Security

Security

1. Authenticication: Prooving that you are you.

   • Password: word or sequence of numbers to save ur account
     • Token: Device to enter or log in your bank account.
     • False Negative: happens when a security system is wrong to find a threat

2. Hacking: Is when you got information of unauthorised data about something.

   • Social Engineering: Social engineering is the illegal practice of manipulating legitimate users to obtain sensitive information.
     • Packet Sniffer: A sniffer program designed for data packets traveling over the Internet.
       • Vulnerability scanner tools: A computer program designed to assess the vulnerabilities of a computer, computer system, network, or application.

3. Virus: self-replicating, malicious software capable of infecting computer systems and spreading to other devices.

   • Worm: is a self-replicating malicious software that spreads across computer networks, exploiting vulnerabilities, and causing widespread damage and infections.
   • Trojan horses: are deceptive software that appears benign but actually contains malicious code, allowing unauthorized access or causing harm to a system.
     • Spyware: Spyware is malicious software that covertly gathers information from a user's device and activities, often without their knowledge or consent, posing a significant privacy threat.

4. Rootkits: A rootkit is a stealthy type of malicious software that grants unauthorized access and control over a computer system, concealing its presence from users and security tools.

   • Zombies: are criminal gangs on the web that hack, attack and do bad things for the web.
     • Botnet: is a network of compromised computers, or "bots," controlled by a single entity, typically used for malicious activities such as DDoS attacks or spam distribution.
       • Denial of service attack: A denial of service (DoS) attack is an attempt to disrupt or disable a network, server, or service, making it inaccessible to legitimate users.

5. SPAM: refers to unsolicited and often deceptive or malicious emails, messages, or content sent in bulk, commonly used for phishing, scams, or spreading malware.

   • Bots: Spam bots are automated programs designed to flood platforms, websites, or communication channels with large volumes of unsolicited and often malicious content.
     • Bayesian Filtering: is a statistical-based technique used in security to classify and filter emails or data by analyzing probability distributions, often to detect spam or malware.
       • CAPTCHA: Completely Automated Public Turing test to tell Computers and Humans Apart) is a security measure that verifies user interactions by distinguishing between human users and automated bots.

6. Encryption: Encryption is a security technique that transforms data into a coded format, ensuring confidentiality and preventing unauthorized access during transmission or storage.

   • Plaintext: refers to data or information that is easily readable and understandable without any encryption or obfuscation, making it vulnerable to unauthorized access.
     • Ciphertext: is encrypted data or text that has been transformed into a non-readable format to protect it from unauthorized access.
       • Caesar Cipher: is a simple substitution cipher technique where each letter in the plaintext is shifted a fixed number of positions down the alphabet.
         • Private key: is a secret cryptographic key used in asymmetric encryption to securely generate digital signatures and decrypt data.

Bilder und Dateien der Mindmap