Mis 311 Business Driven Information Systems, Chapter 4 By Baltzan & Phillips

Front 1

Acceptable use policy (AUP)

Back 1

A policy that a user must agree to follow in order to be provided access to a network or to the Internet.

Front 2

Adware

Back 2

Software that generates ads that install themselves on a computer when a person downloads some other program from the internet.

Front 3

Anti-spam policy

Back 3

States that e-mail users will not send unsolicited e-mails (or spam).

Front 4

Authentication

Back 4

A method for confirming users' identities.

Front 5

Authorization

Back 5

The process of giving someone permission to do or have something.

Front 6

Backdoor program

Back 6

Viruses that open a way into the network for future attacks.

Front 7

Biometrics

Back 7

The identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting.

Front 8

Black-hat hacker

Back 8

Breaks into other people's computer systems and may just look around or steal and destroy information

Front 9

Clickstream

Back 9

Records information about a customer during a Web surfing session such as what Web sites were visited, how long the visit was, what ads were viewed, and what was purchased.

Front 10

Confidentiality

Back 10

The assurance that messagse and information are available only to those who are authorized to view them.

Front 11

Content filtering

Back 11

Occurs when organizations use software that filters content to prevent the transmission of unauthorized information.

Front 12

Cookie

Back 12

A small file deposited on a hard drive by a Web site containing information about customers and their Web activities

Front 13

Copyright

Back 13

The legal protection afforded an expression of an idea, such as a song, video game, and some types of proprietary documents.

Front 14

Counterfeit software

Back 14

Software that is manufactured to look like the real thing and sold as such.

Front 15

Cracker

Back 15

A hacker with criminal intent.

Front 16

Cyberterrorist

Back 16

Seeks to cause harm to people or to destroy critical systems or information nand use the Internet as a weapon of mass destruction.

Front 17

Denial-of-service attack (DoS)

Back 17

Floods a Web site with so many requests for service that it slows down or crashes the site.

Front 18

Distributed denial-of-serive attack (DDoS)

Back 18

Attacks from multiple computers that flood a Web site with so many requests for service that it slows down or crashes

Front 19

Elevation of privelege

Back 19

Process by which a user misleads a system into granting unauthorized rights, usually for the purpose of compromising or destroying the system.

Front 20

E-mail privacy policy

Back 20

Details the extent to which e-mail messages may be read by others.

Front 21

Cyberterrorist

Back 21

Seeks to cause harm to people or to destroy critical systems or information nand use the Internet as a weapon of mass destruction.

Front 22

Encryption

Back 22

Scrambles information into an alternative form that requires a key or password to decrypt the information.

Front 23

ePolicies

Back 23

Policies and procedures that address the ethical use of computer and Internet usage in the business environment.

Front 24

Ethical computer use policy

Back 24

Contains general principles to guide computer user behavior.

Front 25

Ethics

Back 25

Principles and standards that guide our behavior toward other people.

Front 26

Fair use doctrine

Back 26

In certain situations, it is legal to use copyrighted material.

Front 27

Firewall

Back 27

Hardware and/or software that guards a private network by analyzing the information leaving and entering the network.

Front 28

Hacker

Back 28

People very knowledgeable about computers who use their knowledge to invade other people's computers.

Front 29

Hactivist

Back 29

Person with philosophical and political reasons for breaking into systesm and will often deface the Web site as a protest.

Front 30

Hardware key logger

Back 30

A hardware device that captures keystrokes on their journey from the keyboard to the motherboard.

Front 31

Hoaxes

Back 31

Attack computer systems by transmitting a virus hoax, with a real virus attached.

Front 32

Identity theft

Back 32

The forging of someone's identity for the purpose of fraud.

Front 33

Information privacy policy

Back 33

Contains general principles regarding information privacy.

Front 34

Information security

Back 34

A broad term encompassing the protection of information from accidental or intentional misuse by persons inside or outside an organization.

Front 35

Information security plan

Back 35

Details how an organization will implement the information security policies.

Front 36

Information security policies

Back 36

Identifies the rules required to maintain information security.

Front 37

Information technology monitoring

Back 37

Tracking people's activities by such measures as number of keystrokes, error rate, and number of transactions processed.

Front 38

Insider

Back 38

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.

Front 39

Intellectual property

Back 39

Intangible creative work that is embodied in physical form.

Front 40

Internet use policy

Back 40

Contains general principles to guide the proper use of the internet.

Front 41

Intrusion detection software (IDS)

Back 41

Searches out patterns in information and network traffic to indicate attacks and quickly responds to prevent any harm.

Front 42

Key logger software (key trapper)

Back 42

A program that, when installed on a computer, records every keystroke and mouse click

Front 43

Mail bomb

Back 43

Sends a massive amount of e-mail to a specific person or system resulting in filling up the recipient's disk space, which, in some cases, may be too much for the server to handle and may cause the server to stop functioning.

Front 44

Malicious code

Back 44

Includes a variety of threats such as viruses, worms, and Trojan horses.

Front 45

Nonrepudiation

Back 45

A contractual stipulation to ensure that e-business participants do not deny (repudiate) their online actions.

Front 46

Packet tampering

Back 46

Altering the contents of packets as they travel over the Internet or altering data on computer disks after penetrating a network.

Front 47

Phishing

Back 47

Technique to gain personal information for the purpose of identity theft, usually by means of fraudulent e-mail.

Front 48

Pirated software

Back 48

The unauthorized use, duplication, distribution, or sale of copyrighted software.

Front 49

Polymorphic virus and worm

Back 49

Change their form as they propagate.

Front 50

Privacy

Back 50

The right to be left alone when you want to be, to have control over your own personal possessions, and not to be observed without your consent.

Front 51

Public key encryption (PKE)

Back 51

Encryption system that uses two keys: a public key that everyone can have and a private key for only the recipient.

Front 52

Script kiddies or script bunnies

Back 52

Find hacking code on the Internet and click-and-point their way into systems to cause damage or spread viruses.

Front 53

Smart card

Back 53

A device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing.

Front 54

Sniffer

Back 54

A program or device that can monitor data traveling over a network.

Front 55

Social engineering

Back 55

Using one's social skills to trick people into revealing access credentials or other information valuable to the attacker.

Front 56

Spam

Back 56

Unsolicited e-mail.

Front 57

Spoofing

Back 57

The forging of the return address on an e-mail so that the e-mail message appears to come from someone other than the actual sender.

Front 58

Spyware (sneakware or stealthware)

Back 58

Software that come shidden in free downloadable software and tracks online movements, mines the information stored on a computer, or uses a computer's CPU and storage for some task the user knows nothing about.

Front 59

Token

Back 59

Small electronic devices that change user passwords automatically.

Front 60

Trojan-horse virus

Back 60

Hides inside other software, usually an attachment or a downloadable file.

Front 61

Virus

Back 61

Software written with malicious intent to cause annoyance or damage.

Front 62

Web log

Back 62

Consists of one line of information for every visitor to a Web site and is usually stored on a Web server.

Front 63

White-hat hacker

Back 63

Works at the request of the system owners tofind system vulnerabilities and plug the holes.

Front 64

Worm

Back 64

A type of virus that spreads itself, not only from file to file, but also from computer to computer.