Memorize 50 Cybersecurity Terms: DoS, MITM, Social Engineering and the CIA Triad
Deck OZ5810 promises encryption but delivers an attack glossary. Here is how to drill its 50 cards on malware, the six spoofing families and defence in depth.
Studying. But it's also a video game. 🎮
Flashcards, quizzes and games that make you actually remember.
Posted by
FLIP IT TeamRelated reading
Master cybersecurity basics with 111 flashcards: CIA triad, malware types, DDoS, spoofing, phishing, privilege escalation, least privilege, TPM, RBAC and 2FA.
A warning before you start: deck OZ5810 — Cybersecurity: Encryption & Protocols is not about encryption or protocols. Its 50 cards are an attack-and-defence glossary — encryption appears in four of them (disk encryption, VPN, HTTPS, ransomware), with no AES, RSA, TLS handshake or key exchange anywhere. Treat it as what it is, a fast vocabulary drill on threats and defences, and it earns its place.
Study this deck: Cybersecurity: Encryption & Protocols
1 / 10Computer security
Tap the card for the answer · swipe right if you knew it, left if not
Sample cards
| Front | Back |
|---|---|
| Vulnerability | Flaw in structure, execution, functioning, or internal oversight of a computer or system that compromises its security |
| Distributed denial-of-service (DDoS) | Attack where the attack comes from large number of points, making defense much more difficult |
| Worm | Self-replicating malware that spreads between programs, apps, and devices without need for human interaction |
| Man-in-the-middle attack (MITM) | Malicious attacker intercepts, surveils, or modifies communications between two parties by spoofing identities |
| ARP spoofing | Attacker sends spoofed Address Resolution Protocol onto LAN to associate their MAC address with different host's IP address |
| Side-channel attack | Gathering information about system or network from environmental effects to guess internal state and access secure information |
| CIA triad | Confidentiality, Integrity, and Availability of a network; considered foundation of information security |
| What percentage of security incidents involve human error? | More than 90% of security incidents and breaches involve some kind of human error |
Everything the deck covers
Threat surface: vulnerability, CVE database, exploitable vulnerability, threat actors, backdoor, DoS, DDoS, botnet, direct-access attack, eavesdropping, TEMPEST, side-channel attack. Malware zoo: virus, worm, Trojan horse, RAT, spyware, keylogger, scareware, ransomware, multi-vector polymorphic attack, HTML smuggling. Spoofing and interception: MITM, IP spoofing, DNS spoofing, SSL hijacking, email spoofing, MAC spoofing, ARP spoofing. Human layer: phishing, spear-phishing, social engineering, business email compromise. Escalation: privilege escalation, horizontal and vertical variants. Defence: security by design, principle of least privilege, defence in depth, firewall, IDS, disk encryption, TPM, VPN, HTTPS, two-factor authentication, CIA triad.
Drill the spoofing family as one block
Six cards say "spoofing" and that is where marks get lost. Sort them by what is being forged: MAC spoofing forges a hardware address, ARP spoofing forges the IP-to-MAC binding on a LAN, IP spoofing forges the source address to reroute traffic, DNS spoofing forges the name-to-address answer, SSL hijacking forges the certificate chain, email spoofing forges the From header. One forged thing per card — write that single word on each back and the block stops blurring.
Rewrite the disk encryption card
The back reads "security measure designed to prevent attacks by booting another operating system from bootable media". That describes one consequence, not the mechanism, and it will mislead you on an exam. Rewrite it as: encrypts data at rest so that anyone who boots another OS or pulls the drive out reads ciphertext. The booting scenario then becomes an example instead of the definition. While you are there, note that the BEC card's "$2 billion in 2 years" figure comes from an FBI estimate of the late 2010s — current IC3 reporting puts BEC losses well above that, so treat the number as an order of magnitude, not a fact.
Overlap alert
Thirty-five of these 50 cards also appear in the deck DQ9806 — Cybersecurity: Fundamentals & Threats. If you have already drilled that one, suspend the duplicates and study only the 15 genuinely new cards: vulnerability, threats, backdoor, DoS, DDoS, disk encryption, eavesdropping, VPN, HTTPS, worm, Trojan horse, MITM, multi-vector polymorphic attack, social engineering, CIA triad. That is a fifteen-minute session, not a week.
Open OZ5810 — Cybersecurity: Encryption & Protocols from your library at flip-it.app.
Starting from scratch? Do Master Cybersecurity Fundamentals and Threats first — it is the broader deck, and this one becomes a top-up.
Ready to learn faster? 🚀
Join FLIP IT for free and turn studying into a game.