Glossary of Terms Page 2 Flashcards
Advanced Encryption Standard (AES)
The current U.S. government standard for symmetric encryption, widely used in all sectors.
Advanced Encryption Standard 256-bit (AES256)
An implementation of AES using a 256-bit key.
advanced persistent threat (APT)
A threat vector whose main objective is to remain on the system stealthily, with data exfiltration as a secondary task.
adware
Advertising-supported software that automatically plays, displays, or down-loads advertisements after the software is installed or while the application is being used.
air gap
The forced separation of networks, resulting in an air gap between systems. Communications across an air gap require a manual effort to move data from one network to another, as no network connection exists between the two networks.
algorithm
A step-by-step procedure–typically an established computation for solving a problem with a set number of steps.
amplification
An act of leveraging technology to increase the volume of an attack, such as pinging a network address to get all attached devices to respond.
annualized loss expectancy (ALE)
How much an event is expected to cost the business per year, given the dollar cost of the loss and how often it is likely to occur. ALE = single lose expectancy x annualized rate of occurrence.
annualized rate of occurrence (ARO)
The frequency with which an even is expected to occur on an annualized basis.
anomaly
Something that does not fit into an expected pattern.
antivirus (AV)
A software program designed to detect, mitigate, or remove malware and viruses from a system or network.
application
A program or group of programs designed to provide specific user functions, such as a word processor or web server.
application programming interface (API)
A set of instructions as to how to interface with a computer program so that the developers can access defined interfaces in a program.
applications service provider (ASP)
A company that offers entities access of the Internet to applications and services.