Terms

Term
1 / 23
DMZ (Network Security Zone)
Click the card to flip 👆
Terms in this set (23)
DMZ (Network Security Zone)
is a perimeter network that protects and adds an extra layer of security to an organization's internal local-area network from untrusted traffic. A common DMZ is a subnetwork that sits between the public internet and private networks.
vulnerability
any weakness that could be exploited to violate a system or the information it contains.. Undeployed exploit
Asset
Anything of value that is owned
threat
potential violation of security
attack
An attack is an action by a human with intent to violate security. It does not matter if the attacked succeeds. It is still considered an attack even if it fails
Security Mechanism
Protocol suppression, ID and authentication
True or False: The accidental disclosure of confidential information by an employee is considered an attack. An attack is an action by a human with intent to violate security.
FALSE
Malware (Malicious Software)
hostile or intrusive software designed to cause intentional harm
Virus
A piece of code that is capable of copying itself and typically has a detrimental effect, such as corrupting the system or destroying data. Spread to one to another using self replication. Requires human interaction
Worms
How you classify a piece of malicious code designed to cause damage and spreads from one computer to another by attaching itself to files but requires human actions in order to replicate?
Trojan horsessoftware program that appears to be benign but then does something other than expected. ducting into system like game, wallpaper downloadHow would you classify a piece of malicious code designed collect data about a computer and its users and then report that back to a malicious actor?SpywareAdwarecode that display unsolicited advertisementRATS(Remote Access Trojan) - malware that arrives in a trojan disguised as a legitimate software; sets up a secret communication link with the hacker.Root kitprogram that hides in a computer and allows someone from a remote location to take full control of the computer at the lowest levelRansomeware (cryptoviral extortion)A form of malware that encrypts the victim's files, making them inaccessible, until a ransom is paid to decrypt them.APTs (Advanced Persistent Threats)main goal, is to get access and monitor the network to steal Information while it's staying undetected for a long period of time.BotnetA logical computer network of zombies under the control of an attacker. That call home when commandedKeyloggerA small hardware device or a program that monitors seach keystroke a user types on the computer's keyboard.logic bombComputer code that lies dormant until it is triggered by a specific logical event.Antivirus software can be classified as which form of threat controlTechnical ControlPacket Sniffinginspecting information packets as they travel the Internet and other networksUse of humans for cyber purposesSocial Engineering