Flashcards
IIS Glossary - Chapter 4
Cards in this deck (67)
- 1access controlsControls that restrict unauthorised individuals from using information resources and are concerned with user identification.
- 2adwareAlien software designed to help pop-up advertisements appear on your screen.
- 3alien softwareClandestine software that is installed on. your computer through duplicitous methods
- 4anti-malware systems (anti-virus software)Software packages that attempt to identify and eliminate viruses, worms, and other malicious software.
- 5auditAn examination of information systems, their inputs, outputs, and processing.
- 6authenticationA process that determines the identity of the person requesting access.
- 7authorisationA process that determines which actions, rights, or privileges a person has based on verified identity.
- 8back doorTypically a password, known only to the attacker, that allows the attacker to access the system without having to go through any security procedures.
- 9biometricsThe science and technology of authentication (i.e. establishing the identity of an individual) by measuring the subject's physiological or behavioural characteristics.
- 10blacklistingA process in which a company identifies certain types of software that are not allowed to
- 11botA computer that has been compromised by, and is under the control of, a hacker.
- 12botnetA network of computers that have been compromised by, and are under control of, a hacker, who is the botmaster.
- 13business continuityThe chain of events linking planning to protection and to recovery.
- 14certificate authorityA third party that acts as a trusted intermediary between computers (and companies) by issuing digital certificates and verifying the worth and integrity of the certificates.
- 15communications controls (network controls)Controls that deal with the movement of data across networks.
- 16controlsDefence mechanisms (also called countermeasures)
- 17cookieSmall amounts of information that Web sites store on your computer temporarily, or more or less permanently.
- 18copyrightA grant that provides the creator of intellectual property with ownership of it for a specified period of time, currently the life of the creator plus 70 years.
- 19cybercrimeIllegal activities executed on the internet.
- 20cyberterrorismCan be defined as a premeditated, politically motivated attack against information, computer systems, computer programs, and data that results in violence against noncombatant targets by subnational groups or clandestine agents.
- 21cyberwarfareWar in which a country's information systems could be paralysed from a massive attack by destructive software.
- 22demilitarised zone (DMZ)A separate organisational local area network that is located between an organisation's internal network and an external network, usually the internet.
- 23denial-of-service attackA cyber attack in which an attacker sends a flood of data packets to the target computer, with the aim of overloading its resources
- 24digital certificateAn electronic document attached to a file certifying that this file is from the organisation it claims to be from and has not been modified from its original format or content.
- 25distributed denial-of-service (DDoS) attackA denial-of-service attack that sends a flood of data packets from many compromised computers simultaneously.
- 26employee monitoring systemsSystems that monitor employees' computers, email activities, and internet surfing activities.
- 27encryptionThe process of converting an original message into a form that cannot be read by anyone except the intended receiver.
- 28exposureThe harm, loss, or damage that can result if a threat compromises an information resource.
- 29firewallA system (either hardware, software, or a combination of both) that prevents a specific type of information from moving between untrusted networks, such as the internet, and private networks, such as your company's network.
- 30identity theftCrime in which someone uses the personal information of others to create a false identity and then uses it for some fraud.
- 31information securityProtecting an organisation's information and information systems from unauthorised access, use, disclosure, distribution, modification, or destruction.
- 32intellectual propertyThe intangible property created by individuals or corporations, which is protected under trade secret, patent, and copyright laws.
- 33least privilegeA principle that users be granted the privilege for some activity only if there is a justifiable need to grant this authorisation.
- 34logic bombsSegments of computer code embedded within an organisation's existing computer programs.
- 35malwareMalicious software such as viruses and worms.
- 36network controlsControls that deal with the movement of data across networks.
- 37passwordA private combination of characters that only the user should know.
- 38patentA document that grants the holder exclusive rights on an invention or process for a specified period of time, currently 20 years.
- 39phishing attackAn attack that uses deception to fraudulently acquire sensitive personal information by masquerading as an official-looking email.
- 40physical controlsControls that restrict unauthorised individuals from gaining access to a company's computer facilities.
- 41piracyCopying a software program (other than freeware, demo software etc) without making a payment to the owner.
- 42privilegeA collection of related computer system operations that can be performed by the users of the system.
- 43public-key encryption(also called asymmetric encryption) A type of encryption that uses two different keys, a public key and a private key.
- 44riskThe likelihood that a threat will occur.
- 45risk acceptanceA strategy in which the organisation accepts the potential risk continues to operate with no controls and absorbs any damages that occur.
- 46risk analysisThe process by which an organisation assesses the value of each asset being protected estimates the probability that each asset might be compromised and compares the probable costs of each being compromised with the costs of protecting it.
- 47risk limitationA strategy in which the organisation limits its risk by implementing controls that minimise the impact of a threat.
- 48risk managementA process that identifies, controls, and minimises the impact of threats, in an effort to reduce risk to manageable levels.
- 49risk mitigationA process whereby the organisation takes concrete actions against risks, such as implementing controls and developing a disaster recovery plan.
- 50risk transferenceA process in which the organisation transfers the risk by using other means to compensate for a loss, such as by purchasing insurance.
- 51secure socket layer (SSL)(also known as transport layer security) An encryption standard used for secure transactions such as credit card purchases and online banking.
- 52securityThe degree of protection against criminal activity, danger, damage and/or loss.
- 53social engineeringGetting around security systems be tricking computer users inside a company into revealing sensitive information or gaining unauthorised access to privileges.
- 54spamUnsolicited email.
- 55spamwareAlien software that uses your computer as a launch platform for spammers.
- 56spywareAlien software that can record your keystrokes and/or capture your passwords.
- 57threatAny danger to which an information resource may be exposed.
- 58trade secretIntellectual work, such as a business plan, that is a company secret and is not based on public information.
- 59transport security layer (TSL)An encryption standard used for secure transactions such as credit card purchased and online banking.
- 60trojan horseA software program containing a hidden function that presents a security risk.
- 61tunnelingA process that encrypts each data packet to be sent and places each encrypted packet inside another packet.
- 62virtual private network (VPN)A private network that uses a public network (usually the internet) to securely connect users by using encryption.
- 63virusesMalicious software that can attach itself with (or "infect") other computer programs without the owner of the program being aware of the infection
- 64vulnerabilityThe possibility that an information resource will be harmed by a threat.
- 65whitelistingA process in which a company identifies acceptable software and permits it to run, and either prevents anything else from running or lets new software run in a quarantined environment until the company can verify its validity.
- 66wormsDestructive programs that replicate themselves without requiring another program to provide a safe environment for replication.
- 67zombie computerA computer that has been compromised by, and under the control of, a hacker. ```1234567890-`1234567890-
Information
- Description
- Information Technology Flashcards on IIS Glossary - Chapter 4, created by Darcy Hegarty on 21/11/2018.
- Created by
- Darcy Hegarty
- Views
- 2
- Rating