Security + Chapter 3

Front 1

ACL

Back 1

Access Control List. A table or data file that specifies whether a user or group has access to a specific resource on a computer or Network.

Front 2

AP

Back 2

Access Point. The point at which access to a network is accomplished. This term is often used in relation to a wireless access point.

Hint 2

Access Point

Front 3

Active Response

Back 3

A response generated in real time

Front 4

Alarm

Back 4

A notification that an unusual condition exists and should be investigated.

Front 5

Alert

Back 5

An indication that an unusual condition could exist and should be investigated.

Front 6

All-in-One Appliance

Back 6

Also known as Unified Threat Management (UTM). An appliance that performs multiple functions.

Front 7

Analyzer

Back 7

The component or process that analyzes the data collected by the sensor.

Front 8

Anomalies

Back 8

Variations from normal operations.

Front 9

AD-IDS

Back 9

An Anomaly-Detection Intrusion Detection System that works by looking for deviations from a pattern or normal Network traffic.

Front 10

Appliance

Back 10

A free-standing device that operates in a largely self-contained to manner.

Front 11

Application-Level Proxy

Back 11

A device or software that recognizes application-specific commands and offers granular control over them.

Front 12

AH

Back 12

Authentication Header. An ipsec header used to provide connectionless integrity and data origin authentication for IP datagrams and to provide protection against replays.

Hint 12

Authentication Header

Front 13

Clustering

Back 13

A method of balancing loads and providing fault tolerance.

Front 14

Compensating controls

Back 14

Gap controls that fill in the coverage between other types of vulnerability mitigation techniques. (Where there are holes in coverage. We compensate for them)

Front 15

DLP

Back 15

Data Loss Prevention. Any systems that identify, monitor and, protect data to prevent it from unauthorized use, modification, destruction, egress or exfiltration from a location.

Hint 15

Data Loss Prevention

Front 16

ESP

Back 16

Encapsulating Security Payload. An IPSec header used to provide a mix of security services in IPv4 and IPv6. ESP can be used alone or in combination with the IP Authentication Header. (AH)

Hint 16

Encapsulating Security Payload.

Front 17

Encapsulation

Back 17

The process of enclosing data in a packet.

Front 18

False Negative

Back 18

And event that should be flagged but isn't.

Front 19

False Positive

Back 19

A flagged event that isn't really an event and has been falsely triggered.

Front 20

Firewall

Back 20

A combination of hardware and software filters placed between trusted and untrusted networks intended to protect the network from Attack by hackers who could gain access to public networks, including the internet.

Front 21

HIDS

Back 21

Host-Based IDS. An intrusion detection system that is host-based. And alternative is an intrusion detection that is network-based.

Front 22

HSM

Back 22

Hardware Security Module. A software or Appliance Standalone used to enhance Security in commonly used with PKI systems.

Hint 22

Hardware Security Module

Front 23

Implicit deny

Back 23

A condition that states that unless otherwise given, the permission will be denied.

Front 24

IPSec

Back 24

Internet Protocol Security. A set of protocols that enable encryption, authentication, and integrity over IP. IPSec is commonly used with a virtual private networks(VPNs) and operates at layer 3.

Hint 24

Internet Protocol Security

Front 25

IDS

Back 25

Intrusion Detection System. Tools that identify attacks using defined rules or logic and are considered passive. And ideas can be network-based or host-based.

Hint 25

Intrusion Detection System

Front 26

IPS

Back 26

Intrusion Prevention System. Tools that respond to attacks using defined rules and logic and are considered active. And IPS can be network based or host-based.

Hint 26

Intrusion Prevention System

Front 27

Key Management

Back 27

The management of all aspects of cryptographic keys in a cryptosystem, including key generation, exchange, storage, use, destruction and replacement.

Front 28

Load Balancing

Back 28

Dividing a load for greater efficiency of management among multiple devices.

Front 29

NAC

Back 29

Network Access Control. Set of Standards defined by the network for clients attempting to access it. Usually, NAC requires that clients be virus free and adhere to specific policies before allowing them on the network.

Hint 29

Network Access Control

Front 30

NIPS

Back 30

Network Intrusion Prevention System. An intrusion prevention system that is network-based.

Hint 30

Network Intrusion Prevention System

Front 31

NIDS

Back 31

Network-Based IDS. An approach to an intrusion detection system; it attaches the system to a point in yhe network where it can monitor and report on all Network traffic.

Hint 31

Network-Based IDS

Front 32

Passive Response

Back 32

A non-active response, such as logging. Passive response is the most common type of response to many intrusions. In general, passive responses are the easiest to develop and implement.

Front 33

Proxy

Back 33

A type of system that prevents direct communication between a client and a host by acting as an intermediary.

Front 34

Proxy Firewall

Back 34

A proxy server that also acts as a firewall, blocking network access from external Networks.

Front 35

Proxy Server

Back 35

A type of server that makes a single internet connection and services requests on behalf of many users.

Front 36

SSL

Back 36

Secure Sockets Layer. A protocol that secures a messages by operating between the application layer(http) and the transport layer.

Hint 36

Secure Sockets Layer

Front 37

SIEM

Back 37

Security Information and Event Management. Software that combined security information management and security event management functions to provide real-time analysis of security alerts.

Hint 37

Security Information and Event Management

Front 38

Signature-based System

Back 38

A system that acts based on the digital signature it sees and offers no repudiation to increase the Integrity of a message.

Front 39

SSID Broadcast

Back 39

An access point's broadcasting of the network name

Front 40

Stateful Inspection

Back 40

Inspections that occur at all levels of the network and provide additional security using a state table that tracks every Communications Channel.

Front 41

Switch

Back 41

A network device that can replace a router or Hub in a local network and get data from a source to a destination. Switching allows for higher speeds.

Front 42

WORM

Back 42

Write-once-read-many. Information, once written, cannot be modified, that's for sure and that the data cannot be tampered with once it is written to the device.

Front 43

STP

Back 43

Spanning Tree Protocol. Prevents loops in switches, enables Bridge switch interfaces to be assigned a value that is in used to control the learning process and prevent problems.

Hint 43

Spanning Tree Protocol

Front 44

Decrypts encrypted traffic, inspects it, and then re-encrypts it before sending it on to its destination.

Back 44

SSL decryptors

Front 45

Tunnel configuration where only some requests are rounded and encrypted over the VPN.

Back 45

Split tunnel

Front 46

SSL Accelerator

Back 46

Off loads in the public key encryption to a separate Hardware plug-in card.

Front 47

Heuristic based detection

Back 47

Uses and algorithm to analyze traffic passing through the network.

Front 48

Signature based detection

Back 48

Evaluates attacks based on attack signatures.

Front 49

Behavior based detection

Back 49

Looks for anomalies in network behavior.