Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CS 330 Final > Security Part 1 > Flashcards

Security Part 1 Flashcards

1
Q

What does encryption do?

A

renders a message unreadable so anyone seeing it won’t be able to determine the original message

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does decryption do?

A

retrieves the original message

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What impacts the strength of an encryption?

A

the number of possible keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the number of possible keys a function of?

A

The length of the key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is symmetric key encryption?

A

the same key is used to encrypt and decrypt the message and both parties must know the key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the key distribution problem?

A

both parties must know the key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What type of encryption does the key distribution problem affect and what is the solution to the problem?

A

Affects symmetric key encryption

Solved by public key encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is brute force search?

A

trying every possible key to find the actual key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does it mean to be computationally secure?

A

an encryption method is computationally secure if it will take the a very long time to crack the message using the best tech

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is an implication of Moore’s Law in regard to encryption?

A

what is secure today may not be secure years from now

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a hash function?

A

a computer function that maps input of any size onto an output of a fixed size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is public key encryption?

A

The use of two keys, a public key, and a private key, that are mathematically related in order to encrypt a message

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does a digital signature do?

A

shows the message came from the sender (not an imposter) and has not been tampered with (has data integrity)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How does a digital signature work (4 characteristics)?

A

uses a hash function to convert the message, m, to a number, ℎ()

each letter is associated with a number and they’re added together mod1000

sender and receiver agree on a hash function

only the sender could encrypt, anyone can decrypt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the steps for a digital signature from the sending side?

A
  1. Calculate the hash function, h(m)
  2. Encrypt h(m) with the sender’s private key h(m)_c
  3. Send m and h(m)_c
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the steps for a digital signature from the receiving side?

A
  1. Receive m and calculate the hash function of m, h(m)

2. Receive and decrypt h(m)_c using the sender’s public key and check to see if it equals h(m)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What do the symbols m, h(m) and h(m)_c signify in encryption?

A

m: plain text
h(m): hash of m
h(m)_c: cypher text

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When using a digital signature, how do you know if the message came from the sender and has not been tampered with?

A

The message m came from the sender if when h(m)_c is decrypted, it equals h(m)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How do you find out the sender’s public key in a reliable way?

A

Through a certificate of authority

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What do certificates have?

A

The digital signature of a known certificate authority

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is a certificate authority?

A

A small number of trusted organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What can your browser verify in regards to secure communication?

A
  • The legitimacy of the digital signature
  • Legitimacy of the certificate
  • The public key of the certificate holder
23
Q

What is HTTPS based on?

A

Using certificate authorities and certificates

24
Q

How do you acquire certificates?

A

A list of them and their public keys are included in a browser

25
What are Secure Hash Algorithms (SHA)?
A family of hashing functions
26
What effect does slightly changing the input have on SHA?
changes the hash value (the output) considerably
27
What does SHA256 do?
Maps any message to a 32 byte (256 bit) number
28
How many different output values are there for SHA256?
2^256
29
What are 3 ways people cause security problems?
1. People are careless and make mistakes 2. People are lazy (i.e. simple passwords) 3. People can be tricked into divulging confidential information
30
What are the top 3 sources of data breaches?
1. Fraud or scam 2. Stolen laptop 3. Document found in trash or unattended
31
What is a trait of all complex pieces of hardware or software?
They contain bugs and many points of vulnerability
32
What is wire tapping?
Eavesdropping on telephone lines
33
What is sniffing?
Eavesdropping on a computer network to obtain propriety information
34
What is radiation?
Wires give off an electrical signal that can be easily intercepted without damaging the wires
35
What is web scraping?
When a computer program rather than a person surfs the web looking for information
36
What is the estimated global cost of cybercrime?
Between $375 billion and $500 billion
37
What is malware?
Malicious software, software designed to cause damage to or loss of control of a computer or network
38
What are 9 types of malware?
1. computer virus 2. worm 3. torjan horse 4. phishing 5. denial of service attack 6. sniffing 7. spam 8. botnet 9. ransomware
39
What is a computer virus?
software that attaches to other programs or | data in order to be executed and can copy itself from file to file
40
What can a computer virus harm?
``` Data Program Machines The network Can open a backdoor to hackers ```
41
What is a worm?
Similar to viruses but run on their own (don't need to attach to other programs)
42
What damage can worms cause?
Same as a virus
43
How do worms spread?
Using a computer network
44
What is a trojan horse?
A software program that appears to be benign, but then does something unexpected behind the scenes
45
What harm can Trojan horses cause?
Same as a virus
46
How do trojan horses attack?
The user has to launch them
47
What is phishing?
an email or text that: 1. pretends to come from a trusted source 2. asks for confidential information
48
What is a denial of service attack?
many computers overwhelm a website requestion service in attempt to block others from using the website
49
What harm does a denial of service attack cause?
Loss of business (no data is lost)
50
What is spam?
junk email
51
What is a botnet?
A collection of computers that are used together for a common purpose
52
What is ransomware?
software that threatens to publish the victim's files or prevents the victim from accessing their files unless a ransom is paid
53
Why is public/private key encryption so secure?
Because when you encrypt with either one, the only way to decrypt is using the other key (other than brute force)
54
What is generally exchanged in public/private key encryption?
a shared key or digital signature rather than the whole message

CS 330 Final (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions