🛡️

Cybersecurity: Fundamentals & Threats

111 cards · 🇺🇸 English

What computer security is and the main attack vectors: vulnerabilities, malware, DoS/DDoS.

technologycybersecuritythreats

Study all 111 cards for free

Flashcards, quizzes, pixel-art games and a daily review that remembers for you.

Study this deck free

Try the first 10 cards

1 / 10
Question

Computer security

Knew itLearning

Tap the card for the answer · swipe right if you knew it, left if not

Already have an account? Sign in

Cards

  1. 1Computer security
    A subdiscipline within information security focusing on protecting computer software, systems, and networks from threats that can lead to unauthorized disclosure, theft, damage to hardware/software/data, or service disruption
  2. 2Vulnerability in cybersecurity
    A flaw in the structure, execution, functioning, or internal oversight of a computer or system that compromises its security
  3. 3What database documents most discovered vulnerabilities?
    Common Vulnerabilities and Exposures (CVE) database
  4. 4Exploitable vulnerability
    A vulnerability for which at least one working attack or exploit exists
  5. 5Backdoor in computer security
    Any secret method of bypassing normal authentication or security controls, which may exist due to original design or poor configuration
  6. 6Denial-of-Service (DoS) attack
    An attack designed to make a machine or network resource unavailable to its intended users by overloading capabilities or blocking access
  7. 7DDoS attack
    Distributed Denial-of-Service attack - where the attack comes from a large number of points, making it much harder to defend against than single-source DoS
  8. 8Botnet in the context of DDoS
    A network of zombie computers (infected machines) controlled by an attacker to launch distributed attacks
  9. 9Direct-access attack
    When an unauthorized user gains physical access to a computer, typically to copy data or steal information
  10. 10Disk encryption used for
    To prevent direct-access attacks and unauthorized data access by encrypting stored data
  11. 11Eavesdropping in computer security
    The act of surreptitiously listening to a private computer conversation or communication, usually between hosts on a network
  12. 12What protection does a VPN provide?
    Encrypts data between two points, providing one of the most common forms of protection against eavesdropping
  13. 13TEMPEST
    An NSA specification referring to attacks that eavesdrop by monitoring faint electromagnetic transmissions generated by hardware
  14. 14Malware
    Any software code or computer program intentionally written to harm a computer system or its users
  15. 15Computer virus
    A specific type of malware - malicious code that hijacks software with the intention to do damage and spread copies of itself to other programs
  16. 16Worms differ from viruses
    Worms are self-replicating and spread without human interaction, while viruses only function when a user runs a compromised program
  17. 17Trojan horse in cybersecurity
    A program that pretends to be helpful or hides within desired/legitimate software to trick users into installing it
  18. 18RAT
    Remote Access Trojan - a type of Trojan that creates a secret backdoor on the affected device to cause damage or allow remote control
  19. 19Spyware
    Malware that secretly gathers information from an infected computer and transmits sensitive information back to the attacker
  20. 20Keylogger
    A common form of spyware that records all of a user's keyboard inputs/keystrokes to harvest usernames, passwords, and financial information
  21. 21Scareware
    Malware that uses social engineering to scare, shock, or trigger anxiety to manipulate users into buying or installing unwanted software
  22. 22Ransomware
    Malware that installs itself onto a victim's machine, encrypts their files, and demands a ransom (usually in Bitcoin) to return the data
  23. 23Man-in-the-Middle (MITM) attack
    When a malicious attacker intercepts, surveils, or modifies communications between two parties by spoofing identities and injecting themselves in-between
  24. 24IP address spoofing
    When an attacker hijacks routing protocols to reroute the target's traffic to a vulnerable network node for interception or injection
  25. 25DNS spoofing
    When attackers hijack domain name assignments to redirect traffic to systems under the attacker's control to surveil or launch attacks
  26. 26SSL hijacking
    Spoofing SSL authentication and encryption protocol through Certificate Authority injection to decrypt, surveil, and modify traffic
  27. 27Multi-vector polymorphic attacks
    Attacks that combine multiple methods and change form to avoid security controls, using multiple propagation means and constantly morphing to evade signature-based defenses
  28. 28Phishing
    The attempt to acquire sensitive information like usernames, passwords, and credit card details by deceiving users through fake communications or websites
  29. 29Spear-phishing
    A more strategic type of phishing that leverages personal or organization-specific details to target specific individuals rather than broad attempts
  30. 30Privilege escalation
    When an attacker with limited access is able to elevate their privileges or access level without authorization

And 81 more cards. Study the whole deck free

Articles about this deck

More Technology decks

See all
Study all 111 cards free