GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Chapter 4-Security

Alex Pascutiu English 75 cards

Cards in this deck (75)

  1. 1Access levelsSettings that determine who can access an item and what
    they can do with it (read, write, delete). Applies to files, folders,
    and databases among other things.
  2. 2Anti-virusSoftware to detect and remove viruses and other malware.
  3. 3Asymmetric key encryptionEncryption system in which two keys are used: a public key
    used only to encrypt data, and a private key used only to
    decrypt it.
  4. 4AuthenticationEstablishing a user's identity.
  5. 5BackdoorMethod of bypassing security in a system, built in by the
    system designers.
  6. 6Biometric enrolmentProcess of registering a user for a biometric system by taking
    an initial sample.
  7. 7Biometric templateMeasurements taken from a biometric sample.
  8. 8BiometricsUse of fingerprints, retina scans, or other body features as an
    authentication mechanism.
  9. 9BotnetGroup of zombie computers under the control of a criminal
  10. 10Brute force attackAttempt to break a password by trying all possible
    combinations of letters, numbers, and symbols.
  11. 11CAPTCHA“Scribble text” displayed as an image, which the user must
    type in to verify that they are a person.
  12. 12Certificate AuthorityOrganization that issues digital certificates to individuals and
    companies
  13. 13CiphertextResult of encrypting plaintext.
  14. 14Computer Misuse ActUK law governing criminal offences committed using a
    computer.
  15. 15CrackingGaining illegal access to a computer system
  16. 16DDoSDenial of service attack committed using dozens of
    computers, usually zombies on a botnet.
  17. 17Denial of service attackFlooding a computer system with data so that it cannot
    respond to genuine users
  18. 18Dictionary attackAttempt to break a password by trying all possible words.
  19. 19Digital signaturesTechnique used to authenticate remote users, such as online
    shopping businesses.
  20. 20Distributed Denial of Service attackDenial of service attack committed using dozens of
    computers, usually zombies on a botnet.
  21. 21DNS poisoningTechnique used by criminals to alter DNS records and drive
    users to fake sites, to committing phishing.
  22. 22DoSFlooding a computer system with data so that it cannot
    respond to genuine users.
  23. 23Drive-by downloadProgram which automatically downloads when a user visits a
    web page, usually without their knowledge or consent.
  24. 24EncryptionSystem of encoding plaintext so that it cannot be understood
    with access to an encryption key
  25. 25Encryption keyUsed to encrypt and decrypt data.
  26. 26EV SSLExtended Validation SSL. Digital certificate validation
    technique used on the world wide web.
  27. 27False negativeWhen a system incorrectly rejects an action instead of
    accepting it
  28. 28False positiveWhen a system incorrectly accepts an action instead of
    rejecting it
  29. 29Full disk encryptionSystem that encrypts all data saved to a hard disk
    automatically and transparently
  30. 30HackingGaining illegal access to a computer system
  31. 31Home directoryDirectory that contains a user’s personal files.
  32. 32HTTPSProtocol used to send web pages securely over the Internet.
  33. 33Identity theftStealing personal data in order to impersonate a person.
  34. 34Key escrowIdea of having encryption keys stored by a third party
    company so the government can access them if needed.
  35. 35Key loggerSoftware or hardware which records all key strokes on a
    computer system
  36. 36Key pairA public key and private key that work together in a public
    encryption system.
  37. 37Macro virusVirus that takes advantage of the macro programming
    languages built into some software.
  38. 38MalwareGeneric name for malicious software
  39. 39Multi-factor authenticationUse of several authentication techniques together, such as
    passwords and security tokens.
  40. 40One time passwordPassword generated by a security token, which expires as
    soon as it is used.
  41. 41Packet snifferSoftware or hardware used to collect data travelling over a
    network.
  42. 42PassphraseWord or phrase used to authenticate a user.
  43. 43PasswordWord or phrase used to authenticate a user.
  44. 44PharmingTechnique used by criminals to alter DNS records and drive
    users to fake sites, to committing phishing.
  45. 45PhishingUse of fake emails and web sites to trick users into revealing
    sensitive data
  46. 46Physical securityLocks, alarms, and other techniques used to securely a
    building or computer room.
  47. 47PlaintextMessage before it is encrypted, or after it has been decrypted.
  48. 48Private keyKey used for decryption in a public key encryption system
  49. 49Public keyKey used for encryption in a public key encryption system.
  50. 50Public key encryptionEncryption system in which two keys are used: a public key
    used only to encrypt data, and a private key used only to
    decrypt it.
  51. 51Root userUser will full control over a computer system.
  52. 52RootkitType of malware which infiltrates the operating system and
    attempts to hide itself from view.
  53. 53Secret key encryptionEncryption system in which a single key is used for both
    encryption and decryption.
  54. 54Secure Socket LayerSystem used to encrypt https web traffic.
  55. 55Security tokenHardware device that must be present during login to
    authenticate a user.
  56. 56Security updateSoftware update to fix a security problem discovered in
    software
  57. 57SmishingPhishing attacks committed using text messages (SMS)
  58. 58Social engineeringTricking a user into revealing their password or other sensitive
    data.
  59. 59SpamUnwanted, bulk email.
  60. 60Spam botProgram that scans web pages for email address, in order to
    send spam
  61. 61Spam filtersProgram designed to identify and block spam messages while
    letting genuine messages through.
  62. 62SpywareMalware which covertly records a user's actions, such as their
    key presses.
  63. 63SSLSystem used to encrypt https web traffic.
  64. 64Symmetric key encryptionEncryption system in which a single key is used for both
    encryption and decryption.
  65. 65System administratorPersonal in overall charge of a computer system in an
    organisation.
  66. 66TLSSystem used to encrypt https web traffic
  67. 67Transport Layer SecuritySystem used to encrypt https web traffic
  68. 68Trojan horseMalware which pretends to be a genuinely useful program to
    trick the user into using it.
  69. 69Unauthorised accessGaining illegal access to a computer system
  70. 70VirusComputer program which damages files and data spreads
    when infected programs are copied.
  71. 71Virus definition fileUsed by anti-virus programs to recognise known viruses.
  72. 72VishingPhishing attacks committed using telephone calls or VoIP
    systems.
  73. 73Vulnerability scannerSoftware to scan a system for potential security problems.
  74. 74Web bugTechnique used by spammers to detect if an email address is
    valid or not.
  75. 75WEPWired Equivalence Protocol. Wireless network encryption
    system.

Information

Description
Flashcards with the terms in Chapter 4-Security.
Created by
Alex Pascutiu
Views
11
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?