GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Karteikarten

Security+ Acronyms

Lyndsay Badding Information Technology CompTIA Englisch 200 Karten

Karten in diesem Stapel (200)

  1. 13DESTriple Data Encryption Standard
    type of cryptography where block cipher algorithms are applied 3 times to each data block
  2. 2AAAAuthentication, Authorization, and Accounting
    security framework that controls access to computer resources, enforces policies, audits usage
  3. 3ABACAttribute-Based Access Control
    access control based on attributes associated with the subject, object, requested operations, environment conditions
  4. 4ACLAccess Control List
    set of rules to allow or deny access
  5. 5ADActive Directory
    Windows directory service used to manage users, apps, data, etc.
  6. 6AESAdvanced Encryption Standard
    symmetric block cipher algorithm
  7. 7AHAuthentication Header
    packet header that provides origin authentication, data integrity, and replay protection
    it does not provide confidentiality
  8. 8AISAutomated Indicator Sharing
    real-time exchange of machine-readable threat indicators and defensive measures
  9. 9ALEAnnualized Loss Expectancy
    SLE x ARO
  10. 10APAccess Point
    802.11 logical connection point
  11. 11APIApplication Programming Interface
    set of definitions and protocols for building and integrating app software
  12. 12APTAdvanced Persistent Threat
    a sophisticated, sustained cyberattack
    threat actor remains undetected for a prolonged period of time
  13. 13AROAnnualized Rate of Occurrence
    the number of incidents per year for a risk or threat
  14. 14ARPAddress Resolution Protocol
    contains the MAC table
  15. 15ASLRAddress Space Layout Randomization
    randomizes the location of system executables in RAM
    prevents buffer overflow
  16. 16ASPActive Server Pages
    Microsoft's server-side scripting language for dynamic web pages
  17. 17ATT&CKAdversarial Tactics, Techniques, & Common Knowledge
    globally accessible knowledge database
  18. 18AUPAcceptable Use Policy
    set of rules user must accept before use of resources
  19. 19AVAntiVirus
  20. 20BASHBourne Again SHell
    shell used in a text window mostly on Linux
  21. 21BCPBusiness Continuity Planning
    process of creating a plan to identify major risks, preventatives, and continuity of essential processes
  22. 22BGPBorder Gateway Protocol
    language spoken by routers to determine how to send packets
  23. 23BIABusiness Impact Analysis
    identifies critical systems, functions, and processes and how quickly they need to be recovered/restored
  24. 24BIOSBasic Input/Output System
    initializes hardware, then loads and starts the OS
  25. 25BPABusiness Partnership Agreement
    legal agreement that outlines terms, conditions, and expectations
  26. 26BPDUBridge Protocol Data Unit
    STP message unit to detect loops in network topologies
    contains info regarding ports, switches, port priority and addresses
  27. 27BSSIDBasic Service Set IDentifier
    MAC address of AP or wireless router
  28. 28BYODBring Your Own Device
  29. 29CACertificate Authority
    trusted entity that issues SSL certificates
  30. 30CAPTCHACompletely Automated Public Turing test to tell Computers and Humans Apart
  31. 31CARCorrective Action Report
    indicates type of investigation or action taken to address the non-conformance or potential for non-conformance
  32. 32CASBCloud Access Security Broker
    software that sits between a cloud service consumer and provider
    enforces org security policies through risk ID and regulation compliance
  33. 33CBCCipher Block Chaining
    a sequence of bits are encrypted as a single unit, or block, with a cipher key applied to the entire block
  34. 34CBTComputer Based Training
  35. 35CCMPCounter-mode/CBC-MAC Protocol
    used with AES
    128-bit block ciphers
    802.11i
  36. 36CCTVClosed-Circuit TeleVision
  37. 37CERTComputer Emergency Response Team
    is a registered mark by Carnegie Mellon
    have to apply for authorization to use this term
  38. 38CFBCipher FeedBack
    stream mode
    feedback = name for chaining when used in stream modes
  39. 39CHAPChallenge Handshake Authentication Protocol
    used with PPP
    3-way handshake
    uses an encrypted hash
  40. 40CIOChief Information Officer
    oversees people, processes and technologies within a company's IT org
  41. 41CIRTComputer Incident Response Team
    interchangeable with CSIRT
  42. 42CISCenter for Internet Security
    non-profit org that sets standards for cyber security
  43. 43CMSContent Management System
    software platform that allows users to build and manage a website with limited technical knowledge and resources
    can be open source, prop., or SaaS
  44. 44CNCommon Name
    also known as FQDN
  45. 45COOPContinuity Of Operations Planning
    procedures and guidance to sustain MEFs at an alternate site for up to 30 days
    mandated by federal directives
  46. 46COPECorporate-Owned Personally Enabled
    employee is able to use device as their own, but company still owns it
  47. 47CPContingency Planning
  48. 48CRCCyclic Redundancy Check
    integrity check using a binary solution
  49. 49CRLCertificate Revocation List
  50. 50CSACloud Security Alliance
    organization that defines best practices for a secure cloud computing environment
  51. 51CSIRTComputer Security Incident Response Team
    interchangeable with CIRT
  52. 52CSOChief Security Officer
    responsible for the physical security and safety of employees, facilities, and assets
  53. 53CSPCloud Service Provider
  54. 54CSRCertificate Signing Request
    created on the server where the cert will be installed
  55. 55CSRFCross-Site Request Forgery
    also XSRF
    attack that forces users to submit a request to a web app that they are already authenticated to
  56. 56CSUChannel Service Unit
    used to convert digital signals from a router to a network circuit such as T1
    similar to a modem
  57. 57CTMCounTer-Mode
    turns a block cipher into a stream cipher
    adds a counter to each block, which is also encrypted
  58. 58CTOChief Technology Officer
    responsible for settings security standards that dictate how the org chooses to work with or acquire tools form vendors
  59. 59CVECommon Vulnerabilities and Exposures
    a glossary that classifies vulnerabilities
  60. 60CVSSCommon Vulnerability Scoring System
    a method used to supply a qualitative measure of severity
  61. 61CYODChoose Your Own Device
  62. 62DACDiscretionary Access Control
    identity-based access control
  63. 63DBADataBase Administrator
    ensures the security of a database
  64. 64DDoSDistributed Denial of Service
    multiple systems target a single system
  65. 65DEPData Execution Prevention
    built into Windows to prevent malicious code from being executed from system memory
  66. 66DERDistinguished Encoding Rules
    key file format for cryptographic data
  67. 67DESData Encryption Standard
    outdated symmetric key method of data encryption
    block cipher that encrypts in 64-bit blocks
  68. 68DHCPDynamic Host Configuration Protocol
    assigns IP addresses
  69. 69DHEDiffie-Hellman Ephemeral
    securely establishes a channel to create and share a key for symmetric key algorithms
  70. 70DKIMDomain Keys Identified Mail
    email authentication method using a digital signature
  71. 71DLLDynamic-Link Library
    contains the resources an app needs to run successfully
    could include images and a library of executable functions
  72. 72DLPData Loss Prevention
    implements a set of processes, procedures, and tools to prevent the loss, misuse, or unauthorized access of sensitive info
  73. 73DMARCDomain Message Authentication Reporting and Conformance
    email validation system that detects and prevents email spoofing
  74. 74DNATDestination Network Address Translation
    changes the destination address in the IP header for packets coming into the LAN
  75. 75DNSDomain Name System
    translates FQDN to IP address
  76. 76DNSSECDomain Name System SECurity extensions
    suite of extensions that improve DNS security by verifying that DNS results have not been tampered with
  77. 77DoSDenial of Service
  78. 78DPOData Protection Officer
    ensures the org processes personal data in compliance with applicable data protection rules
  79. 79DRPDisaster Recovery Plan
  80. 80DSADigital Signature Algorithm
    cryptographic algorithm used to generate digital signatures, authenticate the sender of a digital message, and prevent tampering
  81. 81DSLDigital Subscriber Line
  82. 82EAPExtensible Authentication Protocol
    protocol that acts as a framework and transport for other authentication protocols
  83. 83ECBElectronic Code Book
    legacy to CBC
    symmetric encryption scheme which replaces each block of clear text with block of ciphertext
  84. 84ECCElliptic-Curve Cryptography
    public key cryptographic algorithm used to perform critical security functions, including encryption, authentication, and digital signatures
    more secure than RSA or DSA
  85. 85ECDHEElliptic-Curve Diffie-Hellman Ephemeral
    key exchange algorithm that allows 2 parties to establish a shared secret over an insecure communication channel
  86. 86ECDSAElliptic-Curve Digital Signature Algorithm
    DSA which uses keys derived from ECC
  87. 87EDREndpoint Detection and Response
    an endpoint security solution that continuously monitors end-user devices to detect and respond to cyber threats like malware
  88. 88EFSEncrypted File System
    provides cryptographic protection of individual files on NTFS volumes using a public-key system
  89. 89EIPExtended Instruction Pointer
    used to track the address of the current instruction running inside the application
  90. 90EOLEnd Of Life
    ending of patches, updates, and sale of equipment
  91. 91EOSEnd Of Service
    ending of services and updates for server, storage, and network equipment
  92. 92ERPEnterprise Resource Planning
    the practice of taking effective security measures to prevent infiltration inside of ERP systems
    ERP systems unify all different platforms and departments
  93. 93ESNElectronic Serial Number
    used in mobile phones
  94. 94ESPEncapsulating Security Payload
    only authenticates the IP datagram portion of the IP packet
    can be used with AH
  95. 95ESSIDExtended Service Set IDentifier
    a set of wireless networks that have the same SSID
  96. 96FACLFile system Access Control List
    a table that informs the OS of access privileges a user has to a system object
  97. 97FDEFull Disk Encryption
  98. 98FIMFile Integrity Monitoring
  99. 99FPGAField Programmable Gate Array
    hardware circuit that a user can program to carry out logical operations
  100. 100FRRFalse Rejection Rate
    (FRR = FAR) = CER
  101. 101FTPFile Transfer Protocol
    transfer files between computer systems and servers via the internet
  102. 102GCMGalois/Counter Mode
    mode of operation for AES algorithm
    symmetric-key cryptographic block ciphers
  103. 103GDPRGeneral Data Protection Regulation
    an EU law that governs the way we can use, process, and store personal data (PII)
  104. 104GPGGNU Privacy Guard
    software replacement for PGP
    security tool for encrypting files
  105. 105GPOGroup Policy Object
    collection of settings that define what a system will look like and how it will behave for a defined group of computers or users
  106. 106GPSGlobal Positioning System
  107. 107GPUGraphics Processing Unit
  108. 108GREGeneric Routing Encapsulation
    tunneling protocol used to transport multicast, broadcast, and non-IP packets like IPX
  109. 109HAHigh Availability
    99.9% 8h 45m 57s
    99.99% 52m 35.7s
    99.999% 5m 15.6s
    99.9999% 31.6s
    99.99999% 3.2s
  110. 110HDDHard Disk Drive
    non-volatile memory
    has moving parts to write data
  111. 111HIDSHost-based Intrusion Detection System
    monitor the system and detect anomalies
  112. 112HIPSHost-based Intrusion Prevention System
    behavioral analysis and network filtering to monitor running processes, files and registry keys
    prevents unknown malicious attacks
  113. 113HMACHash-based Message Authentication Code
    cryptographic authentication technique that uses a hash function and a secret key
  114. 114HOTPHMAC-based One-Time-Password
  115. 115HSMHardware Security Module
    device that generates and stores cryptographic keys, and digital signatures
    encrypts and decrypts data
  116. 116HSMaaSHardware Security Module as a Service
  117. 117HTMLHyperText Markup Language
    language used to create webpages
  118. 118HTTPHyperText Transfer Protocol
    how resources are exchanged between client devices and servers over the internet
  119. 119HVACHeating, Ventilation, Air Conditioning
    referring to the monitoring system attached to these functions
  120. 120IaaSInfrastructure as a Service
    pay-as-you-go services for using virtual equipment like servers, storage, network devices, VMs
  121. 121IAMIdentity and Access Management
    framework of policies, processes, and technologies that enable orgs to manage digital identities and control user access to critical corporate info
  122. 122ICMPInternet Control Message Protocol
    used to troubleshoot and report error conditions
    transfers info about other protocols
  123. 123ICSIndustrial Control Systems
  124. 124IDEAInternational Data Encryption Algorithm
    block cipher that operates on 64-bit plaintext and 128-bit key
    reversible
  125. 125IDFIntermediate Distribution Frame
    a remote room or closet connected to MDF
    houses hubs and patch panels
  126. 126IdPIdentity Provider
    a service that stores and verifies user identity
  127. 127IDSIntrusion Detection System
    monitoring system that detects suspicious activities and generates alerts when they are detected
  128. 128IEEEInstitute of Electrical and Electronics Engineers
    sets standards for many industries
    publishes journals, magazines, and conference proceedings
  129. 129IKEInternet Key Exchange
    IPSec-based tunneling protocol that provides a secure VPN communication channel
  130. 130IMInstant Messaging
  131. 131IMAP4Internet Message Access Protocol version 4
    how you view your email
    enables the use of folders
  132. 132IoCIndicators of Compromise
    clues and evidence of a security breach
  133. 133IoTInternet of Things
    devices embedded with sensors, software, and other technologies for the purpose of exchanging data with other devices and systems over the internet
  134. 134IPInternet Protocol
    communication standard used to uniquely identify systems on a computer network or across the internet
  135. 135IPSIntrusion Prevention System
    hardware or software network security tool that continuously monitors a network for malicious activity and takes action to prevent it, including reporting, blocking, or dropping it
  136. 136IPSecInternet Protocol Security
    suite of protocols between 2 communication points across the network that provide data CIA
    defines the encrypted, decrypted and authenticated packets
  137. 137IRIncident Response
  138. 138IRCInternet Relay Chat
    text-based chat system for IM
  139. 139IRPIncident Response Plan
  140. 140ISAInterconnection Security Agreement
    specifies the technical and security requirements of interconnection between organizations
  141. 141ISFWInternal Segmentation FireWall
    meant to protect network if an attacker breaches the perimeter
    can be placed anywhere inside network
  142. 142ISOInternational Organization for Standardization
    provides a security framework that orgs can tailor to specific security risks
  143. 143ISPInternet Service Provider
  144. 144ISSOInformation Systems Security Officer
    maintains the appropriate security posture for an information system or program
  145. 145ITCPIT Contingency Plan
  146. 146IVInitialization Vector
    arbitrary number used with a secret key for data encryption to foil cyber attacks
    IV = nonce
  147. 147KDCKey Distribution Center
    an authentication server that performs the initial authentication and issues TGTs for users
    Kerberos is a KDC
  148. 148KEKKey Encryption Key
    key that encrypts other key
    stored in DES key storage for local use
    organization retains the KEK
  149. 149L2TPLayer 2 Tunneling Protocol
    an extension of PPTP used by ISPs to enable VPNs
  150. 150LANLocal Area Network
  151. 151LDAPLightweight Directory Access Protocol
    makes it possible for apps to query user info rapidly
    designed to maintain and access directories services within a network
  152. 152LEAPLightweight Extensible Authentication Protocol
    Cisco proprietary version of EAP
    encrypts data using WEP keys
    uses username and password for authentication
  153. 153MaaSMonitoring as a Service
  154. 154MACMedia Access Control
  155. 155MAMMobile Application Management
  156. 156MANMetropolitan Area Network
  157. 157MBRMaster Boot Record
  158. 158MD5Message Digest 5
    cryptographic hash algorithm used to generate 128-bit digest from a string of any length
    provides the means for digital signature verification
  159. 159MDFMain Distribution Frame
    demarcation point that interconnects public and private lines in a building
  160. 160MDMMobile Device Management
  161. 161MFAMultiFactor Authentication
  162. 162MFDMultiFunction Device
    device that can print, copy, scan, and fax
    usually larger in size with more features than a MFP
  163. 163MFPMultiFunction Printer
    print, copy, scan, and fax
  164. 164MLMachine Learning
  165. 165MMSMultimedia Message Service
    extension of SMS
  166. 166MOAMemorandum Of Agreement
    a written formal understanding of an agreement
    establishes a legal conditional agreement
  167. 167MOUMemorandum Of Understanding
    common=cause agreement, not legally binding
    used to demonstrate the orgs have consulted and coordinated
  168. 168MPLSMultiProtocol Label Switching
    networking technology that routes traffic using the shortest path based on labels
  169. 169MSAMeasurement Systems Analysis
    a tool used to determine a selected measurement systems' accuracy
  170. 170MS-CHAPMicrosoft Challenge Handshake Authentication Protocol
    challenge and response authentication method that PPP servers use to verify the identity of a remote user
  171. 171MSPManaged Service Provider
    delivers services via ongoing and regular support and active administration on customers' premises, MSP's data center, or third party data center
  172. 172MSSPManaged Security Service Provider
    offers network security services to an organization
  173. 173MTBFMean Time Between Failures
    what is broken is repaired
    (total hrs of operation)/(# of failures)
  174. 174MTTFMean Time To Failure
    what is broken is replaced
    (total hrs of operation)/(total # assets)
  175. 175MTTRMean Time To Repair
    (total reactive maintenance time)/(# of reactive maintenance actions) [during a given time period]
  176. 176MTUMaximum Transmission Unit
    a measurement in bytes of the largest data packets that an internet connected device can accept
  177. 177NACNetwork Access Control
    the process of restricting unauthorized users and devices from gaining access to a corporate or private network
  178. 178NASNetwork-Attached Storage
    a file-dedicated storage device that makes data continuously available for employees to collaborate effectively over a network
  179. 179NATNetwork Address Translation
    translating private IP addresses to public, and vice versa
  180. 180NDANon-Disclosure Agreement
  181. 181NFCNear Field Communication
    technology that enables 2 devices to exchange data when in close proximity
  182. 182NFVNetwork Function Virtualization
    the replacement of network appliance hardware with VMs
  183. 183NGFWNext-Generation FireWall
    operates on all 7 layers of OSI model
    stateful inspection of network traffic
  184. 184NG-SWGNext Generation Secure Web Gateway
    cloud-based security solution
    similar to a firewall, but used with a firewall
    inspects apps, not packets
  185. 185NICNetwork Interface Card
  186. 186NIDSNetwork-based Intrusion Detection System
    monitors and detects malicious activity on a network
  187. 187NIPSNetwork-based Intrusion Prevention System
    monitors, detects, and prevents malicious activity on a network
  188. 188NISTNational Institute of Standards and Technology
    helps businesses better understand, manage, and reduce their cybersecurity risk and protect networks and data
  189. 189NOCNetwork Operations Center
    responsible for maintaining a company's computer system's technical infrastructure
  190. 190NTFSNew Technology File System
    Windows process used for storing, organizing, and finding files on a hard disk efficiently
  191. 191NTLMNew Technology LAN Manager
    challenge-response authentication protocol used to authenticate a client to a resource on an AD domain
  192. 192NTPNetwork Time Protocol
    used to synchronize with computer clock time sources in a network
  193. 193OCSPOnline Certificate Status Protocol
    alternative to CRL to check the validity of a certificate
  194. 194OIDObject IDentifier
    a globally unique identifier of a data object
  195. 195OSOperating System
  196. 196OSIOpen Systems Interconnection
    model of layers 1-7
  197. 197OSINTOpen Source INTelligence
  198. 198OSPFOpen Shortest Path First
  199. 199OTOperational Technology
    use of hardware and software to monitor and control physical processes, devices, and infrastructure
  200. 200OTAOver-The-Air
    refers to the distribution of information wirelessly

Informationen

Beschreibung
CompTIA Information Technology (Security+ ) Karteikarten am Security+ Acronyms, erstellt von Lyndsay Badding am 24/03/2023.
Erstellt von
Lyndsay Badding · Mär 2023
Aktualisiert
21 Apr 2023
Aufrufe
17
Bewertung

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck