Card #51 - 100 Flashcards
Authenticating
process of determining whether someone or something is who or what they declare to be, usually done by passwords
Authentication Header (AH)
a security mechanism used in authenticating the origins of datagrams, and in guaranteeing the integrity of the information that’s being send
Authenticode
Microsoft standard for signing files and application including ActiveX controls and works with X.509 certificates and digital signatures
Authorization
process of giving someone permission to do or have something, occurs after Authentication
Availability
data and services must be available when they are needed (availability is reached through methods such as redundancies and backups)
Back door
any method by which authorized and unauthorized users are able to get around normal security measures and gain high level user access
Backup
a copy of data and/or applications contained in the IT stored on magnetic media outside of the IT to be used in the event IT data are lost
Backup power
UPS (uninterruptible power supply) gives power for a few minutes while generators are used for long-term power
Bandwidth
relative speed of a network connection
Behavior-based intrusion detection
references a baseline or learned pattern of normal system activity to identify active intrusion attempts
Biba security model
a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity
BioAPI
standard being developed by IBM, Microsoft, Novell and others that will allow different manufacturers’ biometric software to interact
Biometrics
very secure type of authentication that uses anatomical and physiological characteristics to authenticate a user, “something you are”
ex. fingerprint, voice, palm, retina, iris, facial, etc.
Birthday
a type of cryptographic attack that exploits the mathematics behind the birthday problem in probability theory
Blended Threat
a sophisticated cyber attack that utilizes a mix of malicious code, computer viruses, worms or Trojan horses and exploits multiple software or hardware vulnerabilities known to the attacker
Blind FTP
allows a user to download files only if he or she knows the exact path and file name (user cannot browse the directory structure or list directory contents)
Blocking
the action or process of obstructing movement, progress, or activity in particular (block someone form your site)`
Boot sector virus
virus that replicates itself into the master boot record of a flash drive or hard drive
Bots
remote control agents installed on your system, created to automatically perform specific operations
Broadband
general term used to refer to high-speed network connections
Browser hijacker
a malicious program that infects your Web browser and can change your home page or browser setting
Browser setting
configuration strategy to manage the risk associated with active content while still enabling trusted sites
Buffer Overflow
common type of denial-of-service attack that involves sending more traffic to a network address than the temporary data storage area is intended to hold, crashing the system
Bug
a flaw produces an undesired outcome
Bystander
a person that witnesses bullying and does nothing about it
cable trap
a locking device that prevents unauthorized unplugging of cables from computer devices
Certificate
an electric document that typically contains a public key and personal user information
Certification
comprehensive evaluation of the technical and non-technical security features of an IT and other safeguards
Certification Authority (CA)
issues certificates to entities such as users, organizations, websites and other CAs. As long as CA can be considered a trustworthy authority, the certificates issued by it can be trusted as well
CGI (Common Gateway Interface)
an interface that allows communication between websites and applications
Chain of Custody
should be established as soon as evidence is collected and maintained throughout the lifetime of evidence
CHAP (Challenge-Handshake Authentication Protocol)
an identity checking protocol that periodically re-authenticates the user during an online session
CIA Triad
Confidentiality, Integrity, Availability
Ciphertext
what encryption algorithms, or ciphers, transform an original message into
Circuit-level firewall
operates on the transport layer of the OSI model. checks if the TCP and UDP messages used to established a connection meet certain criteria
Clear signing
digital signature is added to the messages as a separate attachment while the message itself remains in clear text
Coaxial
a type of shielded and insulated copper cable that is used in computer networks and to deliver cable TV services to end users. physically strong and rigid and provides relatively good shielding against EMI and crosstalk
Cognitive password
a form of knowledge-based authentication that requires a user to answer a question, presumably something they intrinsically know, to verify their identity.
Cold site
a backup facility that has the necessary electrical and physical components of a computer facility, but not physical computer equipments
Campanion viruses
an old type of virus that poses as a legitimate file by copying its file name but uses a different extension. doesn’t modify files
Computer network
computers connected together for the purpose of sharing information and resources
computer virus
a software program capable of reproducing itself and usually capable of causing great harm to files or other programs on the same computer
Confidentiality
implemented to prevent the unauthorized disclosure of data. secret
Configuration management
process of keeping track of changes to the system
Contingency Plan
plan for emergency response, back up operations, and post-disaster recovery
Cookie
pieces of information generated by a Web server and stored in the user’s computer, ready for future access. allow for user-side customization of Web information
Copyright
the exclusive legal rights given to an originator
Countermeasures
action, device, procedure, technique or other measure that reduces the vulnerability of an information system
Crackers
someone with malicious intentions who gains unauthorized access to network or software
CRAM (Challenge-Response Authentication Mechanism)
two-level scheme for authenticating network users that functions as part of the Web’s Hypertext Transfer Protocol
