Comptia Security+ 2014 Study Guide Glossary

Front 1

3DES

Back 1

(Triple DES) A symmetric encryption algorithm that encrypts data by processing each block of data three times, using a different DES key each time.

Front 2

802.11

Back 2

A family of specifications developed by the IEEE for wireless LAN technology.

Front 3

802.11a

Back 3

A fast, secure, but relatively expensive protocol for wireless communication. The 802.11a protocol supports speeds up to 54 Mbps in the 5 GHz frequency.

Front 4

802.11ac

Back 4

A wireless communication protocol that improves upon 802.11n by adding wider channels to increase bandwidth.

Front 5

802.11b

Back 5

The first specification to be called Wi-Fi, 802.11b is the least expensive wireless network protocol used to transfer data among computers with wireless network cards, or between a wireless computer or device and a wired LAN. The 802.11b protocol provides for an 11 Mbps transfer rate in the 2.4 GHz frequency.

Front 6

802.11g

Back 6

A specification for wireless data throughput at the rate of up to 54 Mbps in the 2.4 GHz band that is a potential replacement for 802.11b.

Front 7

802.11n

Back 7

A wireless standard for home and business implementations that adds QoS features and multimedia support to 802.11a and 802.11b.

Front 8

802.1x

Back 8

An IEEE standard used to provide a port-based authentication mechanism over a LAN or wireless LAN.

Front 9

access control

Back 9

In security terms, the process of determining and assigning privileges to various resources, objects, and data.

Front 10

account federation

Back 10

The practice of linking a single account across many different management systems.

Front 11

account management

Back 11

A common term used to refer to the processes, functions, and policies used to effectively manage user accounts within an organization.

Front 12

account phishing

Back 12

In social networking, an attack where an attacker creates an account and gets on the friends list of an individual just to try to obtain information about the individual and their circle of friends or colleagues.

Front 13

account policy

Back 13

A document that includes an organization's user account management guidelines.

Front 14

account privileges

Back 14

Permissions granted to users that allow them to perform various actions such as creating, deleting, and editing files, and also accessing systems and services on the network.

Front 15

accountability

Back 15

In security terms, the process of determining who to hold responsible for a particular activity or event.

Front 16

accounting

Back 16

In security terms, the process of tracking and recording system activities and resource access.

Front 17

ACL

Back 17

(Access Control List) In a DAC access control scheme, this is the list that is associated with each object, specifying the subjects that can access the object and their levels of access.

Front 18

Active Directory

Back 18

The standards-based directory service from Microsoft that runs on Microsoft Windows servers.

Front 19

adware

Back 19

Software that automatically displays or downloads advertisements when it is used.

Front 20

AES

Back 20

(Advanced Encryption Standard) A symmetric 128-, 192-, or 256-bit block cipher based on the Rijndael algorithm developed by Belgian cryptographers Joan Daemen and Vincent Rijmen and adopted by the U.S. government as its encryption standard to replace DES.

Front 21

ALE

Back 21

(annual loss expectancy) The total cost of a risk to an organization on an annual basis.

Front 22

all-in-one security appliance

Back 22

A single network device that is used to perform a number of security functions to secure a network.

Front 23

anomaly-based monitoring

Back 23

A monitoring system that uses a database of unacceptable traffic patterns identified by analyzing traffic flows.

Front 24

anti-malware software

Back 24

A category of software programs that scan a computer or network for known viruses, Trojans, worms, and other malicious software.

Front 25

anti-spam

Back 25

A program that will detect specific words that are commonly used in spam messages.

Front 26

anti-spyware

Back 26

Software that is specifically designed to protect systems against spyware attacks.

Front 27

antivirus software

Back 27

An application that scans files for executable code that matches specific patterns that are known to be common to viruses.

Front 28

API

Back 28

(application programming interface) A mechanism that defines how software elements interact with each other.

Front 29

application attacks

Back 29

Attacks that are targeted at web-based and other client-server applications.

Front 30

application aware device

Back 30

A network device that manages information about any application that connects to it.

Front 31

application blacklisting

Back 31

aka blacklisting. The practice of preventing undesirable programs from running on a computer, computer network, or mobile device.

Front 32

application whitelisting

Back 32

aka whitelisting. The practice of allowing approved programs to run on a computer, computer network, or mobile device.

Front 33

arbitrary code execution

Back 33

aka remote code execution. An attack that exploits an application vulnerability into allowing the attacker to execute commands on a user's computer.

Front 34

archive bit

Back 34

A file property that essentially indicates whether the file has been modified since the last back up.

Front 35

armored virus

Back 35

A virus that is able to conceal its location or otherwise render itself harder to detect by anti-malware programs.

Front 36

ARO

Back 36

(annual rate of occurrence) How many times per year a particular loss is expected to occur.

Front 37

ARP

Back 37

(Address Resolution Protocol) The mechanism by which individual hardware MAC addresses are matched to an IP address on a network.

Front 38

ARP poisoning

Back 38

A method in which an attacker with access to the target network redirects an IP address to the MAC address of a computer that is not the intended recipient.

Front 39

asymmetric encryption

Back 39

A two-way encryption scheme that uses paired private and public keys.

Front 40

attachment attack

Back 40

An attack where the attacker can merge malicious software or code into a downloadable file or attachment on an application server so that users download and execute it on client systems.

Front 41

attack

Back 41

Any technique that is used to exploit a vulnerability in any application on a computer system without the authorization to do so.

Front 42

attack surface

Back 42

The portion of a system or application that is exposed and available to attackers.

Front 43

attackers

Back 43

A term for users who gain unauthorized access to computers and networks for malicious purposes.

Front 44

attacking

Back 44

The final phase of a hack in which the attacker steals data, disrupts traffic, or damages systems.

Front 45

auditing

Back 45

The practice of examining logs of what was recorded in the accounting process.

Front 46

authentication

Back 46

In security terms, the process of validating a particular individual or entity's unique credentials.

Front 47

authorization

Back 47

In security terms, the process of determining what rights and privileges a particular entity has.

Front 48

availability

Back 48

The fundamental security goal of ensuring that systems operate continuously and that authorized persons can access data that they need.

Front 49

backdoor

Back 49

A mechanism for gaining access to a computer that bypasses or subverts the normal method of authentication.

Front 50

backdoor attack

Back 50

A type of attack where the attacker creates a software mechanism to gain access to a system and its resources. This can involve software or a bogus user account.

Front 51

backout contingency plan

Back 51

A documented plan that includes specific procedures and processes that are applied in the event that a change or modification made to a system must be undone.

Front 52

baseline report

Back 52

A collection of security and configuration settings that are to be applied to a particular system or network in the organization.

Front 53

BCP

Back 53

(business continuity plan) A policy that defines how normal day-to-day business will be maintained in the event of a business disruption or crisis.

Front 54

bcrypt

Back 54

A key-derivation function based on the Blowfish cipher algorithm.

Front 55

behavior-based monitoring

Back 55

A monitoring system that detects changes in normal operating data sequences and identifies abnormal sequences.

Front 56

BIA

Back 56

(business impact analysis) A BCP preparatory step that identifies present organizational risks and determines the impact to ongoing, business-critical operations if such risks actualize.

Front 57

big data

Back 57

Collections of data that are so large and complex that they cannot be managed using traditional database management tools.

Front 58

biometrics

Back 58

Authentication schemes based on individuals' physical characteristics.

Front 59

birthday attack

Back 59

A type of password attack that exploits weaknesses in the mathematical algorithms used to encrypt passwords, in order to take advantage of the probability of different password inputs producing the same encrypted output.

Front 60

black box test

Back 60

A test in which the tester is given no information about the system being tested.

Front 61

black hat

Back 61

A hacker who exposes vulnerabilities for financial gain or for some malicious purpose.

Front 62

block cipher

Back 62

A type of symmetric encryption that encrypts data one block at a time, often in 64-bit blocks. It is usually more secure, but is also slower, than stream ciphers.

Front 63

Blowfish

Back 63

A freely available 64-bit block cipher algorithm that uses a variable key length.

Front 64

bluejacking

Back 64

A method used by attackers to send out unwanted Bluetooth signals from smartphones, mobile phones, tablets, and laptops to other Bluetooth-enabled devices.

Front 65

bluesnarfing

Back 65

A process in which attackers gain access to unauthorized information on a wireless device using a Bluetooth connection.

Front 66

Bluetooth

Back 66

A short-range wireless radio network transmission medium usually used between two personal devices, such as between a mobile phone and wireless headset.

Front 67

botnet

Back 67

A set of computers that has been infected by a control program called a bot that enables attackers to exploit the computers to mount attacks.

Front 68

BPA

Back 68

(business partner agreement) An agreement that defines how a business partnership will be conducted.

Front 69

brute force attack

Back 69

A type of password attack where an attacker uses an application to exhaustively try every possible alphanumeric combination to try cracking encrypted passwords.

Front 70

buffer overflow

Back 70

A type of DoS attack that exploits fixed data buffer sizes in a target piece of software by sending data that is too large for the buffer.

Front 71

business partner

Back 71

A commercial entity that has a relationship with another, separate commercial entity.

Front 72

BYOD

Back 72

(bring your own device) The practice in which employees bring their own personal devices (usually mobile) into the office and use them for work-related purposes.

Front 73

CA

Back 73

(Certificate Authority) A server that can issue digital certificates and the associated public/private key pairs.

Front 74

CA hierarchy

Back 74

A single CA or group of CAs that work together to issue digital certificates.

Front 75

captive portal

Back 75

A web page that a client is automatically directed to when connecting to a network, usually through public Wi-Fi.

Front 76

CBC encryption

Back 76

(Cipher Block Chaining encryption) A block encryption model where before a block is encrypted, information from the preceding block is added to the block. In this way, you can be sure that repeated data is encrypted differently each time it is encountered.

Front 77

CCMP

Back 77

(Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) An AES cipher-based encryption protocol used in WPA2.

Front 78

CCTV

Back 78

(closed-circuit television) Surveillance cameras that do not openly broadcast signals.

Front 79

certificate management system

Back 79

A system that provides the software tools to perform the day-to-day functions of a PKI.

Front 80

certificate repository database

Back 80

A database containing digital certificates.

Front 81

CFB encryption

Back 81

(Cipher Feedback mode encryption) A block encryption model that allows encryption of partial blocks rather than requiring full blocks for encryption.

Front 82

chain of custody

Back 82

The record of evidence history from collection, to presentation in court, to disposal.

Front 83

change management

Back 83

A systematic way of approving and executing change in order to ensure maximum security, stability, and availability of information technology services.

Front 84

CHAP

Back 84

(Challenge Handshake Authentication Protocol) An encrypted remote access authentication method that enables connections from any authentication method requested by the server, except for PAP and SPAP unencrypted authentication.

Front 85

CIA triad

Back 85

(confidentiality, integrity, availability) aka information security triad. The three principles of security control and management: confidentiality, integrity, and availability. Also known as the information security triad or triple.

Front 86

cipher

Back 86

aka encryption algorithm. The rule, system, or mechanism used to encrypt or decrypt data.

Front 87

cipher suite

Back 87

A collection of symmetric and asymmetric encryption algorithms commonly used in SSL/TLS connections.

Front 88

ciphertext

Back 88

Data that has been encoded with a cipher and is unreadable.

Front 89

cleartext

Back 89

The unencrypted form of data. Also known as plaintext.

Front 90

clickjacking

Back 90

An attack that forces a user to unintentionally click a link. An attacker uses opaque layers or multiple transparent layers to trick a user.

Front 91

client-side attacks

Back 91

Attacks that exploit the trust relationship between a client and the server it connects to.

Front 92

cloud computing

Back 92

A method of computing that relies on the Internet to provide the resources, software, data, and media needs of a user, business, or organization.

Front 93

code reviews

Back 93

An evaluation used in identifying potential weaknesses in an application.

Front 94

cold site

Back 94

A predetermined alternate location where a network can be rebuilt after a disaster.

Front 95

compliance

Back 95

The practice of ensuring that the requirements of legislation, regulations, industry codes and standards, and organizational standards are met.

Front 96

computer crime

Back 96

A criminal act that involves the use of a computer as a source or target, instead of an individual.

Front 97

computer forensics

Back 97

A skill that deals with collecting and analyzing data from storage devices, computer systems, networks, and wireless communications and presenting this information as a form of evidence in the court of law.

Front 98

confidentiality

Back 98

The fundamental security goal of keeping information and communications private and protecting them from unauthorized access.

Front 99

continuity of operations plan

Back 99

A plan that includes best practices to mitigate risks and attacks and the best measures to recover from an incident.

Front 100

controls

Back 100

The countermeasures that you need to put in place to avoid, mitigate, or counteract security risks due to threats or attacks.

Front 101

cookie

Back 101

A small piece of text saved on a computer by a web browser that consists of one or more name-value pairs holding bits of information useful in remembering user preferences.

Front 102

cookie manipulation

Back 102

An attack where an attacker injects a meta tag in an HTTP header making it possible to modify a cookie stored in a browser.

Front 103

correction controls

Back 103

Controls that help to mitigate a consequence of a threat or attack from hazardously affecting the computer system.

Front 104

cracker

Back 104

A user who breaks encryption codes, defeats software copy protections, or specializes in breaking into systems.

Front 105

credential manager

Back 105

An application that stores passwords in an encrypted database for easy retrieval by the appropriate user.

Front 106

CRL

Back 106

(Certificate Revocation List) A list of certificates that are no longer valid.

Front 107

cryptography

Back 107

The science of hiding information.

Front 108

cryptoprocessors

Back 108

Microprocessors that provide cryptographic functions.

Front 109

CSR

Back 109

(certificate signing request) A message sent to a certificate authority in which a resource applies for a certificate.

Front 110

CTI

Back 110

(computer telephony integration) Telephony technology that incorporates telephone, email, web, and computing infrastructures.

Front 111

CTR encryption

Back 111

(counter mode encryption) A block encryption model that is similar to OFB and uses a counter as input.

Front 112

cyberterrorist

Back 112

A hacker that disrupts computer systems in order to spread fear and panic.

Front 113

DAC

Back 113

(Discretionary Access Control) In DAC, access is controlled based on a user's identity. Objects are configured with a list of users who are allowed access to them. An administrator has the discretion to place the user on the list or not. If a user is on the list, the user is granted access : if the user is not on the list, access is denied.

Front 114

data

Back 114

A general term for the information assets of a person or organization. In a computer system, data is generally stored in files.

Front 115

data exfiltration

Back 115

The malicious transfer of data from one system to another.

Front 116

data leakage

Back 116

Gaining access to data through unintentional methods that could lead to data loss or theft.

Front 117

data sanitization

Back 117

The method used to repeatedly delete and overwrite any traces or bits of sensitive data that may remain on a device after data wiping has been done.

Front 118

data security

Back 118

The security controls and measures taken in order to keep an organization's data safe and accessible and to prevent unauthorized access.

Front 119

data wiping

Back 119

A method used to remove any sensitive data from a mobile device and permanently delete it.

Front 120

DDoS attack

Back 120

(Distributed Denial of Service attack) A network attack in which an attacker hijacks or manipulates multiple computers (through the use of zombies or drones) on disparate networks to carry out a DoS attack.

Front 121

deciphering

Back 121

The process of reversing a cipher.

Front 122

decryption

Back 122

A cryptographic technique that converts ciphertext back to cleartext.

Front 123

defense in depth

Back 123

A comprehensive approach to layered security that is intended to slow an attack.

Front 124

DES

Back 124

(Data Encryption Standard) A symmetric encryption algorithm that encrypts data in 64-bit blocks using a 56-bit key, with 8 bits used for parity.

Front 125

detection

Back 125

The act of determining if a user has tried to access unauthorized data, or scanning the data and networks for any traces left by an intruder in any attack against the system.

Front 126

detection controls

Back 126

Controls that are implemented to monitor a situation or activity, and react to any irregular activities by bringing the issue to the attention of administrators.

Front 127

device

Back 127

A piece of hardware such as a computer, server, printer, or smartphone.

Front 128

DH

Back 128

(Diffie-Hellman) A cryptographic protocol that provides for secure key exchange.

Front 129

DHCP

Back 129

(Dynamic Host Configuration Protocol) A protocol used to automatically assign IP addressing information to IP network computers.

Front 130

DHE

Back 130

(Diffie-Hellman Ephemeral) A cryptographic protocol that is based on Diffie-Hellman and that provides for secure key exchange by using ephemeral keys.

Front 131

Diameter

Back 131

An authentication protocol that allows for a variety of connection types, such as wireless.

Front 132

dictionary attack

Back 132

A type of password attack that automates password guessing by comparing encrypted passwords against a predetermined list of possible password values.

Front 133

differential backup

Back 133

A backup that backs up all files in a selected storage location that have changed since the last full backup.

Front 134

digital certificate

Back 134

An electronic document that associates credentials with a public key.

Front 135

digital signature

Back 135

An encrypted hash value that is appended to a message to identify the sender and the message.

Front 136

directory service

Back 136

A network service that stores identity information about all the objects in a particular network, including users, groups, servers, client computers, and printers.

Front 137

directory traversal

Back 137

An attack that allows access to commands, files, and directories that may or may not be connected to the web document root directory.

Front 138

DLP

Back 138

(data loss/leak prevention) Software that stops data in a system from being stolen.

Front 139

DMZ

Back 139

(demilitarized zone) A small section of a private network that is located between two firewalls and made available for public access.

Front 140

DNS

Back 140

(Domain Name System) The service that maps names to IP addresses on most TCP/IP networks, including the Internet.

Front 141

DNS hijacking

Back 141

An attack in which an attacker sets up a rogue DNS server. This rogue DNS server responds to legitimate requests with IP addresses for malicious or non-existent websites.

Front 142

DNS poisoning

Back 142

An attack in which an attacker exploits the traditionally open nature of the DNS system to redirect a domain name to an IP address of the attacker's choosing.

Front 143

DoS attack

Back 143

(Denial of Service attack) A network attack in which an attacker disables systems that provide network services by consuming a network link's available bandwidth, consuming a single system's available resources, or exploiting programming flaws in an application or operating system.

Front 144

drive-by download

Back 144

A program that is automatically installed on a computer when you access a malicious site, even without clicking a link or giving consent.

Front 145

DRP

Back 145

(disaster recovery plan) A plan that prepares the organization to react appropriately in a natural or a man-made disaster and provides the means to recover from a disaster.

Front 146

dumpster diving

Back 146

A human-based attack where the goal is to reclaim important information by inspecting the contents of trash containers.

Front 147

EAP

Back 147

(Extensible Authentication Protocol) An authentication protocol that enables systems to use hardware-based identifiers, such as fingerprint scanners or smart card readers, for authentication.

Front 148

eavesdropping attack

Back 148

A network attack that uses special monitoring software to gain access to private communications on the network wire or across a wireless network. Also known as a sniffing attack.

Front 149

ECB encryption

Back 149

(Electronic Code Book encryption) A block encryption model where each block is encrypted by itself. Each occurrence of a particular word is encrypted exactly the same.

Front 150

ECC

Back 150

(elliptic curve cryptography) An asymmetric encryption technique that leverages the algebraic structures of elliptic curves over finite fields.

Front 151

ECDHE

Back 151

(Elliptic Curve Diffie-Hellman Ephemeral) A cryptographic protocol that is based on Diffie-Hellman and that provides for secure key exchange by using ephemeral keys and elliptic curve cryptography.

Front 152

EFS

Back 152

(Encrypting File System) Microsoft Windows NTFS-based public key encryption.

Front 153

EMI

Back 153

(electromagnetic interference) A disruption of electrical current that occurs when a magnetic field around one electrical circuit interferes with the signal being carried on an adjacent circuit.

Front 154

enciphering

Back 154

The process of applying a cipher.

Front 155

encryption

Back 155

A security technique that converts data from plain, or cleartext form, into coded, or ciphertext form so that only authorized parties with the necessary decryption information can decode and read the data.

Front 156

enumerating

Back 156

The stage of the hacking process in which the attacker will try to gain access to users and groups, network resources, shares, applications, or valid user names and passwords.

Front 157

environmental controls

Back 157

A system or device that is implemented to prevent or control environmental exposures or threats.

Front 158

ethical hacking

Back 158

Planned attempts to penetrate the security defenses of a system in order to identify vulnerabilities.

Front 159

evil twin attack

Back 159

In social networking, an attack where an attacker creates a social network account to impersonate a genuine user, becoming friends with others and joining groups, and thus getting access to various types of personal and professional information. In wireless networking, a type of rogue access point at a public site that is configured to look like a legitimate access point in order to tempt a user to choose to connect to it.

Front 160

failopen

Back 160

A control that provides open access when a system fails.

Front 161

failsafe

Back 161

A control that provides user safety when a system fails.

Front 162

failsecure

Back 162

A control that provides security when a system fails.

Front 163

fault tolerance

Back 163

The ability of a network or system to withstand a foreseeable component failure and continue to provide an acceptable level of service.

Front 164

FCoE

Back 164

(Fibre Channel over Ethernet) Fibre Channel implementations that use high-speed Ethernet networks to transmit and store data.

Front 165

Fibre Channel

Back 165

A protocol that implements links between data storage networks using special-purpose cabling to increase performance and reliability.

Front 166

firewall

Back 166

A software or hardware device that protects a system or network by blocking unwanted network traffic.

Front 167

first responder

Back 167

The first person or team to respond to an accident, damage site, or natural disaster in an IT company.

Front 168

flood guard

Back 168

A tool used by network administrators and security professionals to protect resources from flooding attacks, such as DDoS attacks.

Front 169

footprinting

Back 169

aka profiling. The stage of the hacking process in which the attacker chooses a target organization or network and begins to gather information that is publicly available. Also called profiling.

Front 170

FTP

Back 170

(File Transfer Protocol) A communications protocol that enables the transfer of files between a user's workstation and a remote host.

Front 171

FTP over SSH

Back 171

aka Secure FTP. A secure version of FTP that uses an SSH tunnel to encrypt files in transit.

Front 172

FTPS

Back 172

(File Transfer Protocol Secure) aka FTP-SSL. A protocol that combines the use of FTP with additional support for TLS and SSL.

Front 173

full backup

Back 173

A backup that backs up all selected files regardless of the state of the archived bit.

Front 174

fuzzing

Back 174

A testing method used to identify vulnerabilities and weaknesses in applications, by sending the application a range of random or unusual input data and noting failures and crashes.

Front 175

gain

Back 175

The reliable connection range and power of a wireless signal, measured in decibels.

Front 176

geolocation

Back 176

The process of identifying the real-world geographic location of an object, often by associating a location such as a street address with an IP address, hardware address, Wi-Fi positioning system, GPS coordinates, or some other form of information.

Front 177

GPG

Back 177

(GNU Privacy Guard) A free open-source version of PGP that provides the equivalent encryption and authentication services.

Front 178

grey box test

Back 178

A test in which the tester may have knowledge of internal architectures and systems, or other preliminary information about the system being tested.

Front 179

grey hat

Back 179

A hacker who exposes security flaws in applications and operating systems without consent, and does so for the greater good instead of maliciously.

Front 180

group based privileges

Back 180

Privileges that are assigned to an entire group of users within an organization.

Front 181

group policy

Back 181

A centralized configuration management feature available for Active Directory on Windows Server systems.

Front 182

guessing

Back 182

A human-based attack where the goal is to guess a password or PIN through brute force means or by using deduction.

Front 183

guidelines

Back 183

Suggestions for meeting a policy standard or best practices.

Front 184

hackers

Back 184

Users who excel at programming or managing and configuring computer systems, and have the skills to gain access to computer systems through unauthorized or unapproved means.

Front 185

hacktivist

Back 185

A hacker motivated by the desire for social change.

Front 186

hardening

Back 186

A security technique in which the default configuration of a system is altered to protect the system against attacks.

Front 187

hardware attack

Back 187

An attack that targets a computer's physical components and peripherals, including its hard disk, motherboard, keyboard, network cabling, or smart card reader.

Front 188

hardware-based encryption devices

Back 188

A device or mechanism that provides encryption, decryption, and access control.

Front 189

hash

Back 189

aka hash value. aka message digest. The value that results from hashing encryption. Also known as hash value or message digest.

Front 190

hashing encryption

Back 190

One-way encryption that transforms cleartext into a coded form that is never decrypted.

Front 191

header manipulation

Back 191

An attack where the attacker manipulates the header information that is passed between web servers and clients in HTTP requests.

Front 192

heuristic monitoring

Back 192

A monitoring system that uses known best practices and characteristics in order to identify and fix issues within the network.

Front 193

high availability

Back 193

A rating that expresses how closely systems approach the goal of providing data availability 100 percent of the time while maintaining a high level of system performance.

Front 194

HMAC

Back 194

(Hash-based Message Authentication Code) A method used to verify both the integrity and authenticity of a message by combining cryptographic hash functions, such as MD5 or SHA-1, with a secret key.

Front 195

hoax

Back 195

An email-based or web-based attack that tricks the user into performing undesired actions, such as deleting important system files in an attempt to remove a virus, or sending money or important information via email or online forms.

Front 196

honeynet

Back 196

An entire dummy network used to lure attackers.

Front 197

honeypot

Back 197

A security tool used to lure attackers away from the actual network components. Also called a decoy or sacrificial lamb.

Front 198

host availability

Back 198

aka host elasticity. The ability of a host to remain accessible despite any system changes it needs to adapt to.

Front 199

host-based firewall

Back 199

Software that is installed on a single system to specifically guard against networking attacks.

Front 200

host/personal firewalls

Back 200

Firewalls installed on a single or home computer.

Front 201

hot and cold aisle

Back 201

A method used within data centers and server rooms as a temperature and humidity control method.

Front 202

hot site

Back 202

A fully configured alternate network that can be online quickly after a disaster.

Front 203

hotfix

Back 203

A patch that is often issued on an emergency basis to address a specific security flaw.

Front 204

HOTP

Back 204

(HMAC-based one-time password) An algorithm that generates a one-time password using a hash-based authentication code to verify the authenticity of the message.

Front 205

HSM

Back 205

(Hardware Security Module) A cryptographic module that can generate cryptographic keys.

Front 206

HTTP

Back 206

(Hypertext Transfer Protocol) A protocol that defines the interaction between a web server and a browser.

Front 207

HTTPS

Back 207

(Hypertext Transfer Protocol Secure) A secure version of HTTP that supports e-commerce by providing a secure connection between a web browser and a server.

Front 208

HVAC system

Back 208

(heating, ventilation, and air conditioning) A system that controls the air quality and flow inside a building.

Front 209

hybrid password attack

Back 209

An attack that utilizes multiple attack methods, including dictionary, rainbow table, and brute force attacks when trying to crack a password.

Front 210

IaaS

Back 210

(Infrastructure as a Service) A method that uses the cloud to provide any or all infrastructure needs.

Front 211

ICMP

Back 211

(Internet Control Message Protocol) An IP network service that reports on connections between two hosts.

Front 212

ICMP flood

Back 212

A type of DoS attack that exploits weaknesses in ICMP. Specific attacks include Smurf attacks and ping floods.

Front 213

identification

Back 213

In security terms, the process of attaching a human element to an authentication.

Front 214

identity management

Back 214

An area of information security that is used to identify individuals within a computer system or network.

Front 215

identity theft

Back 215

A crime that occurs when an individual's personal information or data is stolen and used by someone other than the authorized user.

Front 216

IDS

Back 216

(intrusion detection system) A software and/or hardware system that scans, audits, and monitors the security infrastructure for signs of attacks in progress.

Front 217

IM

Back 217

(instant messaging) A type of communication service which involves a private dialogue between two persons via instant text-based messages over the Internet.

Front 218

impersonation

Back 218

A type of spoofing in which an attacker pretends to be someone they are not, typically an average user in distress, or a help desk representative.

Front 219

implicit deny

Back 219

The principle that establishes that everything that is not explicitly allowed is denied.

Front 220

incident management

Back 220

Practices and procedures that govern how an organization will respond to an incident in progress.

Front 221

incident report

Back 221

A description of the events that occurred during a security incident.

Front 222

incremental backup

Back 222

A back up that backs up all files in a selected storage location that have changed since the last full or differential backup.

Front 223

information security

Back 223

The protection of available information or information resources from unauthorized access, attacks, thefts, or data damage.

Front 224

input validation

Back 224

Any technique used to ensure that the data entered into a field or variable in an application is within acceptable bounds for the object that will receive the data.

Front 225

integer overflow

Back 225

An attack in which a computed result is too large to fit in its assigned storage space, leading to crashing, corruption, or triggering a buffer overflow.

Front 226

integrity

Back 226

The fundamental security goal of ensuring that electronic data is not altered or tampered with.

Front 227

interference

Back 227

aka jamming. Within wireless networking, the phenomenon by which radio waves from other devices interfere with the 802.11 wireless signals.

Front 228

intrusion

Back 228

An instance of an attacker accessing your computer system without the authorization to do so.

Front 229

IPS

Back 229

(intrusion prevention system) An inline security device that monitors suspicious network and/or system traffic and reacts in real time to block it.

Front 230

IPSec

Back 230

(Internet Protocol Security) A set of open, non-proprietary standards that you can use to secure data through authentication and encryption as the data travels across the network or the Internet.

Front 231

IPv4

Back 231

(IP version 4) An Internet standard that uses a 32-bit number assigned to a computer on a TCP/IP network.

Front 232

IPv6

Back 232

(IP version 6) An Internet standard that increases the available pool of IP addresses by implementing a 128-bit binary address space.

Front 233

IRP

Back 233

(Incident Response Policy) The security policy that determines the actions that an organization will take following a confirmed or potential security breach.

Front 234

ISA

Back 234

(interconnection security agreement) A agreement that focuses on securing technology in a business relationship.

Front 235

iSCSI

Back 235

(Internet Small Computer System Interface) A protocol that implements links between data storage networks using IP.

Front 236

IT contingency plan

Back 236

An alternate plan that you can switch over to when faced with an attack or disruption of service.

Front 237

IV

Back 237

(initialization vector) A technique used in cryptography to generate random numbers to be used along with a secret key to provide data encryption.

Front 238

IV attack

Back 238

An attack where the attacker is able to predict or control the IV of an encryption process, thus giving the attacker access to view the encrypted data that is supposed to be hidden from everyone else except the user or network.

Front 239

job rotation

Back 239

The principle that establishes that no one person stays in a vital job role for too long a time period.

Front 240

Kerberos

Back 240

An authentication system in which authentication is based on a time-sensitive ticket-granting system. It uses an SSO method where the user enters access credentials that are then passed to the authentication server, which contains the allowed access credentials.

Front 241

key

Back 241

In cryptography, a specific piece of information that is used in conjunction with an algorithm to perform encryption and decryption.

Front 242

key escrow

Back 242

A method for backing up private keys to protect them while allowing trusted third parties to access the keys under certain conditions.

Front 243

key escrow agent

Back 243

A third party that maintains a backup copy of private keys.

Front 244

key exchange

Back 244

Any method by which cryptographic keys are transferred among users, thus enabling the use of a cryptographic algorithm.

Front 245

key generation

Back 245

An asymmetric encryption process of generating a public and private key pair using a specific application.

Front 246

key stretching

Back 246

A technique that strengthens potentially weak cryptographic keys, such as passwords or passphrases created by people, against brute force attacks.

Front 247

keystroke authentication

Back 247

A type of authentication that relies on detailed information that describes exactly when a keyboard key is pressed and released as someone types information into a computer or other electronic device.

Front 248

L2TP

Back 248

(Layer Two Tunneling Protocol) The de facto standard VPN protocol for tunneling PPP sessions across a variety of network protocols such as IP, Frame Relay, or ATM.

Front 249

layered security

Back 249

An approach to securing systems that incorporates many different avenues of defense.

Front 250

LDAP

Back 250

(Lightweight Directory Access Protocol) A simple network protocol used to access network directory databases, which store information about authorized users and their privileges as well as other organizational information.

Front 251

LDAP injection

Back 251

An attack that targets web-based applications by fabricating LDAP statements that typically are created by user input.

Front 252

LDAPS

Back 252

(Lightweight Directory Access Protocol Secure) aka Secure LDAP. A method of implementing LDAP using SSL/TLS encryption.

Front 253

LEAP

Back 253

(Lightweight Extensible Authentication Protocol) Cisco Systems' proprietary EAP implementation.

Front 254

least privilege

Back 254

The principle that establishes that users and software should only have the minimal level of access that is necessary for them to perform the duties required of them.

Front 255

load balancer

Back 255

A network device that performs load balancing as its primary function.

Front 256

load balancing

Back 256

The practice of spreading out the work among the devices in a network.

Front 257

lockout

Back 257

A method of restricting access to data on a device without deleting that data.

Front 258

log

Back 258

A record of significant events. In computing, it is using an operating system or application to record data about activity on a computer.

Front 259

logging

Back 259

The act of creating a log.

Front 260

logic bomb

Back 260

A piece of code that sits dormant on a target computer until it is triggered by the occurrence of specific conditions, such as a specific date and time. Once the code is triggered, the logic bomb “detonates,” performing whatever action it was programmed to do.

Front 261

loss controls

Back 261

aka damage controls. Security measures implemented to prevent key assets from being damaged.

Front 262

LSO

Back 262

(locally shared object) aka flash cookies. Data stored on a user's computer after visiting a website that uses Adobe Flash Player. These can be used to track a user's activity.

Front 263

M of N scheme

Back 263

A mathematical control that takes into account the total number of key recovery agents (N) along with the number of agents required to perform a key recovery (M).

Front 264

MAC

Back 264

(Mandatory Access Control) A system in which objects (files and other resources) are assigned security labels of varying levels, depending on the object's sensitivity. Users are assigned a security level or clearance, and when they try to access an object, their clearance is compared to the object's security label. If there is a match, the user can access the object : if there is no match, the user is denied access.

Front 265

MAC address

Back 265

(Media Access Control address) A unique physical address assigned to each network adapter board at the time of manufacture.

Front 266

MAC filtering

Back 266

The security technique of allowing or denying specific MAC addresses from connecting to a network device.

Front 267

MAC limiting

Back 267

The security technique of defining exactly how many different MAC addresses are allowed access to a network device.

Front 268

malicious add-on

Back 268

An add-on that is meant to look like a normal add-on, except that when a user installs it, malicious content will be injected to target the security loopholes that are present in a web browser.

Front 269

malicious code attack

Back 269

A type of software attack where an attacker inserts malicious software into a user's system.

Front 270

malicious insider threat

Back 270

A threat originating from an employee in an organization who performs malicious acts, such as deleting critical information or sharing this critical information with outsiders, which may result in a certain amount of losses to the organization.

Front 271

malware

Back 271

Malicious code, such as viruses, Trojans, or worms, which is designed to gain unauthorized access to, make unauthorized use of, or damage computer systems and networks.

Front 272

man-in-the-middle attack

Back 272

A form of eavesdropping where the attacker makes an independent connection between two victims and steals information to use fraudulently.

Front 273

management controls

Back 273

Procedures implemented to monitor the adherence to organizational security policies.

Front 274

mandatory vacations

Back 274

Periods of time in which an employee must take time off from work so that their activities may be subject to a security review.

Front 275

MANET

Back 275

(mobile ad-hoc network) A continuously self-configuring network of mobile devices such as smartphones, tablets, and laptops.

Front 276

mantrap

Back 276

A physical security control system that has a door at each end of a secure chamber.

Front 277

MD4

Back 277

(Message Digest 4) This hash algorithm, based on RFC 1320, produces a 128-bit hash value and is used in message integrity checks for data authentication.

Front 278

MD5

Back 278

(Message Digest 5) This hash algorithm, based on RFC 1321, produces a 128-bit hash value and is used in IPSec policies for data authentication.

Front 279

media

Back 279

A method that connects devices to the network and carries data between devices.

Front 280

MOU

Back 280

(memorandum of understanding) An informal business agreement that is not legally binding and does not involve the exchange of money.

Front 281

MTBF

Back 281

(mean time between failures) The rating on a device or devices that predicts the expected time between failures.

Front 282

MTD

Back 282

(maximum tolerable downtime) The longest period of time a business can be inoperable without causing the business to fail irrecoverably.

Front 283

MTTF

Back 283

(mean time to failure) The length of time a device or component is expected to remain operational.

Front 284

MTTR

Back 284

(mean time to recovery) The average time taken for a business to recover from an incident or failure.

Front 285

multi-factor authentication

Back 285

Any authentication scheme that requires validation of at least two of the possible authentication factors.

Front 286

multifunction network device

Back 286

Any piece of network hardware that is meant to perform more than one networking task without having to be reconfigured.

Front 287

mutual authentication

Back 287

A security mechanism that requires that each party in a communication verifies its identity.

Front 288

NAC

Back 288

(Network Access Control) The collection of protocols, policies, and hardware that govern access on devices to and from a network.

Front 289

NAS

Back 289

(Network Access Server) A RADIUS server configuration that uses a centralized server and clients.

Front 290

NAT

Back 290

(Network Address Translation) A simple form of Internet security that conceals internal addressing schemes from the public Internet by translating between a single public address on the external side of a router and private, non-routable addresses internally.

Front 291

NetBIOS

Back 291

(Network Basic Input Output System) A simple, broadcast-based naming service.

Front 292

network adapter

Back 292

Hardware that translates the data between the network and a device.

Front 293

network operating system

Back 293

Software that controls network traffic and access to network resources.

Front 294

network-based firewalls

Back 294

A hardware/software combination that protects all the computers on a network behind the firewall.

Front 295

NFC

Back 295

(Near Field Communication) A mobile device communication standard that operates at very short range, often through physical contact.

Front 296

NIDS

Back 296

(network intrusion detection system) A system that uses passive hardware sensors to monitor traffic on a specific segment of the network.

Front 297

NIPS

Back 297

(network intrusion prevention system) An active, inline security device that monitors suspicious network and/or system traffic and reacts in real time to block it.

Front 298

non-repudiation

Back 298

The security goal of ensuring that the party that sent a transmission or created data remains associated with that data and cannot deny sending or creating that data.

Front 299

NoSQL database

Back 299

A database that provides data storage and retrieval in a non-relational manner.

Front 300

NTLM

Back 300

(NT LAN Manager) An authentication protocol created by Microsoft for use in its products.

Front 301

OCSP

Back 301

(Online Certificate Status Protocol) An HTTP-based alternative to a certificate revocation list that checks the status of certificates.

Front 302

OFB encryption

Back 302

(Output Feedback mode encryption) A block encryption model that converts a block cipher into a stream cipher, which is fed back as input of a block cipher.

Front 303

off-boarding

Back 303

Ensuring that employees or partners leaving an organization or business relationship do not pose a security risk.

Front 304

on-boarding

Back 304

Bringing new employees or business partners up to speed on security protocols.

Front 305

Open Directory

Back 305

The directory service that ships as part of Mac OS X Server.

Front 306

operational controls

Back 306

Security measures implemented to safeguard all aspects of day-to-day operations, functions, and activities.

Front 307

order of volatility

Back 307

The order in which volatile data should be recovered from various storage locations and devices following a security incident.

Front 308

orphaned accounts

Back 308

User accounts that remain active even after the employees have left the organization.

Front 309

OSI model

Back 309

(Open Systems Interconnection model) A method of abstracting how different layers of a network structure interact with one another.

Front 310

OTP

Back 310

(one-time password) A password that is generated for use in one specific session and becomes invalid after the session ends.

Front 311

P2P

Back 311

(peer-to-peer) A network that has a broadcast application architecture that distributes tasks between peer systems who have equal privileges, and in which resource sharing, processing, and communications controls are decentralized.

Front 312

P2P attacks

Back 312

Attacks that are launched by malware propagating within a P2P architecture to launch DoS attacks.

Front 313

PaaS

Back 313

(Platform as a Service) A method that uses the cloud to provide any platform-type services.

Front 314

packet sniffing

Back 314

An attack on wireless networks where an attacker captures data and registers data flows in order to analyze what data is contained in a packet.

Front 315

PAP

Back 315

(Password Authentication Protocol) A remote access authentication service that sends user IDs and passwords as cleartext.

Front 316

password attack

Back 316

Any type of attack in which the attacker attempts to obtain and make use of passwords illegitimately.

Front 317

password stealer

Back 317

A type of software that can capture all passwords and user names entered into the IM application or social networking site that it was designed for.

Front 318

patch

Back 318

A small unit of supplemental code meant to address either a security problem or a functionality flaw in a software package or operating system.

Front 319

patch management

Back 319

The practice of monitoring for, evaluating, testing, and installing software patches and updates.

Front 320

PBKDF2

Back 320

(Password-Based Key Derivation Function 2) A key derivation function used in key stretching to make potentially weak cryptographic keys such as passwords less susceptible to brute force attacks.

Front 321

PCBC encryption

Back 321

(Propagating or Plaintext Cipher Block Chaining encryption) A block encryption model that causes minimal changes in the ciphertext while encrypting or decrypting.

Front 322

PEAP

Back 322

(Protected Extensible Authentication Protocol) Similar to EAP-TLS, PEAP is an open standard developed by a coalition made up of Cisco Systems, Microsoft, and RSA Security.

Front 323

penetration test

Back 323

A method of evaluating security by simulating an attack on a system.

Front 324

perfect forward secrecy

Back 324

A property of public key cryptographic systems that ensures that any session key derived from a set of long-term keys cannot be compromised if one of the keys is compromised at a future date.

Front 325

permanent DoS attack

Back 325

aka phlashing. A type of DoS attack that targets the hardware of a system in order to make recovery more difficult.

Front 326

personal identification verification card

Back 326

Any physical token like a smart card that is used in identification and authentication.

Front 327

PGP

Back 327

(Pretty Good Privacy) A method of securing emails created to prevent attackers from intercepting and manipulating email and attachments by encrypting and digitally signing the contents of the email using public key cryptography.

Front 328

pharming

Back 328

An attack in which a request for a website, typically an e-commerce site, is redirected to a similar-looking, but fake, website.

Front 329

phishing

Back 329

A type of email-based social engineering attack, in which the attacker sends email from a spoofed source, such as a bank, to try to elicit private information from the victim.

Front 330

physical security

Back 330

The implementation and practice of various control mechanisms that are intended to restrict physical access to facilities.

Front 331

physical security controls

Back 331

Implemented security measures that restrict, detect, and monitor access to specific physical areas or assets.

Front 332

PII

Back 332

(personally identifiable information) The pieces of information that a company uses or prefers to use to identify or contact an employee.

Front 333

ping floods

Back 333

A common name for ICMP flood attack. It is a type of DoS attack in which the attacker attempts to overwhelm the target system with ICMP Echo Request (ping) packets.

Front 334

ping sweep

Back 334

A scan of a range of IP addresses to locate active hosts within the range.

Front 335

PKCS

Back 335

(Public Key Cryptography Standards) A set of protocol standards developed by a consortium of vendors to send information over the Internet in a secure manner using a PKI.

Front 336

PKCS #10—Certification Request Syntax Standard

Back 336

A PKCS that describes the syntax used to request certification of a public key and other information.

Front 337

PKCS #7—Cryptographic Message Syntax Standard

Back 337

A PKCS that describes the general syntax used for cryptographic data such as digital signatures.

Front 338

PKI

Back 338

(Public Key Infrastructure) A system that is composed of a CA, certificates, software, services, and other cryptographic components, for the purpose of enabling authenticity and validation of data and/or entities.

Front 339

plaintext

Back 339

Un-encoded data. Also known as cleartext.

Front 340

PMI

Back 340

(Privilege Management Infrastructure) An implementation of a particular set of privilege management technologies.

Front 341

policy statement

Back 341

An outline of the plan for an individual security component.

Front 342

polymorphic malware

Back 342

A virus that is able to alter its decryption module each time it infects a new file.

Front 343

pop-up

Back 343

A window or frame that loads and appears automatically when a user connects to a particular web page.

Front 344

pop-up blockers

Back 344

Software that prevents pop-ups from sites that are unknown or untrusted and prevents the transfer of unwanted code to the local system.

Front 345

port scanning attack

Back 345

An attack where an attacker scans your systems to see which ports are listening in an attempt to find a way to gain unauthorized access.

Front 346

ports

Back 346

The endpoints of a logical connection that client computers use to connect to specific server programs.

Front 347

PPP

Back 347

(Point-to-Point Protocol) The VPN protocol that is an Internet standard for sending IP datagram packets over serial point-to-point links.

Front 348

PPTP

Back 348

(Point-to-Point Tunneling Protocol) A VPN protocol that is an extension of the PPP remote access protocol.

Front 349

prevention

Back 349

The security approach of blocking unauthorized access or attacks before they occur.

Front 350

prevention controls

Back 350

Controls that can react to anomalies by blocking access completely, thereby preventing damage to a system, building, or network.

Front 351

private key

Back 351

The component of asymmetric encryption that is kept secret by one party during two-way encryption.

Front 352

private root CA

Back 352

A root CA that is created by a company for use primarily within the company itself.

Front 353

privilege bracketing

Back 353

The task of giving privileges to a user only when needed and revoking them as soon as the task is done.

Front 354

privilege management

Back 354

The use of authentication and authorization mechanisms to provide an administrator with centralized or decentralized control of user and group role-based privilege management.

Front 355

procedures

Back 355

Instructions that detail specifically how to implement a policy.

Front 356

protected distribution

Back 356

A method of securing the physical cabling of a communications infrastructure.

Front 357

protocol

Back 357

Software that controls network communications using a set of rules.

Front 358

protocol analyzer

Back 358

aka network analyzer. This type of diagnostic software can examine and display data packets that are being transmitted over a network.

Front 359

proxy server

Back 359

A system that isolates internal networks from the Internet by downloading and storing Internet files on behalf of internal clients.

Front 360

public key

Back 360

The component of asymmetric encryption that can be accessed by anyone.

Front 361

public root CA

Back 361

A root CA that is created by a vendor for general access by the public.

Front 362

quantum cryptography

Back 362

A type of encryption based on quantum communication and quantum computation.

Front 363

qubit

Back 363

In quantum cryptography, a unit of data that is encrypted by entangling data with a sub-atomic particle such as a photon or electron that has a particular spin cycle. A qubit is the equivalent of a bit in computing technology.

Front 364

RA

Back 364

(Registration Authority) An authority in a PKI that processes requests for digital certificates from users.

Front 365

RADIUS

Back 365

(Remote Authentication Dial-In User Service) A standard protocol for providing centralized authentication and authorization services for remote users.

Front 366

RAID

Back 366

(Redundant Array of Independent Disks) A set of vendor-independent specifications for fault tolerant configurations on multiple-disk systems.

Front 367

rainbow tables

Back 367

Sets of related plaintext passwords and their hashes.

Front 368

ransomware

Back 368

An attack in which an attacker takes control of a user's system or data and demands a payment for return of that control.

Front 369

RBAC

Back 369

(Role-Based Access Control) A system in which access is controlled based on a user's role. Users are assigned to roles, and network objects are configured to allow access only to specific roles. Roles are created independently of user accounts.

Front 370

RC

Back 370

(Rivest Cipher) A series of variable key-length symmetric encryption algorithms developed by Ronald Rivest.

Front 371

recovery

Back 371

The act of recovering vital data present in files or folders from a crashed system or data storage devices when data has been compromised or damaged.

Front 372

recovery agent

Back 372

An individual with the necessary credentials to decrypt files that were encrypted by another user.

Front 373

recovery team

Back 373

A group of designated individuals who implement recovery procedures and control the recovery operations in the event of an internal or external disruption to critical business processes.

Front 374

reflected attack

Back 374

An attack where the attacker poses as a legitimate user and sends information to a web server in the form of a page request or form submission.

Front 375

reflected DoS attack

Back 375

A type of DoS attack that uses a forged source IP address when sending requests to a large number of computers. This causes those systems to send a reply to the target system, causing a DoS condition.

Front 376

remote access

Back 376

The ability to connect to systems and services from an offsite or remote location using a remote access method.

Front 377

replay attack

Back 377

A type of network attack where an attacker captures network traffic and stores it for retransmission at a later time to gain unauthorized access to a network.

Front 378

reputation

Back 378

The public's opinion of a particular company based on certain standards.

Front 379

resource

Back 379

Any virtual or physical components of a system that have limited availability. A physical resource can be any device connected directly to a computer system. A virtual resource refers to any type of file, memory location, or network connection.

Front 380

RIPEMD

Back 380

(RACE Integrity Primitives Evaluation Message Digest) A message digest algorithm that is based on the design principles used in MD4.

Front 381

risk

Back 381

An information security concept that indicates exposure to the chance of damage or loss, and signifies the likelihood of a hazard or dangerous threat.

Front 382

risk analysis

Back 382

The security management process for addressing any risk or economic damages that affect an organization.

Front 383

risk awareness

Back 383

The process of being consistently informed about the risks in one's organization or specific department.

Front 384

risk management

Back 384

The practice of managing risks from the initial identification to mitigation of those risks.

Front 385

rogue access point

Back 385

An unauthorized wireless access point on a corporate or private network, which allows unauthorized individuals to connect to the network.

Front 386

rogue machine

Back 386

An unknown or unrecognized device that is connected to a network, often for nefarious purposes.

Front 387

rollup

Back 387

A collection of previously issued patches and hotfixes, usually meant to be applied to one component of a system, such as the web browser or a particular service.

Front 388

root CA

Back 388

The top-most CA in the hierarchy and consequently, the most trusted authority in the hierarchy.

Front 389

rootkit

Back 389

Software that is intended to take full or partial control of a system at the lowest levels.

Front 390

router

Back 390

A device that connects multiple networks that use the same protocol.

Front 391

router redundancy

Back 391

A technique for employing multiple routers in teams to limit the risk of routing failure should a router malfunction.

Front 392

RPO

Back 392

(recovery point objective) The point in time, relative to a disaster, where the data recovery process begins.

Front 393

RSA

Back 393

The first successful algorithm to be designed for public key encryption. It is named for its designers, Rivest, Shamir, and Adelman.

Front 394

RTO

Back 394

(recovery time objective) The length of time within which normal business operations and activities must be restored following a disturbance.

Front 395

Rule-Based Access Control

Back 395

A non-discretionary access control technique that is based on a set of operational rules or restrictions.

Front 396

rule-based management

Back 396

The use of operational rules or restrictions to govern the security of an organization's infrastructure.

Front 397

S-box

Back 397

A relatively complex key algorithm that when given the key, provides a substitution key in its place.

Front 398

SaaS

Back 398

(Software as a Service) A method that uses the cloud to provide application services to users.

Front 399

safety controls

Back 399

Security measures implemented to protect personnel and property from physical harm.

Front 400

SAML

Back 400

(Security Assertion Markup Language) An XML-based data format used to exchange authentication information between a client and a service.

Front 401

sandboxing

Back 401

The practice of isolating an environment from a larger system in order to conduct security tests safely.

Front 402

SCADA system

Back 402

(supervisory control and data acquisition) A type of industrial control system that monitors and controls industrial processes such as manufacturing and fabrication, infrastructure processes such as power transmission and distribution, and facility processes such as energy consumption and HVAC systems.

Front 403

scanning

Back 403

aka banner grabbing The phase of the hacking process in which the attacker uses specific tools to determine an organization's infrastructure and discover vulnerabilities.

Front 404

schema

Back 404

A set of rules in a directory service for how objects are created and what their characteristics can be.

Front 405

SCP

Back 405

(Secure Copy Protocol) A protocol that is used to securely transfer computer files between a local and a remote host, or between two remote hosts, using SSH.

Front 406

script kiddie

Back 406

An inexperienced hacker with limited technical knowledge who relies on automated tools to hack.

Front 407

security architecture review

Back 407

An evaluation of an organization's current security infrastructure model and security measures.

Front 408

security auditing

Back 408

Performing an organized technical assessment of the security strengths and weaknesses of a system.

Front 409

security baseline

Back 409

A collection of security configuration settings that are to be applied to a particular host in the enterprise.

Front 410

security incident

Back 410

A specific instance of a risk event occurring, whether or not it causes damage.

Front 411

security policy

Back 411

A formalized statement that defines how security will be implemented within a particular organization.

Front 412

security posture

Back 412

The position an organization takes on securing all aspects of its business.

Front 413

separation of duties

Back 413

The principle that establishes that no one person should have too much power or responsibility.

Front 414

service pack

Back 414

A collection of system updates that can include functionality enhancements, new features, and typically all patches, updates, and hotfixes issued up to the point of the release of the service pack.

Front 415

session hijacking attack

Back 415

An attack where the attacker exploits a legitimate computer session to obtain unauthorized access to an organization's network or services.

Front 416

session key

Back 416

A single-use symmetric key used in encrypting messages that are in a series of related communications.

Front 417

SFTP

Back 417

(Simple File Transfer Protocol) An early unsecured file transfer protocol that has since been declared obsolete.

Front 418

SHA

Back 418

(Secure Hash Algorithm) A hash algorithm modeled after MD5 and considered the stronger of the two because it produces a 160-bit hash value.

Front 419

shoulder surfing

Back 419

A human-based attack where the goal is to look over the shoulder of an individual as he or she enters password information or a PIN.

Front 420

signature-based monitoring

Back 420

A monitoring system that uses a predefined set of rules provided by a software vendor to identify traffic that is unacceptable.

Front 421

sinkhole attack

Back 421

An attack in which all traffic on a wireless network is funneled through a single node.

Front 422

site survey

Back 422

The collection of information on a location for the purposes of building the most ideal infrastructure.

Front 423

SLA

Back 423

(service-level agreement) A business agreement that outlines what services and support will be provided to a client.

Front 424

SLE

Back 424

(single loss expectancy) The financial loss expected from a single adverse event.

Front 425

smart cards

Back 425

aka CAC (common access card) Devices similar to credit cards that can store authentication information, such as a user's private key, on an embedded microchip.

Front 426

Smurf attacks

Back 426

A common name for ICMP flood attacks. These are a type of DoS attack in which a ping message is broadcast to an entire network on behalf of a victim computer, flooding the victim computer with responses.

Front 427

snapshot

Back 427

The state of a virtual system at a specific point in time.

Front 428

sniffer

Back 428

A device or program that monitors network communications on the network wire or across a wireless network and captures data.

Front 429

sniffing attack

Back 429

A network attack that uses special monitoring software to gain access to private communications on the network wire or across a wireless network. Also known as an eavesdropping attack.

Front 430

SNMP

Back 430

(Simple Network Management Protocol) An application-layer service used to exchange information between network devices.

Front 431

social engineering attack

Back 431

A type of attack where the goal is to obtain sensitive data, including user names and passwords, from network users through deception and trickery.

Front 432

software attack

Back 432

Any attack that targets software resources, including operating systems, applications, protocols, and files.

Front 433

source code

Back 433

Software code that is generated by programming languages, which is then compiled into machine code to be executed by a computer. Access to source code enables a programmer to change how a piece of software functions.

Front 434

spam

Back 434

An email-based threat that floods the user's inbox with emails that typically carry unsolicited advertising material for products or other spurious content, and which sometimes deliver viruses. It can also be utilized within social networking sites such as Facebook and Twitter.

Front 435

spam filters

Back 435

Programs used to read and reject incoming messages that contain target words and phrases used in known spam messages.

Front 436

spear phishing

Back 436

aka whaling. An email-based or web-based form of phishing which targets particularly wealthy individuals. Also known as whaling.

Front 437

spim

Back 437

An IM-based attack just like spam but which is propagated through instant messaging instead of through email.

Front 438

spoofing

Back 438

A human-based or software-based attack where the goal is to pretend to be someone else for the purpose of identity concealment. Spoofing can occur in IP addresses, MAC addresses, and email.

Front 439

spyware

Back 439

Surreptitiously installed malicious software that is intended to track and report the usage of a target system or collect other data the author wishes to obtain.

Front 440

SQL

Back 440

(Structured Query Language) A programming and query language common to many large-scale database systems.

Front 441

SQL injection

Back 441

An attack that injects an SQL query into the input data directed at a server by accessing the client side of the application.

Front 442

SSH

Back 442

(Secure Shell) A protocol for secure remote logon and secure transfer of data.

Front 443

SSL

Back 443

(Secure Sockets Layer) A security protocol that uses certificates for authentication and encryption to protect web communication.

Front 444

SSO

Back 444

(single sign-on) An aspect of privilege management that provides users with one-time authentication to multiple resources, servers, or sites.

Front 445

SSTP

Back 445

(Secure Socket Tunneling Protocol) A protocol that uses the HTTP over SSL protocol and encapsulates an IP packet with a PPP header and then with an SSTP header.

Front 446

standards

Back 446

Definitions of how adherence to a policy will be measured.

Front 447

static environment

Back 447

An operating system or other environment that is not updated or changed.

Front 448

steganography

Back 448

The practice of attempting to obscure the fact that information is present.

Front 449

storage segmentation

Back 449

The process of dividing data storage along certain predefined lines.

Front 450

stored attack

Back 450

An attack where an attacker injects malicious code or links into a website's forums, databases, or other data.

Front 451

stream cipher

Back 451

A relatively fast type of encryption that encrypts data one bit at a time.

Front 452

strong password

Back 452

A password that meets the complexity requirements that are set by a system administrator and documented in a password policy.

Front 453

subnetting

Back 453

The division of a large network into smaller logical networks.

Front 454

subordinate CAs

Back 454

Any CAs below the root in the hierarchy.

Front 455

succession plan

Back 455

A plan that ensures that all key business personnel have one or more designated backups who can perform critical functions when needed.

Front 456

switch

Back 456

A device that has multiple network ports and combines multiple physical network segments into a single logical network.

Front 457

symmetric encryption

Back 457

A two-way encryption scheme in which encryption and decryption are both performed by the same key. Also known as shared-key encryption.

Front 458

SYN flood

Back 458

A type of DoS attack in which the attacker sends multiple SYN messages initializing TCP connections with a target host.

Front 459

tabletop exercise

Back 459

An emergency planning exercise that enables disaster recovery team members to meet and discuss their roles in emergency situations, as well as their responses in particular situations.

Front 460

TACACS

Back 460

(Terminal Access Controller Access Control System) Provides centralized authentication and authorization services for remote users.

Front 461

TACACS+

Back 461

Cisco's extension to the TACACS protocol that provides multi-factor authentication.

Front 462

tailgating

Back 462

A human-based attack where the attacker will slip in through a secure area following a legitimate employee.

Front 463

takeover attack

Back 463

A type of software attack where an attacker gains access to a remote host and takes control of the system.

Front 464

TCB

Back 464

(Trusted Computing Base) The hardware, firmware, and software components of a computer system that implement the security policy of a system.

Front 465

TCP/IP

Back 465

(Transmission Control Protocol/Internet Protocol) A non-proprietary, routable network protocol suite that enables computers to communicate over all types of networks.

Front 466

technical controls

Back 466

Hardware or software installations that are implemented to monitor and prevent threats and attacks to computer systems and services.

Front 467

telephony

Back 467

Technology that provides voice communications through devices over a distance.

Front 468

testing controls

Back 468

Security measures that verify whether or not certain security techniques meet the standards set for them.

Front 469

TFTP

Back 469

(Trivial File Transfer Protocol) An insecure, limited version of FTP used primarily to automate the process of configuring boot files between computers.

Front 470

threat

Back 470

Any potential damage to an asset.

Front 471

threat vector

Back 471

The path or means by which an attacker compromises security.

Front 472

time of day restrictions

Back 472

Security controls that restrict the periods of time when users are allowed to access systems, which can be set using a group policy.

Front 473

TKIP

Back 473

(Temporal Key Integrity Protocol ) A security protocol created by the IEEE 802.11i task group to replace WEP.

Front 474

TLS

Back 474

(Transport Layer Security) A security protocol that uses certificates and public key cryptography for mutual authentication and data encryption over a TCP/IP connection.

Front 475

tokens

Back 475

Physical or virtual objects that store authentication information.

Front 476

TOS

Back 476

(Trusted Operating System) The operating system component of the TCB that protects the resources from applications.

Front 477

TOTP

Back 477

(timed HMAC-based one-time password) An improvement on HOTP that forces one-time passwords to expire after a short period of time.

Front 478

TPM

Back 478

(Trusted Platform Module) A specification that includes the use of cryptoprocessors to create a secure computing environment.

Front 479

transitive access

Back 479

Access given to certain members in an organization to use data on a system without the need for authenticating themselves.

Front 480

transitive access attack

Back 480

An attack that takes advantage of the transitive access given in order to steal or destroy data on a system.

Front 481

transitive trust

Back 481

When a trust relationship between entities extends beyond its original form.

Front 482

transport encryption

Back 482

The technique of encrypting data that is in transit, usually over a network like the Internet.

Front 483

Trojan horse

Back 483

An insidious type of malware that hides itself on an infected system and can pave the way for a number of other types of attacks.

Front 484

trust model

Back 484

A CA hierarchy.

Front 485

tunneling

Back 485

A data-transport technique in which a data packet is encrypted and encapsulated in another data packet in order to conceal the information of the packet inside.

Front 486

Twofish

Back 486

A symmetric key block cipher, similar to Blowfish, consisting of a block size of 128 bits and key sizes up to 256 bits.

Front 487

UDP flood

Back 487

A type of DoS attack in which the attacker attempts to overwhelm the target system with UDP ping requests. Often the source IP address is spoofed, creating a DoS condition for the spoofed IP.

Front 488

URL filtering

Back 488

The inspection of files and packets to block restricted websites or content.

Front 489

URL hijacking

Back 489

aka typo squatting. An attack in which an attacker registers a domain name with a common misspelling of an existing domain, so that a user who misspells a URL they enter into a browser is taken to the attacker's website.

Front 490

URL shortening service

Back 490

An Internet service that makes it easier to share links on social networking sites by abbreviating URLs.

Front 491

user assigned privileges

Back 491

Privileges that are assigned to a system user and can be configured to meet the needs of a specific job function or task.

Front 492

UTM

Back 492

(unified threat management) The process of centralizing various security techniques into a single device.

Front 493

virtualization

Back 493

A class of technology that separates computing software from the hardware it runs on via an additional software layer, allowing multiple operating systems to run on one computer simultaneously.

Front 494

virus

Back 494

A self-replicating piece of code that spreads from computer to computer by attaching itself to different files.

Front 495

vishing

Back 495

Voice phishing, a human-based attack where the attacker extracts information while speaking over the phone or leveraging IP-based voice messaging services (VoIP).

Front 496

VLAN

Back 496

(virtual local area network) A point-to-point physical network that is created by grouping selected hosts together, regardless of their physical location.

Front 497

VoIP

Back 497

(Voice over IP) A term used for a technology that enables you to deliver telephony communications over a network by using the IP protocol.

Front 498

VPN

Back 498

(virtual private network) A private network that is configured within a public network, such as the Internet.

Front 499

VPN concentrator

Back 499

A single device that incorporates advanced encryption and authentication methods in order to handle a large number of VPN tunnels.

Front 500

VPN protocols

Back 500

Protocols that provide VPN functionality.

Front 501

vulnerability

Back 501

Any condition that leaves a system open to harm.

Front 502

vulnerability scan

Back 502

An assessment that identifies and quantifies weaknesses within a system, but does not test the security features of that system.

Front 503

WAP

Back 503

(Wireless Application Protocol) A protocol designed to transmit data such as web pages, email, and newsgroup postings to and from wireless devices such as mobile phones, smartphones, and tablets over very long distances, and display the data on small screens in a web-like interface.

Front 504

war chalking

Back 504

Using symbols to mark up a sidewalk or wall to indicate the presence and status of a nearby wireless network.

Front 505

war driving

Back 505

The act of searching for instances of wireless LAN networks while in motion, using wireless tracking devices like mobile phones, smartphones, tablets, or laptops.

Front 506

warm site

Back 506

A location that is dormant or performs non-critical functions under normal conditions, but which can be rapidly converted to a key operations site if needed.

Front 507

watering hole attack

Back 507

An attack in which an attacker targets a specific group, discovers which websites that group frequents, then injects those sites with malware. At least one member of the group will be infected, possibly compromising the group itself.

Front 508

web application-based firewalls

Back 508

A firewall that is deployed to secure an organization's web-based applications and transactions from attackers.

Front 509

web security gateway

Back 509

A software program used primarily to block Internet access to a predefined list of websites or category of websites within an organization or business.

Front 510

WEP

Back 510

(Wired Equivalent Privacy) A deprecated protocol that provides 64-bit, 128-bit, and 256-bit encryption using the RC4 algorithm for wireless communication that uses the 802.11a and 802.11b protocols.

Front 511

white box test

Back 511

A test in which the tester knows about all aspects of the systems and understands the function and design of the system before the test is conducted.

Front 512

white hat

Back 512

A hacker who exposes security flaws in applications and operating systems with an organization's consent so that they can fix them before the problems become widespread.

Front 513

WIDS

Back 513

(wireless intrusion detection system) A system that uses passive hardware sensors to monitor traffic on a specific segment of a wireless network.

Front 514

Windows security policies

Back 514

Configuration settings within the Windows operating systems that control the overall security behavior of the system.

Front 515

WIPS

Back 515

(wireless intrusion prevention system) An active, inline security device that monitors suspicious network and/or system traffic on a wireless network and reacts in real time to block it.

Front 516

wireless security

Back 516

Any method of securing your wireless LAN network to prevent unauthorized access and data theft while ensuring that authorized users can connect to the network.

Front 517

worm

Back 517

A self-replicating piece of code that spreads from computer to computer without attaching to different files.

Front 518

WPA

Back 518

also WPA2 (Wi-Fi Protected Access) A wireless encryption protocol that generates a 128-bit key for each packet sent. Superseded by WPA2.

Front 519

WPS

Back 519

(Wi-Fi Protected Setup) An insecure feature of WPA and WPA2 that allows enrollment in a wireless network based on an 8-digit PIN.

Front 520

WSN

Back 520

(wireless sensor network) A collection of autonomous sensor-equipped devices that monitor and log physical and environmental conditions such as temperature, humidity levels, lighting controls, etc.

Front 521

WTLS

Back 521

(Wireless Transport Layer Security) The security layer of a wireless AP and the wireless equivalent of TLS in wired networks.

Front 522

XML

Back 522

(eXtensible Markup Language) A widely adopted markup language used in many documents, websites, and web applications.

Front 523

XML injection

Back 523

An attack that injects corrupted XML query data so that an attacker can gain access to the XML data structure and input malicious code or read private data.

Front 524

XSRF

Back 524

(cross-site request forgery) A type of application attack where an attacker takes advantage of the trust established between an authorized user of a website and the website itself.

Front 525

XSS

Back 525

(cross-site scripting) A type of application attack where the attacker takes advantage of scripting and input validation vulnerabilities in an interactive website to attack legitimate users.

Front 526

XTACACS

Back 526

An extension to the original TACACS protocol.

Front 527

zero day exploit

Back 527

A hacking attack that occurs immediately after a vulnerability is identified, when the security level is at its lowest.

Front 528

zombie

Back 528

aka drone. A computer that has been infected with a bot and is being used by an attacker to mount a DDoS attack. Also called a drone.

Front 529

zombie

Back 529

aka drone. A computer that has been infected with a bot and is being used by an attacker to mount a DDoS attack. Also called a drone.