Ais

Front 1

Adware

Back 1

Software that collects and forwards data to advertising companies or causes banner ads to pop up as the internet is surfed.

Front 2

Dictionary Attack

Back 2

Using software to guess company addresses, send employees blank emails, and add unreturned messages to spammer email list.

Front 3

DoS

Back 3

Denial of service attack. An attack designed to make computer resources unavailable to its users. Ex, send so many emails that the Internet service providers network overloads.

Front 4

Email Spoofing

Back 4

Making a sender address and other parts of email header appear as though the email originated from a different source.

Front 5

Hacking

Back 5

Unauthorized access, modification, or use of computer systems, usually by means of a PC and a communications network.

Front 6

Identity Theft

Back 6

Assuming someone's identity by illegally obtaining confidential information such as a social securing number.

Front 7

IP address spoofing

Back 7

Creating internet protocol packets with a forged IP address to hide the sender's identity or to impersonate another computer system.

Front 8

Key Logger

Back 8

Using spyware to record a user's keystrokes.

Front 9

Malware

Back 9

Software that can be used to cause harm.

Front 10

Packet sniffing

Back 10

Inspecting information packets as they travel the internet and other networks.

Front 11

Password cracking

Back 11

Penetrating system defenses, stealing passwords, and decrypting them to access system programs, files, and data.

Front 12

Phishing

Back 12

Communications that request recipients to disclose confidential information by responding to an email or visiting a web site.

Front 13

Round-down

Back 13

Truncating interest calculations at two decimal places and placing truncated amounts in the perpetrator's account.

Front 14

Social Engineering

Back 14

Techniques that trick a person into disclosing confidential info.

Front 15

Software piracy

Back 15

Unauthorized copying or distribution of copyrighted software.

Front 16

Stenography

Back 16

Hiding data from one file inside a host file, such as a large image or sound file.

Front 17

Superzapping

Back 17

Using special software to bypass system controls and perform illegal acts.

Front 18

Trojan Horse

Back 18

Unauthorized code in an authorized and properly functioning program.

Front 19

Virus

Back 19

Executable code that attaches itself to software, replicates itself, and spreads to other systems or files. Triggered by a predefined event, it damages system resources or displays messages.

Front 20

Worm

Back 20

Similar to a virus; a program rather than a code segment hidden in a host program. Actively transmits itself to other systems. It usually does not live long but is quite destructive while alive.

Front 21

Botnet, bot herders

Back 21

A network of hijacked computers. bot herders use the hijacked computers, called zombies, in a variety of Internet attacks.

Front 22

Click Fraud

Back 22

A type of Internet crime that occurs in pay per click online advertising when a person, automated script, or computer program imitates legitimate clicks.

Front 23

Cyber extortion

Back 23

Requiring a company to pay money to keep an extortionist from harming a computer or a person.

Front 24

Eavesdropping

Back 24

Listening to a private voice or data transmission.

Front 25

Evil Twin

Back 25

A wireless network with the same name as another wireless access point. Users unknowingly connect to the evil twin; hackers monitor the traffic looking for useful information.

Front 26

Hijacking

Back 26

Gaining control of someone else's computer for illicit activities.

Front 27

Man-in-the-middle (MITM) attack

Back 27

A hacker placing himself between a client and a host to intercept network traffic; also called session hijacking.

Front 28

Masquerading/impersonation

Back 28

Accessing a system by pretending to be an authorized user. The impersonator enjoys the same privileges as the legitimate user.

Front 29

Pharming

Back 29

Redirecting traffic to a spoofed Web sit to obtain confidential information.

Front 30

Piggybacking

Back 30

Clandestine use of someone's Wi-Fi network. Tapping into a communications line and entering a system by latching onto a legitimate user. Bypassing physical security controls by entering a secure door when an unauthorized person opens it.

Front 31

Posing

Back 31

Creating a seemingly legitimate business, collecting personal data while making a sale, and never delivering items sold.

Front 32

Pretexting

Back 32

Acting under false pretenses to gain confidential information.

Front 33

Rootkit

Back 33

Software that conceals processes, files, network connections, and system data from the operating system and other programs.

Front 34

Salami Technique

Back 34

Stealing tiny slices of money over time.

Front 35

Scareware

Back 35

Malicious software of no benefit that is sold using scare tactics.

Front 36

Scavenging/ dumpster diving

Back 36

Searching for confidential information byt searching for documents and records in garbage cants, communal trash bins, and city dumps.

Front 37

Shoulder surfing

Back 37

Watching or listening to people enter or disclose confidential data

Front 38

Skimming

Back 38

Double-swiping a credit card or covertly swiping it in a card reader that records the data for later use.

Front 39

SQL injection

Back 39

Inserting a malicious SQL query in input in such a way that it is passed to and executed by an application program.

Front 40

Trap Door

Back 40

A back door into a system that bypasses normal system controls.

Front 41

War driving

Back 41

Looking for unprotected wireless networks in a car or with a rocket.

Front 42

XSS attack

Back 42

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications, such as web browsers through breaches of browser security, that enables attackers to inject client-side script into Web pages viewed by other users.

Front 43

Zero-day attack

Back 43

Attack between the time a software vulnerability is discovered and a patch to fix the problem is released.

Front 44

Address Resolution Protocol (ARP)

Back 44

Sending fake ARP messages to an ethernet LAN. ARP is a computer networking protocol for determining a network host's hardware address when only its IP or network address is known.

Front 45

Bluebugging

Back 45

Taking control of a phone to make calls, send text messages, listen to calls, or read text messages.

Front 46

Bluesnarfing

Back 46

Stealing contact lists, images, and other data using Bluetooth.

Front 47

Buffer overflow attack

Back 47

Inputting so much data that the input buffer overflows. The overflow contains code that takes control of the computer.

Front 48

Caller ID spoofing

Back 48

Displaying an incorrect number on the recipient's caller ID display to hide the identity of the caller.

Front 49

Carding

Back 49

Verifying credit card validity; buying and selling stolen credit cards.

Front 50

Chipping

Back 50

Planting a chip that records transaction data in a legitimate credit card reader.

Front 51

Cyber bullying

Back 51

Using computer technology to bully other people.

Front 52

Data diddling

Back 52

Changing data before, during, or after it is entered into the system.

Front 53

Data leakage

Back 53

Unauthorized copying of company data.

Front 54

Economic espionage

Back 54

The theft of information, trade secrets, and intellectual property.

Front 55

E-mail threats

Back 55

Sending a threatening message asking recipients to do something that makes it possible to defraud them

Front 56

Internet auction fraud

Back 56

Using an internet auction site to commit fraud.

Front 57

Internet misinformation

Back 57

Using the internet to spread false or misleading information.

Front 58

Internet pump-and-dump fraud

Back 58

Using the internet to pump the price of stock and then resale it.

Front 59

Internet terrorism

Back 59

Using the internet to disrupt communications and ecommerce.

Front 60

Lebanese looping

Back 60

Inserting a sleeve into an ATM so that it will not eject the victim's card, pretending to help the victim as a means to discover his or her PIN, and then using the card and PIN to drain the account.

Front 61

Logic bomb

Back 61

Software that sits idle until a specified circumstance or time triggers it, destroying programs, data, or both.

Front 62

Phreaking

Back 62

Attacking a phone system to get free phone access; using phone lines to transmit viruses and to access, steal, and destroy data.

Front 63

Podslurping

Back 63

Using a small device with storage capacity (ipod, flash drive) to download unauthorized data from a computer.

Front 64

Ransomware

Back 64

Software that encrypts programs and data until a ransom is paid to remove it.

Front 65

Splog

Back 65

A spam blog that promotes Web sites to increase their Google page rank.

Front 66

Tabnapping

Back 66

Secretly changing an already open browser tab using Java Script.

Front 67

Typosquatting/ URL hijacking

Back 67

Web sites with names similar to real Web sites; users making typographical errors are sent to a site filled with malware.

Front 68

Vishing

Back 68

Voice phishing, in which email recipients are asked to call a phone number that asks them to divulge confidential data.

Front 69

War dialing

Back 69

Dialing phone lines to find idle modems to use to enter a system, capture the attached computer, and gain access to its network.