Chapter 2: Malware And Social Engineering Attacks

Front 1

Adware:

Back 1

A software program delivers advertising content in a manner that is unexpected and unwanted by the user.

Front 2

backdoor:

Back 2

Software code that gives access to a program or a service that circumvents normal security protections.

Front 3

botnet:

Back 3

A logical computer network of zombies under the control of an attacker

Front 4

Virus:

Back 4

A malicious computer code that, like its biological counterparts, reproduces itself on the same computer

Front 5

dumpster diving:

Back 5

The act of digging through trash receptacles to find information that can be useful in an attack.

Front 6

Hoax:

Back 6

A False warning

Front 7

impersonation

Back 7

An attack that creates a fictitious character and then plays out the role of that person on a victim.

Front 8

keylogger:

Back 8

Captures and stores each keystroke that a user types on the computer's keyboard.

Front 9

logic bomb:

Back 9

Computer code that lies dormant until it is triggered by a specific logical event

Front 10

malware:

Back 10

Software that enters a computer system without the user's knowledge or consent and then performs an unwanted-and usually harmful-action.

Front 11

pharming:

Back 11

A phishing attack that automatically redirects the user to a fake site

Front 12

phishing:

Back 12

Sending an e-mail or displaying a Web announcement that falsely claims to be from a legitimate enterprise in a attempt to trick the user into surrendering private information.

Front 13

rootkit:

Back 13

A set of software tools used by an attacker to hide the actions or presence of other types of malicious software

Front 14

shoulder surfing:

Back 14

Watching an authorized user enter a security code on a keypad

Front 15

social engineering:

Back 15

A means of gathering information for an attack by relying on the weaknesses of individuals

Front 16

spam:

Back 16

Unsolicited email

Front 17

spyware:

Back 17

A general term used to describe software that spies on users by gathering information without consent, thus violating their privacy

Front 18

tailgating:

Back 18

The act of unauthorized individuals entering a restricted-access building by following an authorized user.

Front 19

trojan:

Back 19

An executable program advertised as performing one activity, but actually does something else ( or it may perform both the advertised and malicious activities)

Front 20

vishing:

Back 20

A phishing attack that uses a telephone call instead of using e-mail.

Front 21

whaling:

Back 21

a phishing attack that targets only wealthy individuals

Front 22

word splitting:

Back 22

Horizontally separating words so that they can still be read by the human eye.

Front 23

worm:

Back 23

a malicious program designed to take advantage of a vulnerability in an application or an operating system in order to enter a computer and then self-replicate to other computers.