Mis - Vocab - Ch3

Front 1

Authentication

Back 1

Determines the identity of the person requesting access.

Front 2

Authorization

Back 2

Determines which actions, rights, or privileges the person has based on the verified identify

Front 3

Cookies

Back 3

A small amount of data websites leave on the local computer temporarily.

Front 4

DOS

Back 4

Denial of service attack.
An attacker sends so much information to the target's computer system that it cannot be successfully processed and causes a crash.

Front 5

Digital Certificate

Back 5

An electronic document attached to a file certifying that the file is from the organization it claims to be.

Front 6

DDOS

Back 6

Distributed denial of service attack.
The attacker creates a botnet through malicious software to deliver a coordinated stream of information requests to a target computer.

Front 7

Firewall

Back 7

Firewalls prevent unauthorized Internet users from accessing private networks using hardware, software, or a combination of both.

Front 8

Intrusion Detection System

Back 8

Designed to detect malicious network traffic.

Front 9

Keystroke Logger

Back 9

Software that records your keystrokes and web browsing history.

Front 10

Malware

Back 10

Short for malicious software. Is designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems.

Front 11

Opt-in Model

Back 11

A business is prohibited from collecting information unless a the customer specifically authorizes it with informed consent.

Front 12

Opt-out Model

Back 12

Permits the business to collect personal information until the customer specifically requests that the data not be collected.

Front 13

Phishing Attack

Back 13

Involves deception to acquire sensitive information by posing as an official looking email.

Front 14

Public-key Encryption

Back 14

Also knows as asymmetric encryption.

Front 15

Risk Analysis

Back 15

The process by which an organization weighs the costs of having an asset compromised versus the cost of protecting the asset.

Front 16

Risk Mitigation

Back 16

When an organization takes concrete actions against a risk.

Front 17

SSL

Back 17

Secure socket layer.
Encrypts and decrypts data between browser and server. Indicated by https://

Front 18

Social Engineering

Back 18

An attack where the perpetrator uses social skills to manipulate a legitimate employee into providing confidential company information.

Front 19

Spyware

Back 19

Software that collects information about a user without consent.

Front 20

Trap Door

Back 20

Allows an attacker access without having to go through security procedures.

Front 21

Trojan Horse

Back 21

Software that hide in other computer programs until they are activated.

Front 22

Tunnelling

Back 22

Encrypts data packets traveling on a VPN.

Front 23

VPN

Back 23

Virtual private network.
A private network that uses a public network to connect users through a client.

Front 24

Virus

Back 24

Computer code that performs malicious actions by attaching to another program.

Front 25

Vulnerability

Back 25

The possibility that a computer system will suffer harm by a threat.

Front 26

Worm

Back 26

Computer code that performs malicious actions and will replicate.