Windows 7 Chapter 10

Front 1

authenticated exception

Back 1

A firewall rule to allow traffic only when the connection between the communicating computers is secured using IPsec.

Front 2

brute force

Back 2

Cracking is a mathematical process in which a software program tries all of the possible passwords until it finds the right one. This is sometimes known as a brute force process.

Front 3

filter

Back 3

Although what a firewall does is sometimes referred to as packet filtering, in the Windows Firewall with Advanced Security console, the term filter is used to refer to a feature that enables you to display rules according to the profile they apply to, their current state, or the group to which they belong.

Front 4

firewall

Back 4

A firewall is a software program that protects a computer by allowing certain types of network traffic in and out of the system while blocking others. Firewalls are essentially packet filters that examine the contents of packets and the traffic patterns to and from the network to determine which packets should be allowed passage through the filter.

Front 5

malware

Back 5

Chief among the threats to Windows 7 computers is malicious software created specifically for the purpose of infiltrating or damaging a computer system without the user's knowledge or consent. This type of software includes a variety of technologies, including viruses, Trojan horses, worms, spyware, and adware. The term most commonly used to collectively refer to these malicious software technologies is malware.

Front 6

multifactor authentication

Back 6

Because each of these identification methods has inherent weaknesses, networks requiring high security often use more than one. For example, a network that issues smart cards to users nearly always requires some sort of password as well. This technique is known as multifactor authentication.

Front 7

Personal Identity Verification (PIV)

Back 7

Windows has supported smart card authentication for some time, but until Windows 7, you had to install a third‐party device driver along with the card reader hardware. By including support for the Personal Identity Verification (PIV) standard, published by the National Institute of Standards and Technology (NIST), Windows 7 can now obtain drivers for PIV smart cards from Windows Update, or use a PIV minidriver included with the operating system.

Front 8

private key

Back 8

As the user works, EFS encrypts the files he or she creates using a key generated from the user's public key.

Front 9

public key

Back 9

Data encrypted with this key can be decrypted only by the user's personal encryption certificate, which is generated using his or her private key.

Front 10

rules

Back 10

To filter traffic, firewalls use rules that specify which packets are allowed to pass through the firewall and which are blocked.

Front 11

spyware

Back 11

Spyware is a type of software that gathers information about computer users and transmits it back to the attacker.

Front 12

user rights

Back 12

In Windows 7, user rights are policies that define specific operating system functions. For example, in order to sit down at a Windows 7 computer and log on, users must not only have accounts, they also must possess the Allow log on locally user right.

Front 13

Windows Biometric Framework

Back 13

Prior to Windows 7, the operating system included no support for biometric devices at all, and required the third‐party vendor to supply a complete software solution along with the hardware. However, Windows 7 includes a new component called the Windows Biometric Framework, which provides a core biometric functionality and a Biometric Device control panel.

Front 14

Something the user knows:

Back 14

A secret shared between the user and management—usually in the form of a password—is the simplest and most common form of authentication. However, users can forget, share, or otherwise compromise passwords, often without knowing it.

Front 15

Something the user has:

Back 15

A token of some kind, carried by the user, such as a smart card, can serve as proof of identity. While tokens can easily be lost or stolen, users are typically aware of the loss, and the time during which the system is compromised is brief.

Front 16

Something the user is:

Back 16

Biometric identification is the use of physical characteristics to confirm a user's identity. Fingerprints are the most commonly used biometric identifier, but there are also technologies that are based on ocular scans, facial recognition, and other characteristics.