Ceh Exam

Front 1

ACO

Back 1

Authenticated ciphering offset

Front 2

AES

Back 2

Advanced Encryption Standard: A symmetric block cipher with a block size of 128 bits in which the key can be 128, 192, or 256 bits.

Front 3

AIS

Back 3

Automated Information System

Front 4

Assurance

Back 4

A measure of confidence that the features and architecture of an AIS accurately mediate and enforce the security policy. Grounds for confidence that an IT product or system meets it's security objectives.

Front 5

Asymmetric Key Encryption

Back 5

Cryptographic system that employs two keys, a public key and a private key. The public key is made available to anyone wishing to send an encryped message to an individual holding the corresponding private key of the public private key pair. Any message encrypted with one of these keys can be decrypted with the other. The private key is always kept private. It should not be possible to derive the private key from the public key.

Front 6

Attack

Back 6

The act of trying to bypass security controls on a system. An attack can be active, resulting in data modification, or passive, resulting in the release of data.

Front 7

Blackbox test

Back 7

Ethical hacking team has no knowledge of target network.

Front 8

Block Cipher

Back 8

A symmetric key algorithm that operates on a fixed-length block of plaintext and transforms it into a fixed-length block of ciphertext. A block cipher is obtained by segregating plaintext into blocks of n characters or bits and applying the same encryption algorithm and key to each block.

Front 9

Blind signature

Back 9

A form of digital signature where the signer is not privy to the content of the message.

Front 10

BSI ISO/IEC 17799-2000,
BS 7799-I: 2000

Back 10

Information technology -- Code of practice for information security management, British Standards Institution, London UK.
A standard intended to provide a comprehensive set of controls comprising best practices in information security." ISO refers to the International Organization for Standardization, and IEC is the International Electrotechnical Commission.

Front 11

BSA

Back 11

Business Software Alliance: An international organization representing leading software and e-commerce developers in 65 countries around the world. BSA efforts include educating users about software copyrights; advocating for public policy that fosters innovation and expands trade opportunities; and fighting software piracy.

Front 12

CA

Back 12

Certification Authority: the official responsible for performing the comprehensive evaluation of the technical and non-technical security feature of an IT system and other safeguards, made in support of the accreditation process, to establish the extent that a particular design and implementation meet a set of specified security requirements.

Front 13

Carnivore

Back 13

A device used by the U.S. FBI to monitor ISP traffic.

Front 14

CBC

Back 14

Cipher Block Chaining is an encryption mode of the Data Encryption Standard (DES) that operates on plaintext blocks 64 bits in length.

Front 15

CERT Coordination Center

Back 15

A unit of the Carnegie Mellon University Software Engineering Institute (SEI). SEI is a federally funded R&D center. CERT's mission is to alert the Internet community to vulnerabilities and attacks and to conduct research and training in the areas of computer security including incident response.

Front 16

Cipher

Back 16

A cryptographic transformation that operates on characters or bits.

Front 17

Ciphertext

Back 17

An unintelligible encrypted message.

Front 18

Cryptogram

Back 18

An unintelligible encrypted message.

Front 19

Closed Security Environment

Back 19

An environment in which both of the following conditions hold true:
1. Application developers have sufficient clearances and authorizations to provide an acceptable presumption that they have not introduced malicious logic
2. Configuration control provides sufficient assurance that applications and equipment are protected against the introduction of malicious logic prior to and during the operation of system applications.

Front 20

Clustering

Back 20

Situation in which a plaintext message generates identical ciphertext messages using the same transformation algorithm but with different cryptovariables or keys.

Front 21

Codes

Back 21

Cryptographic transformations that operate at the level of words or phrases.

Front 22

COM

Back 22

Common Object Model
A model that allows two oftwar components to communicate with each other independent of their platforms' operating systems and languages of implementation.

Front 23

COBRA

Back 23

Common Object Request Broker Architecture:

Front 24

CALEA

Back 24

Communications Assistance for Law Enforcement Act of 1994:
An act that required all communications carriers to make wiretaps possible in ways approved by the FBI.

Front 25

COMSEC

Back 25

Communications Security
Measures and controls taken to deny unauthorized persons information derived from telecommunications and to ensure the authenticity of such telecommunications. Communications security includes cryptosecurity, transmission security, emission security and physical security of COMSEC material and information.

Front 26

Compartment

Back 26

A class of information that has need-to-know access controls beyond those normally provided for access to confidential, secret, or top-secret information.

Front 27

Compensating Controls

Back 27

A combination of controls, such as physical and technical or technical and administrative (or all three).

Front 28

Composition model

Back 28

An information security model that investigated the resulting security properties when subsystems are combined.

Front 29

CSTVRP

Back 29

Computer Security Technical Vulnerability Reporting Program.
A program that focuses on technical vulnerabilities in commercially available hardware, firmware, and software products acquired by the DoD, CSTVRP provides for the reporting, cataloging, and discrete dissemination of technical vulnerability and corrective measure information to DoD components on a need-to-know basis.

Front 30

Contamination

Back 30

The intermixing of data at different sensitivity and need-to-know levels. The lower-level data is said to be contaminated by the higher-level data; thus, the contaminating (higher-level) data might not receive the require level of protection.

Front 31

COTS

Back 31

Commercial off-the-shelf

Front 32

Covert Channel

Back 32

A communications channel that enables two cooperating processes to transfer information in a manner that violates the system's security policy.

Front 33

CRL

Back 33

Certificate Revocation List

Front 34

Cryptanalysis

Back 34

Refers to the ability to "break" the cipher so that the encrypted message can be read. Cryptanalysis can be accomplished by exploiting weaknesses in the cipher or in some fashion determining the key.

Front 35

Crypto-Algorithm

Back 35

A well-defined procedure, sequence of rules, or steps used to produce a key stream or cyphertext from plaintext, and visa versa. A step-by-step procedure that is used to encipher plaintext and decipher ciphertext.