Isb Chapter 4

Front 1

Ethics

Back 1

The priniples & standards that guide our behavior toward other people

Front 2

Privacy

Back 2

The right to be left alone when you want to be, to have control over your own personal possessions, and not to be observed w/o your consent

Front 3

Confidentiality

Back 3

The assurance that msgs and info are available only to those who are authorized to view them

Front 4

ePolicies

Back 4

Policies & procedures that address the ethical use of computers & internet usage in teh business environment (ethical comp use, info provicy, acceptable use, e-mail privacy, internet use, anti-spam policies)

Front 5

Information Privacy Policy

Back 5

Contains general principles regarding information privacy

Front 6

Acceptable Use Policy (AUP)

Back 6

A policy that a user must agree to follow in order to be provided access to a network or to the Internet

Front 7

Nonrepudiation

Back 7

A contractual stipulation to ensure that e-business participants do not deny(repudiate) their online actions

Front 8

E-mail Privacy Policy

Back 8

Details the extent to which e-mail messages may be read by others

Front 9

Internet Use Policy

Back 9

Contains general principals to guide the proper use of the internet

Front 10

Spam

Back 10

Unsolicited e-mail

Front 11

Anti-spam Policy

Back 11

E-mail users will not send unsolicited e-mails or spam

Front 12

Information Technology Monitoring

Back 12

Tracking people's activities by such measures as # of keystokes, error rate, and # of transactions processed

Front 13

Information Security

Back 13

A broad term encompassing the protection of info from accidental or intentional misuse by persons inside or outside an organization

Front 14

Insiders

Back 14

Legitimate users who purposely or accidentally misuse their access to the environment & cause some kind of business-affecting incident

Front 15

Social Engineering

Back 15

Using one's social skills to trick people into revealing access credentials or other info valuable to the attacker

Front 16

Dumpster Diving

Back 16

Looking through people's trash, is another way social engineering hackers obtain info

Front 17

Authentication

Back 17

A method for confirming users' identities

Front 18

Authorization

Back 18

The process of giving someone permission to do or have something

Front 19

Identity Theft

Back 19

The forging of someone's identity for the purpose of fraud

Front 20

Phishing

Back 20

A technique to gain personal info for the purpose of identity theft, usually by means of fradulent e-mail

Front 21

Tokens

Back 21

Small electronic devices that change user passwords automatically

Front 22

Smart Card

Back 22

A device that is around the same size as a credit card, containing embedded technologies that can sore info & small amounts of software to perform some limited processing

Front 23

Content Filtering

Back 23

Occurs when organizations use software that filters conent to prevent the transmission of unauthorized info

Front 24

Encryption

Back 24

Scrambles info into an alternative form that requires a key or password to decrypt the info

Front 25

Public Key Encryption (PKE)

Back 25

An encryption system that uses two keys: a public key that everyone can have & a private key for only the recipient

Front 26

Intellectual Property

Back 26

Intangible creative work that is embodied in physical form

Front 27

Copyright

Back 27

The legal protection afforded an expression of an idea, such as a song, video game, & some types of proprietary documents

Front 28

Fair Use Doctrine

Back 28

In certain situations, it is legal to use copyrighted material

Front 29

Pirated Software

Back 29

The unauthorized use, duplication, distribution, or sale of copyrighted software

Front 30

Counterfeit Software

Back 30

Software that is manufactured to look like the real thing & sold as such

Front 31

Mail Bomb

Back 31

Sending a massive amount of e-mail to a specific person or system resulting in filing up the recipient's disk space

Front 32

Key Logger/Key Trapper Software

Back 32

A program that, when installed on a comp, records every keystorke & mouse click

Front 33

Hardware Key Logger

Back 33

Hardware Device that captures keystokes on their journey from the keyboard to the motherboard

Front 34

Cookie

Back 34

Small file deposited on a hard drive by a web site containing info about customers and their web activities

Front 35

Adware

Back 35

Software taht generates ads that install themselves on a comp when a person downloads some other program from the internet

Front 36

Sneakware/Stealthware

Back 36

Software that comes hidden in free downloadable software & tracks online movements, mines the info stored on a comp, or uses a comp's CPU & storage for some task the user knows nothing about

Front 37

Web Log

Back 37

Consists of one line of info for every visitor to a web site & is usually sored on a web server

Front 38

Clickstream

Back 38

Records info about a customer during a web surfing session such as what web sites were visited, how long the visit was, what ads were viewed, & what was purchased

Front 39

Info Security Plan

Back 39

Describes Univ. of Denver's safeguards to protect info & data in compliance w/ the financial services modernization act of 1999

Front 40

White-hat hackers

Back 40

Work at the request of the system owners to find system vulnerabilities & plug the holes

Front 41

Black-hat hackers

Back 41

Break into other people's computer systems & man just look around or may steal & destroy info

Front 42

Hactivists

Back 42

Have philosophical & political reasons for breaking into systems & will often deface the web site as a protest

Front 43

Script Kiddies/bunnies

Back 43

Find hacking code on the internet & click-&-point thier way into systems to cause damage or spread viruses

Front 44

Cracker

Back 44

Hacker w/criminal intent

Front 45

Cyberterrorists

Back 45

Seek to cause harm to people or to destroy critical systems or info & use the internet as a weapon of mass destruction

Front 46

Worm

Back 46

Virus that spreads itself, not only file to file, but also from comp to comp. Difference between a virus & a worm is virus need to attach themselves to something & worms can just tunnel

Front 47

Denial-of-Service Attack (DoS)

Back 47

Floods a web site with so many requests for service that it slows down or crashs the site

Front 48

Distributed denial-of-service attack (DDoS)

Back 48

Attacks from multipel comps that flood a website with so many requests for service that it slows down or crashes. A common type is the ping of death, in which thousands of computers try to access a website at the same time, overloading it and shutting it down

Front 49

Trojan-horse virus

Back 49

hides inside other software, usually as an attachment r a downloadable file

Front 50

Backdoor programs

Back 50

viruses that open a way into the network for future attacks

Front 51

Polymorphic viruses & worms

Back 51

change thier form as the propagate