Cyber Security

Front 1

unit of data routed between an origin and a destination on the internet

Back 1

packet

Front 2

directs internet traffic. Decides where to forward a packet

Back 2

router

Front 3

computer that provides data to other computers. Might serve data to a system on a LAN or WAN

Back 3

Server

Front 4

computer hardware or software that access a service made available by a server

Back 4

CLient

Front 5

takes advantage of vulnerability same day vulnerability generally known.

Back 5

Zero Day exploit

Front 6

repair job for vulnerability in program

Back 6

patches

Front 7

replicates itself and infects other programs or files by attaching itself. needs hos to spread

Back 7

Virus

Front 8

Spread on their own from computer to computer. Doesn't need a host. Stand alone application

Back 8

worm

Front 9

Software program that masks itself as a regular program. Must run fake program to activate. Overwrites parts of hard drive. Cant replicate.

Back 9

Trojan

Front 10

A network of private computers infected with malware and controlled as a group without the owners knowledge. Eg to send spam messages

Back 10

Botnet

Front 11

Attacks multiple systems. Flood the bandwidth or resources of a targeted system. Usually one or more web servers.

Back 11

Distributed denial of service (DDoS)

Front 12

Security mechanism for separating and running a program that is untested or un-trusted without risking host machine.

Back 12

Sandboxing

Front 13

tricking people into breaking normal security protocol

Back 13

Social engineering

Front 14

tricking people into releasing their own personal information such as SS#

Back 14

Phishing (email)

Smishing (sms)

Vishing( phone call)

Front 15

Used to encrypt data. Generating a value or values from a text using a mathematical algorithm

Back 15

hashing

Front 16

adding a secret code to every password after it has been encrypted

Back 16

salting

Front 17

precomputed table for reversing hashing. cracking hashes

Back 17

rainbow table

Front 18

method of computer access control in which a user is granted access after presenting several pieces of evidence

Back 18

multifactor authentication

Front 19

evidence based knowledge about an existing or emerging threat

Back 19

Threat intelligence

Front 20

Network security system that monitors and controls the incoming and outgoing network traffic

Back 20

Firewall

Front 21

technology that exams network traffic flow to prevent vulnerability exploits

Back 21

Intrusion prevention system (IPS)

Front 22

detects and destroys computer viruses

Back 22

Anti-virus (AV)

Front 23

protects web applications/servers from attak

Back 23

Web application firewall (WAF)

Front 24

protects computers from a full spectrum of modern cyber attacks. Every process and every point.

Back 24

Next generation anti-virus (NGAV)

Front 25

strategy for making sure end users don't send sensitive or critical information outside the corporate network

Back 25

Data loss prevention ( DLP)

Front 26

Disguising origin of email

Back 26

Spoofs, look-alike domains, or display name deception

Front 27

Technology that creates a safe and encrypted connection over a less secure network, such as the internet.

Back 27

VPN

Front 28

software kit designed to run on web servers, with the purpose of identifying software vulnerabilities in client machines communicating with it, and discovering and exploiting vulnerabilities to upload and execute malicious code on the client.

Back 28

Exploit kit

Front 29

disseminating the tasks and associated privileges for a specific security process among multiple people

Back 29

Separation of duties

Front 30

the practice of limiting access to the minimal level that will allow normal functioning

Back 30

principle of least privilege (POLP)

Front 31

the conversion of electronic data into another form, called ciphertext, which cannot be easily understood by anyone except authorized parties.

Back 31

Encryption

Front 32

key pair is mathematically related, whatever is encrypted

Back 32

Public key Vs private key

Front 33

type of encryption where the same key is used to encrypt and decrypt the message

Back 33

Symmetric encryption

Front 34

Encryption where keys come in pairs. What one key encrypts, only the other can decrypt.

Back 34

Asymmetric encryption

Front 35

software testing method in which the internal structure/ design/ implementation of the item being tested is NOT known to the tester

Back 35

Black box testing

Front 36

software testing method in which the internal structure/ design/ implementation of the item being tested is known to the tester

Back 36

White box testing

Front 37

total sum of the vulnerabilities in a given computing device or network that are accessible to a hacker.

Back 37

attack surface

Front 38

network attack in which an unauthorized person gains access to a network and stays there undetected for a long period of time

Back 38

Advanced persistent threats