Flashcards
SystemSecuritySoftware
Flashcards do conjunto (21)
- 1Phishingsending emails pretending to be from companies in order to induce people to reveal personal information, such as passwords and credit card numbers.
- 2How to spot an Phishing emailShoddy links
Bad Grammar
No logos - 3Shoulder surfingShouldering involves direct observation of a user entering their security details
- 4MalwareMalicious software specifically designed to disrupt or damage a computer system.
- 5Brute force attacksHacker may go through a list of different passwords until access to an account is gained.
- 6Denial of service (DOS) attacksattacker usually sends excessive messages asking the network or server to authenticate requests that have invalid return addresses.
- 7Virusestype of malware which is installed without your knowledge, with the purpose of doing harm.
Infects (embeds itself in) other programs or data files - 8WormsStandalone program that doesn’t need to attach itself to an existing program in order to spread
It may scan the Internet looking for vulnerable computers to infect - 9Removable mediaCriminals sometimes leave a USB stick contaminated with a virus lying, for example, in the car park of a company that they wish to infect with a virus or steal data from.
25% of malware is spread through USB storage devices - 10Eavesdropping“Eavesdropping” is used to intercept data packets as they move across networks
- 11SQL injectiondatabase query language
takes advantage of web input forms to access or destroy data - 12Penetration testing‘Pen’ testing is the practice of deliberately trying to find security holes in your own systems.
- 13Black box testingIn black box testing, testers are given no more information than any potential hacker may have.
- 14White box testingwhite box testing, testers are given as much information as an ‘insider’ may have, in order to determine how much damage a rogue employee could do to a system.
- 15Grey-hat hackersGrey hats will frequently seek out system vulnerabilities without authorization from the system owners
- 16Audit trailsAudit trails are useful for maintaining security and for recovering lost data
- 17Network forensicsSimilar to police forensics, network administrators can use audit trail data to solve data mysteries
o This can identify data leaks and prevent security attacks
o An intrusion detection system can and alert administrators in real-time - 18Network policiesNetwork security compromised by employee behavior, can be addressed with correct user policy
- 19Proxy serverproxy server is a computer that acts as an intermediary between a web browser and the Internet
- 20Functions of an operating system-provision of a user interface
-memory management
-multitasking
-disk/peripheral management
-user management / security
-file management - 21Utilities-The operating system controls and manages the computer system
-Utilities provide extra functionality that make it easier to use
-They can be packaged as part of the operating system or bought as stand-alone software programs