Mis: Chapter 5

Front 1

A virtual private network (VPN)

Back 1

provides a secure “tunnel” through the Internet for transmitting messages and data via a private network.

Front 2

Access controls

Back 2

are designed to protect systems from unauthorized access to preserve data integrity.

Front 3

Asymmetric encryption

Back 3

uses two keys: a public key known to everyone and a private or secret key known only to the recipient.

Front 4

Availability

Back 4

ensures that computers and networks are operating, and authorized users can access the information they need.

Front 5

Backdoor

Back 5

also called a “trapdoor”) is a programming routine built into a system by its designer or programmer. This routine enables the designer or programmer to bypass system security and sneak back into the system later to access programs or files.

Front 6

Biometric security measures

Back 6

use a physiological element to enhance security measures. These elements are unique to a person and can’t be stolen, lost, copied, or passed on to others.

Front 7

blended threat

Back 7

A blended threat is a security threat that combines the characteristics of computer viruses, worms, and other malicious codes with vulnerabilities found on public and private networks.

Front 8

Business continuity planning

Back 8

outlines procedures for keeping an organization operational in the event of a natural disaster or network attack.

Front 9

callback modem

Back 9

A callback modem is used to verify whether a user’s access is valid by logging the user off and then calling the user back at a predetermined number.

Front 10

Confidentiality

Back 10

means a system must not allow the disclosure of information to anyone who isn't authorized to access it.

Front 11

Data encryption

Back 11

transforms data, called “plaintext” or “cleartext,” into a scrambled form called “ciphertext” that can’t be read by others.

Front 12

denial–of–service (DoS) attack

Back 12

A denial–of–service (DoS) attack floods a network or server with service requests to prevent legitimate users’ access to the system.

Front 13

Fault–tolerant systems

Back 13

ensure availability in case of a system failure by using a combination of hardware and software.

Front 14

firewall

Back 14

combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks, including the Internet

Front 15

Integrity

Back 15

ensures the accuracy of information resources in an organization.

Front 16

intrusion detection system (IDS)

Back 16

can protect against both external and internal access. They’re usually placed in front of a firewall and can identify attack signatures, trace patterns, generate alarms for the network administrator, and cause routers to terminate connections with suspicious sources.

Front 17

logic bomb

Back 17

type of Trojan program used to release a virus, worm, or other destructive code. Logic bombs are triggered at a certain time or by an event, such as a user pressing Enter or running a specific program.

Front 18

Physical security measures

Back 18

primarily control access to computers and networks and include devices for securing computers and peripherals from theft.

Front 19

Secure Sockets Layers (SSL)

Back 19

is a commonly used encryption protocol that manages transmission security on the Internet.

Front 20

social engineering

Back 20

In the context of security, it means using “people skills”—such as being a good listener and assuming a friendly, unthreatening air—to trick others into revealing private information.

Front 21

symmetric encryption

Back 21

(also called “secret key encryption”), the same key is used to encrypt and decrypt the message.

Front 22

Transport Layer Security (TLS)

Back 22

is a cryptographic protocol that ensures data security and integrity over public networks, such as the Internet

Front 23

Trojan program

Back 23

contains code intended to disrupt a computer, network, or Web site and is usually hidden inside a popular program.

Front 24

virus

Back 24

consists of self–propagating program code that’s triggered by a specified time or event.

Front 25

worm

Back 25

travels from computer to computer in a network. They are independent programs that can spread themselves without having to be attached to a host program.