Busy. Please wait.

show password
Forgot Password?

Don't have an account?  Sign up 

Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account.
We do not share your email address with others. It is only used to allow you to reset your password. For details read our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
Don't know
remaining cards
To flip the current card, click it or press the Spacebar key.  To move the current card to one of the three colored boxes, click on the box.  You may also press the UP ARROW key to move the card to the "Know" box, the DOWN ARROW key to move the card to the "Don't know" box, or the RIGHT ARROW key to move the card to the Remaining box.  You may also click on the card displayed in any of the three boxes to bring that card back to the center.

Pass complete!

"Know" box contains:
Time elapsed:
restart all cards
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

CIT292 Ch 3 and 4

CIT292 Network Security Key Terms Chapters 3 and 4

hardening Act of configuring OS security, updating it, creating rules and policies to help govern system in a secure manner and removing unnecessary apps and services
service pack (SP) Group of updates, bug fixes, updated drivers, and security fixes that are installed in one downloadable package or one disc.
Hotfix Single problem fixing patch to an individual OS or application installed live while system up and running without reboot. Now varies from vendor to vendor.
Patch Update to a system. Patches generally carry the connotation of a small fix in the mind of the user or system admin, so larger patches ofter referred to as software updates or service packs.
Patch Management Planning, testing, implementing, and auditing of patches.
Group Policy Used in Microsoft environments to govern user and computer accounts through a set of rules.
Security Template Groups of policies that can be loaded in one procedure.
Baselining Process of measuring changes in networking, hardware, software, and so on.
Virtualization Creation of a virtual entity, as opposed to a true or actual entity.
Virtual Machine (VM) Created by virtual software; images of OS's or individual apps.
Hypervisor Portion of virtual machine software that allows multiple virtual operating systems (guests) to run at same time on single computer.
Cookies Text files placed on client computer that store information about it, which could include computer browsing habits and credentials. Used by spyware to collect info about users activities. Session cookies used by attacker to hijack session.
Buffer overflow Process stores data outside memory that developer intended. Could cause erratic behavior in application, especially if memory already had data in it.
UAC User Account Control Security component of Windows Vista that keeps every user (not Admin account) in standard user mode instead of administrator with full administrative rights - even if member of administrators group.
Systems Development Life Cycle (SDLC) Process of creating systems and apps, and the methodologies used to do so. Separated into six phases: Planning and analysis, system design, implementation, testing, deployment, and maintenance.
Secure Code Review In-depth code inspection procedure.
Secure Coding Concepts Best practice used during the life cycle of software development.
Fuzz Testing (fuzzing) When random data is input into computer program to find vulnerabilities.
cross-site scripting (XSS) Type of vulnerability found in web apps used with session hijacking.
Cross-site request forgery (XSRF) Attack that exploits the trust a website has in a user's browser in attempt to transmit unauthorized commands to website.
Input validation Also know as data validation is a process that ensures the correct usage of data.
Sandbox When web script runs in its own environment for the express purpose of not interfering with other processes, possibly for testing.
Directory traversal Also known as ../ (dot dot slash) attack method of accessing unauthorized parent directories.
Zero day attack Attack executed on a vulnerability in software before that vulnerability is known to the creator of the software.
Created by: Leisac