Data Security Flashcards

Question

What is symmetric key encryption?

Answer 1

The sender and receiver of a message share a single, common key (private key) that is used to encrypt and decrypt the message. If the receiving system does not know the secret key, then it cannot decrypt the message.

Answer 2

If the secret key is sent across a network and is intercepted, a hacker is able to decrypt the data and so is not generally used for this; If someone does get hold of the secret key this can cause a lot of damage because everything that has been encrypted with the key can be read; Symmetric encryption is very fast (compared to asymmetric encryption);

Answer 3

Known as public/private key encryption is when both parties have a pair of keys, one private and one public. The Public Key is kept in the open freely usable by anyone as is the encryption algorithm, however the Private Key is kept hidden. The public key is used to encrypt the data and the private key decrypts it. A message encrypted with A's public key can only be decrypted with A's private key.

Answer 4

A code used to encrypt/decrypt data that can be made public and is linked to a corresponding private key.

Answer 5

A code used to encrypt/decrypt data that is linked to a corresponding public key.

Answer 6

more complex to generate asymmetric encryption/decryption is slower as it takes longer to encrypt and decrypt the messages than symmetric encryption.

Answer 7

Attempts to confirm the identity of a user by physical characteristics, e.g. fingerprint, face, iris, DNA, hand/palm, scent/odour or behaviour, e.g. typing rhythm or voice etc.

Answer 8

Stage one – biometric reading is taken and stored in system. Stage two – when access is required a new scan is taken and compared to those on file. Stage three – if match is found then entry is permitted.

Answer 9

``` Virus Trojan Worm DoS Attacks Phishing ```

Answer 10

A small computer program attached to another program or file and usually intended to harm the data on the computer. If the virus is run it will: - copy itself onto memory sticks or other computers via a network if possible - Once enough copies are made it will aim to delete/corrupt files, wipe the hard-drive or display unwanted messages

Answer 11

Similar to a virus however involves trickery to fool a user into running a program that they think is legitimate; Malware that is hidden within another file on your computer. They give a hacker the opportunity to access a computer remotely without the knowledge of the user.

Answer 12

A worm is a sub-class of virus it uses vulnerabilities or inadequate security in systems to transmit itself across networks to other computers doesn't require human interaction to run or spread.

Answer 13

Involves bombarding a computer system with data requests so that it becomes overloaded and unable to carry out its normal operations. This usually involves a DDoS attack (where thousands of computers bombard an internet server with millions of packets of data)

Answer 14

Using fake emails or websites to try and fool a user into entering personal data and/or credit card details. E.g. email pretending to be from users bank.

Answer 15

Anti-virus: although not fool-proof having up-to-date to anti-virus will stop most threats; Educate users: Do not open attachments, software or click on web links unless you're sure it safe. Firewalls: Running firewall software will stop many threats from gaining access via a network/Internet connection;

Answer 16

A hacker tries to gain access to a computer or network by taking advantage of security weaknesses They may also take advantage of unpatched (or unknown) software vulnerabilities to gain access.

Answer 17

- Black-hat hackers | - White-hat hackers

Answer 18

break into systems for personal gain or malicious reasons;

Answer 19

break into systems for non-malicious reasons to try to find security weaknesses so they can report problems and help them to be fixed. They may work for the company in question;