sql-injection","target":"cs/web-application","type":"requires","family":"dependency","weight":6.42},{"source":"security/sql-injection","target":"security/vulnerability","type":"exploits","family":"security","weight":6.85,"primary":true},{"source":"security/sql-injection","target":"security/data-breach","type":"causes","family":"security","weight":6.85,"primary":true},{"source":"security/statement-of-applicability","target":"security/risk-treatment","type":"requires","family":"dependency","weight":6.1},{"source":"security/statement-of-applicability","target":"security/annex-a","type":"requires","family":"dependency","weight":6.1},{"source":"security/statement-of-applicability","target":"security/iso-27001","type":"part-of","family":"structure","weight":3.25},{"source":"security/stride","target":"security/threat","type":"requires","family":"dependency","weight":5.1},{"source":"security/stride","target":"security/cia-triad","type":"requires","family":"dependency","weight":5.1},{"source":"security/stride","target":"security/threat-modelling","type":"implements","family":"structure","weight":2.72},{"source":"security/supervisory-authority","target":"security/gdpr","type":"requires","family":"dependency","weight":6.1},{"source":"security/supervisory-authority","target":"security/data-controller","type":"requires","family":"dependency","weight":6.1},{"source":"security/supplier-management","target":"security/risk","type":"requires","family":"dependency","weight":7.35},{"source":"security/supplier-management","target":"security/risk-management","type":"part-of","family":"structure","weight":3.92},{"source":"security/supplier-management","target":"security/data-breach","type":"mitigates","family":"security","weight":3.92},{"source":"security/supplier-management","target":"ai/shadow-ai","type":"mitigates","family":"security","weight":4.9},{"source":"security/supplier-management","target":"security/supply-chain-attack","type":"mitigates","family":"security","weight":4.9},{"source":"security/supply-chain-attack","target":"security/malware","type":"requires","family":"dependency","weight":6.56},{"source":"security/supply-chain-attack","target":"security/threat","type":"kind-of","family":"structure","weight":3.5},{"source":"security/supply-chain-attack","target":"platform/software-supply-chain","type":"exploits","family":"security","weight":7,"primary":true},{"source":"security/supply-chain-attack","target":"security/data-breach","type":"causes","family":"security","weight":4.37},{"source":"security/table-top-exercise","target":"security/contingency-plan","type":"requires","family":"dependency","weight":5.1},{"source":"security/table-top-exercise","target":"security/incident-response","type":"requires","family":"dependency","weight":5.1},{"source":"security/table-top-exercise","target":"security/lessons-learned","type":"causes","family":"security","weight":3.4},{"source":"security/technical-control","target":"security/control","type":"kind-of","family":"structure","weight":3.03},{"source":"security/technical-control","target":"security/vulnerability","type":"mitigates","family":"security","weight":3.79},{"source":"security/technical-control","target":"security/zero-trust","type":"used-with","family":"association","weight":1.89},{"source":"security/threat","target":"security/vulnerability","type":"exploits","family":"security","weight":8.38,"primary":true},{"source":"security/threat-actor","target":"security/threat","type":"requires","family":"dependency","weight":5.68},{"source":"security/threat-actor","target":"security/threat-landscape","type":"part-of","family":"structure","weight":3.03},{"source":"security/threat-actor","target":"security/vulnerability","type":"exploits","family":"security","weight":6.06,"primary":true},{"source":"security/threat-hunting","target":"security/detection-rule","type":"requires","family":"dependency","weight":6.1},{"source":"security/threat-hunting","target":"security/indicator-of-compromise","type":"requires","family":"dependency","weight":6.1},{"source":"security/threat-hunting","target":"security/lateral-movement","type":"mitigates","family":"security","weight":3.25},{"source":"security/threat-hunting","target":"security/threat-intelligence","type":"used-with","family":"association","weight":3.25,"primary":true},{"source":"security/threat-intelligence","target":"security/threat","type":"requires","family":"dependency","weight":6.68},{"source":"security/threat-intelligence","target":"security/phishing","type":"mitigates","family":"security","weight":2.14},{"source":"security/threat-intelligence","target":"security/threat-landscape","type":"used-with","family":"association","weight":2.23},{"source":"security/threat-landscape","target":"security/threat","type":"requires","family":"dependency","weight":6.56},{"source":"security/threat-landscape","target":"security/risk-management","type":"part-of","family":"structure","weight":3.5},{"source":"security/threat-landscape","target":"security/vulnerability-assessment","type":"used-with","family":"association","weight":2.19},{"source":"security/threat-modelling","target":"security/threat","type":"requires","family":"dependency","weight":6.42},{"source":"security/threat-modelling","target":"security/asset","type":"requires","family":"dependency","weight":6.42},{"source":"security/threat-modelling","target":"security/secure-development-lifecycle","type":"part-of","family":"structure","weight":3.43},{"source":"security/threat-modelling","target":"security/vulnerability","type":"mitigates","family":"security","weight":6.85,"primary":true},{"source":"security/two-factor-authentication","target":"cs/password","type":"requires","family":"dependency","weight":5.91},{"source":"security/two-factor-authentication","target":"security/authentication-factor","type":"requires","family":"dependency","weight":5.91},{"source":"security/two-factor-authentication","target":"security/mfa","type":"kind-of","family":"structure","weight":3.15},{"source":"security/two-factor-authentication","target":"security/phishing","type":"mitigates","family":"security","weight":3.94},{"source":"security/vishing","target":"security/social-engineering","type":"kind-of","family":"structure","weight":3.15},{"source":"security/vishing","target":"security/data-breach","type":"causes","family":"security","weight":3.15},{"source":"security/vulnerability","target":"security/threat","type":"requires","family":"dependency","weight":8.46},{"source":"security/vulnerability-assessment","target":"security/vulnerability","type":"requires","family":"dependency","weight":6.42},{"source":"security/vulnerability-assessment","target":"security/risk","type":"requires","family":"dependency","weight":6.42},{"source":"security/vulnerability-assessment","target":"security/asset-inventory","type":"requires","family":"dependency","weight":6.42},{"source":"security/vulnerability-assessment","target":"security/cve","type":"requires","family":"dependency","weight":6.42},{"source":"security/vulnerability-assessment","target":"security/control","type":"kind-of","family":"structure","weight":3.43},{"source":"security/vulnerability-scanning","target":"security/vulnerability","type":"requires","family":"dependency","weight":7.01},{"source":"security/vulnerability-scanning","target":"security/control","type":"kind-of","family":"structure","weight":3.74},{"source":"security/vulnerability-scanning","target":"security/vulnerability-assessment","type":"part-of","family":"structure","weight":3.74},{"source":"security/web-application-firewall","target":"cs/http","type":"requires","family":"dependency","weight":6.1},{"source":"security/web-application-firewall","target":"cs/web-application","type":"requires","family":"dependency","weight":6.1},{"source":"security/web-application-firewall","target":"cs/firewall","type":"kind-of","family":"structure","weight":3.25},{"source":"security/web-application-firewall","target":"security/sql-injection","type":"mitigates","family":"security","weight":4.07},{"source":"security/web-application-firewall","target":"security/cross-site-scripting","type":"mitigates","family":"security","weight":3.25},{"source":"security/zero-day","target":"cs/patch","type":"requires","family":"dependency","weight":5.42},{"source":"security/zero-day","target":"security/exploit","type":"requires","family":"dependency","weight":5.42},{"source":"security/zero-day","target":"security/vulnerability","type":"kind-of","family":"structure","weight":2.89},{"source":"security/zero-day","target":"security/security-incident","type":"causes","family":"security","weight":3.61},{"source":"security/zero-trust","target":"cs/authentication","type":"requires","family":"dependency","weight":7.35},{"source":"security/zero-trust","target":"cs/authorization","type":"requires","family":"dependency","weight":7.35},{"source":"security/zero-trust","target":"cs/least-privilege","type":"requires","family":"dependency","weight":7.35},{"source":"security/zero-trust","target":"cs/network-segmentation","type":"requires","family":"dependency","weight":7.35},{"source":"security/zero-trust","target":"security/lateral-movement","type":"mitigates","family":"security","weight":4.9}]}