Security + Chapter 4

Front 1

CHAP

Back 1

Challenge Handshake Authentication Protocol. An authentication protocol periodically reauthenticates.

Hint 1

Challenge Handshake Authentication Protocol

Front 2

CER

Back 2

Crossover Error Rate. The point at which the FRR and FAR are equal. Sometimes called the equal error rate (ERR)

Hint 2

Crossover Error Rate

Front 3

DEP

Back 3

Data Execution Prevention. Any technique that prevents a program from running without the user's approval.

Hint 3

Data Execution Prevention

Front 4

DLP

Back 4

Data Loss Prevention. Software or techniques designed to detect attempts to exfiltrate data.

Hint 4

Data Loss Prevention

Front 5

FAR

Back 5

False Acceptance Rate. The rate at which a biometric solution allows in individuals it should have rejected.

Hint 5

False Acceptance Rate

Front 6

FRR

Back 6

False Rejection Rate. The rate at which a biometric solution rejects individuals it should have allowed.

Hint 6

False Rejection Rate

Front 7

Federation

Back 7

A collection of computer networks that agree on standards of operation, such as security standards.

Front 8

HIDS

Back 8

Host-Based Intrusion Detection System

Front 9

HIPS

Back 9

Host-Based Intrusion Prevention System

Front 10

Kerberos

Back 10

An authentication protocol developed at MIT that uses tickets for authentication. (KDC)

Front 11

Least privileges

Back 11

The principle that any user or service will be given only enough access privileges to do its job and no more.

Front 12

NIDS

Back 12

Network-based Intrusion Detection System.

Front 13

NIPS

Back 13

Network-based Intrusion Prevention System

Front 14

Network scanner

Back 14

A tool that enumerates your network and provides a map of the network.

Front 15

OAUTH

Back 15

Open Authorization standard. It is a common method for authorizing websites or applications to access information.

Front 16

Protocol analyzer

Back 16

Packet sniffer. Allows you to capture a copy of network traffic for analysis.

Tcpdump

Wireshark

Front 17

Network Scanner

Back 17

Finding out and mapping what is on a network.

Solar Winds

LanHelper

Front 18

Wireless Scanners and Crackers

Back 18

Scans wireless and trying to hack them. Aircrack

Front 19

Password Cracker

Back 19

Upwdump- exploits SAM file in Windows for hashes.

Ophcrack- can be on media and booted into.

Front 20

Vulnerability Scanners

Back 20

Scans networks for vulnerabilities.

Nessus

Netcraft.com

Shodan.io

Isc.sans.edu

MBSA - Microsoft Baseline Security Analyzer.

Front 21

Exploitation Frameworks

Back 21

Metasploit

Front 22

PING

Back 22

Used to check if an entity is on a network.

Front 23

Netstat

Back 23

Displays current network connections.

Front 24

Tracert

Back 24

Tells you the entire path to a given address.

Front 25

Nslookup

Back 25

Verifies that a machine can connect to the DNS server. Can then be used to get a zone transfer.

Front 26

ARP

Back 26

Address Resolution Protocol. Command that maps IP addresses to MAC Addresses. Requires at least one flag.

Front 27

Ipconfig

Back 27

Gives you information about your web interfaces.

Front 28

Nmap

Back 28

Used to portscan machines. Can find what services are running and maybe the OS.

Front 29

Netcat

Back 29

Allows you to read and write to network connections using either TCO or UDP

Front 30

Banner grabbing

Back 30

Gathers information about a website before an attack.

Front 31

Banner

Back 31

A text file on a web server that describes the operating system and the web server software.

Front 32

LDAP

Back 32

Lightweight Directory Access Protocol. Protocol to access directory.

Front 33

TGT

Back 33

Ticket granting ticket. Lasts 10 hours, used with a service ticket and KDC to authenticate across multiple resources.

Front 34

KDC

Back 34

Key Distribution Center. Used to issue TGTs in Kerberos.

Front 35

RADIUS

Back 35

Remote Authentication Dial-In User Service. Allows authentication of remote and other network connections. Centrally manages authorizations.

Front 36

SAML

Back 36

Security Assertion Markup Language. Defines security authorizion on web pages.

Front 37

MAC

Back 37

Mandatory Access Control. Rigid model where all authentication has to be given for each object.

Front 38

DAC

Back 38

Discretionary Access Control. Allows users to share information dynamically. Not very secure.

Front 39

RBAC

Back 39

Role-based Access Control. Access is established by what role the user is in.

Role-based Access Control. Allows for rules to be placed (allow lists and true deny lists).

Often used together for greater flexibility.

Front 40

ABAC

Back 40

Attribute-Based Access Control

Hint 40

Looks at all subjects involved and all their attributes and adjusts accordingly.