Flashcards
glossary
Flashcards do conjunto (54)
- 1SecurityData Security and Management
- 2Hackingunauthorised access or modification from inside or outside of the
company - 3Virusesmalicious software that can steal, delete or encrypt data for ransom
- 4Technical Breakdowna damaged server or broken hard disk can result in loss
of data - 5Interceptiondigital communication can be intercepted as it travels through
the Internet, leading to competitors getting hold of data - 6Physical Theftcomputers or hard disks can be stolen, compromising the data
they contain - 7Discarded Componentsold laptops or hard disks can still contain valuable
data, which can be found by competitors if the equipment is not properly
disposed of - 8PreventionUnautherised access
- 9Access levels-only permitted to data required for job
-given read and or write access depending on whether they need to alter data
-reduce the number of users able to access the data - 10Password Design-certain length and with combination of letters, numbers and symbols
-strong passwords are far harder for computers to crack - 11Encryption Techniques-Data can be encrypted so only those with the correct key can view it
-XOR encryption is an uncrackable encryption - 12PreventData Loss
- 13Backups-Keeping copies of data allows it to be restored if they primary data is lost
-Each backup stores only the changes since the last backup, so data can be restored to a previous version - 14Archiving-When data is no longer in frequent use it can be stored in a new storage location outside of primary servers
- 15SecurityCompression
- 16Data can be compressed to save storage space and memoryCompression uses complex algorithms to store the same data using fewer bytes of data
- 17Lossless Compression-Compressed using algorithms that don't alter the contents
-Compressed data can be restored to exactly how it was before compression - 18Lossy Compression-Slight alterations are made to data during compression
-The data cannot be restored exactly
-Produce much smaller files than lossless algorithms
-Can be used with images, audio or video, where slight changes to the colour of a pixel, or amplitude of a sample, will not be noticed - 19Compression RatioRatio of uncompressed file size compared to the compressed file size
- 20SecurityNetwork Security
- 21Hackingpossible as computers can be accessed from remote locations
- 22Virusesspread more easily through a network, particularly if there are security flaws
- 23Technical Breakdowncan have a bigger impact as the loss of a main server or switch can put all computers out of action
- 24Antivirussoftware should be installed to detect and remove any viruses that spread through the network
- 25Firewallshould be used to prevent viruses from transmitting data or receiving instructions
- 26Two-Factor authenticationcan reduce the chance of a hacker gaining entry by requiring two forms of authentication instead of one
- 27Access Levelsshould be used to ensure that users can't access data they don't need on the network
- 28Passwordshould be used to verify each user of the network
- 29Acceptable Use Policy-Examples include rules on use of social networks, personal email and storage and transport of data
-Users who breach the policy can be disciplined or fired
-Details what is and isn't allowed by users of the network - 30Disaster Recovery Policy-Details exactly how the company prepares for disasters and how to recover as quickly and possible
-Includes details of backup frequency and location and procedures to restore from backups - 31Cyber SecurityThreat and Weaknesses
- 32MalwareShort for malicious software and means any software that is used to disrupt computer operation
- 33Viruses-Malware that is able to copy itself into other programs
- 34Worm-Similar to a virus, but is a standalone program
- 35Key Loggers-Programs that log all user inputs and transmit them to a third party
- 36SQL Injections-SQL code is entered into a web form then inadvertently executed by the server while trying to process it
- 37Denial of Service (DoS) Attack-Multiple requests made one server at the same time, causing it to become overloaded and fail
- 38Password-Based AttacksBrute-force attacks, where every combination of characters is tried until one works and it cannot crack a
strong password (long or with letters, numbers and characters) - 39IP Address Spoofing-A computer is set up with the same IP address as a legitimate server
- 40Social EngineeringTricking a user into revealing their password
- 41Phishing-An email is sent apparently from a bank claiming the user needs to log in to fix a problem
-The email contains a link to a fake site that looks like the real bank site
-The user enters their username and password on the fake site - 42Cookies-Cookies are small pieces of code that websites can store on a user's computer
-Can be a security risk as they often contain personal information that can be read and sold - 43Cyber SecurityDefending from Threats
- 44Antivirus Software-Scans files and compares them to a database of known malware, removing it or repairing infected files
- 45Firewall-Monitors network communication and blocks un-trusted messages both to and from the computer
- 46Patching out-dated softwareKeeping software up to date in order to sop viruses from exploiting out of date software
- 47Security ToolsTools that look for suspicious patterns of behaviour and vulnerabilities
- 48PersonnelCompanies hire specialist security personnel who know what to look for and how to secure systems
- 49Foot-printingInterrogating resources on the internet for information about the organisation about the organisation's system
- 50Penetration TestingAttempting to penetrate a system's security layer in order to demonstrate security risks
- 51Buffer OverflowsData is too large for a memory location, and 'leaks' into another that it shouldn't have access to
- 52Too many permissionsSoftware sometimes requests access to system to systems it doesn't need, like admin access to core systems
- 53Scripting RestrictionsSoftware should block commands that are not needed for it to run, preventing malicious code running
- 54Accepting a parameter without validationAny user input should be checked to ensure it is correct size and contains no suspicious characters
Informações
- Descrição
- FlashCards sobre glossary, criado por josh cotton em 26-04-2021.
- Criado por
- josh cotton · abr 2021
- Atualizado
- 28 abr 2021
- Visualizações
- 0
- Avaliação