Security

Front 1

Phishing

Back 1

the activity of defrauding an online account holder of financial information by posing as a legitimate company.

Front 2

Pretexting

Back 2

phoning someone who has the information under a false pretext, usually by pretending to be someone authorised to be told it.

Front 3

Social engineering

Back 3

the application of sociological principles to specific social problems.

Front 4

Pretexting is mostly used for

Back 4

attacks on companies, but it's starting to be used more against individuals.

Front 5

behavioral economics

Back 5

a method of economic analysis that applies psychological insights into human behavior to explain economic decision-making.

Front 6

decision science

Back 6

is a collaborative approach involving mathematical formulae, business tactics, technological applications and behavioral sciences to help senior management make data drivendecisions.

Front 7

prospect theory

Back 7

is a behavioral economictheory that describes the way people choose between probabilistic alternatives that involve risk, where the probabilities of outcomes are known.

Front 8

Context-aware security

Back 8

is the use of situational information (such as identity,geolocation, time of day or type of endpoint device) to improve information securitydecisions.

Front 9

Trusted Path

Back 9

is a mechanism that provides confidence that the user is communicating with what the user intended to communicate with, ensuring that attackers can't intercept or modify whatever information is being communicated.

Front 10

Password Manglers

Back 10

Something that reconfigures your password (ex. a typical mechanism is to hash it using a secret key and the domain name of the web site into which it's being entered.

Front 11

Customer education

Back 11

is inadequate as the more you train people what to do and what not to do the attackers seem to find ways to work around these new features.

Front 12

Trusted Computing

Back 12

is a technology developed and promoted by the Trusted Computing Group. The term is taken from the field oftrusted systems and has a specialized meaning.

Front 13

Fortified Password Protocols

Back 13

a series of protocols for encrypted key exchange, whereby a key exchange is combined with a shared password in such a way that a man-in-the-middle could not guess the password.

Front 14

Two-channel authentication

Back 14

This involves sending an access code to the user via a separhoneate channel, such as their mobile p

Front 15

Targeted Attack on One Account

Back 15

An intruder tries to guess a particular user's password.

Front 16

Attempt to Penetrate Any Account on a System

Back 16

the system.the intruder tries to get a logon as any user of

Front 17

Attempt to Penetrate Any Account On Any System

Back 17

the intruder merely wants an account at any system in a given domain but doesn't care which one.

Front 18

Service Denial Attack

Back 18

the attacker may wish to prevent the legitimate user from usine the system.

Front 19

One-way Encryption

Back 19

Uses a one-way algorithm

Front 20

Salt

Back 20

is random data that is used as an additional input to a one-way function that "hashes" a password or passphrase.[1] The primary function of salts is to defend againstdictionary attacks versus a list of password hashes and against pre-computed rainbow table attacks.

Front 21

winzip

Back 21

is a shareware file archiver and compressor for Windows, OS X, iOS and Android developed by WinZip Computing (formerly Nico Mak Computing). It can create archives in Zip file format, and unpack some other archive file formats.

Front 22

Password Cracking

Back 22

is the process of recovering passwords from data that have been stored in or transmitted by a computer system.

Front 23

crypto-key

Back 23

is a variable value that is applied using an algorithm to a string or block of unencrypted text to produce encrypted text, or to decrypt encrypted text.

Front 24

Total exhaust time

Back 24

time that it takes to crack a password.

Front 25

Shadow Password

Back 25

is a system file in which encryption user password are stored so that they aren't available to people who try to break into the system

Front 26

CAPTCHA

Back 26

a program or system intended to distinguish human from machine input, typically as a way of thwarting spam and automated extraction of data from websites.