click below
click below
Normal Size Small Size show me how
Security+ Software
Security+ Flash Cards - Software Terms
| Term | Definition | Explanation |
|---|---|---|
| API | Application Programming Interface | |
| ASLR | Address Space Layout Randomization | ASLR helps prevent exploitation of memory by randomly arranging the memory locations used by a program or process. |
| BIOS | Basic Input/Output System | |
| CMS | Content Management System | "CMS is a software application or set of related programs that are used to create and manage digital content. Examples are: Joomla, Drupal, and Squarespace. |
| DEP | Data Execution Prevention | DEP is a system-level memory protection feature built into the Windows operating system. DEP marks pages of memory as non-executable. This means code cannot be run from those regions of memory. This makes it harder for buffer overruns to occur through exploitation. |
| DLL | Dynamic Link Library | |
| EFS | Encrypted File System | |
| FACL | File System Access Control List | |
| GPO | Group Policy Object | |
| HIDS | Host-based Intrusion Detection System | |
| HIPS | Host-based Intrusion Prevention System | |
| IIS | Internet Information Services | "IIS for Windows Server is a flexible, secure and manageable Web server." |
| NTFS | New Technology File System | |
| NTLM | New Technology LAN Manager | |
| OS | Operating System | |
| PCAP | Packet Capture | .pcap is the Wireshark filename extension for packet captures. |
| RTOS | Real-time Operating System | |
| SDK | Software Development Kit | |
| SDLC | Software Development Life Cycle | |
| SDLM | Software Development Life Cycle Methodology | |
| SEH | Structured Exception Handling | Structured exception handling is a mechanism for handling both hardware and software exceptions. Structured exception handling enables the programmer to have complete control over the handling of exceptions and provides support for debuggers. |
| WAF | Web Application Firewall | "A WAF is an application firewall for HTTP applications. It applies a set of rules to an HTTP conversation. Generally, these rules cover common attacks such as cross-site scripting (XSS) and SQL injection. While proxies generally protect clients, WAFs protect servers." |
| REST API | REpresentational State Transfer | "Web services that conform to the REST architectural style, called RESTful Web services (RWS), provide interoperability between computer systems on the Internet. OpenID works with OAuth and supports REST." |
| GPT | GUID Partition Table | Replacement for MBR. Necessary for partitions larger than 2 TB. GUID = Globally Unique IDentifier. |
| GUID | Globally Unique IDentifier | 128-bit distinctive reference number |
| DAMP | Database Activity Monitoring and Prevention | Provides privileged user and application access monitoring that is independent of native database logging and audit functions and can block unauthorized activities. |