3.2 host or application security solutions Flashcards
EDR
Endpoint Detection and Response
a system that monitors and analyzes security threat information from endpoints and computer workstations.
DLP
data loss prevention
detects and prevents data breaches.
NGFW
next generation firewall
more powerful than traditional firewalls and have additional features
HIDS
host based intrusion detection system
uses log files to identify intrusions
HIPS
host based intrusion prevention system
block known attacks
TPM
trusted platform module
computer chip
enforce software licenses, store passwords, certificates or encryption keys.
ELAM
Early launch anti-malware (ELAM)provides protection for the computers in your network when they start up and before third-party drivers initialize.
fuzzing
a quality assurance technique that detects security vulnerabilities and coding errors in software, operating systems, and networks.
It involves sending a large amount of random data, called fuzz, to the test subject to make it crash.
static analysis
Static code analysis is the process of analyzing code without running it.
It can detect errors, bugs, security flaws, and quality issues.
Hardening
- Open ports and services
- Registry
- Disk encryption
- OS
- Patch management
- Third-party updates
- Auto-update
SED
self encrypting drive
hardware based full disk encryption
opal - SED standard
Measured Boot
protects your machine from rootkits and other malware. Measured Boot will check each start up component including the firmware all the way to the boot drivers and it will store this information in what is called a Trusted Platform Module (TPM).
dynamic code analysis
Dynamic code analysis is the process of analyzing code while it is running. It can measure performance, behavior, code functionality, memory leaks, and resource consumption.
Opal
a set of specifications for self-encrypting drives (SEDs)
OPAL Security is a hardware-based encryption standard
Trusted Boot
In the kernel | OS validation | hardware, firmware
Trusted Boot verifies the digital signature of the OS in the kernel
