Glossary of Terms Page 3

Question 1

ARP poisoning

Answer 1

An attack on the ARP table where values are changed to result in misdirected traffic.

Question 2

asset

Answer 2

A resource or information that an organization needs to conduct business

Question 3

asset value (AV)

Answer 3

The value of an asset that is at risk

Question 4

asymmetric encryption

Answer 4

Also called public key cryptography, a data encryption system that uses two mathematically derived keys to encrypt and decrypt a message–a public key, available to everyone, and a private key, available to only the owner of the key.

Question 5

audit trail

Answer 5

A set of records or events, generally organized chronologically, that records what activity has occurred on a system. These records (often computer files) are often used in an attempt to re-create what took place when a security incident occurred, and they can also be used to detect possible intruders.

Question 6

auditing

Answer 6

Actions or processes used to verify the assigned privileges and rights of a user, or any capabilities used to create and maintain a record showing who accessed a particular system and what actions they performed.

Question 7

authentication

Answer 7

The process by which a subjects (such as a user’s) identity is verified.

Question 8

Authentication, Authorization, Accounting (AAA)

Answer 8

Three common functions performed upon system logic. Authentication and authorization almost always occur, with accounting being somewhat less common. Authentication and authorization are part of the access control system.

Question 9

Authentication Header (AH)

Answer 9

A portion of the IPsec, security protocol that provides authentication services and replay-detection ability. AH can be used either by itself or Encapsulating Security Payload (ESP). Refer to RFC 2402.

Question 10

availability

Answer 10

Part of the “CIA” of security, applies to hardware, software, and data specifically meaning that each of these should be present and accessible when the subject (the user) wants to access or use them.

Question 11

backdoor

Answer 11

A hidden method used to gain access to a computer system, network, or application. Often used by software developers to ensure unrestricted access to the system they create. Synonymous with trapdoor.

Question 12

backup

Answer 12

Refers to copying and storing data in a secondary location, separate from the original, to preserve the data in the event that the original is lost, corrupted, or destroyed.

Question 13

baseline

Answer 13

A system or software as it is built and functioning at a specific point in time. Serves as a foundation for comparison or measurement, providing the necessary visibility to control change