Acct 321 (C.9) Control And Audit Of Aiss #2

Front 1

Information Rights Management (IRM)

Back 1

Software that offers because the capability not only to limit access to specific files or documents, but also to specify the actions (read, copy, print, download, etc.) that individuals who are granted access to that resource can perform. Some IRM software even has the capability to limit access privileges to a specific periods of time and to remotely erase protected files.

Front 2

Data Loss Prevention (DLP)

Back 2

Software which works like antivirus programs in reverse, blocking outgoing messages (e-mail, instant messages, etc.) that contain key words or phrases associated with intellectual property or other sensitive data the organization wants to protect.

Front 3

Digital Watermark

Back 3

Code imbedded in documents that enables an organization to identify confidential information that has been disclosed.

Front 4

Data Masking

Back 4

A program that protects privacy by replacing personal information with fake values.

Front 5

Spam

Back 5

Unsolicited email that contains either advertising or offensive content.

Front 6

Identity Theft

Back 6

Assuming someone's identity, usually for economic gain.

Front 7

Cookie

Back 7

A text file created by a website and stored on a visitor's hard drive. Cookies store information about who the user is and what the user has done on the site.

Front 8

Encryption

Back 8

The process of transforming normal text, called plaintext, into unreadable gibberish, called ciphertext.

Front 9

Plaintext

Back 9

Normal text that has not been encrypted.

Front 10

Ciphertext

Back 10

Plaintext that was transformed into unreadable gibberish using encryption.

Front 11

Decryption

Back 11

Transforming ciphertext back into plaintext.

Front 12

Symmetric Encryption Systems

Back 12

Encryption systems that use the same key both to encrypt and decrypt.

Front 13

Asymmetric Encryption Systems

Back 13

Encryption systems that use two keys (one public, the other private); either key can encrypt, but only the other matching key can decrypt.

Front 14

Public Key

Back 14

One of the keys used in asymmetric encryption systems. It is widely distributed and available to everyone.

Front 15

Private Key

Back 15

One of the keys used in asymmetric encryption systems. It is kept secret and known only to the owner of that pair of public and private keys.

Front 16

Key Escrow

Back 16

The process of storing a copy of an encryption key in a secure location.

Front 17

Hashing

Back 17

Transforming plain text of any length into a short code called a hash.

Front 18

Hash

Back 18

Plaintext that has been transformed into short code.

Front 19

Non-repudiation

Back 19

Creating legally binding agreements that cannot be unilaterally repudiated by either party.

Front 20

Digital Signature

Back 20

A hash encrypted with the hash creator's private key.

Front 21

Digital Certificate

Back 21

Electronic document that certifies the identity of the owner of a particular public key and contains that party's public key.

Front 22

Certificate Authority

Back 22

An organization that issues public and private keys and records the public key and digital certificate.

Front 23

Public Key Infrastructure (PKI)

Back 23

The system for issuing pairs of public and private keys and corresponding digital certificates.

Front 24

Virtual Private Network VPN

Back 24

Using encryption and authentication to securely transfer information over the Internet, thereby creating a "virtual" private network.