IS4670 CHAPTER 8 TERMS & DEFINITIONS

Question 1

• A step-by-step procedure that a computer follows to solve a problem.

Answer 1

Algorithm

Question 2

– In Microsoft’s NTFS (NT File System), metadata associated with a file system object.

Answer 2

Alternate data streams (ADS)

Question 3

• A difficult-to-detect way to bypass normal authentication, gain remote access to a computer, obtain access to plaintext, and so on. A rootkit may install this to enable an attacker to access the system, regardless of changes to system accounts or other access control techniques.

Answer 3

Backdoor

Question 4

• The data that is used to hide secret data in steganography. Today, multimedia files, such as pictures or sound, are most commonly used as carrier messages to hide secret data. This is also called a cover file or carrier message.

Answer 4

Carrier file

Question 5

• A technique for passing information between computers on a network, without being detected by a firewall or an intrusion detection system. Packet crafting and protocol bending are two of these techniques.

Answer 5

Covert channel

Question 6

• A technique that allows the addition of copyright notices or other verification messages to digital audio, video, or image signals and documents.

Answer 6

Digital watermarking

Question 7

• In steganography, the data that is to be kept a secret.

Answer 7

Embedded file

Question 8

• In steganography, the process of hiding data. Also known as running the steganography algorithm.

Answer 8

Embedding

Question 9

• In steganography, the recovery of an embedded message.

Answer 9

Extraction

Question 10

• The process of collecting data about a specific network environment, usually for the purpose of finding ways to attack the target.

Answer 10

Footprinting

Question 11

• A theory which states that a system will be secure even if everything about it except the key is public knowledge.

Answer 11

Kerckhoffs’ principle

Question 12

• A type of rootkit that installs itself into the application programming interface (API). The rootkit then intercepts system calls by acting as a “man in the middle,” deciding what information and programs the user does and does not see.

Answer 12

Kernel module rootkit

Question 13

• Data about data. In a computer file, metadata provides information about a file. This information includes the means of creation, the purpose of the data, the time and date of creation, the creator or author of data, where the data was created, and what standards were used.

Answer 13

Metadata

Question 14

• A covert channel technique that involves embedding data in packet headers.

Answer 14

Packet crafting

Question 15

• To defeat copy protection in order to copy software or other files.

Answer 15

Pirate

Question 16

• A covert channel technique that involves the use of a network protocol for some unintended purpose.

Answer 16

Protocol bending

Question 17

• A form of steganography in which the sender and receiver share a secret key, called the stego key. Only a possessor of the stego key can detect the presence of an embedded message.

Answer 17

Public key steganography (PKS)

Question 18

• A program or a combination of several programs designed to hide or obscure the fact that a system has been compromised

Answer 18

Rootkit

Question 19

• A principle that attempts to provide security through the use of secrecy of design, implementation, and so on. A system that relies on this type of security may have security vulnerabilities, but its owners or designers believe that the flaws are not known, and that attackers are unlikely to find them.

Answer 19

Security through obscurity

Question 20

• A form of steganography that is based on keeping the method for embedding a secret.

Answer 20

Simple steganography

Question 21

• The process of detecting messages hidden using steganography. In other words, steganalysis is about separating cover messages from stego messages.

Answer 21

Steganalysis

Question 22

• Tools that can detect the presence of steganography

Answer 22

Steganalysis software

Question 23

• The process of hiding secret data within non-secret data.

Answer 23

Steganography

Question 24

• In secret key steganography, this is the secret key that the sender and receiver share. Only a possessor of this key can detect the presence of an embedded message.

Answer 24

Stego key

Question 25

-In steganography, the message that results from the embedding process.

Answer 25

Stego message