Dictionary (S-Z)

Term

Abbreviations

Definition

Labels

Synonyms

SaaS: Software-as-a-Service

SaaS

Software-as-a-Service is a cloud computing service that involves the licensure of a software application to customers. Licenses are typically provided through a pay-as-you-go model or on-demand.

tech

SaaS, Software-as-a-Service

Sanctions

Or sanction screening, is a crucial part of AML compliance for businesses in many industries and it involves checking customers and transactions against various sanction lists to ensure that they are not doing business with individuals, entities, or countries that are prohibited under national or international laws.

aml

Sanctions, Sanction List Screening, Sanction Screening

Sandbox

A virtual container in which untrusted programs can be safely run; (software development) an environment in which code or content changes can be tested without affecting the original system. A staging environment is essentially a test sandbox or a close replica of a live production environment where developers can freely test software. Even though staging and production environments are very similar, they are completely separate.

tech

SAR: Suspicious Activity Report

SAR

A report filed with financial intelligence units or regulatory agencies when suspicious activity is detected.

fin, aml

SCA: Strong Cardholder Authentication

SCA

Strong customer authentication (SCA) is a requirement of the EU Revised Directive on Payment Services (PSD2) on payment service providers within the European Economic Area (EEA). The requirement ensures that electronic payments are performed with multi-factor authentication, to increase the security of electronic payments. Physical card transactions already commonly have what could be termed strong customer authentication in the EU (Chip & PIN), but this has not generally been true for Internet transactions across the EU prior to the implementation of the requirement, and many contactless card payments do not use a second authentication factor. The SCA requirement came into force on 14 September 2019.

fin, tech

SCA, Strong Cardholder Authentication

Scaling

Scaling is the process of expanding the resources allocated to an application or workload to allow for better performance or to handle more concurrent activity. Scaling databases is essential for handling large amounts of data and traffic efficiently. Scaling strategies generally fall into 2 categories: scaling out (also called horizontal scaling) and scaling up (also known as vertical scaling). Scaling allows an application to handle more concurrent operations but it can potentially increase the complexity of the application architecture.

tech

Scaling, Scalability

Scheduling

Technique for managing payment queues by determining the order in which payments are accepted for settlement. See also queuing .

fin

Schengen Area

The Schengen Area encompasses 29 European countries that have officially abolished border controls at their common borders. As an element within the wider area of freedom, security and justice (AFSJ) policy of the European Union (EU), it mostly functions as a single jurisdiction under a common visa policy for international travel purposes. The area is named after the 1985 Schengen Agreement and the 1990 Schengen Convention, both signed in Schengen, Luxembourg. Of the 27 EU member states, 25 are members of the Schengen Area. Cyprus and Ireland are the only EU member states that are not part of the Schengen Area. Cyprus aims to become part of the Schengen Area by the end of 2025. The country is committed by treaty to join in the future, but its participation was complicated due to its prevailing geopolitical situation since the invasion and occupation of Northern Cyprus by Turkey since 1974. Ireland maintains an opt-out and operates its own visa policy. In addition to the member states of the European Union, all member states of the European Free Trade Association, namely Iceland, Liechtenstein, Norway and Switzerland, have signed association agreements with the EU to be part of the Schengen Area. Moreover, the territories of 4 microstates – Andorra, Monaco, San Marino and Vatican City – are de facto included in the Schengen Area due to their small size and difficulty of maintaining active border controls.

gen

Scripting programming languages

A scripting language is designed to automate repetitive tasks, manage dynamic content & support processes in larger applications. Unlike traditional programming languages, scripting languages are often interpreted rather than compiled, making them ideal for writing quick, small scripts for specific tasks. They have a simplified syntax, which makes them easy to learn. Due to their ease of use & flexibility, scripting languages are commonly featured in web development, system administration & software automation. Examples: PHP Ruby Python JavaScript Perl Node.js Use cases: Web development System administration Software automation

tech

SDD: SEPA Direct Debit

SDD

SEPA Direct Debit (SDD) is a pan-European payment method that allows a business or organisation to automatically collect euros from a customer's bank account across the Single Euro Payments Area (SEPA). It is commonly used for recurring expenses like subscription services or utility bills. SDD requires a few key elements to function: Mandate: before any funds can be pulled, a customer must sign a legal SDD Mandate (either physical or digital). This gives a merchant permission to initiate debits. IBAN & BIC: payments operate entirely on bank-to-bank transfers using only a customer's International Bank Account Number (IBAN) & Bank Identifier Code (BIC) Process: a merchant decides when to debit an account, & a customer's bank automatically transfers the agreed amount on the due date. Types of SDD schemes: SEPA Core Direct Debit: available to both businesses & individual consumers. For consumers, this scheme includes a strong consumer protection rule allowing them to unconditionally claim a refund for an authorized or incorrect debit within 8 weeks. SEPA Business-to-Business (B2B) Direct Debit: exclusively for business customers. It clears payments faster but does not grant a standard 8-week unconditional refund period.

fin

SDD, SEPA Direct Debit

SDK: Software Development Kit

SDK

Software Development Kit is a set of instructions, integrated practices, pieces, code samples, and documentation that enables developers to create software applications on a specific software platform. SDKs can be seen as workshops with everything developers need to build specific software for a particular platform.

tech

SDK, Software Development Kit

SDLC: Software Development Life Cycle

SDLC

Software Development Life Cycle is the process of planning, creating, testing, and deploying an information system. SDCL aims at producing quality software at the lowest possible cost in the shortest possible time. SDLC gives developers a structured flow divided into phases to help companies produce high-quality software.

tech

SDLC, Software Development Life Cycle

Segregated Account

A segregated account is a separate bank account that is used to keep a client's assets separate from those of the broker or company that holds them. Segregated accounts can protect clients assets from creditors in the event that the company becomes insolvent.

fin

Self-checkout terminal

A self-service device that allows customers to pay for their purchases with either cash or a payment card.

fin

Semantic analyser

A semantic analyser is a compiler component that verifies the meaning & logical consistency of a program by checking for type errors, undeclared variables & other contextual issues that the syntax (grammar) phase missed. It takes a parse tree as input & adds semantic information (attributes) to it, producing an annotated parse tree that is semantically correct.

tech

SEPA IG: SEPA Implementation Guidelines

SEPA IG

The implementation guidelines (IGs) set out the Single Euro Payments Area (SEPA) rules for implementing ISO 20022 XML message standards for a particular SEPA service (e.g. SCT, SCT Instant and SDD) based on the adhering SEPA Rulebook as published by the European Payments Council (EPC). Local adaptation may occur by local ACH but will be in line with the minimum required data of the EPC IG.

fin

SEPA IG, SEPA Implementation Guidelines

SEPA Instant: Single Euro Payments Area Instant

Single Euro Payments Area Instant (also called SEPA Instant Credit Transfers or SCT Instant) are instant transfers in EUR that are executed 24/7/365 and reach the recipient within seconds.

fin

SEPA Instant, Single Euro Payments Area Instant, SEPA Instant Credit Transfers, SCT Instant

SEPA: Single Euro Payments Area

SEPA

Single Euro Payments Area is a payment-integration initiative of the EU for the simplification of bank transfers denominated in EUR. As of 2020, there were 36 members in SEPA, consisting of the 27 member states of the European Union, the four member states of the European Free Trade Association (i.e., Iceland, Liechtenstein, Norway & Switzerland), and the United Kingdom. Some microstates participate in the technical schemes (i.e., Andorra, Monaco, San Marino & Vatican City). SEPA covers predominantly normal bank transfers. For more information, refer to this link .

fin, gen

SEPA, Single Euro Payments Area

Serial Scanning

Serial scanning is a search technique that involves analyzing each potential item against the query at the time of the search. This is in opposition to index-based searching where items are accounted for and organised ahead of time to allow for faster query response.

tech

Serialization

Is the process of translating data structures or object state into a format that can be stored (e.g., in a file or memory buffer) or transmitted (e.g., across a network connection link) & reconstructed later (possibly in a different computer environment). When the resulting series of bits is reread according to the serialization format, it can be used to create a semantically identical clone of the original object. For many complex objects, such as those that make extensive use of references, this process is not straightforward. Serialization of object-oriented objects does not include any of their associated methods with which they were previously linked. This process of serializing an object is also called marshalling an object in some situations. The opposite operation, extracting a data structure from a series of bytes, is called deserialization (also called unserialization or unmarshalling).

tech

Server

A computer that provides data to other computers. Servers are special computers designed to serve the different requests from other devices or clients in any network environment. Files, applications, user information, and various data can be accessed through the server. A server evaluates the client’s requests and can perform these requests within the assigned permissions and authorization. After fulfilling the incoming request, the response is returned to the client.

tech

Settlement

The completion of a transaction or of processing with the aim of discharging participants’ obligations through the transfer of funds and/or securities. A settlement may be final or provisional.

fin

Settlement, Final Settlement, Final Transfer

SFA: Single-Factor Authentication

SFA

Single-Factor Authentication is the simplest form of authentication method. SFA is the traditional security process that requires a username and password before granting access to a user.

tech

SFA, Single-Factor Authentication

SFTP: Secure File Transfer Protocol

SFTP

SFTP, or Secure File Transfer Protocol, is a secure file transfer protocol that uses secure shell encryption to provide a high level of security for sending and receiving file transfers.

tech

SFTP, Secure File Transfer Protocol

SHA: Secure Hash Algorithms

SHA

Secure Hash Algorithms are a family of cryptographic hash functions published by the National Institute of Standards and Technology (NIST) as a United States Federal Information Processing Standard (FIPS), including: SHA-0, SHA-1, SHA-2, and SHA-3.

tech

SHA, Secure Hash Algorithms

Sharding

A database shard is a segment of records stored by a database object that is separated out and managed by a different database node for performance reasons. The data is typically divided according to a 'shard key' which is a key that determines which shard a record should be managed by. Each shard manages its subset of records and a coordinating component is required to direct client queries to the appropriate shard by referring to the shard key. Sharding can help some types of performance in very large datasets but it often requires making trade-offs that might degrade other types of performance (for instance, on operations that need to coordinate between multiple shards). Sharding distributes data horizontally by splitting a large database table into smaller, independent tables across multiple databases. Why use sharding? • Prevents database bottlenecks by distributing write operations. • Improves scalability as new shards can be added when needed.

tech

Shelf Company

A company that has been created months or years ahead of time, often by a law firm or an accounting firm. Then the company goes \"on the shelf\" until needed. Some investors use these shelf companies, or \"aged\" companies, to gain a clean business record. Also referred as shelf corporation or aged corporation. A company that has no activity and put on the “shelf” for aging. There may be several reasons to create or purchase a shelf company: • For having a clean business record. • For achieving corporate seniority to appeal to investors. • For gaining advantage on legal procedures like bidding on contracts which require a certain time of longevity in the industry. • For getting access to business loan.

fin, aml

Shelf Company, Shelf Corporation, Aged Corporation

Shell Corporation

A shell corporation is a corporation without active business operations or significant assets.

fin, aml

Shell Corporation, Shell Company

Skewness

Skewness is the degree of asymmetry observed in a probability distribution. Distributions can be positive and right-skewed, or negative and left-skewed. A normal distribution exhibits zero skewness. So, skewness refers to the distortion or asymmetry that deviates from the symmetrical bell curve, or normal distribution, in a set of data.

stats

Skimming

Payment card skimming is an illegal technique used by criminals to get access to personal data from ATM, debit, or credit cards via a piece of equipment they place at ATMs or merchant locations. Together with the recent innovations in technology, criminals are capable of standing nearby and getting access to the data with a wireless connection to the device they placed on the ATM so that they can clone the cards and obtain PIN codes to withdraw money from multiple accounts in a short period of time.

aml

Smart cash till

A till that may look and operate like a standard cash till but which uses additional technology that accepts, counts and authenticates euro banknotes and coins and dispenses change.

fin

Smart contract

Automatable, 'contract-type' arrangement embedded in computer software. The software can validate, execute and record automatically on a distributed ledger technology platform as soon as certain predefined conditions have been met, based on information fed into the distributed ledger itself or received from a predefined (external) source.

fin, tech

Smurfing

A commonly used money laundering method, smurfing involves the use of multiple individuals and/or multiple transactions for making cash deposits, buying monetary instruments or bank drafts in amounts under the reporting threshold. The individuals hired to conduct the transactions are referred to as \"smurfs\".

aml

Snake Case

A common naming convention where words are separated by underscores (_) and each word is in lowercase. Example: customer_data.txt

tech

SOAP: Simple Object Access Protocol

SOAP

Simple Object Access Protocol is a protocol specification for exchanging structured data to implement web services. SOAP leverages XML and other application-layer protocols, such as HTTP or SMTP for message transmission. The messaging services provided by SOAP are exclusively XML-based.

tech

Simple Object Access Protocol, SOAP

Social Engineering

Social engineering is a technique used by cybercriminals to manipulate individuals into divulging confidential information or performing actions that compromise security. Unlike traditional hacking methods that target software vulnerabilities, social engineering exploits human psychology and interactions to gain access to sensitive data or systems.

aml

Software Release Life Cycle

The software release life cycle is the process of developing, testing, and distributing a software product (e.g., an operating system). It typically consists of several stages, such as pre-alpha, alpha, beta, and release candidate, before the final version, or \"gold\", is released to the public.

tech

Solution stack

A solution stack, also called software stack and tech stack, is a set of software subsystems or components needed to create a complete platform such that no additional software is needed to support applications. Applications are said to 'run on' or 'run on top of' the resulting platform. For example, to develop a web application, the architect defines the stack as the target operating system, web server, database, and programming language. Another version of a software stack is operating system, middleware, database, and applications. Regularly, the components of a software stack are developed by different developers independently of one another.

tech

solution stack, software stack, tech stack

Sort Code

Sort codes are the domestic bank codes used to route money transfers between financial institutions in the United Kingdom, and formerly in Ireland. They are 6-digit hierarchical numerical addresses that specify clearing banks, clearing systems, regions, large financial institutions, groups of financial institutions and ultimately resolve to individual branches. In the UK they continue to be used to route transactions domestically within clearance organisations and to identify accounts, while in Ireland (a founder member of the Euro) they have been deprecated and replaced by the Single European Payment Area (SEPA) systems and infrastructure. Sort codes for Northern Ireland branches of banks (codes beginning with a '9') were registered with the Irish Payment Services Organisation (IPSO) for both Northern Ireland and the Republic of Ireland. These codes are used in the British clearing system and historically in the Irish system. The sort code is usually formatted as 3 pairs of numbers, e.g., 12-34-56. It identifies both the bank (in the first digit or the first two digits) and the branch where the account is held. Sort codes are encoded into International Bank Account Numbers (IBANs) but are not encoded into Business Identifier Codes (BICs).

fin

Source of Wealth

Information detailing the origin of an individual’s or entity’s overall financial assets and net worth. It includes the background of how wealth was accumulated, such as through employment, investments, inheritance, or business activities. This helps financial institutions assess the legitimacy of a customer’s wealth, ensuring compliance with Anti-Money Laundering (AML) regulations and preventing the use of illicitly obtained assets.

fin, aml

SOX: Sarbanes-Oxley Act

SOX

The Sarbanes-Oxley Act of 2002 (SOX) is legislation passed by the United States Congress to protect shareholders and the general public from accounting errors and fraudulent practices in the enterprise, as well as improve the accuracy of corporate disclosures. The United States Securities & Exchange Commission (SEC) administers the act, which sets deadlines for compliance and publishes rules on requirements.

aml, legal

SOX, Sarbanes-Oxley Act

SPA: Single-Page Application

SPA

A single-page application is a website or web application that dynamically rewrites a current web page with new data from the web server, instead of the default method of a web browser loading entire new pages.

tech

SPA, Single Page Application, Single-Page Application

Spoofing

Spoofing is when criminals try to obtain personal information by pretending to be a legitimate business or another known, trusted source. Spoofing is a type of scam in which a criminal disguises an email address, display name, phone number, text message, or website URL to convince a target that they are interacting with a known, trusted source. Spoofing often involves changing just one letter, number, or symbol of the communication so that it looks valid at a quick glance. For example, you could receive an email that appears to be from Netflix using the fake domain name 'netffix.com.'

aml, tech

SQL: Structured Query Language

SQL

Structured Query Language (SQL) is a domain-specific language used to manage data, especially in a relational database management system (RDBMS).

tech

SQL, Structured Query Language

SQLi: SQL Injection

SQLi

An SQL injection technique is a way to inject code into a database that may damage it. SQL injections are one of the most common web hacking techniques and rely on the placement of malicious SQL code in SQL statements via web input using forms or other editable fields.

tech

SQLi, SQL Injection

SSH: Secure Shell Protocol

SSH

The Secure Shell Protocol (SSH Protocol) is a cryptographic network protocol for operating network services securely over an unsecured network. Its most notable applications are remote login & command-line execution. SSH was designed for Unix-like operating systems as a replacement for Telnet & unsecured remote Unix shell protocols, which all use insecure, plaintext methods of authentication, such as passwords. Since mechanisms like Telnet & Remote Shell are designed to access & operate remote computers, sending the authentication tokens (e.g., username & password) for this access to these computers across a public network in an unsecured way poses a great risk of third parties obtaining the password & achieving the same level of access to the remote system as the telnet user. Secure Shell mitigates this risk through the use of encryption mechanisms that are intended to hide the contents of the transmission from an observer, even if the observer has access to the entire data stream. Finnish computer scientist Tatu Ylönen designed SSH in 1995. SSH applications are based on a client–server architecture, connecting an SSH client instance with an SSH server. SSH operates as a layered protocol suite comprising 3 principal hierarchical components: the transport layer provides server authentication, confidentiality & integrity; the user authentication protocol validates the user to the server; & the connection protocol multiplexes the encrypted tunnel into multiple logical communication channels. The protocol specification distinguishes 2 major versions, referred to as SSH-1 & SSH-2. The most commonly implemented software stack is OpenSSH, released in 1999 as open-source software by the OpenBSD developers. Implementations are distributed for all types of operating systems in common use, including embedded systems.

tech

SSH, Secure Shell Protocol

Stablecoins

Stablecoins are a variation of cryptocurrencies. Stablecoins were developed to counter the price volatility of regular cryptocurrencies. Stablecoins can be likened to a form of private money whose price is tied to that of a fiat currency or a basket of goods to ensure that they remain stable. They can be a proxy for fiat currencies, except they are not backed by governmental authority.

fin

Stack

A stack is a linear data structure that follows the Last In First Out (LIFO) principle, meaning the last element added to the stack is the first one to be removed. This structure is fundamental in programming and algorithms, as it allows for efficient data management, particularly in scenarios where you need to reverse actions or keep track of function calls.

tech

Stage Environment

(also known as stage) A nearly exact replica of a Production Environment for software testing. Staging environments are made to test codes, builds, and updates to ensure quality under a production-like environment before application deployment. A staging environment is essentially a test sandbox or a close replica of a live production environment where developers can freely test software. Even though staging and production environments are very similar, they are completely separate.

tech

Stage Enviroment, Staging Environment

Standard Deviation

Standard Deviation is a statistical measurement that looks at how far individual points in a dataset are dispersed from the mean of that set. Standard Deviation measures the dispersion of a dataset relative to its mean. It is calculated as the square root of the variance. Standard Deviation, in finance, is often used as a measure of the relative riskiness of an asset. A volatile stock has a high standard Deviation, while the deviation of a stable blue-chip stock is usually rather low. Standard Deviation is also used by businesses to assess risk, manage business operations, and plan cash flows based on seasonal changes and volatility.

stats

Standing order

An instruction from a customer to its bank to make a regular payment of a fixed amount to a named beneficiary.

fin

standing instruction, standing order, banker's order

Statistical Distribution

A statistical distribution describes how often different values occur in a set of data. It is a mathematical function that shows the probability of each possible outcome for a random variable. Essentially, it tells how spread out or clustered the data is, and it is a fundamental tool for understanding and analysing data patterns.

stats

Statistical Distribution, Probability Distribution

Statistical Significance

Statistical significance is a determination that a relationship between 2 or more variables is caused by something other than chance. It is used to provide evidence concerning the plausibility of the null hypothesis that hypothesises that there is nothing more than random chance at work in the data. Statistical hypothesis testing is used to determine whether the result of a data set is statistically significant. A p-value of 5% or lower is generally considered statistically significant.

stats

Status codes

API status codes are HTTP status codes that are returned by an API to indicate the status of a client's request. These codes are used to provide information to the client about the outcome of the request and to help the client understand how to proceed. Here are some of the most common API status codes and their meanings: • 200 OK: The request was successful, and the server returned the requested data. • 201 Created: The request was successful, and the server created a new resource. • 204 No Content: The request was successful, but the server did not return any data. • 400 Bad Request: The request was malformed or invalid. • 401 Unauthorized: The client is not authorized to access the requested resource. • 403 Forbidden: The client is authenticated but not authorized to access the requested resource. • 404 Not Found: The requested resource was not found on the server. • 500 Internal Server Error: The server encountered an error while processing the request. API status codes can provide important information to the client, enabling it to respond appropriately to the server's response. For example, a client may retry a failed request if it receives a 5xx status code, or it may prompt the user to provide valid input if it receives a 400 Bad Request status code.

tech

Status Page

A page that provides an overview of the system status of an application or suite of applications.

tech

Stemming

Stemming is a technique used in full-text search indexing where words with the same stem are collapsed into a single entry. This increases the number of relevant results considered at the expense of a slight decrease in precision. For instance, the words 'cook', 'cooked', and 'cooks' might occupy a single entry where a search for any of the terms would return results for the whole entry.

tech

Stepping

Program animation or stepping refers to the debugging method of executing code one instruction or line at a time. A programmer may examine the state of a program, machine, and related data before and after execution of a particular line of code. This allows a programmer to evaluate the effects of each statement or instruction in isolation, and thereby gain insight into the behaviour (or misbehaviour) of the executing program. Nearly all modern IDEs and debuggers support this mode of execution.

tech

stepping, program animation

Stop Word

In full-text search contexts, stop words are a list of words that are considered inapplicable to search queries. These are typically the most common words in a language that lack much meaning on their own or are ambiguous to the point of irrelevancy. Some examples in English are words like 'the', 'it', and 'a'.

tech

Storage Engine

A storage engine is responsible for physically storing and retrieving the data within a database. It interacts with the file system or other storage subsystem to read and write data to disk or other storage media. The storage engine also manages the data structures and algorithms used to organise and retrieve the data.

tech

Storage Engine, Database Engine

Stored Procedure

A stored procedure is a way to define a set of operations within the database that clients can easily run. Because they are stored within the database, they can sometimes offer performance improvements and avoid network latency. Stored procedures differ from user defined functions in that they must be explicitly invoked with a special statement rather than incorporated into other queries and cannot be used in all of the same scenarios.

tech

STR: Suspicious Transaction Report

STR,SAR

A formal report filed by financial institutions to regulatory authorities when transactions or activities appear unusual or potentially indicative of money laundering, terrorist financing, or other illicit activities. STRs/SARs are crucial for complying with Anti-Money Laundering (AML) regulations and facilitating investigations into suspicious behaviour, aiming to safeguard the integrity of the financial system.

fin, aml

STR, Suspicious Transaction Report, SAR, Suspicious Activity Report

Straw Man

A non-sanctioned person with a low public profile who acts for or stands in the place of a sanctions target, also called a \"front man\". The straw man does not act in any real sense as an owner or controller. Instead, he or she carries out activities at the direction of the sanctions target, who is active in the background.

aml

Straw Man Account

A Straw Man Account is a financial account set up and used to conceal the actual account holder’s identity, typically to facilitate money laundering or other illicit activities.

aml

String Matching

An algorithm for efficient searching that involves finding occurrence(s) of a pattern string within another string or body of text. Also referred to as pattern matching, this method can be used to recognise social security numbers, telephone numbers, zip codes, and any other information that follows a specific pattern. It is also useful for looking for information that follows leading text and then extracting the text that comes after it, as well as reprocessing documents. This algorithm works by reading through text strings to match patterns.

aml, tech

String Matching, Pattern Matching

Stripping

Stripping involves omitting or removing key information, such as a sender's name or a business name, from a payment message to avoid detection. It may happen with or without the knowledge of other participants in a transaction. When a wire transfer travels through multiple parties before reaching the intended final destination, there are multiple opportunities for information to be abbreviated, omitted, or altered. For this reason, most jurisdictions have enacted laws that require payments to contain certain \"basic\" information, including the sender's and the recipient's name and address. When a wire originates from a sanctioned entity or location, and the intent is to deliver it within the United States or European Union, where restrictions would ordinarily flag the payment and block it, sanctions evaders have an incentive to remove the information that would trip the system.

aml

Structuring

Illegal act of splitting cash deposits or withdrawals into smaller amounts, or purchasing monetary instruments, to stay under a currency reporting threshold. The practice might involve dividing a sum of money into lesser quantities and making two or more deposits or withdrawals that add up to the original amount. Money launderers use structuring to avoid triggering a filing by a financial institution. The technique is common in jurisdictions that have compulsory currency reporting requirements.

aml

Subsidiary Ledger

A subsidiary ledger (sub-ledger) tracks accounts receivable by customer, whilst a general ledger displays the combined total accounts receivable balance across all customers

fin

Sub-ledger, Subsidiary Ledger

Subtyping

In programming language theory, subtyping is a form of type polymorphism. A subtype is a datatype that is related to another datatype (the supertype) by some notion of substitutability, meaning that program elements (typically subroutines or functions), written to operate on elements of the supertype, can also operate on elements of the subtype. Due to the subtyping relation, a term may belong to more than one type. Subtyping is therefore a form of type polymorphism. In object-oriented programming the term 'polymorphism' is commonly used to refer solely to this subtype polymorphism, while the techniques of parametric polymorphism would be considered generic programming.

tech

Subtyping, Subtype polymorphism, Inclusion polymorphism

SWIFT: Society for Worldwide Interbank Financial Telecommunication

SWIFT

The Society for Worldwide Interbank Financial Telecommunication is a Belgian cooperative society providing services related to the execution of financial transactions and payments between certain banks worldwide. Its principal function is to serve as the main messaging network through which international payments are initiated. It also sells software and services to financial institutions, mostly for use on its proprietary \"SWIFTNet\", and assigns ISO 9362 Business Identifier Codes (BICs), popularly known as \"SWIFT codes\". The SWIFT messaging network is a component of the global payments system. SWIFT acts as a carrier of the \"messages containing the payment instructions between financial institutions involved in a transaction\". However, the organisation does not manage accounts on behalf of individuals or financial institutions, and it does not hold funds from third parties. It also does not perform clearing or settlement functions. After a payment has been initiated, it must be settled through a payment system. In the context of cross-border transactions, this step often takes place through correspondent banking accounts that financial institutions have with each other. For information, refer to the this link .

fin

SWIFT, Society for Worldwide Interbank Financial Telecommunication

Symmetric Encryption

Symmetric encryption is a means of protecting data using a secret key to encrypt (lock) and decrypt (unlock) it. The sender and recipient share the key or password to gain access to the information. The key can be a word; a phrase; or a nonsensical or random string of letters, numbers, and symbols.

tech

Symmetric Encryption, Symmetric Cryptography

Syntax

Syntax refers to the rules and conventions that dictate the structure and format of a programming language. It defines how instructions and statements are written to form valid and meaningful code. Following the correct syntax is essential for the compiler or interpreter to understand and execute the code accurately.

tech

Syntax analyser

A syntax analyser (also known as a parser) is a component of a compiler or other software that analyses a sequence of input data, such as source code or text, to determine its grammatical structure & transform it into a structured data format, like a parse tree or abstract syntax tree. This process, called parsing or syntax analysis, checks for correct syntax according to a set of rules or a grammar & enables the computer to understand, process or execute the input. So, the syntax analyser checks if a program's source code follows the grammatical rules of a programming language, taking tokens from the lexical analyser & transforming them into a structured parse tree or abstract syntax tree (AST) to represent the code's hierarchy. If the code is grammatically incorrect, it identifies and reports syntax errors, ensuring the code is well-formed before it moves to the next phase of compilation.

tech

T-Test

A statistical test used to compare the means of two groups of data. A T-Test measures the difference between the means of two samples. A T-Test can shed light on a statistically significant difference between the means of two data sets. It is used for hypothesis testing in statistics. Calculating a T-Test requires the difference between the mean values from each data set, the standard deviation of each group, and the number of data values. T-Tests can be dependent or independent. T-Tests are closely related to Z-Tests, but T-Tests are best performed when an experiment has a small sample size. T-Tests assume the standard deviation is unknown, while Z-Tests assume it is known.

stats

Table

In a relational database, a table is a collection of data elements organised in terms of rows and columns. A table is considered a convenient representation of relations. A table can have duplicate tuples, while a true relation cannot have duplicate tuples. A table is the simplest form of data storage.

tech

Tags

Metadata information about the API that consumers can use to search for the API.

tech

TAN: Transaction Authentication Number

TAN

Transaction Authentication Number is a one-time code used in the processing of online transactions. A TAN represents an additional layer of security beyond a password to securely log into an account or conduct a transaction.

fin

TAN, Transaction Authentication Number

TARGET2: Trans-European Automated Real-time Gross Settlement Express Transfer 2

TARGET2

The second-generation TARGET system. It settles payments in euro in central bank money and functions on the basis of a single IT platform, to which all payment orders are submitted for processing. This means that all payments are received in the same technical form. TARGET2 is legally structured as a multiplicity of RTGS systems (TARGET2 component systems).

fin

TARGET2, Trans-European Automated Real-time Gross Settlement Express Transfer

TARGET: Trans-European Automated Real-time Gross Settlement Express Transfer

TARGET

Trans-European Automated Real-time Gross settlement Express Transfer system: the Eurosystem’s real-time gross settlement system for the euro. The first-generation TARGET system was replaced by TARGET2 in May 2008.

fin

TARGET, Trans-European Automated Real-time Gross Settlement Express Transfer

Targeted Sanctions

Sanctions against a specific target, generally with a goal of a specific outcome. Targeted sanctions can be in the form of financial or trade restrictions focused on restricting movement, and they can be applied unilaterally by one country or multilaterally by many countries. Targeted sanctions are also referred to as smart sanctions.

aml

Targeted Sanctions, Smart Sanctions

Telnet

Telnet (sometimes stylised TELNET) is a client-server application protocol that provides access to virtual terminals of remote systems on local area networks or the internet. It is a protocol for bidirectional 8-bit communications. Its main goal was to connect terminal devices & terminal-oriented processes. The name 'Telnet' refers to 2 things: a protocol itself specifying how 2 parties are to communicate & a software application that implements the protocol as a service. User data is interspersed in-band with Telnet control information in an 8-bit byte oriented data connection over the Transmission Control Protocol (TCP). Telnet transmits all information including usernames & passwords in plaintext so it is not recommended for security-sensitive applications such as remote management of routers. Telnet's use for this purpose has waned significantly in favour of SSH. Some extensions to Telnet which would provide encryption have been proposed.

tech

TFEU: Treaty on the Functioning of the European Union

TFEU

Following entry into force of the Treaty of Lisbon on 1 December 2009, the Treaty establishing the European Community was renamed the Treaty on the Functioning of the European Union (TFEU). This Treaty - referred to as the Treaty of Rome (signed in Rome on 25 March 1957) - entered into force on 1 January 1958 to establish the European Economic Community (EEC). The Treaty establishing the European Community was subsequently amended by the Treaty on European Union (often referred to as the Maastricht Treaty) which was signed on 7 February 1992 and entered into force on 1 November 1993, thereby establishing the EU. Thereafter, both the Treaty establishing the European Community and the Treaty on European Union were amended by the Treaty of Amsterdam, signed on 2 October 1997 and in force as of 1 May 1999, the Treaty of Nice, signed on 26 February 2001 and in force as of 1 February 2003, and then by the Treaty of Lisbon.

gen

TFEU, Treaty on the Functioning of the European Union

Three-party card scheme

A card scheme involving the following stakeholders: the card scheme itself, which acts as issuer and acquirer; the cardholder; and the accepting party. This contrasts with a four-party card scheme , where the issuer and the acquirer are separate entities and are separate from the card scheme itself. See also four-party card scheme.

fin

three-party card scheme, 3-party card scheme

Throttling

A tactic used by most API servers to keep traffic at a reasonable level. The API will start rejecting requests when the rate exceeds a certain amount.

tech

Throttling, Rate Limiting

Tipping Off

Improper or illegal act of notifying a suspect that they are the subject of a Suspicious Transaction Report or is otherwise being investigated or pursued by the authorities.

aml

TIPS: TARGET Instant Payment Settlement

TIPS

TARGET Instant Payment Settlement is a market infrastructure service launched by the Eurosystem in November 2018. It enables payment service providers to offer fund transfers to their customers in real time and around the clock, every day of the year. Thanks to TIPS, individuals and firms can transfer money between each other within seconds, irrespective of the opening hours of their local bank.

fin

TIPS, TARGET Instant Payment Settlement, TARGET, TARGET2, T2

Tokenisation

The process of issuing or representing assets in the form of digital “tokens” on a distributed ledger. It offers the potential for enhanced efficiency, transparency and programmability in financial transactions.

tech

Tokenisation, Tokenization, Network Tokenisation, Network Tokenization

TPP: Third-Party Provider

TPP

A Third-Party Provider is a company that has been authorised & is regulated by the Financial Conduct Authority (or FCA) for open banking. TPPs include Account Information Service Providers & Payment Initiation Service Providers.

fin

TPP, Third-Party Provider

TRACE Method

This HTTP method is used to perform a message loop-back test that tests the path for the target resource (useful for debugging purposes).

tech

Transaction

An economic flow that reflects the creation, transformation, exchange, transfer or extinction of economic value and involves changes in ownership of goods and/or financial assets, the provision of services, or the provision of labour and capital.

fin

Transaction Authorisation Scheme

The Transaction Authorization Scheme is a controlling mechanism of the system that allows OL users with specific rights to authorize or reject transactions. OL users can obtain rights to view, input transactions, authorize transactions, or full rights.

fin

Transaction Authorisation Scheme, Transaction Authorization Scheme

Transaction date

A transaction date refers to when a transaction is initiated, recorded or carried out. 💡 A transaction date is not the same as a value date.

fin

Transaction Limits

Maximum amount of electronic money that can be transacted within a specific period, as set by the PSP or regulatory authorities.

fin, aml, legal

Transaction Monitoring

The process of monitoring electronic money transactions for suspicious activities to prevent fraud and money laundering.

fin, aml, legal

Translator

A translator, or programming language processor, is a computer program that converts the programming instructions written in human convenient form into machine language codes that the computers understand and process. It is a generic term that can refer to a compiler, assembler, or interpreter—anything that converts code from one computer language into another. These include translations between high-level and human-readable computer languages such as C++ and Java, intermediate-level languages such as Java bytecode, low-level languages such as the assembly language and machine code, and between similar levels of language on different computing platforms, as well as from any of these to any other of these.

tech

translator, programming language processor

Transpiler

A transpiler is a type of translator that takes the source code of a program written in a programming language as its input and produces an equivalent source code in the same or a different programming language, usually as an intermediate representation. A transpiler converts between programming languages that operate at approximately the same level of abstraction, while a traditional compiler translates from a higher level language to a lower level language. An automatic parallelising compiler will frequently take in a high level language program as an input and then transform the code and annotate it with parallel code annotations or language constructs. Another purpose of a transpiler is translating legacy code to use the next version of the underlying programming language or an application programming interface (API) that breaks backward compatibility. It will perform automatic code refactoring which is useful when the programs to refactor are outside the control of the original implementer or when the size of the program makes it impractical or time-consuming to refactor it by hand. A transpiler may either keep translated code structure as close to the source code as possible to ease development and debugging of the original source code or may change the structure of the original code so much that the translated code does not look like the source code. There are also debugging utilities that map the transcompiled source code back to the original code.

tech

Source-to-Source Translator, Source-to-Source Compiler, S2S Compiler, Transcompiler, Transpiler

Treaty of Lisbon

The Treaty amending the Union’s two core treaties: the Treaty on European Union and the Treaty establishing the European Community; the latter being renamed the Treaty on the Functioning of the European Union. The Treaty of Lisbon was signed in Lisbon on 13 December 2007 and entered into force on 1 December 2009.

gen

Treaty of Rome

The Treaty of Rome, or EEC Treaty (officially the Treaty establishing the European Economic Community), brought about the creation of the European Economic Community (EEC). The treaty was signed on 25 March 1957 by Belgium, France, Italy, Luxembourg, the Netherlands and West Germany, and it came into force on 1 January 1958. Originally the 'Treaty establishing the European Economic Community', and now continuing under the name 'Treaty on the Functioning of the European Union', it remains one of the two most important treaties in what is now the European Union (EU). The treaty proposed the progressive reduction of customs duties and the establishment of a customs union. It proposed to create a common market for goods, labour, services, and capital across member states. It also proposed the creation of a Common Agriculture Policy, a Common Transport Policy and a European Social Fund and established the European Commission. The treaty has been amended on several occasions since 1957. The Maastricht Treaty of 1992 removed the word 'economic' from the Treaty of Rome's official title, and in 2009, the Treaty of Lisbon renamed it the 'Treaty on the Functioning of the European Union'.

gen

Treaty of Rome, EEC Treaty, Treaty establishing the European Economic Community

Tree

A tree is a hierarchical data structure that consists of nodes connected by edges, where each node represents a value or data and has links to other nodes. This structure is particularly useful for organizing data in a way that allows for efficient searching, inserting, and deleting operations, making it essential in various algorithms and applications. Trees can be used to represent relationships between data and facilitate structured data storage, making them relevant for understanding abstract data types and their implementations.

tech

Trial Balance

A trial balance is a report that lists every general ledger account & its balance, thereby making it easier to check adjustments & easier to locate errors.

fin

Truncation

A procedure in which a paper-based transfer order or other financial instrument is replaced, in whole or in part, by an electronic record of the content of that instrument for the purposes of further processing and transmission.

fin, tech

TS: TypeScript

TS

TypeScript is a high-level programming language that adds static typing with optional type annotations to JavaScript. It is designed for developing large applications and transpiles to JavaScript. TypeScript may be used to develop JavaScript applications for both client-side and server-side execution. Multiple options are available for transpiling. The default TypeScript Compiler can be used, or the Babel compiler can be invoked to convert TypeScript to JavaScript. TypeScript supports definition files that can contain type information of existing JavaScript libraries, much like C++ header files can describe the structure of existing object files. This enables other programs to use the values defined in the files as if they were statically typed TypeScript entities. The TypeScript compiler is written in TypeScript and compiled to JavaScript.

tech

TS, TypeScript

Type Coercion

Type coercion (or implicit conversion) is an automatic process performed by the programming language in converting data types.

tech

Type Coercion, Implicit Conversion

Typecasting

Typecasting (or explicit conversion) is a manual process where a programmer explicitly specifies the conversion of a data type using functions or operators.

tech

Typecasting, Explicit Conversion

U-Turn Payment

A payment in which a bank or other institution from country A sends a transaction through a bank in country B using an offshore bank.

fin

UBO: Ultimate Beneficial Owner

UBO

Ultimate Beneficial Owner refers to the person or entity that is the ultimate beneficiary of the company. Certain financial and other organisations, including banks, currency exchange offices and insurers, are subject to mandatory disclosure of the UBO if doing business with any party.

fin

UBO, Ultimate Beneficial Owner

UI: User Interface

UI

The User Interface (UI) is the point of human-computer interaction and communication in a device. This can include display screens, keyboards, a mouse, and the appearance of a desktop.

tech

UI, User Interface

Uniform Distribution

A uniform distribution is a probability distribution with equally likely outcomes. A uniform distribution has equally likely outcomes. In a discrete uniform distribution, outcomes are discrete and have the same probability. In a continuous uniform distribution, outcomes are continuous and infinite. In a normal distribution, data around the mean (average) occur more frequently than occurrences farther from it. Uniform distributions can be plotted on charts.

stats

Unilateral Sanctions

These are sanctions imposed by a single country against a targeted entity. These are generally considered less effective than multilateral sanctions. Still, they serve to target specific offensive practices on behalf of imposing nations.

aml

Unrestricted Electronic Money

Electronic money that can be used without any limitations, subject to regular AML and regulatory requirements.

fin, aml, legal

Unrestricted Electronic Money, Unrestricted eMoney

Uptime

The time that a server is in operation.

tech

URI: Uniform Resource Identifier

URI

Uniform Resource Identifier is a unique sequence of characters that identifies a logical or physical resource used by web technologies. URIs may be used to identify anything, including real-world objects, such as people and places, concepts, or information resources such as web pages and books.

tech

URI, Uniform Resource Identifier

URL: Uniform Resource Locator

URL

Uniform Resource Locator, colloquially termed a web address, is a reference to a web resource that specifies its location on a computer network and a mechanism for retrieving it. A URL is a specific type of Uniform Resource Identifier.

tech

URL, Uniform Resource Locator

URN: Uniform Resource Name

URN

Uniform Resource Name is used to identify resources in a permanent way, even after that resource does not exist anymore. Unlike a URL, a URN doesn’t provide any information about locating the resource but simply identifies it, just like a pure URI. In particular, a URN is a URI whose scheme is URN.

tech

URN, Uniform Resource Name

UX: User Experience

UX

User eXperience (UX) is how a user interacts with and experiences a product, system or service. It includes a person's perceptions of utility, ease of use, and efficiency.

tech

UX, User Experience

Value date

A value date refers to when a transaction becomes settled. 💡 A value date is not the same as a transaction date.

fin

Variable

A variable is a named storage location in a computer's memory that holds a value or data. Variables are used to store and manipulate data during program execution. They have a specific data type (integer, string, or boolean) and can be assigned new values throughout the program.

tech

Variance

Variance is a measurement of how far each number, in a dataset, is from the mean (i.e., average), and thus from every other number in the set. Variance is a measurement of the spread between numbers in a dataset. In particular, it measures the degree of dispersion of data around the sample's mean. Investors use variance to see how much risk an investment carries and whether it will be profitable. Variance is also used in finance to compare the relative performance of each asset in a portfolio to achieve the best asset allocation. The square root of the variance is the standard deviation.

stats

VAT: Value Added Tax

VAT

Value added tax (VAT) is a consumption tax that applies to most goods and services. It is classified as an indirect tax, meaning that while it is paid by consumers, it is collected and remitted to the tax authorities by businesses.

fin

VAT, Value Added Tax

Verhoeff algorithm

The Verhoeff algorithm is a checksum for error detection first published by Dutch mathematician Jacobus Verhoeff in 1969. It was the first decimal check digit algorithm which detects all single-digit errors, and all transposition errors involving two adjacent digits, which was at the time thought impossible with such a code. The method was independently discovered by H. Peter Gumm in 1985, this time including a formal proof and an extension to any base.

tech

Versioning

The practice of creating collaborative data sharing and editing controls to ensure that a product continues to give consumers more choices without having to upgrade to the latest version. Versioning is an integral part of the API design. It arms developers with the ability to enhance their API without disintegrating the client’s applications when new versions are developed.

tech

VIBAN: Virtual IBAN

VIBAN

A unique International Bank Account Number (IBAN) assigned to a customer that operates within an existing physical bank account. Virtual IBANs facilitate the receipt and tracking of payments, allowing businesses to streamline reconciliation processes by segregating transactions under different virtual IBANs. While they appear as distinct accounts for payment purposes, all transactions ultimately settle into the primary physical account, enhancing transparency and efficiency in financial management without the need to open multiple bank accounts.

fin

View

In relational databases, a view is a table-like representation of a stored query. Views can be used as tables in many contexts, but instead of being part of the underlying data structure, they are derived from the results of their query. Views are useful for constructing more complex representations of data than exists in the underlying schema. For example, a view might join a few tables and display only a few relevant columns, which can help make the data more useable even if a different structure is preferable for storage due to consistency or performance reasons.

tech

Virtual Currency

Digital currencies that are not regulated by any government. Electronic Money Institutions may facilitate transactions involving virtual currencies in some cases.

fin

Volatility

Volatility is a statistical measurement of the degree of variability (dispersion) of the returns of a security or market index. Volatility represents how greatly an asset’s prices swing around the mean price. There are several ways to measure volatility, including beta coefficients, option pricing models, and standard deviation of returns. Volatile assets are often considered riskier than less volatile assets because the price is expected to be less predictable. Implied volatility measures how volatile the market will be, while historical volatility measures price changes over past time periods.

stats, fin

VoP: Verification of Payee

VoP

Verification of Payee (VoP) refers to a security process that checks if a name on a bank account matches an account number provided for a payment. It prevents fraud and misdirected payments by verifying payee details against the recipient bank's records before a transaction is completed. 💡 This is an EU-specific service.

fin

VoP, Verification of Payee

Vostro Account

A vostro account is an account held by a foreign bank, in domestic currency, at our bank. Think of it as “your money on deposit at our bank”.

fin

Web3

Web3 refers to the next generation of the internet, built on decentralised technologies like blockchain. It aims to empower users with greater control over data, money, digital identity, and assets. Web3 is enabling new business models through peer-to-peer transactions and smart contracts and is fostering innovation and transparency across digital platforms and services.

tech

Webhook

Or web callback or HTTP push API, is a way for an app to provide other applications with real-time data. Webhooks deliver data directly to other applications, so data is available immediately.

tech

Weight

In the context of searching, a search weight is an arbitrary value assigned to different categories of data designed to influence the priority of the item when analysed for relevance. Assigning a heavy weight to a specific type of information will cause a query engine to assign greater significance to that category compared to other categories when compiling a list of relevant results.

tech

Welch’s T-Test

Welch’s T-Test is a version of the T-Test and is a statistical test used to compare the means of two groups, particularly when two groups have unequal variances and/or sample sizes.

stats

Whistleblower

A whistleblower is a person who voluntarily provides information to the general public, or someone in a position of authority, about dishonest or illegal business activities occurring at an organisation. This organisation could be a government department, a public company or a private organisation.

aml

White Box Testing

White box testing or glass box testing is a software testing technique that tests the software by using the knowledge of internal data structures, physical logic flow, and architecture at the level of source code. This testing works by looking at testing from a developer’s point of view. This testing is also known as glass box testing, clear box testing, structural testing, or non-functional testing.

tech

White Box Testing, Glass Box Testing, Clear Box Testing, Structural Testing, Non-Functional Testing

Whitelist

A list of individuals and entities whose characteristics trigger a hit or alert by an AST (Automated Screening Tool), but who are found not to be a match to a sanctions list. Some ASTs allow users to attach supplementary information that supports the conclusion that this person or entity is not a sanctions target and warrants inclusion on the whitelist.

aml

Whitespace

Whitespace refers to characters which are used to provide horizontal or vertical space between other characters. Whitespace is often used to separate tokens in HTML, CSS, JavaScript, and other computer languages. Whitespace characters and their usage vary among languages.

tech

Wilcoxon Test

A Wilcoxon test is a non-parametric statistical test that compares two paired groups. It is used in statistical analysis to compare two paired groups. The Wilcoxon test compares two paired groups and comes in two versions, the rank sum test, and the signed-rank test. The goal of the test is to determine if two or more sets of pairs are different from one another in a statistically significant manner. Both versions of the model assume that the pairs in the data come from dependent populations, i.e., following the same person or share price through time or place.

stats

Wire Transfer

A wire transfer refers to an electronic transfer of funds via a network that is administered by banks and transfer service agencies around the world. You must pay for a wire transfer when it is sent by the remitting bank and provide the recipient's name and bank account number, as well as the amount transferred. Most wire transfers can take as long as 2 business days to process. International wire payments are monitored by the Office of Foreign Assets Control to ensure the money is not being wired to terrorist groups or for money laundering purposes. All transfers go through a domestic automated clearing house before they are settled.

fin

Wisdom

Wisdom is knowledge applied in action. To get to wisdom, we must answer questions such as ‘why do something’ and ‘what is best’. We can also say that, if data and information are like a look back to the past, knowledge and wisdom are associated with what we do now and what we want to achieve in the future.

gen

Wolfsberg Group

The Wolfsberg Group is an association of thirteen global banks that aims to develop frameworks and guidance for managing financial crime risks, particularly in the areas of Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT). The Group provides best practice standards and principles for financial institutions to enhance their AML/CFT controls and promote transparency and integrity in the financial system.

aml

Write Operation

In the context of databases, a write operation is any database action that modifies the stored data. This includes inserting new records, deleting records, and updating existing records to new values.

tech

WSDL: Web Services Description Language

WSDL

The Web Services Description Language refers to the standard that defines the information required to use the web service. WSDL is prepared in XML format.

tech

WSDL, Web Services Description Language

XER: XML Encoding Rules

XER

XML Encoding Rules are a set of ASN.1 encoding rules for formatting data in XML.

tech

XER, XML Encoding Rules

XML Injection

This type of attack manipulates or compromises the logic of an XML application or service. It can lead to various outcomes, including unauthorised access to information and denial of service. XML Injection is a security vulnerability where attackers inject malicious XML data into a web application's XML processing function. This occurs when an application accepts XML input from users and fails to validate or sanitise it before processing properly.

tech

XML Schema

XML data that describes the relationship between elements and attributes in some other class of XML data. A schema may or may not include data type representations. XML schemas are a more advanced alternative to DTDs.

tech

XML: Extensible Markup Language

XML

​ The eXtensible Markup Language is a markup language and file format for storing, transmitting, and reconstructing arbitrary data. It defines a set of rules for encoding documents in a format that is both human-readable and machine-readable. XML standardizes data communication between platforms that exchange data using the internet. It is often used for data transmission. XML is used in many areas such as transferring databases, creating sitemaps for websites, defining dependencies in software packages, creating file systems. ​

tech

XML, Extensible Markup Language

XOR

A Boolean operation that outputs True if either, but not both, of the input values are True.

tech

XPath Injection

Similar to SQLi, XPath injections involve the injection of malicious XPath queries to manipulate XML data. It can lead to unauthorised access to data. XPath Injection attacks occur when a web site uses user-supplied information to construct an XPath query for XML data.

tech

XSS: Cross-Site Scripting

XSS

Cross-site scripting (XSS) is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy. XSS effects vary in range from petty nuisance to significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner network.

tech

XSS, Cross-Site Scripting

YAML: Yet Another Markup Language

YAML

A markup language that can be used with many languages and is easy to read and process. With YAML, which is used for configuration and data storage, data can be shaped, and data structures can be processed. YAML can be used to transfer data between different programming languages. YAML is a human-readable data-serialization language. It is commonly used for configuration files and in applications where data is being stored or transmitted.

tech

YAML, Yet Another Markup Language

Yield curve

A curve describing the relationship between the interest rate or yield and the maturity at a given point in time for debt securities with the same credit risk but different maturity dates. The slope of the yield curve can be measured as the difference between the interest rates at two selected maturities.

fin

Z-Test

A statistical test used to determine whether two population means are different when the variances are known and the sample size is large. A Z-Test is a hypothesis test for data that follows a normal distribution. A Z-statistic, or Z-Score, represents the result from the Z-Test. Z-Tests are closely related to T-Tests, but T-Tests are best performed when an experiment has a small sample size. Z-Tests assume the standard deviation is known, while T-Tests assume it is unknown.

stats

Zero-day attack

A zero-hour or day zero attack is a computer threat or virus that tries to exploit computer application vulnerabilities that are unknown to others or the software developer, also called zero-day vulnerabilities. Zero-day exploits (actual software that uses a security hole to carry out an attack) are used or shared by attackers before the developer of the target software knows about the vulnerability.

tech