Security Glossary

National Vulnerability Database (NVD) is a foundational cybersecurity resource that contains detailed information on software and hardware vulnerabilities. Started in 2005, it contains detailed records of over 200,000+ common vulnerabilities and exposures identified in applications, OS and software as of now. It is maintained by the National Institute of Standards and Technology under the US government. NVD helps security companies and professionals to track discovered vulnerabilities and assess their severity. The database includes severity scores (CVSS), impact and technical details. Mobile app developers and security teams use NVD information to understand vulnerabilities in operating systems, libraries and functions in mobile applications. It keeps them up to date with new vulnerabilities and how to mitigate them.

Network access control is a security measure that controls and restricts access for unauthorised users and devices from accessing private or corporate networks. These private networks are secure for authorised people. To access this, NAC verifies device identity, security posture, and compliance before granting network connectivity. It is an important security feature that prevents unauthorised devices from connecting to sensitive systems. It reduces the risk of malware infection and network-based attacks. NAC solution evaluates devices based on predefined security policies such as authentication status, device health, and configuration compliance. It blocks or gives limited access to the devices that fail these checks. For enterprise apps, this helps protect corporate applications, APIs, and internal networks from compromised devices.

Network security focuses on protecting data and systems that communicate over internal and external networks. It uses security measures such as firewalls, intrusion detection systems, encryption protocols, and traffic monitoring to detect threats and control unauthorised access. In mobile app ecosystems, network security protects backend servers, APIs and communication channels from unauthorised access and malicious traffic. Strong network security ensures secure data transmission, prevents interception, and reduces exposure to distributed attacks. It forms a critical layer in a multi-layered cybersecurity strategy for enterprise and fintech organisations.

NPCI (National Payments Corporation of India) is an organisation responsible for operating online transactions and payment systems in India. NPCI has constructed certain security guidelines for UPI, IMPS, and RuPay to ensure safe digital money transactions. Mobile applications dealing with payment systems, such as banking and payment apps, must comply with NPCI security guidelines to maintain security standards, data protection, fraud monitoring, and secure authentication. In cybersecurity, NPCI plays an important role as it is aligned with RBI guidelines to ensure high-level security. Adhering to its guidelines protects apps and users' transaction integrity, ensuring operational reliability within India's digital payment system. NPCI raises awareness among users about security measures for online payments, such as using trusted apps and verifying recipient details before making a payment.