COMPTIA Glossary

Glossary terms for Network+ , Security+ and others related to Cyber Security

108 flashcards · Computer Science · by Z

acceptable use policy (AUP)
an organization's policy that provides specific detail about what users may do with their network access (email, messages, limits on access time, storage space)
access control list (ACL)
the underlying data associated with a network resource that defines the access permissions (read, write, delete, execute files)
accounting
tracking for auditing purposes of users' access to resources
active logging
intelligence gathering tool used during the forensic process
active reconnaissance
engaging with the target via port scanning & service identification
address resolution protocol (ARP)
protocol that resolves a device's assigned IP address to its MAC hardware address
administrative control
control based on business and organizational processes and procedures
Advanced Encryption Standard (AES)
a symmetrical 128-bit fixed block encryption system. 128 /192 / 256 bits
Advanced Persistent Threat (APT)
a threat rooted in capability to infiltrate a network & remain inside while going undetected
adversarial artificial intelligence
machine learning techniques to solve a variety of problems and challenges used by an adversary
agile
a SDLC model that breaks development into cycles, iterative and incremental process
air gap
a physical isolation gap between a system or network & outside world
annual loss expectancy (ALE)
the expected cost per year from a risk's occurrence. the product of single loss expectancy (SLE) and annualized rate of occurrence (ARO)
annual rate of occurrence (ARO)
the number of times a given risk will occur within a single year
antispam
software program that adds a layer of defence by filtering out undesirable email
antivirus
software program used to protect the user environment that scans for email and downloadable malicious code
armored virus
a virus that is hard to detect & seeks to make analyzing its functions difficult
ARP poisoning
an attack that tricks a device into thinking an IP address is related to any MAC address (broadcast fake ARP relay to entire network, poison all computers)
asymmetrical keys
a pair of key values (1 public, 1 private) used to encrypt / decrypt data. private key decrypts data, encrypts with public key
attribute based access control (ABAC)
logical access control model recommended as preferred access control model for info sharing among diverse organizations
auditing
tracking of user access to resources for security purposes
authentication
process of identifying users
Authentication Header
component of the IPsec protocol that provides integrity, authentication and antireplay capabilities
authorization
process of identifying what a given user is allowed to do
automated indicator sharing (AIS)
US department of Homeland Security that enables exchange of cyber security threat indicators
banner grabbing
technique used to identify what operating system is running a machine and services
baseline
A measure used to determine abnormal system and network behaviors.
Bcrypt
A key-stretching algorithm based on the Blowfish cipher that provides an adaptive hash function.
behaviour-based IDS
detection method in which a user notices an unusual pattern of behaviour
behaviour-based monitoring
established patterns of baseline operations to identify variations that might identify unauthorized access attempts
birthday attack 🎂
attack that finds collisions within hash functions (more efficient than brute forcing 1way hashes)
black box
a test done with no information or knowledge about a system or its source code
blockchain
digital ledger where transactions are grouped in blocks with cryptographic hashes that is shared with the network
block cipher
An algorithm that transforms a message from plaintext (unencrypted form) to ciphertext (encrypted form), one piece at a time. The block size represents a standard chunk of data that is transformed in a single operation.
Blowfish 🐠
A block cipher that encrypts using any size chunk of data and perform encryption with any length encryption key, up to 448 bits.
bluejacking 🟦🦷
bluetooth attack where generated prompt messages look like they came from the device, but connects to the attacker's device
bluesnarfing 🟦
Bluetooth attack that can expose or alter a user’s information.
boot sector virus 🥾🦠
a virus that's placed into the first sector of a hard drive so that when the computer boots, the virus loads into memory.
bot 🤖
an automated computer program that needs no user interaction. Bots allow hackers to take control of a system. Many bots = botnet.
botnet 🤖🤖🤖
A large number of bots that forward transmissions to other computers on the Internet. #zombie_army.
bring your own device (BYOD)
workplace policy that allows personal devices access to enterprise data and systems
brute-force attack 🦾
attack that relies on cryptanalysis or algorithms capable of performing exhaustive key searches.
buffer overflow
attack that exceeds that data of app or service and exposes data
business continuity plan (BCP)
A business continuity plan prepares for automatic failover of critical services to redundant offsite systems.
business impact analysis (BIA)
determining the impacts from the interruption of time-sensitive or critical business processes.
business partner agreement (BPA)
A type of contract that establishes the responsibilities of each partner.
captive portal
A web page connection through a network that requires some type of interaction before the user is allowed access to other networking or Internet sites.
.cer
common certificate extension
certificate authority (CA)
A system that issues, distributes, and maintains current information about digital certificates. private ( company or an organization for its own use) public ( on the Internet for general public access)
certificate policy
statement that governs the use of digital certificates.
certificate revocation list (CRL)
Certificate Authority list that enumerates digital certificates that are no longer valid and the reasons they are no longer valid.
certificate signing request (CSR)
A request to apply for a digital certificate.
certification practice statement (CPS)
A document that defines the practices and procedures a CA uses
chain of custody ⛓️
The documentation of all transfers and tracking of evidence from one person to another or a crime scene date, time, reason for transfer, and signatures of both parties involved in the transfer.
Challenge Handshake Authentication Protocol (CHAP) 🤝
authentication method: hashed version of a user’s password is transmitted during the authentication process.
cipher | ciphertext
A method of encrypting text or encrypted message
cipher block chaining (CBC) ⛓️
A commonly used mode that provides for confidentiality only and not integrity. where you see it used openssl aes-256-cbc -e -in message.txt -out encrypted_message
clickjacking 💻
hijacking attack that takes advantage of browser vulnerabilities allows the attacker to redirect clicks or keystrokes to something the user does not expect.
Cloud Security Alliance (CSA) ☁️
A nonprofit organization that provides security best practices for cloud- based services and computing.
cold site
A remote site that has electricity, plumbing, and heating installed ready for use for disaster recovery or business continuity plans.
common access card (CAC) 🪪
A smart card for identity authentication systems. military industry
confusion ⁉️
cryptography method hiding any connection between ciphertext and plaintext making it difficult to reverse from ciphertext to plaintext without the key.
continuity of operations plan (COOP)
Gov't initiative that ensures continued operation despite disasters & threats
Core Root of Trust Measurement (CRTM) 🥾📏
bootloader measures and sends the hash value to the TPM chip for storage in one of the platform configuration registers (PCR) before execution.
CCMP
Counter Mode with Cipher Block Chaining Message Authentication Code Protocol based on Advanced Encryption Standard (AES) encryption cipher
cross-site request forgery (XSRF) ✖️
web attack exploits existing site trust unexpired banking session cookies, to perform actions on the trusting site using the already existing trusted account
cross-site scripting (XSS) ✖️
web attack malicious executable code is placed on a website allow the attacker to hijack a user session to conduct unauthorized access expose confidential data, and log successful attacks back to the attacker.
cryptography e7274bd06ff93210298e7117d11ea631
The process of protecting information by disguising (encrypting) it in a format that only authorized systems or individuals can read. {secret writing}
crypto-malware 😈
Malware that is specifically designed to find potentially valuable data on a system and encrypt it
Cuckoo 🐔
A malware analysis tool that provides results of what a file does when executed in an isolated environment
CVE / CVSS
Common Vulnerabilities and Exposure Common Vulnerability Scoring System publicly known vulnerabilities with descriptions and references, along with severity ratings
cyber kill chain 🔪⛓️
A framework that is used to track the steps or phases that an attacker goes through as part of an intrusion.
Data Encryption Standard (DES)
block cipher that uses a 56-bit key and 8 bits of parity on each 64-bit chunk of data.
data loss prevention (DLP)
Security services that identify, monitor, and protect data during use, storage, or transfer between devices. relies on inspection of data and transactional details for unauthorized access operations.
defense-in-depth
military strategy term balanced emphasis on people, technology, and operations to maintain information assurance (IA).
[Network] demilitarized zone (DMZ)
An area in a network that allows limited and controlled access from the public Internet. a screened subnet.
denial of service (DoS) 🛑
an attack denies legitimate users access to a server or services by consuming lots of system resources or network bandwidth to render a service unavailable.
detective control 🕵️‍♀️
A control that warns that physical security measures are being violated.
deterrent control ⚠️
A control that is intended to discourage individuals from intentionally violating information security policies or procedures.
dictionary attack 📚💢
An attack software is used to compare hashed data (passwords) to a word in a hashed dictionary. repeated until matches are found in the hashes to determine the original password that was used
differential backup
A backup that provides only the data that has changed since the last full backup It is incomplete without the last full backup.
Diffie-Hellman (D-H) key exchange 🔑
key exchange between two parties no prior arrangement both agree on a secret key that is known only to them
Diffie-Hellman Ephemeral (DHE) 🔑
ephemeral {short lived} version of D-H key exchange that uses a different key for every conversation
diffusion
A method for mitigating the capability to identify patterns that might help break a cipher.
digital certificate
document that has user’s public key and the digital signature of the CA [authenticated the user]
Digital Signature Algorithm (DSA)
A U.S. standard for the generation and verification of digital signatures to ensure authenticity.
discretionary access control (DAC)
access control method access rights are configured at the discretion of accounts with authority over each resource capability to extend administrative rights
distinguished encoding rules (DER)
The binary form of a PEM certificate cryptography
🛑 distributed denial of service (DDoS) 🛑
An attack multiple systems simultaneously using extreme consumption of bandwidth and other resources
DLL injection 🥒💉
programming error allows an attacker to run code within the context of another process (difficult to trace the attack)
DNS poisoning ☠️ 🚥
An attack redirecting legitimate traffic by changing the IP record for a specific domain.
dnsenum
A tool enumerates DNS finds mail exchange servers, domain name servers, and the address records for a domain.
domain hijacking 🎃
An attack a domain is taken over without the original owner’s knowledge or consent.
Domain Name System (DNS)
A system translation: human- readable named addresses into their numeric IP equivalents.
Domain Name System Security Extension (DNSSEC)
A suite of specifications provides protection against DNS attacks by authenticating DNS response data.
domain reputation
Protection for registered domains that provides monitoring and threat intelligence.
dumpster diving 🗑️
A technique attacker gathers information from discarded data.
DV certificate 💿
A certificate only verifies and includes the domain name.
EAP Flexible Authentication 📡 via Secure Tunneling (EAP- FAST)
wireless authentication connections proposed replacement to the Lightweight Extensible Authentication Protocol (LEAP)
EAP Transport Layer Security (EAP-TLS) 👂 EAP-TTLS
A protocol certificate-based mutual authentication, negotiation of the encryption method, and encrypted key determination between the client and the authenticating server. TTLS: tunnelled TLS authentication