🔐

Cybersecurity: Encryption & Protocols

50 cards · 🇺🇸 English

Encryption, authentication and the protocols that keep data secure.

technologycybersecurityencryption

Study all 50 cards for free

Flashcards, quizzes, pixel-art games and a daily review that remembers for you.

Study this deck free

Try the first 10 cards

1 / 10
Question

Computer security

Knew itLearning

Tap the card for the answer · swipe right if you knew it, left if not

Already have an account? Sign in

Cards

  1. 1Computer security
    Subdiscipline within information security focusing on protecting computer software, systems, and networks from threats leading to unauthorized disclosure, theft, or damage
  2. 2Vulnerability
    Flaw in structure, execution, functioning, or internal oversight of a computer or system that compromises its security
  3. 3CVE database
    Common Vulnerabilities and Exposures database where most discovered vulnerabilities are documented
  4. 4Exploitable vulnerability
    Vulnerability for which at least one working attack or exploit exists
  5. 5Threats
    Actors maliciously seeking vulnerabilities; can use automated tools or customized scripts
  6. 6Backdoor
    Secret method of bypassing normal authentication or security controls in a computer system, cryptosystem, or algorithm
  7. 7Denial-of-service attack (DoS)
    Attack designed to make a machine or network resource unavailable to its intended users
  8. 8Distributed denial-of-service (DDoS)
    Attack where the attack comes from large number of points, making defense much more difficult
  9. 9Botnet
    Network of zombie computers used to launch attacks
  10. 10Direct-access attack
    When unauthorized user gains physical access to a computer, typically to copy data or steal information
  11. 11Disk encryption
    Security measure designed to prevent attacks by booting another operating system from bootable media
  12. 12Trusted Platform Module (TPM)
    Standard designed to prevent physical access attacks; integrates cryptographic capabilities onto access devices
  13. 13Eavesdropping
    Act of surreptitiously listening to a private computer conversation, usually between hosts on a network
  14. 14Virtual Private Network (VPN)
    Encrypts data between two points; one of most common forms of protection against eavesdropping
  15. 15HTTPS
    Encrypted HTTP; best practice for wireless networks instead of unencrypted HTTP
  16. 16TEMPEST
    NSA specification referring to attacks that monitor faint electromagnetic transmissions generated by hardware
  17. 17Malware
    Any software code or computer program intentionally written to harm a computer system or its users
  18. 18Computer virus
    Malicious code that hijacks software with intention to do damage and spread copies of itself
  19. 19Worm
    Self-replicating malware that spreads between programs, apps, and devices without need for human interaction
  20. 20Trojan horse
    Program that pretends to be helpful or hides within legitimate software to trick users into installing it
  21. 21RAT
    Remote Access Trojan; creates secret backdoor on affected device to cause damage
  22. 22Spyware
    Malware that secretly gathers information from infected computer and transmits it back to attacker
  23. 23Keylogger
    Most common form of spyware; records all user keyboard inputs to harvest usernames, passwords, and financial information
  24. 24Scareware
    Malware using social engineering to scare, shock, or trigger anxiety to manipulate users into buying unwanted software
  25. 25Ransomware
    Malware that installs itself, encrypts files, and demands ransom (usually in Bitcoin) to return data
  26. 26Man-in-the-middle attack (MITM)
    Malicious attacker intercepts, surveils, or modifies communications between two parties by spoofing identities
  27. 27IP address spoofing
    Attacker hijacks routing protocols to reroute target's traffic to vulnerable network node
  28. 28DNS spoofing
    Attackers hijack domain name assignments to redirect traffic to systems under attacker control
  29. 29SSL hijacking
    Attacker spoofs SSL authentication and encryption protocol via Certificate Authority injection to decrypt and modify traffic
  30. 30Multi-vector polymorphic attack
    Attack combining several types of attacks and changing form to avoid security controls as they spread

And 20 more cards. Study the whole deck free

Articles about this deck

More Technology decks

See all
Study all 50 cards free