Terminology
A list of terms used in the five chapters of this special issue (5‑1 to 5‑9) and their explanations

Technology Operation Centre
An organization that
remotely monitors controls and troubleshoots all technologies including convention‑related systems It includes theSecurity Operations Centre
Security Operation Centre
An organization that detects analyzes and responds to cyber attacks and develops
countermeasures to stop them The structure and operational design varies depending on the organization and pleaserefer to each featured article for definitions in the Tokyo 2020GamesAD (Active Directory)
A system developed by Microsoft to centrally manage user accounts and other information
In addition to on‑premise type cloud type services are alsoavailable in recent years
Azure AD
It is a type of centralized management
system for user accounts and other information developed byMicrosoft which is provided in the cloudPassword Spraying Attack
A type of attack in which
login attempts are repeatedly made with different IDs andpasswords to find a valid combination To avoid detection
the process is carried out slowly changing the ID and the IPfrom which the connection is madeUTM (Unified Threat Management)
A solution thatintegrates various functions such as firewalls IPS/IDS andsecurity measures for the Web and e‑mail Since some
applications require too much functionality the Tokyo 2020
Organising Committee uses single‑function solutions incombination with themOpen Resolver
A device that is configured to respondto DNS inquiries from the Internet If the function is abused
there is a risk of being involved in cyber attacks
Rule Based Filter
A function that checks the contentsof traffic and detects suspicious session based on a set of rulesthat determine whether they correspond to characteristics
recognized as attacks
Rate Based Filter
A function that checks the frequencyof access and detects as suspicious session when the accessfrom a specific source to a specific destination exceeds apredefined threshold
Reputation Based Filter
A function that evaluates theconnection source of communication based on attack cases
etc and judges it to be distrustful when it has a bad
reputation For example the connection source that has been
involved in attacks in the past
Credentials
The information required to log into asystem or get appropriate privileges such as IDs passwords or other electronic information used internally by thesystem for authentication

254©2022 IEICEVulnerability
When used as a security term it means
security weakness including software bug and inappropriate
configurations It may also mean defect of operation
procedure lack of security implementation and so on In thisarticle vulnerability mainly means software bug andinappropriate configurations
Zero‑day Vulnerability
Known security bugs in software for which no update have been provided Attacks thattarget the period until the update is provided are called zero‑
day attacks
DDoS (Distributed Denial of Service) AttackAn
attack in which malicious traffics are simultaneously sentfrom a large number of sources to exhaust various resources
such as communication capacity and computing power todisturb the victimʼs service DRDoS (Distributed Reflection
Denial of Service) is also known for reflection attacks
CDN (Content Delivery Network)
A service thatdelivers Web content to end users from delivery servers
distributed around the world Often deployed to improveaccessibility it is also effective as a security measure
SIEM (Security Information and Event Management)
A solution that detects attacks or the threat of attacks bycentrally aggregating logs and data output from security
equipment and other devices and by combining andanalyzing them Many of them have advanced visualization
functions as well
GDPR (General Data Protection Regulation)
Regulations applied in May 2018 (after the PyeongChang 2018Games) to strengthen and integrate the protection of all
personal data within the European Union (EU) The systemsof Tokyo 2020 Games are offered to users in the EU and
therefore must comply with GDPR
Zero-trust
The concept of preventing threats by
evaluated all access to system without distinguishing
network boundaries taking into account the possibility thathas already been compromised
OWASP Testing Guide
The documents describing
procedures and tools for web application security testing by
OWASP (the Open Web Application Security Project) aworldwide community on the web security
OSINT (Open Source Intelligence)
A method ofcollecting target data from publicly available information
sources
Ambush marketing
Marketing activities by an organization that is not an official sponsor by misleading consumers
into believing that it is an official sponsor or by using
intellectual property without permission

THE JOURNAL OF THE INSTITUTE OF ELECTRONICS INFORMATION AND COMMUNICATION ENGINEERS